ng program 5: r0 = getpid() r1 = pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xff04, 0x0) 03:34:07 executing program 3: clock_nanosleep(0x2, 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0) 03:34:07 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000001b00)={0x1f, 0x0, @fixed}, 0xe) shutdown(r0, 0x1) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) 03:34:07 executing program 2: r0 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) 03:34:07 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000003300)=ANY=[@ANYBLOB="0000754134fac4e2dfb40d837b00000024f51a6a6a9de1e54f2ca3c83c7ecbf3eec2a5455ee7ae54a63e6693296280a1fc2666c227bf46409ae6f4829e6842b66b0c48c32b5d06d443a1070637b6857b30dbc48116a2680c2bce6d3d791baf5fc2ada219d7f22a60e3a93d4f92488c9fce09ce03fcae13c852c9994bcad474c014fb54fa2da34cbe5a12d6bc04affcdbb6e2a65281b4cdc191"], 0x10) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000080)={@private}, 0x10) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000003240)={'nat\x00', 0x0, 0x0, 0x0, [0x3, 0xfffffffffffffffb, 0x4, 0x22c, 0xf4, 0x828f], 0x2, &(0x7f0000003200)=[{}, {}], 0x0, [{}, {}]}, 0x98) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) sendto$inet(r3, &(0x7f00000021c0)="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", 0x1000, 0x4008000, &(0x7f00000031c0)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000080)={@private}, 0x10) getsockopt$inet_tcp_buf(r2, 0x6, 0x21, &(0x7f00000011c0)=""/4096, &(0x7f0000000040)=0x1000) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/mnt\x00') recvfrom(r0, &(0x7f00000001c0)=""/4096, 0x1000, 0x4000, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000140)={{0x2e, @rand_addr=0x64010101, 0x4e21, 0x2, 'sed\x00', 0x20, 0x5, 0x33}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x4, 0x1, 0x5, 0xd24}}, 0x44) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r4, 0x4018f50a, 0x0) 03:34:07 executing program 5: ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x20, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) fork() sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, 0x0, 0x0) [ 1184.293666] Bluetooth: hci2: command 0x0c1a tx timeout 03:34:07 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind(r0, &(0x7f00000002c0)=@hci={0x1f, 0x0, 0x2}, 0x80) 03:34:07 executing program 7: r0 = fork() wait4(0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x140, 0x0) tkill(r0, 0x1d) 03:34:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000180)="86d776143a273c7d39d5ba175a36ab6b", 0x10) close(r0) 03:34:07 executing program 2: io_setup(0x2, &(0x7f0000000080)=0x0) io_submit(r0, 0x2, 0x0) 03:34:07 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x28}}, 0x0) 03:34:07 executing program 4: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x3a, 0x0, @dev, @mcast2, {[], @mld={0x2, 0x0, 0x0, 0x0, 0x0, @mcast2}}}}}}, 0x0) 03:34:08 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000040)={0x0, 0x0, 0x27f}) 03:34:08 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="0c00060101"], 0x30}}, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000400), r0) 03:34:08 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, 0x3f7, 0x0, 0x0, 0x0, {0x7, 0x7, './file1', './file0'}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 03:34:08 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x48, 0x0, &(0x7f0000000000)) 03:34:08 executing program 7: r0 = fork() wait4(0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x140, 0x0) tkill(r0, 0x1d) 03:34:08 executing program 3: clock_nanosleep(0x2, 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0) 03:34:08 executing program 1: bind$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(0xffffffffffffffff, 0x0, 0x0) accept$unix(r0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 03:34:08 executing program 4: mq_open(0x0, 0x0, 0x0, &(0x7f0000003480)) 03:34:08 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000040)={0x0, 0x0, 0x27f}) 03:34:08 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x1, 0x4}]) 03:34:08 executing program 5: sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@delsa={0x3c, 0x11, 0x1, 0x0, 0x0, {@in, 0x0, 0xa}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f0000000400)) 03:34:08 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) 03:34:08 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000000), 0x0) 03:34:08 executing program 0: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)) [ 1185.308474] scsi_io_completion_action: 31 callbacks suppressed [ 1185.308547] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 1185.311078] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1185.312309] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1185.313291] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 01 00 [ 1185.314405] blk_print_req_error: 31 callbacks suppressed [ 1185.314420] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 03:34:08 executing program 5: sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@delsa={0x3c, 0x11, 0x1, 0x0, 0x0, {@in, 0x0, 0xa}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f0000000400)) 03:34:08 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000040)={0x0, 0x0, 0x27f}) 03:34:08 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) close(r0) 03:34:08 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) dup3(r0, r1, 0x0) 03:34:08 executing program 7: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, 0x0) r0 = memfd_create(&(0x7f0000001280)='\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0xfffffd1f) write$binfmt_script(r0, 0x0, 0x0) r1 = dup(r0) fchown(r1, 0x0, 0x0) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, 0x0) 03:34:08 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x1, 0x4}]) 03:34:09 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x1, 0x4}]) 03:34:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)={0x40, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x40}}, 0x0) [ 1185.679948] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 1185.681880] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1185.683169] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1185.684350] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 01 00 [ 1185.685652] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1185.734476] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 1185.736062] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1185.737154] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1185.738111] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 01 00 [ 1185.739195] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 03:34:09 executing program 5: sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@delsa={0x3c, 0x11, 0x1, 0x0, 0x0, {@in, 0x0, 0xa}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f0000000400)) 03:34:09 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000040)={0x0, 0x0, 0x27f}) 03:34:09 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x21, &(0x7f0000000000)="92f46193", 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x1, @empty}, 0x1c) 03:34:09 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x1, 0x4}]) 03:34:09 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x1, 0x4}]) 03:34:09 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2a63}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x2c}}, 0x0) 03:34:09 executing program 7: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, 0x0) r0 = memfd_create(&(0x7f0000001280)='\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0xfffffd1f) write$binfmt_script(r0, 0x0, 0x0) r1 = dup(r0) fchown(r1, 0x0, 0x0) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, 0x0) 03:34:09 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) setresuid(0x0, 0xee01, 0x0) ioctl$TCSETAF(r0, 0x4b41, 0x0) 03:34:09 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004740)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x8440) 03:34:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) 03:34:09 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x34, &(0x7f0000000100), 0x4) [ 1186.271947] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 1186.273795] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1186.274884] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1186.275907] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 01 00 [ 1186.277059] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1186.320411] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 1186.321651] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1186.322509] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1186.323531] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 01 00 [ 1186.324626] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 03:34:09 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') write(r0, 0x0, 0x0) 03:34:09 executing program 5: sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@delsa={0x3c, 0x11, 0x1, 0x0, 0x0, {@in, 0x0, 0xa}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f0000000400)) 03:34:09 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x1, 0x4}]) [ 1186.525455] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 1186.526610] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1186.527364] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1186.528158] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 01 00 [ 1186.528980] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 03:34:10 executing program 7: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, 0x0) r0 = memfd_create(&(0x7f0000001280)='\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0xfffffd1f) write$binfmt_script(r0, 0x0, 0x0) r1 = dup(r0) fchown(r1, 0x0, 0x0) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, 0x0) 03:34:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}, @NL80211_ATTR_MESH_ID={0x4}]}, 0x30}}, 0x0) 03:34:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) 03:34:10 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x1, 0x4}]) 03:34:10 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 03:34:10 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x34, &(0x7f0000000100), 0x4) 03:34:10 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), &(0x7f0000000080)=0x4) 03:34:10 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/devices.allow\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) [ 1186.799782] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1186.802523] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 1186.803291] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1186.803881] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1186.804377] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 01 00 [ 1186.804961] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 03:34:10 executing program 5: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0xd400080b) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x80000000) 03:34:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) 03:34:10 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000005540)={{{@in6=@initdev, @in=@local}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f0000000080)=0xe8) 03:34:10 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x34, &(0x7f0000000100), 0x4) 03:34:10 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/devices.allow\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) 03:34:10 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/1, 0x1}, {0x0}], 0x2) 03:34:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) 03:34:10 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24000000) sendmmsg$inet6(r0, &(0x7f0000006680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000001) 03:34:10 executing program 7: syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, 0x0) r0 = memfd_create(&(0x7f0000001280)='\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0xfffffd1f) write$binfmt_script(r0, 0x0, 0x0) r1 = dup(r0) fchown(r1, 0x0, 0x0) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, 0x0) 03:34:10 executing program 5: r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x3}) 03:34:10 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x34, &(0x7f0000000100), 0x4) 03:34:10 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/devices.allow\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) 03:34:10 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x31006, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2000, 0x0) 03:34:10 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$setsig(r0, 0xa, 0x0) fcntl$setown(r0, 0xb, 0x0) 03:34:10 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000001a00), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x94bb3) 03:34:10 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0x0) 03:34:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='reno\x00', 0x5) 03:34:10 executing program 2: r0 = io_uring_setup(0x1ff, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x3, 0x0, 0xd) 03:34:10 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:34:10 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/devices.allow\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) 03:34:10 executing program 6: r0 = syz_io_uring_setup(0x6561, &(0x7f0000000400), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xd, 0x0, 0x0) 03:34:10 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$unix(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1], 0x18}}], 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:34:10 executing program 6: sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0x19, 0x4) 03:34:11 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:34:11 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000200)="f09b9ee0ba92e91e1265e1eeb59455733c63c3920d8a0858779b72", 0x1b}], 0x1) 03:34:11 executing program 6: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000003100)='ns/pid\x00') ioctl$int_out(r0, 0x2, &(0x7f0000003140)) 03:34:11 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x40000, 0x3, &(0x7f0000000d40)=[{&(0x7f0000000040)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2200}], 0x1800003, &(0x7f0000000180)=ANY=[]) 03:34:11 executing program 7: syz_open_dev$mouse(&(0x7f0000000100), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000980)='./file0\x00', 0x0, 0x5, &(0x7f0000000dc0)=[{&(0x7f00000009c0)="ac2e38f5d13c0f493c7f53a041443cab295ef85225b55b6d7c7d9c6285245d9df51bbc12aa36bb6fbaa328517368bc65d31860e0ab32aadc51b3865770a3f3b4", 0x40}, {&(0x7f0000000a40)="95e14f6d0a8adb34e46ba32cfaeb8caa564998ab264850a3ac6a2ec72004d65ff15285fca460519cbaebf25ed59df2210af7dbc57d9fe6", 0x37, 0x1}, {&(0x7f0000000b00)="994e284cd8765a34bdebc032705b4e0f8dacc3c31aa842c848e94c1f812367fb2290f49337", 0x25}, {&(0x7f0000000b80)="9f1489403fb96e691ebc98234903c53d9ea31ba37cb14bbf84332cd65c1109d3b79eec9ab9a32d27c7e8f433c40f434d13285c41d9a08fcf42ca6f4327c84bd74fd5c484d8aeaa0722b7bcd9c0d93b594e8179851b", 0x55, 0x8}, {&(0x7f0000000c80)="7c38e25119733d862b3186908591806e51726a9b021e55a51b06b51e2b74ba6239b01405e8fc4d81f517d40896895ccff8b887dfc97222a95de8f875d8059406da10c6e8291a0d446f6c03941d91bc6168036e95d9be760215f49f68655ee4daf60d0a457e2801001e70df1d8ff120bae78bf95dca39a1ccf2804a02a23e4d41e8211409d14681f4f28353d396bf7427117b77db463f", 0x96, 0xfffffffffffff801}], 0x2002024, &(0x7f0000000e80)={[{@max_batch_time={'max_batch_time', 0x3d, 0x400}}, {@minixdf}, {@nodiscard}, {@resuid}, {@nobh}], [{@context={'context', 0x3d, 'staff_u'}}, {@fowner_gt}]}) 03:34:11 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8100, &(0x7f0000000240)={0x0, 0x72}, 0x20) 03:34:11 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000012c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in=@empty, 0x0, 0x2b}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4, 0x0, 0x96}}, 0xe8) 03:34:11 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="84", 0x1}], 0x1) [ 1188.399362] loop0: detected capacity change from 0 to 512 03:34:11 executing program 5: clone3(&(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, {0x2021}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:34:11 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') pread64(r0, &(0x7f0000000140)=""/182, 0xb6, 0x0) 03:34:11 executing program 4: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) 03:34:11 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x8e}, &(0x7f00000000c0), 0x0) 03:34:11 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x6) [ 1188.490429] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. 03:34:12 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1188.592759] Bluetooth: MGMT ver 1.23 03:34:12 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$lock(r0, 0x6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1}) 03:34:12 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:34:12 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x40000, 0x3, &(0x7f0000000d40)=[{&(0x7f0000000040)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2200}], 0x1800003, &(0x7f0000000180)=ANY=[]) 03:34:12 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000200), 0x4) [ 1188.680770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. 03:34:12 executing program 4: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) [ 1188.834173] loop0: detected capacity change from 0 to 512 [ 1188.895302] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1188.965076] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. 03:34:13 executing program 7: r0 = gettid() process_vm_writev(r0, &(0x7f0000001900)=[{&(0x7f000001a500)=""/102400, 0x19000}], 0x1, &(0x7f0000002b00)=[{&(0x7f0000001940)=""/4096, 0x1000}], 0x1, 0x0) migrate_pages(0x0, 0x800, &(0x7f00000002c0)=0x8000000000000, &(0x7f0000002b80)=0x1) 03:34:13 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clock_gettime(0x0, &(0x7f0000001b00)) 03:34:13 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="84", 0x1}], 0x1) 03:34:13 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x6) 03:34:13 executing program 4: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) 03:34:13 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x40000, 0x3, &(0x7f0000000d40)=[{&(0x7f0000000040)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2200}], 0x1800003, &(0x7f0000000180)=ANY=[]) 03:34:13 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000200), 0x4) 03:34:13 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ftruncate(r0, 0x0) [ 1189.748223] loop0: detected capacity change from 0 to 512 [ 1189.816028] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. 03:34:13 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x6) 03:34:13 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0xfffffffffffffee4, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={[{@xattr}]}) 03:34:13 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000200), 0x4) 03:34:13 executing program 7: r0 = gettid() process_vm_writev(r0, &(0x7f0000001900)=[{&(0x7f000001a500)=""/102400, 0x19000}], 0x1, &(0x7f0000002b00)=[{&(0x7f0000001940)=""/4096, 0x1000}], 0x1, 0x0) migrate_pages(0x0, 0x800, &(0x7f00000002c0)=0x8000000000000, &(0x7f0000002b80)=0x1) 03:34:13 executing program 4: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) 03:34:13 executing program 7: r0 = gettid() process_vm_writev(r0, &(0x7f0000001900)=[{&(0x7f000001a500)=""/102400, 0x19000}], 0x1, &(0x7f0000002b00)=[{&(0x7f0000001940)=""/4096, 0x1000}], 0x1, 0x0) migrate_pages(0x0, 0x800, &(0x7f00000002c0)=0x8000000000000, &(0x7f0000002b80)=0x1) 03:34:13 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013", 0x25, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000010f60)) 03:34:13 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x40000, 0x3, &(0x7f0000000d40)=[{&(0x7f0000000040)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2200}], 0x1800003, &(0x7f0000000180)=ANY=[]) [ 1190.020522] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1190.198101] loop0: detected capacity change from 0 to 512 [ 1190.246740] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1190.282739] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. 03:34:14 executing program 3: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r0, 0x4, 0x800) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:34:14 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d9f4655fd9f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0xfffffffffffffffd}], 0x0, &(0x7f0000000080)=ANY=[]) 03:34:14 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) 03:34:14 executing program 7: r0 = gettid() process_vm_writev(r0, &(0x7f0000001900)=[{&(0x7f000001a500)=""/102400, 0x19000}], 0x1, &(0x7f0000002b00)=[{&(0x7f0000001940)=""/4096, 0x1000}], 0x1, 0x0) migrate_pages(0x0, 0x800, &(0x7f00000002c0)=0x8000000000000, &(0x7f0000002b80)=0x1) 03:34:14 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000200), 0x4) 03:34:14 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x6) 03:34:14 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) close(r0) 03:34:14 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="84", 0x1}], 0x1) [ 1190.637354] loop0: detected capacity change from 0 to 16383 [ 1190.679185] EXT4-fs error (device loop0): __ext4_fill_super:5500: inode #2: comm syz-executor.0: iget: special inode unallocated [ 1190.692092] EXT4-fs (loop0): get root inode failed [ 1190.693183] EXT4-fs (loop0): mount failed 03:34:14 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000040)) 03:34:14 executing program 3: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r0, 0x4, 0x800) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:34:14 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x0, 0x2) 03:34:14 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d9f4655fd9f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0xfffffffffffffffd}], 0x0, &(0x7f0000000080)=ANY=[]) 03:34:14 executing program 3: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r0, 0x4, 0x800) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:34:14 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x96, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(r0, r1, 0x0) 03:34:14 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x20000005}) close(r0) [ 1191.106307] loop0: detected capacity change from 0 to 16383 03:34:14 executing program 6: perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:34:14 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) close(0xffffffffffffffff) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={0xffffffffffffffff, 0xfffffffffffffff9}) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), 0x0, 0x0) [ 1191.141407] EXT4-fs error (device loop0): __ext4_fill_super:5500: inode #2: comm syz-executor.0: iget: special inode unallocated [ 1191.148486] EXT4-fs (loop0): get root inode failed [ 1191.149634] EXT4-fs (loop0): mount failed 03:34:15 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="84", 0x1}], 0x1) 03:34:15 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) r2 = msgget$private(0x0, 0x0) msgctl$MSG_STAT(r2, 0xb, 0x0) 03:34:15 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000040)) 03:34:15 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000ddf4655fddf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000008000000d24201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e7e1fc40a6de4c28a2c3627f6ec42b47010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000daf4655fddf4655fddf4655f000000000000040040", 0x1d, 0x2100}, {&(0x7f0000011800)="8081000000180000daf4655fdaf4655fdaf4655f0000000000000100400000001000080000000d000af30100040008", 0x2f, 0x2200}, {0x0}], 0x0, &(0x7f0000014100)) 03:34:15 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0}], 0x0, &(0x7f0000000280)=ANY=[]) 03:34:15 executing program 4: timerfd_gettime(0xffffffffffffffff, 0x0) 03:34:15 executing program 3: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r0, 0x4, 0x800) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:34:15 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d9f4655fd9f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0xfffffffffffffffd}], 0x0, &(0x7f0000000080)=ANY=[]) [ 1191.633116] loop0: detected capacity change from 0 to 16383 03:34:15 executing program 4: r0 = getpid() r1 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r1) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) 03:34:15 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmsg(r0, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x2122) 03:34:15 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getspdinfo={0x14, 0x1d, 0x1}, 0x14}}, 0x0) 03:34:15 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000040)) 03:34:15 executing program 6: creat(&(0x7f00000003c0)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d9f4655fd9f4655f0100ffff53ef010001000000d9f4655f000000000000005a6edc3d00000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000d9f4655fd9f4655fd9f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[]) [ 1191.766648] EXT4-fs error (device loop0): __ext4_fill_super:5500: inode #2: comm syz-executor.0: iget: special inode unallocated [ 1191.776018] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1191.779201] EXT4-fs (loop0): get root inode failed [ 1191.779780] EXT4-fs (loop0): mount failed [ 1191.783775] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 03:34:15 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x7c, 0x3, 0x8, 0x3, 0x0, 0x0, {0xc, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x44f1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x400}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xfbfb}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8010}, 0x20000810) 03:34:15 executing program 7: timer_create(0x2, &(0x7f0000001540)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000001580)) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) timer_settime(0x0, 0x1, &(0x7f0000001700)={{}, {0x77359400}}, &(0x7f0000001740)) 03:34:15 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:34:16 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d9f4655fd9f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0xfffffffffffffffd}], 0x0, &(0x7f0000000080)=ANY=[]) 03:34:16 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmsg(r0, &(0x7f0000001d00)={&(0x7f0000000a00)=@can, 0x80, &(0x7f0000001c00)=[{0x0}, {0x0}], 0x2}, 0x12000) 03:34:16 executing program 4: r0 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0x3, r0, 0x0) keyctl$read(0xb, r0, &(0x7f0000000040)=""/116, 0x74) 03:34:16 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000040)) 03:34:16 executing program 1: perf_event_open(&(0x7f0000001580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:34:16 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40400, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}], 0x0, &(0x7f0000000040)={[{@noload}, {@journal_checksum}, {@inode_readahead_blks}]}) 03:34:16 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x7c, 0x3, 0x8, 0x3, 0x0, 0x0, {0xc, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x44f1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x400}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xfbfb}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8010}, 0x20000810) 03:34:16 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x4000001, 0x2000009}) dup(0xffffffffffffffff) dup(0xffffffffffffffff) [ 1192.638840] loop0: detected capacity change from 0 to 16383 [ 1192.677780] EXT4-fs error (device loop0): __ext4_fill_super:5500: inode #2: comm syz-executor.0: iget: special inode unallocated [ 1192.690172] EXT4-fs (loop0): get root inode failed [ 1192.691254] EXT4-fs (loop0): mount failed 03:34:16 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000100)="601cc2c3fe2be021ac0a0700088001000440000004f001", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000001300)=ANY=[]) 03:34:16 executing program 6: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) 03:34:16 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="0000000000000001"], 0xa8}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000080), 0x10, 0x0) 03:34:16 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000000080)=0x0) io_getevents(r0, 0x4, 0x4, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x0) 03:34:16 executing program 4: r0 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0x3, r0, 0x0) keyctl$read(0xb, r0, &(0x7f0000000040)=""/116, 0x74) 03:34:16 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0xd400080b) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0xd400080b) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0xd400080b) 03:34:16 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x7c, 0x3, 0x8, 0x3, 0x0, 0x0, {0xc, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x44f1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x400}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xfbfb}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8010}, 0x20000810) 03:34:16 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40000060) 03:34:16 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x175) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) 03:34:16 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000040)) r1 = getpid() process_vm_readv(r1, &(0x7f0000000200)=[{&(0x7f0000000080)=""/184, 0xb8}, {&(0x7f0000000140)=""/178, 0xb2}], 0x2, &(0x7f0000000380)=[{0x0}, {0x0}, {0xfffffffffffffffc, 0x40000000}, {&(0x7f00000039c0)=""/4095, 0xfff}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:34:16 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40605346, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{0x7}}) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(0x0) 03:34:16 executing program 4: r0 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0x3, r0, 0x0) keyctl$read(0xb, r0, &(0x7f0000000040)=""/116, 0x74) 03:34:16 executing program 5: perf_event_open(&(0x7f0000002100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb99a}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:34:16 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r0, 0x0, 0x0) 03:34:16 executing program 6: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0430"], 0x6) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 03:34:16 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x7c, 0x3, 0x8, 0x3, 0x0, 0x0, {0xc, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x44f1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x400}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xfbfb}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8010}, 0x20000810) 03:34:16 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40605346, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{0x7}}) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(0x0) 03:34:16 executing program 4: r0 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0x3, r0, 0x0) keyctl$read(0xb, r0, &(0x7f0000000040)=""/116, 0x74) 03:34:16 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_linger(r0, 0x1, 0x4, 0x0, &(0x7f0000000140)) 03:34:17 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000000080)=0x0) io_getevents(r0, 0x4, 0x4, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x0) 03:34:17 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x175) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) 03:34:17 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d0c, &(0x7f00000000c0)={{}, {0x0, 0x6}, 0x0, 0x4}) 03:34:17 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40605346, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{0x7}}) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(0x0) 03:34:17 executing program 6: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="b4", 0xfffff, r1) 03:34:17 executing program 4: getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000), 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) 03:34:17 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x0, 0x0, 0x0, 0x401}, 0x10) 03:34:17 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 1194.153761] audit: type=1326 audit(2000000057.639:140): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=64024 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f04558e5b19 code=0x0 03:34:17 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5cc958e9}) 03:34:17 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40605346, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{0x7}}) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(0x0) 03:34:17 executing program 5: r0 = socket$inet(0x2, 0xa, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) 03:34:17 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x18, 0x2, 0x1, 0x401, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}}, 0x0) recvmmsg$unix(r1, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000d80)=[{0x0}, {0x0}, {0x0}, {0x0, 0x80000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x1, 0x12020, 0x0) 03:34:17 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x300489830ddf23be, 0x0) write$binfmt_elf64(r0, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0xfffffdef) io_setup(0x0, 0x0) 03:34:17 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@md0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) 03:34:18 executing program 4: clock_getres(0x3, &(0x7f0000000000)) 03:34:18 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x21, &(0x7f0000000000)="92f46193", 0x4) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e23, 0x9c9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0}}], 0x2, 0x0) 03:34:18 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mq_open(&(0x7f0000000140)='#\x00', 0x0, 0x0, 0x0) 03:34:18 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000000080)=0x0) io_getevents(r0, 0x4, 0x4, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x0) 03:34:18 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:34:18 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff}) fcntl$setstatus(r0, 0x407, 0x1002000) fcntl$setstatus(r0, 0x407, 0x0) 03:34:18 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, 0x0, 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0x0) 03:34:18 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x175) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) 03:34:18 executing program 4: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x33, 0x0, @dev={0xfe, 0x80, '\x00', 0x1e}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}}}}, 0x0) 03:34:18 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) [ 1195.118082] audit: type=1326 audit(2000000058.610:141): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=64147 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f04558e5b19 code=0x0 03:34:18 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401) write$evdev(r0, &(0x7f0000000080)=[{}], 0x18) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) 03:34:18 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, 0x0) 03:34:18 executing program 6: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5414, &(0x7f00000001c0)) 03:34:18 executing program 4: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x33, 0x0, @dev={0xfe, 0x80, '\x00', 0x1e}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}}}}, 0x0) 03:34:18 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000040)="88f465000000ddffff0800080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000140)=ANY=[]) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@xfs={0x1c}, &(0x7f0000000180), 0x0) 03:34:18 executing program 1: r0 = getpid() r1 = pidfd_open(r0, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000008c0), 0x48602, 0x0) pidfd_getfd(r1, r2, 0x0) 03:34:18 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8955, &(0x7f0000000100)={{0x2, 0x0, @dev}, {}, 0xc, {0x2, 0x0, @broadcast}}) 03:34:18 executing program 6: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5414, &(0x7f00000001c0)) 03:34:18 executing program 4: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x33, 0x0, @dev={0xfe, 0x80, '\x00', 0x1e}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}}}}, 0x0) [ 1195.410252] loop0: detected capacity change from 0 to 184 03:34:19 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000000080)=0x0) io_getevents(r0, 0x4, 0x4, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x0) 03:34:19 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x400454d9, &(0x7f0000000180)={{}, "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"}) 03:34:19 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000040)="88f465000000ddffff0800080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000140)=ANY=[]) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@xfs={0x1c}, &(0x7f0000000180), 0x0) 03:34:19 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8955, &(0x7f0000000100)={{0x2, 0x0, @dev}, {}, 0xc, {0x2, 0x0, @broadcast}}) 03:34:19 executing program 6: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5414, &(0x7f00000001c0)) 03:34:19 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730ca", 0x175) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) 03:34:19 executing program 4: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x33, 0x0, @dev={0xfe, 0x80, '\x00', 0x1e}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}}}}, 0x0) 03:34:19 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 1196.029637] loop0: detected capacity change from 0 to 184 [ 1196.031076] audit: type=1326 audit(2000000059.524:142): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=64189 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f04558e5b19 code=0x0 03:34:19 executing program 6: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5414, &(0x7f00000001c0)) 03:34:19 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$fscrypt_v1(&(0x7f0000002980), &(0x7f00000029c0)={'fscrypt:', @desc2}, &(0x7f0000002a00)={0x0, "b2cc144d103542ba6d542373ff1435970ee5d830eb735a252e47dbfbfd3609bbe534e11d59415c046713be902185207bca37fd0abff17c9834fc55c44e1420b2"}, 0x48, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x583) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) 03:34:19 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000040)="88f465000000ddffff0800080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000140)=ANY=[]) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@xfs={0x1c}, &(0x7f0000000180), 0x0) 03:34:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000004040)={0x0, @vsock={0x28, 0x0, 0x0, @my=0x1}, @phonet, @xdp, 0x0, 0x0, 0x0, 0x100000000000000}) 03:34:19 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8955, &(0x7f0000000100)={{0x2, 0x0, @dev}, {}, 0xc, {0x2, 0x0, @broadcast}}) 03:34:19 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000040)="88f465000000ddffff0800080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000140)=ANY=[]) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@xfs={0x1c}, &(0x7f0000000180), 0x0) 03:34:19 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8955, &(0x7f0000000100)={{0x2, 0x0, @dev}, {}, 0xc, {0x2, 0x0, @broadcast}}) 03:34:20 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x80190, &(0x7f00000004c0)="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"}) 03:34:20 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000040)={{}, {0x7}, 0x34}) 03:34:20 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) lseek(r0, 0x0, 0x3) 03:34:20 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5410, &(0x7f00000001c0)) 03:34:20 executing program 0: get_mempolicy(&(0x7f0000000440), &(0x7f0000000480), 0x9, &(0x7f0000ff8000/0x4000)=nil, 0x3) 03:34:20 executing program 7: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000019180), 0x1, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r0, r2, 0x0, 0x8) 03:34:20 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:34:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x40001, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0xfdef) ioctl$TCSETS2(r0, 0x5412, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "8a18af890d3e9745bc9af3ae10de8480245dc6"}) [ 1197.026324] audit: type=1326 audit(2000000060.515:143): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=64222 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f04558e5b19 code=0x0 03:34:20 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, 0x0) 03:34:20 executing program 0: r0 = getpgid(0x0) r1 = getpgrp(0x0) kcmp$KCMP_EPOLL_TFD(r1, r0, 0x7, 0xffffffffffffffff, 0x0) 03:34:20 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x40001, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0xfdef) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) 03:34:20 executing program 5: r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x9) 03:34:20 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000680)={&(0x7f0000000180)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0}, 0x0) 03:34:20 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x80104592, &(0x7f0000000000)=[0x1f00]) 03:34:20 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x1263, &(0x7f0000000000)={"8d0200", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:34:20 executing program 7: shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x7000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8) 03:34:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x40001, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0xfdef) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) 03:34:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x40001, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0xfdef) ioctl$TCSETS2(r0, 0x5412, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "8a18af890d3e9745bc9af3ae10de8480245dc6"}) 03:34:21 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) 03:34:21 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x63020180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) gettid() 03:34:21 executing program 7: shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x7000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8) 03:34:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x40001, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0xfdef) ioctl$TCSETS2(r0, 0x5412, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "8a18af890d3e9745bc9af3ae10de8480245dc6"}) 03:34:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x301}, 0x14}}, 0x0) 03:34:21 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x40001, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0xfdef) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) [ 1198.101277] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1198.133903] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO 03:34:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x40001, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0xfdef) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) 03:34:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x40001, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0xfdef) ioctl$TCSETS2(r0, 0x5412, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "8a18af890d3e9745bc9af3ae10de8480245dc6"}) 03:34:21 executing program 7: shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x7000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8) 03:34:21 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x40001, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0xfdef) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) 03:34:21 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x30d, &(0x7f0000000200)={"3da046c7719da695727bcbb7", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:34:21 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x2, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000200)=""/149) 03:34:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x40001, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0xfdef) ioctl$TCSETS2(r0, 0x5412, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "8a18af890d3e9745bc9af3ae10de8480245dc6"}) 03:34:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x40001, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0xfdef) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) 03:34:21 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x63020180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) gettid() 03:34:21 executing program 7: shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x7000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8) 03:34:21 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x40001, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0xfdef) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) 03:34:22 executing program 5: keyctl$restrict_keyring(0x5, 0x0, &(0x7f0000000140)='asymmetric\x00', 0x0) 03:34:22 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000100)={0x80}) 03:34:22 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f0000000000)="ebad2b40efae0018d747abe1", 0xc) 03:34:22 executing program 7: clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:34:22 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:34:22 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000200)='U', 0x1}], 0x1}}], 0x2, 0x0) 03:34:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x40001, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0xfdef) ioctl$TCSETS2(r0, 0x5412, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "8a18af890d3e9745bc9af3ae10de8480245dc6"}) 03:34:22 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x63020180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) gettid() 03:34:22 executing program 4: r0 = timerfd_create(0x1, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r0, &(0x7f00000000c0)) 03:34:22 executing program 6: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) recvmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmmsg$unix(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x108}}], 0x1, 0x0, 0x0) connect$unix(r0, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) 03:34:22 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000100)={0x80}) 03:34:22 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000012700)="111fc0d901", 0x5, 0xc000}], 0x0, &(0x7f0000013b00)) 03:34:22 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x40802, 0x0) fadvise64(r0, 0x0, 0x0, 0x4) 03:34:22 executing program 5: kexec_load(0x0, 0x0, 0x0, 0x80000) 03:34:22 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000100)={0x80}) 03:34:22 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001e80)='/proc/asound/seq/clients\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x40a, 0x0) 03:34:22 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x63020180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) gettid() 03:34:22 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) 03:34:22 executing program 4: syz_emit_ethernet(0x22, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @broadcast}}}}}, 0x0) 03:34:23 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000100)={0x80}) 03:34:23 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5304) 03:34:23 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 03:34:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x40001, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0xfdef) ioctl$TCSETS2(r0, 0x5412, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "8a18af890d3e9745bc9af3ae10de8480245dc6"}) 03:34:23 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x7ff, 0x1, 0x7ff, 0xad7d, 0x0, "8f75a053465ade96"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) 03:34:23 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x25, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@dev, @local}}}}) 03:34:24 executing program 6: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) recvmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmmsg$unix(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x108}}], 0x1, 0x0, 0x0) connect$unix(r0, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) 03:34:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_linger(r0, 0x1, 0x9, &(0x7f0000000040)={0x1}, 0x8) 03:34:24 executing program 7: clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:34:24 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000080)="f9de6c8a", 0x4}], 0x1}, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) 03:34:24 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f00000014c0)={&(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x10}}, @ip_retopts={{0x10}}], 0x20}, 0x0) 03:34:24 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x103041, 0x0) write$vga_arbiter(r0, &(0x7f0000000000)=@other={'lock', ' ', 'mem'}, 0x9) 03:34:24 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40286608, &(0x7f0000000000)) 03:34:24 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000040)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='nl80211\x00', &(0x7f00000001c0)='nl80211\x00', 0x0) [ 1200.966130] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 0 (only 16 groups) 03:34:24 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:34:24 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000140)={0x0, 0x0, 0x11, &(0x7f0000000100)="0de11a8042080d0aa3fd0eba7d064183aa"}) 03:34:24 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x40342) read$char_usb(r0, 0x0, 0x0) 03:34:24 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f00000014c0)={&(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x10}}, @ip_retopts={{0x10}}], 0x20}, 0x0) [ 1201.111726] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 0 (only 16 groups) 03:34:24 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40286608, &(0x7f0000000000)) 03:34:24 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000040)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='nl80211\x00', &(0x7f00000001c0)='nl80211\x00', 0x0) [ 1201.259414] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 0 (only 16 groups) 03:34:24 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40286608, &(0x7f0000000000)) 03:34:24 executing program 7: clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1201.537749] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 0 (only 16 groups) 03:34:25 executing program 1: add_key$fscrypt_v1(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xfffffffffffffffe) clone(0x0, 0x0, 0x0, 0x0, 0x0) 03:34:25 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0x1}, 0x6) 03:34:25 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getrusage(0x0, &(0x7f0000000040)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 03:34:25 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000040)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='nl80211\x00', &(0x7f00000001c0)='nl80211\x00', 0x0) 03:34:25 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f00000014c0)={&(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x10}}, @ip_retopts={{0x10}}], 0x20}, 0x0) 03:34:25 executing program 7: clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:34:25 executing program 6: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) recvmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmmsg$unix(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x108}}], 0x1, 0x0, 0x0) connect$unix(r0, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) 03:34:25 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40286608, &(0x7f0000000000)) [ 1201.905777] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 0 (only 16 groups) 03:34:25 executing program 4: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0x0, 0x0, 0x2}) 03:34:25 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getrusage(0x0, &(0x7f0000000040)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 03:34:25 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f00000014c0)={&(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x10}}, @ip_retopts={{0x10}}], 0x20}, 0x0) 03:34:25 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000040)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='nl80211\x00', &(0x7f00000001c0)='nl80211\x00', 0x0) 03:34:26 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) close(r0) 03:34:26 executing program 4: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) chmod(&(0x7f0000004a00)='./file0\x00', 0x0) 03:34:26 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getrusage(0x0, &(0x7f0000000040)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 03:34:26 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xff34) 03:34:26 executing program 2: request_key(&(0x7f0000000640)='logon\x00', &(0x7f0000000680)={'syz', 0x0}, &(0x7f00000006c0)=',%/#)\x00', 0xfffffffffffffffb) 03:34:26 executing program 6: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) recvmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmmsg$unix(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x108}}], 0x1, 0x0, 0x0) connect$unix(r0, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) 03:34:26 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x5411, &(0x7f00000001c0)={'veth1_macvtap\x00'}) 03:34:26 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0xb, r0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000400)=@secondary) 03:34:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8491679cf830f06c}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r0) 03:34:26 executing program 7: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0) write$vga_arbiter(r0, &(0x7f0000000080)=@target={'target ', {'PCI:', '12', ':', '1f', ':', '7', '.', '8'}}, 0x15) 03:34:26 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000380)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) setregid(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {0x34}, &(0x7f0000005780)=""/85, 0x55, &(0x7f0000005800)=""/32, &(0x7f0000005840)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:34:26 executing program 0: futex(&(0x7f0000000000), 0xa, 0x0, 0x0, &(0x7f00000000c0), 0x1) 03:34:26 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getrusage(0x0, &(0x7f0000000040)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 03:34:26 executing program 5: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "7437b8", 0x28, 0x6, 0x0, @private2, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@exp_smc={0x1d, 0x6}, @eol, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 03:34:26 executing program 7: getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone3(&(0x7f0000005880)={0x61020100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0}, 0x58) 03:34:26 executing program 5: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "7437b8", 0x28, 0x6, 0x0, @private2, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@exp_smc={0x1d, 0x6}, @eol, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 03:34:26 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000008700)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000001640)=[@ip_pktinfo={{0x1c, 0x0, 0x5, {0x0, @broadcast, @broadcast}}}], 0x20}}], 0x2, 0x0) 03:34:26 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e6661740002", 0xd}, {0x0}], 0x0, &(0x7f0000010f00)) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb30", 0x177) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r2, &(0x7f0000000900)="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", 0x1ca) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) sendfile(r2, r3, 0x0, 0xfdef) sendfile(r0, r1, 0x0, 0xfdef) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 03:34:26 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000280)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @buffer={0x0, 0x20000, 0x0}, &(0x7f0000000080)="60645344f7cb", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1203.375904] syz-executor.0: attempt to access beyond end of device [ 1203.375904] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1203.384295] FAT-fs (loop0): unable to read boot sector [ 1203.436187] syz-executor.0: attempt to access beyond end of device [ 1203.436187] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1203.438788] FAT-fs (loop0): unable to read boot sector 03:34:26 executing program 5: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "7437b8", 0x28, 0x6, 0x0, @private2, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@exp_smc={0x1d, 0x6}, @eol, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 03:34:27 executing program 7: getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone3(&(0x7f0000005880)={0x61020100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0}, 0x58) 03:34:27 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) 03:34:27 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000080)=0x1ff, 0x7, 0x1) 03:34:27 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="0c00060001"], 0x30}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000400), r0) 03:34:27 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000380)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) setregid(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {0x34}, &(0x7f0000005780)=""/85, 0x55, &(0x7f0000005800)=""/32, &(0x7f0000005840)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:34:27 executing program 1: syz_mount_image$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) chown(&(0x7f00000009c0)='./file0\x00', r0, 0x0) utimes(&(0x7f0000000000)='./file0\x00', 0x0) 03:34:27 executing program 5: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "7437b8", 0x28, 0x6, 0x0, @private2, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@exp_smc={0x1d, 0x6}, @eol, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 03:34:27 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETLED(r0, 0x541b, 0x0) [ 1203.846911] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1203.900950] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 03:34:27 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x1, 0x0) read$rfkill(r0, &(0x7f0000000140), 0x8) 03:34:27 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETLED(r0, 0x541b, 0x0) 03:34:27 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, 0x0) 03:34:27 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) 03:34:27 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="0c00060001"], 0x30}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000400), r0) 03:34:27 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000080)=0x1ff, 0x7, 0x1) 03:34:27 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETLED(r0, 0x541b, 0x0) 03:34:27 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000340)={{0x1}}) [ 1204.098749] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 03:34:27 executing program 7: getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone3(&(0x7f0000005880)={0x61020100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0}, 0x58) 03:34:27 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '9p\x00'}}]}}) 03:34:27 executing program 0: geteuid() perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) epoll_create(0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 03:34:27 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="0c00060001"], 0x30}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000400), r0) 03:34:27 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000080)=0x1ff, 0x7, 0x1) 03:34:27 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/mcfilter6\x00') pread64(r0, &(0x7f0000000080)=""/204, 0xe8, 0x2) 03:34:27 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000380)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) setregid(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {0x34}, &(0x7f0000005780)=""/85, 0x55, &(0x7f0000005800)=""/32, &(0x7f0000005840)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:34:27 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETLED(r0, 0x541b, 0x0) [ 1204.306691] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 03:34:27 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000180)=@ccm_128={{}, "5a82cde6e198ad98", "452a1f3dc09aee5010550ddf56641473", "70a28d4b", "26f07b1b9fc22e67"}, 0x28) 03:34:27 executing program 6: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0xffffffffffffffff) 03:34:27 executing program 0: geteuid() perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) epoll_create(0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 03:34:27 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000080)=0x1ff, 0x7, 0x1) 03:34:27 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="0c00060001"], 0x30}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000400), r0) [ 1204.447426] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 03:34:27 executing program 6: geteuid() perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) epoll_create(0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 03:34:27 executing program 0: geteuid() perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) epoll_create(0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 03:34:28 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./file0/file0\x00', 0x0) write$P9_RSETATTR(r0, 0x0, 0xeffd) 03:34:28 executing program 5: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x100) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) inotify_rm_watch(r0, r1) 03:34:28 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) lseek(r0, 0x0, 0x1) 03:34:28 executing program 0: geteuid() perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) epoll_create(0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 03:34:28 executing program 6: geteuid() perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) epoll_create(0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 03:34:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@window={0x3, 0xeab}, @timestamp, @sack_perm, @timestamp, @sack_perm, @sack_perm, @sack_perm, @timestamp], 0x8) 03:34:28 executing program 7: getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone3(&(0x7f0000005880)={0x61020100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0}, 0x58) 03:34:28 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000380)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) setregid(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {0x34}, &(0x7f0000005780)=""/85, 0x55, &(0x7f0000005800)=""/32, &(0x7f0000005840)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:34:28 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000180)=@ccm_128={{}, "5a82cde6e198ad98", "452a1f3dc09aee5010550ddf56641473", "70a28d4b", "26f07b1b9fc22e67"}, 0x28) 03:34:28 executing program 4: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RMKDIR(r0, &(0x7f0000000140)={0x14}, 0x14) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) 03:34:28 executing program 6: geteuid() perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) epoll_create(0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 03:34:28 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000052c0)=[{{&(0x7f0000004d40)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000005100)=[@flowinfo={{0x14, 0x29, 0xb, 0x10000}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @rthdrdstopts={{0x18}}, @hoplimit={{0x14}}], 0x60}}], 0x1, 0x0) 03:34:28 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000180)=@ccm_128={{}, "5a82cde6e198ad98", "452a1f3dc09aee5010550ddf56641473", "70a28d4b", "26f07b1b9fc22e67"}, 0x28) 03:34:28 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) 03:34:28 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 03:34:28 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{}, {@none}]}) 03:34:28 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000052c0)=[{{&(0x7f0000004d40)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000005100)=[@flowinfo={{0x14, 0x29, 0xb, 0x10000}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @rthdrdstopts={{0x18}}, @hoplimit={{0x14}}], 0x60}}], 0x1, 0x0) 03:34:28 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000180)=@ccm_128={{}, "5a82cde6e198ad98", "452a1f3dc09aee5010550ddf56641473", "70a28d4b", "26f07b1b9fc22e67"}, 0x28) 03:34:28 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3003}, 0x4) 03:34:28 executing program 4: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) sched_rr_get_interval(0x0, &(0x7f0000000440)) 03:34:28 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="ee", 0x1}], 0x2}, 0x0) [ 1204.985441] cgroup: none used incorrectly [ 1204.990836] cgroup: none used incorrectly 03:34:28 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x14, &(0x7f0000000100)={0x0, 0x1000}, 0x4) 03:34:28 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) lgetxattr(0x0, 0x0, 0x0, 0x0) 03:34:28 executing program 0: syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@link_local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ab9fc8", 0x14, 0x6, 0x0, @private0, @loopback, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 03:34:28 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:34:28 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000052c0)=[{{&(0x7f0000004d40)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000005100)=[@flowinfo={{0x14, 0x29, 0xb, 0x10000}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @rthdrdstopts={{0x18}}, @hoplimit={{0x14}}], 0x60}}], 0x1, 0x0) 03:34:28 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x1, &(0x7f0000000180), 0x0) 03:34:28 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[], [{@context={'context', 0x3d, 'user_u'}}]}) 03:34:28 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x17) 03:34:28 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000052c0)=[{{&(0x7f0000004d40)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000005100)=[@flowinfo={{0x14, 0x29, 0xb, 0x10000}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @rthdrdstopts={{0x18}}, @hoplimit={{0x14}}], 0x60}}], 0x1, 0x0) 03:34:28 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x21, 0x0, 0x0) [ 1205.201842] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 1205.205912] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 03:34:28 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x1001, @none}, 0xe) 03:34:28 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8923, &(0x7f0000000040)={'lo\x00'}) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:34:28 executing program 2: r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r0, &(0x7f0000000000)) 03:34:28 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_buf(r0, 0x29, 0x5, 0x0, 0x0) 03:34:28 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f00000015c0)={{}, {}, [], {}, [], {0x10, 0x7}}, 0x24, 0x0) 03:34:28 executing program 1: write$sndseq(0xffffffffffffffff, 0x0, 0x0) 03:34:28 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) statfs(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000200)=""/220) [ 1205.313026] o: renamed from lo (while UP) 03:34:28 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000400)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000008000000d24201001283", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000441356bbe0d347458781d90fbb6137b4010040", 0x1f, 0x4e0}, {&(0x7f00000005c0)="00000000000000000001000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000006100000000000000375bf1cb904b3e7a2e0ec817cf675536406c83e3e5aaf4d00be5d5816678186a35fe091dae4e11abe3bc329dd56f51991fab5acfce8d309b1f6f3ff9cc1c44f435705119b0844fb2e316b485172f9fd5470cb699680ae77843b0611a7f2d0dc7ddedd216ad4984e8de7507d911932aaf1e9d3715d16cc8f70050a95043a7e793789d1054deca9d0bae34dd37b6b07148e986106b73d50a8db2be87aab5f5c93d", 0xe0, 0x540}, {&(0x7f0000010400)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0xffffffff}, {&(0x7f0000012600)="ed41000000100000d526655fd6f4655fd6f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000000280)="65687af10222f9e870c26c2750ca8f0b20c3cf122a42d127bf459498ef740c69f5098d80642a5568e1bdcef241a42592f576bc2161c854b97ec4eb5f37936bc154e0ca67c2b790e6d20cdbf354345c89a481737b6fb02fa2f816c973ba7c8f9c2cc1815f3308651f1b128ae2dbe7081e39372fe4daf7901061073afc2def996cd60adaf96736968f61d5ce710ac50fcee8578f84747e1454f4b3fba687b93b643360dc2191693f66fbd7b5178a4cd6d3119895296b8d6245db1559254e1cb6d966aa1b427c97c8dda37d810140cb78415e19a9649afb0326f0", 0xd9, 0x1}, {&(0x7f0000000500)="25925a24f016669c74e6c08e9a199aa1be505745f48caf5d4864d3ea4663c4a241a8550d3b61fe48f805025b458360fda158ccc6f20159f111", 0x39, 0x53e}], 0x0, &(0x7f0000000040)={[{@nodelalloc}]}) 03:34:28 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x4b6a, &(0x7f00000001c0)) 03:34:28 executing program 2: r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r0, &(0x7f0000000000)) 03:34:28 executing program 1: shmctl$SHM_UNLOCK(0x0, 0xc) 03:34:28 executing program 0: r0 = epoll_create(0x4) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) epoll_pwait2(r0, &(0x7f0000000180)=[{}], 0x1, &(0x7f0000000200)={0x0, r1+10000000}, 0x0, 0x0) 03:34:28 executing program 5: syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [{0x2, 0x0, 0xee00}, {0x2, 0x85d1a4c154d6ab04}], {}, [{}]}, 0x3c, 0x0) 03:34:28 executing program 6: r0 = memfd_create(&(0x7f0000001b80)='(\xc8\xf5\x82j\xca', 0x3) fcntl$addseals(r0, 0x409, 0x4) write$binfmt_aout(r0, 0x0, 0x937) 03:34:28 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8923, &(0x7f0000000040)={'lo\x00'}) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:34:28 executing program 7: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) mknodat$loop(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) open_tree(r0, &(0x7f0000000040)='./file0\x00', 0x0) 03:34:29 executing program 1: shmctl$SHM_UNLOCK(0x0, 0xc) 03:34:29 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$9p_unix(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1005841, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x80000, &(0x7f0000000380)=ANY=[]) 03:34:29 executing program 2: r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r0, &(0x7f0000000000)) 03:34:29 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 03:34:29 executing program 0: r0 = epoll_create(0x4) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) epoll_pwait2(r0, &(0x7f0000000180)=[{}], 0x1, &(0x7f0000000200)={0x0, r1+10000000}, 0x0, 0x0) 03:34:29 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x4b6a, &(0x7f00000001c0)) 03:34:29 executing program 7: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) mknodat$loop(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) open_tree(r0, &(0x7f0000000040)='./file0\x00', 0x0) [ 1205.630036] audit: type=1326 audit(2000000069.122:144): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=65505 comm="syz-executor.6" exe="/syz-executor.6" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f33e32cfb19 code=0x0 [ 1206.460936] audit: type=1326 audit(2000000069.953:145): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=65505 comm="syz-executor.6" exe="/syz-executor.6" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f33e32cfb19 code=0x0 03:34:30 executing program 2: r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r0, &(0x7f0000000000)) 03:34:30 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = epoll_create(0x6) epoll_pwait(r0, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x0) 03:34:30 executing program 0: r0 = epoll_create(0x4) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) epoll_pwait2(r0, &(0x7f0000000180)=[{}], 0x1, &(0x7f0000000200)={0x0, r1+10000000}, 0x0, 0x0) 03:34:30 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x4b6a, &(0x7f00000001c0)) 03:34:30 executing program 1: shmctl$SHM_UNLOCK(0x0, 0xc) 03:34:30 executing program 7: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) mknodat$loop(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) open_tree(r0, &(0x7f0000000040)='./file0\x00', 0x0) 03:34:30 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$9p_unix(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1005841, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x80000, &(0x7f0000000380)=ANY=[]) 03:34:30 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8923, &(0x7f0000000040)={'lo\x00'}) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:34:30 executing program 7: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) mknodat$loop(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) open_tree(r0, &(0x7f0000000040)='./file0\x00', 0x0) 03:34:30 executing program 1: shmctl$SHM_UNLOCK(0x0, 0xc) 03:34:30 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$9p_unix(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1005841, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x80000, &(0x7f0000000380)=ANY=[]) 03:34:30 executing program 2: keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000240)=""/102400, 0xfffffffffffffdb7) 03:34:30 executing program 6: ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000080)={{0x7, 0x1f}, 'port1\x00', 0xc2, 0x800, 0x0, 0x4, 0x5, 0x10000, 0x200, 0x0, 0x6, 0x5}) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000180)='bbr\x00', 0x4) write$tcp_congestion(r0, &(0x7f00000001c0)='yeah\x00', 0x5) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x400) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000240)={{0x1, 0x6d}, 'port1\x00', 0x64, 0xd, 0x8000, 0x70f7e99b, 0xfffffffd, 0x80000000, 0x6, 0x0, 0x4, 0x4}) syz_open_pts(0xffffffffffffffff, 0x20000) clone(0x0, &(0x7f0000000400)="2f966fabf109c5a6eeee1cfdfbd1d70d85c3b85b3af8a37a678eb8beee35444d28d88607fe961ee2c8e20459899567dd085e1b03a94bfcc2dae1dc5a90ddec26519bf38acce00d854112343f0a68349a9e44207329ea598a523521505531fc366fe511091749f104ac5d1244f36762e821c63e4f0f126fec404a0c7442d90064b66ba6f2bbcffd35b0e3a4cbad4aefd03ca39cc111c2a2882bfb51560b857604527ed4b685cde8e28b34a25cdc24dd5c0248f3ae4c57d4bd382bfee88b2048ad2e5ff5d6e9646e281595578c581605daef61238c4173099bc7caa8b7286451da1a92", &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)="9bdd6aa83be71e7eb57874bb74a8012950195c5963c10cde28d9a47f369870825f9986d6809c179f676ecd2d1d7ed92bfc2af98a6734cc034b91cd5f2393a7176cd0d71ab37b7ec4344256c569f070503f3809897bcbac2a89fb981436ae46e7a29616077e3f70b78682a062fc44f6cf1ea964393bc641ff8e9cbce782338dc86b85ba9e2a9bed580de8e3731850809d3b5f5dfcef6cddfcd038c98e2941d1de88493528094d9979324de9") 03:34:30 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x4b6a, &(0x7f00000001c0)) 03:34:30 executing program 0: r0 = epoll_create(0x4) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) epoll_pwait2(r0, &(0x7f0000000180)=[{}], 0x1, &(0x7f0000000200)={0x0, r1+10000000}, 0x0, 0x0) 03:34:30 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8923, &(0x7f0000000040)={'lo\x00'}) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:34:30 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) 03:34:30 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 03:34:30 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$9p_unix(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1005841, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x80000, &(0x7f0000000380)=ANY=[]) 03:34:30 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(0x0, &(0x7f0000008c40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000008b40)='./file0\x00', &(0x7f0000008b80), 0x0, 0x0, 0x0) 03:34:30 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) 03:34:30 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:34:30 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0103000000000000000001"], 0x1c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:34:30 executing program 6: ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000080)={{0x7, 0x1f}, 'port1\x00', 0xc2, 0x800, 0x0, 0x4, 0x5, 0x10000, 0x200, 0x0, 0x6, 0x5}) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000180)='bbr\x00', 0x4) write$tcp_congestion(r0, &(0x7f00000001c0)='yeah\x00', 0x5) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x400) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000240)={{0x1, 0x6d}, 'port1\x00', 0x64, 0xd, 0x8000, 0x70f7e99b, 0xfffffffd, 0x80000000, 0x6, 0x0, 0x4, 0x4}) syz_open_pts(0xffffffffffffffff, 0x20000) clone(0x0, &(0x7f0000000400)="2f966fabf109c5a6eeee1cfdfbd1d70d85c3b85b3af8a37a678eb8beee35444d28d88607fe961ee2c8e20459899567dd085e1b03a94bfcc2dae1dc5a90ddec26519bf38acce00d854112343f0a68349a9e44207329ea598a523521505531fc366fe511091749f104ac5d1244f36762e821c63e4f0f126fec404a0c7442d90064b66ba6f2bbcffd35b0e3a4cbad4aefd03ca39cc111c2a2882bfb51560b857604527ed4b685cde8e28b34a25cdc24dd5c0248f3ae4c57d4bd382bfee88b2048ad2e5ff5d6e9646e281595578c581605daef61238c4173099bc7caa8b7286451da1a92", &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)="9bdd6aa83be71e7eb57874bb74a8012950195c5963c10cde28d9a47f369870825f9986d6809c179f676ecd2d1d7ed92bfc2af98a6734cc034b91cd5f2393a7176cd0d71ab37b7ec4344256c569f070503f3809897bcbac2a89fb981436ae46e7a29616077e3f70b78682a062fc44f6cf1ea964393bc641ff8e9cbce782338dc86b85ba9e2a9bed580de8e3731850809d3b5f5dfcef6cddfcd038c98e2941d1de88493528094d9979324de9") 03:34:31 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x0, "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"}) [ 1207.536182] audit: type=1326 audit(2000000071.028:146): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=65834 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f299da5ab19 code=0x0 [ 1207.606418] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:34:31 executing program 3: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) getgid() 03:34:31 executing program 0: clock_gettime(0x0, 0x0) setitimer(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setitimer(0x2, 0x0, 0x0) 03:34:31 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x48, 0x0, 0x0) 03:34:31 executing program 7: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) 03:34:31 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 03:34:31 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='setgroups\x00') lseek(r0, 0x4, 0x0) 03:34:31 executing program 0: clock_gettime(0x0, 0x0) setitimer(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setitimer(0x2, 0x0, 0x0) 03:34:31 executing program 3: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) getgid() 03:34:31 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net/snmp\x00') read$char_usb(r0, &(0x7f0000000000)=""/137, 0x89) 03:34:31 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0103000000000000000001"], 0x1c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 1208.167441] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:34:31 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0103000000000000000001"], 0x1c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:34:31 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0103000000000000000001"], 0x1c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:34:31 executing program 0: clock_gettime(0x0, 0x0) setitimer(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setitimer(0x2, 0x0, 0x0) 03:34:31 executing program 6: ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000080)={{0x7, 0x1f}, 'port1\x00', 0xc2, 0x800, 0x0, 0x4, 0x5, 0x10000, 0x200, 0x0, 0x6, 0x5}) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000180)='bbr\x00', 0x4) write$tcp_congestion(r0, &(0x7f00000001c0)='yeah\x00', 0x5) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x400) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000240)={{0x1, 0x6d}, 'port1\x00', 0x64, 0xd, 0x8000, 0x70f7e99b, 0xfffffffd, 0x80000000, 0x6, 0x0, 0x4, 0x4}) syz_open_pts(0xffffffffffffffff, 0x20000) clone(0x0, &(0x7f0000000400)="2f966fabf109c5a6eeee1cfdfbd1d70d85c3b85b3af8a37a678eb8beee35444d28d88607fe961ee2c8e20459899567dd085e1b03a94bfcc2dae1dc5a90ddec26519bf38acce00d854112343f0a68349a9e44207329ea598a523521505531fc366fe511091749f104ac5d1244f36762e821c63e4f0f126fec404a0c7442d90064b66ba6f2bbcffd35b0e3a4cbad4aefd03ca39cc111c2a2882bfb51560b857604527ed4b685cde8e28b34a25cdc24dd5c0248f3ae4c57d4bd382bfee88b2048ad2e5ff5d6e9646e281595578c581605daef61238c4173099bc7caa8b7286451da1a92", &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)="9bdd6aa83be71e7eb57874bb74a8012950195c5963c10cde28d9a47f369870825f9986d6809c179f676ecd2d1d7ed92bfc2af98a6734cc034b91cd5f2393a7176cd0d71ab37b7ec4344256c569f070503f3809897bcbac2a89fb981436ae46e7a29616077e3f70b78682a062fc44f6cf1ea964393bc641ff8e9cbce782338dc86b85ba9e2a9bed580de8e3731850809d3b5f5dfcef6cddfcd038c98e2941d1de88493528094d9979324de9") 03:34:31 executing program 3: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) getgid() 03:34:31 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net/snmp\x00') read$char_usb(r0, &(0x7f0000000000)=""/137, 0x89) 03:34:31 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 03:34:31 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0103000000000000000001"], 0x1c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 1208.305490] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1208.318505] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 03:34:31 executing program 3: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) getgid() [ 1208.359080] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:34:31 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net/snmp\x00') read$char_usb(r0, &(0x7f0000000000)=""/137, 0x89) 03:34:31 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0103000000000000000001"], 0x1c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:34:31 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0103000000000000000001"], 0x1c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:34:31 executing program 0: clock_gettime(0x0, 0x0) setitimer(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setitimer(0x2, 0x0, 0x0) 03:34:31 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0103000000000000000001"], 0x1c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:34:32 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0103000000000000000001"], 0x1c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:34:32 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net/snmp\x00') read$char_usb(r0, &(0x7f0000000000)=""/137, 0x89) 03:34:32 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0103000000000000000001"], 0x1c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:34:32 executing program 6: ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000080)={{0x7, 0x1f}, 'port1\x00', 0xc2, 0x800, 0x0, 0x4, 0x5, 0x10000, 0x200, 0x0, 0x6, 0x5}) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000180)='bbr\x00', 0x4) write$tcp_congestion(r0, &(0x7f00000001c0)='yeah\x00', 0x5) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x400) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000240)={{0x1, 0x6d}, 'port1\x00', 0x64, 0xd, 0x8000, 0x70f7e99b, 0xfffffffd, 0x80000000, 0x6, 0x0, 0x4, 0x4}) syz_open_pts(0xffffffffffffffff, 0x20000) clone(0x0, &(0x7f0000000400)="2f966fabf109c5a6eeee1cfdfbd1d70d85c3b85b3af8a37a678eb8beee35444d28d88607fe961ee2c8e20459899567dd085e1b03a94bfcc2dae1dc5a90ddec26519bf38acce00d854112343f0a68349a9e44207329ea598a523521505531fc366fe511091749f104ac5d1244f36762e821c63e4f0f126fec404a0c7442d90064b66ba6f2bbcffd35b0e3a4cbad4aefd03ca39cc111c2a2882bfb51560b857604527ed4b685cde8e28b34a25cdc24dd5c0248f3ae4c57d4bd382bfee88b2048ad2e5ff5d6e9646e281595578c581605daef61238c4173099bc7caa8b7286451da1a92", &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)="9bdd6aa83be71e7eb57874bb74a8012950195c5963c10cde28d9a47f369870825f9986d6809c179f676ecd2d1d7ed92bfc2af98a6734cc034b91cd5f2393a7176cd0d71ab37b7ec4344256c569f070503f3809897bcbac2a89fb981436ae46e7a29616077e3f70b78682a062fc44f6cf1ea964393bc641ff8e9cbce782338dc86b85ba9e2a9bed580de8e3731850809d3b5f5dfcef6cddfcd038c98e2941d1de88493528094d9979324de9") 03:34:32 executing program 4: munmap(&(0x7f0000630000/0x800000)=nil, 0x800000) munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000) 03:34:32 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_linger(r0, 0x1, 0x2c, 0x0, &(0x7f0000000140)) 03:34:32 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 03:34:32 executing program 3: r0 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000480)={0x0, 0x0, 0x0, '\x00', [{}, {}]}, 0x2) 03:34:32 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_linger(r0, 0x1, 0x2c, 0x0, &(0x7f0000000140)) 03:34:32 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x13, 0x0, &(0x7f0000000240)) 03:34:32 executing program 3: r0 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000480)={0x0, 0x0, 0x0, '\x00', [{}, {}]}, 0x2) 03:34:32 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_linger(r0, 0x1, 0x2c, 0x0, &(0x7f0000000140)) 03:34:32 executing program 7: syz_open_dev$loop(&(0x7f0000000000), 0xfffffffffffffe01, 0x2d42) 03:34:32 executing program 4: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) fstat(r0, &(0x7f00000000c0)) 03:34:32 executing program 7: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) setfsuid(0x0) 03:34:32 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000340)={{0x1}}) 03:34:32 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000200)) 03:34:32 executing program 3: r0 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000480)={0x0, 0x0, 0x0, '\x00', [{}, {}]}, 0x2) 03:34:32 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_linger(r0, 0x1, 0x2c, 0x0, &(0x7f0000000140)) 03:34:32 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) 03:34:32 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) io_setup(0x0, 0x0) 03:34:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000001f00)={0x14, r1, 0x1, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) 03:34:32 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000004640)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000940)={0xa, 0x4e23, 0x0, @local, 0x4f}, 0x1c, 0x0, 0x0, &(0x7f0000000a80)=[@pktinfo={{0x24, 0x29, 0x32, {@private2}}}], 0x28}}], 0x2, 0x0) 03:34:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8, 0x3, r2}, @void}}}, 0x24}}, 0x0) 03:34:32 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="140000006800ff"], 0x14}], 0x1}, 0x0) 03:34:32 executing program 4: openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x5452, &(0x7f0000000080)) close_range(r0, 0xffffffffffffffff, 0x0) 03:34:32 executing program 5: msgsnd(0x0, 0xffffffffffffffff, 0x0, 0x0) 03:34:32 executing program 0: r0 = fsopen(&(0x7f0000000040)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000100)='\xa5\x97`\xe8Y\x8a$g\xae6\xb7q\xf7d\xb1\xd5i\xed\xe9\x8e\xf3\xe8\x93f<\x9f\xffO\x0fF\xa7;,o\xa7\x99\x88\xc6\xa5\x1d\xf753{\'\xee\xc2\x1awr\xa3 ', &(0x7f0000000040)="cc", 0x3500) 03:34:32 executing program 3: r0 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000480)={0x0, 0x0, 0x0, '\x00', [{}, {}]}, 0x2) 03:34:32 executing program 1: msgrcv(0x0, 0x0, 0x0, 0x3, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00)'], 0xf, 0x0) 03:34:32 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getflags(r0, 0x3) 03:34:33 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) 03:34:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000019140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x2, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1000}]}, 0x1c}}, 0x0) 03:34:33 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) 03:34:33 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}}) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @private}, {0x2, 0x0, @empty}}) 03:34:33 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) utimes(&(0x7f00000000c0)='./file1\x00', 0x0) 03:34:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8, 0x3, r2}, @void}}}, 0x24}}, 0x0) 03:34:33 executing program 4: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto(r0, &(0x7f0000000000)="78d9702f8d8c1e7ef54ca70d5c00000000000000", 0x14, 0x0, 0x0, 0x0) 03:34:33 executing program 1: msgrcv(0x0, 0x0, 0x0, 0x3, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00)'], 0xf, 0x0) 03:34:34 executing program 4: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "7437b8", 0x14, 0x4, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 03:34:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8, 0x3, r2}, @void}}}, 0x24}}, 0x0) 03:34:34 executing program 6: pipe(&(0x7f00000001c0)={0xffffffffffffffff}) fchown(r0, 0xee01, 0x0) 03:34:34 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}}) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @private}, {0x2, 0x0, @empty}}) 03:34:34 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) 03:34:34 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x7fffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000180)="601c6d9c98ae506e544cbf00088020000400000000f8000020004000030000000000000001", 0x25}], 0x0, &(0x7f0000000080)={[{@fat=@fmask}]}) 03:34:34 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = eventfd(0x0) write$eventfd(r0, &(0x7f00000000c0), 0x8) 03:34:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8, 0x3, r2}, @void}}}, 0x24}}, 0x0) 03:34:34 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 03:34:34 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}}) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @private}, {0x2, 0x0, @empty}}) 03:34:34 executing program 4: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "7437b8", 0x14, 0x4, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 03:34:34 executing program 1: msgrcv(0x0, 0x0, 0x0, 0x3, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00)'], 0xf, 0x0) 03:34:34 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4bfb, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:34:34 executing program 0: setresuid(0x0, 0xee01, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) 03:34:34 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 03:34:34 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 03:34:34 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) 03:34:35 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$unix(0x1, 0x5, 0x0) getsockname$unix(r0, 0x0, &(0x7f00000000c0)) 03:34:35 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 03:34:35 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}}) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @private}, {0x2, 0x0, @empty}}) 03:34:35 executing program 4: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "7437b8", 0x14, 0x4, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 03:34:35 executing program 0: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) msgsnd(0x0, &(0x7f0000001440)={0x3}, 0x8, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) 03:34:35 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 03:34:35 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 03:34:35 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 03:34:35 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup3(r0, r1, 0x0) bind$unix(r2, &(0x7f0000001f40)=@abs={0x0, 0x0, 0x4e24}, 0x6e) 03:34:35 executing program 1: msgrcv(0x0, 0x0, 0x0, 0x3, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00)'], 0xf, 0x0) 03:34:35 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 03:34:35 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x1d, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b0200000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e32303330363131363700"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040000c00000000000000ddf4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000500400000000000000000000000000000003100000000000000", 0x40, 0x540}, {&(0x7f0000010300)="03000000040000000500000019000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010400)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000ddf4655fddf4655fddf4655f00"/2080, 0x820, 0xc00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f00000000000004002000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x1500}, {&(0x7f0000010e00)="20000000c8946f1dc8946f1d00000000ddf4655f00"/32, 0x20, 0x1580}, {&(0x7f0000010f00)="8081000000300404ddf4655fddf4655fddf4655f00000000000001002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000ddf4655f00"/160, 0xa0, 0x1a00}, {&(0x7f0000011000)="c0410000002c0000ddf4655fddf4655fddf4655f00000000000002002000000000000800000000000af301000400000000000000000000000b00000020000000", 0x40, 0x1e00}, {&(0x7f0000011100)="20000000000000000000000000000000ddf4655f000000000000000000000000000002ea00"/64, 0x40, 0x1e80}, {&(0x7f0000011200)="ed4100003c000000e0f4655fe0f4655fe0f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c65310000000000000000000000000000000000000000000000000000004d5f6b7100000000000000000000000000000000000000000000000020000000c8946f1dc8946f1dc8946f1de0f4655fc8946f1d0000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x1f00}, {&(0x7f0000011300)="ed8100001a040000e0f4655fe0f4655fe0f4655f00000000000001002000000000000800010000000af30100040000000000000000000000020000005000000000000000000000000000000000000000000000000000000000000000000000000000000048dad3ce00000000000000000000000000000000000000000000000020000000c8946f1dc8946f1dc8946f1de0f4655fc8946f1d0000000000000000", 0xa0, 0x2000}, {&(0x7f0000011400)="ffa1000026000000e0f4655fe0f4655fe0f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3230333036313136372f66696c65302f66696c653000000000000000000000000000000000000000000000c7982f7500000000000000000000000000000000000000000000000020000000c8946f1dc8946f1dc8946f1de0f4655fc8946f1d0000000000000000", 0xa0, 0x2100}, {&(0x7f0000011500)="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", 0x1a0, 0x2200}, {&(0x7f0000011700)="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", 0x100, 0x2400}, {&(0x7f0000011800)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x80, 0x4000}, {&(0x7f0000011900)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8030000", 0x20, 0x8000}, {&(0x7f0000011a00)="00000000000400"/32, 0x20, 0x8400}, {&(0x7f0000011b00)="00000000000400"/32, 0x20, 0x8800}, {&(0x7f0000011c00)="00000000000400"/32, 0x20, 0x8c00}, {&(0x7f0000011d00)="00000000000400"/32, 0x20, 0x9000}, {&(0x7f0000011e00)="00000000000400"/32, 0x20, 0x9400}, {&(0x7f0000011f00)="00000000000400"/32, 0x20, 0x9800}, {&(0x7f0000012000)="00000000000400"/32, 0x20, 0x9c00}, {&(0x7f0000012100)="00000000000400"/32, 0x20, 0xa000}, {&(0x7f0000012200)="00000000000400"/32, 0x20, 0xa400}, {&(0x7f0000012300)="00000000000400"/32, 0x20, 0xa800}, {&(0x7f0000012400)="504d4d00504d4dffe0f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033310075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x10000}, {&(0x7f0000012500)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x14000}], 0x0, &(0x7f0000012a00)) 03:34:35 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d9f4655fd9f4655f0100ffff53ef010001000000d9f4655f000000000000005a6edc3d00000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000d9f4655fd9f4655fd9f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[]) 03:34:35 executing program 4: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "7437b8", 0x14, 0x4, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 03:34:35 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{0x0}], 0xd000, &(0x7f0000000280)={[{'wlan0\x00'}, {'&\\'}, {'wlan0\x00'}, {'wlan0\x00'}]}) 03:34:35 executing program 6: ioprio_set$pid(0x0, 0x0, 0x2) 03:34:35 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/zoneinfo\x00', 0x0, 0x0) close(r0) 03:34:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000240)={&(0x7f0000000100), 0x4, &(0x7f0000000280)={&(0x7f0000000340)={0x64, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_CAPABILITY={0x6}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x4}, @NL80211_ATTR_MGMT_SUBTYPE={0x5}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6}, @NL80211_ATTR_STA_CAPABILITY={0x6}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_AIRTIME_WEIGHT, @NL80211_ATTR_STA_VLAN, @NL80211_ATTR_STA_PLINK_ACTION, @NL80211_ATTR_STA_LISTEN_INTERVAL]}, 0x64}}, 0x0) 03:34:36 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000000)) 03:34:36 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) process_mrelease(0xffffffffffffffff, 0x0) 03:34:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002240)=[{&(0x7f00000005c0)={0x14, 0x26, 0x111, 0x0, 0x0, "", [@generic="bf"]}, 0x14}, {&(0x7f0000000b40)={0x10}, 0x10}], 0x2}, 0x0) 03:34:36 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="280000002d0001"], 0x28}], 0x1}, 0x0) 03:34:36 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x0) shutdown(r0, 0x0) [ 1212.685268] __nla_validate_parse: 5 callbacks suppressed [ 1212.685289] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1212.714881] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=66393 comm=syz-executor.0 03:34:36 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) 03:34:36 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000000)) 03:34:36 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='cgroup2\x00', 0x0, 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0x0) 03:34:36 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x18, r1, 0x201, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x18}}, 0x0) 03:34:36 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000280)) 03:34:36 executing program 5: r0 = mq_open(&(0x7f0000000040)='fdinfo\x00', 0x0, 0x0, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/85, 0x55}], 0x1, 0x9000000, 0x0) 03:34:36 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) 03:34:36 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) 03:34:36 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@fixed}}}, 0x9) 03:34:36 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) 03:34:36 executing program 0: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x1, &(0x7f0000002780)=[{0x0, 0x0, 0x4e22}], 0x0, 0x0) 03:34:36 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000000)) 03:34:36 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) 03:34:36 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000012c0)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x48]}]}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x38}}, 0x0) 03:34:37 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000100)={0x1f, @none}, 0x8) listen(r0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) 03:34:37 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:00']) [ 1213.656701] loop0: detected capacity change from 0 to 78 03:34:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000640)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000ddf4655fddf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000008000000d2420100120300000000000000000000000000000000000073797a6b616c6c6572000000000040002f746d702f73797a2d696d61676567656e373431393133303237000000000000000000000000000000000000000000000000000000000000284a6db3eaf0b16e4e908df6f2d428d3", 0xd0, 0x400}, {&(0x7f0000010100)="000000000000000000000000e7e1fc40a6de4c28a2c3627f6ec42b4701004000", 0x20, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000", 0x37, 0x540}], 0x0, &(0x7f0000014100)) 03:34:37 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000000)) 03:34:37 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x4, 0x0, 0x0) 03:34:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r2 = dup2(r1, r0) write$binfmt_aout(r2, &(0x7f0000000080)={{}, "16d34093c36411e89aa4f98fa099"}, 0x2e) ppoll(&(0x7f0000000280)=[{r0}], 0x1, &(0x7f0000000300)={0x0, 0x989680}, 0x0, 0x0) 03:34:37 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 03:34:37 executing program 4: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r0, 0x0) read(r0, &(0x7f00000003c0)=""/205, 0xcd) 03:34:37 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') read$char_usb(r0, &(0x7f0000000080)=""/153, 0x99) 03:34:37 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) 03:34:37 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) 03:34:37 executing program 5: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) fallocate(r0, 0x0, 0x0, 0x7fff) truncate(&(0x7f00000001c0)='./file0\x00', 0x3) 03:34:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000001980)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x1e, 0x0, "52dea74fddd0a221d1d69c29217d9e8b04ba0441712b57a2521ea63acd8d49aa6183b6797f1d083476f54bc21a901f4aea60f385b2c32a9c48557719ef6485c837a72484f5880208170898d1e5313464"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) 03:34:37 executing program 7: setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) 03:34:37 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) listxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000440)=""/4096, 0x1000) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) dup(r1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="2335143fbb6ce45a67"], 0xd) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x68e146a1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r2, r4, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:34:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r2 = dup2(r1, r0) write$binfmt_aout(r2, &(0x7f0000000080)={{}, "16d34093c36411e89aa4f98fa099"}, 0x2e) ppoll(&(0x7f0000000280)=[{r0}], 0x1, &(0x7f0000000300)={0x0, 0x989680}, 0x0, 0x0) 03:34:37 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f0000001100)) 03:34:37 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x18d101, 0x0) r2 = accept$packet(r0, 0x0, &(0x7f0000000040)) io_setup(0x572, &(0x7f0000000140)=0x0) clock_gettime(0x0, &(0x7f0000001500)={0x0, 0x0}) futimesat(r0, &(0x7f00000014c0)='./file0\x00', &(0x7f0000001540)={{r4, r5/1000+60000}, {0x0, 0xea60}}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x8, 0x8, 0x0, r6, 0x0}]) sendfile(r2, r6, &(0x7f0000000140)=0xfffffffffffeffff, 0x80) r7 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r7, &(0x7f00000000c0)=[{&(0x7f0000000100)='!', 0x1}], 0x1, 0x7ffff, 0x0, 0x4) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r8, 0x0, 0xffffffff000) 03:34:37 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) 03:34:38 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x40086602, 0x0) 03:34:38 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x18d101, 0x0) r2 = accept$packet(r0, 0x0, &(0x7f0000000040)) io_setup(0x572, &(0x7f0000000140)=0x0) clock_gettime(0x0, &(0x7f0000001500)={0x0, 0x0}) futimesat(r0, &(0x7f00000014c0)='./file0\x00', &(0x7f0000001540)={{r4, r5/1000+60000}, {0x0, 0xea60}}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x8, 0x8, 0x0, r6, 0x0}]) sendfile(r2, r6, &(0x7f0000000140)=0xfffffffffffeffff, 0x80) r7 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r7, &(0x7f00000000c0)=[{&(0x7f0000000100)='!', 0x1}], 0x1, 0x7ffff, 0x0, 0x4) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r8, 0x0, 0xffffffff000) 03:34:38 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r2 = dup2(r1, r0) write$binfmt_aout(r2, &(0x7f0000000080)={{}, "16d34093c36411e89aa4f98fa099"}, 0x2e) ppoll(&(0x7f0000000280)=[{r0}], 0x1, &(0x7f0000000300)={0x0, 0x989680}, 0x0, 0x0) 03:34:38 executing program 2: fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 03:34:38 executing program 4: r0 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000800)='\x00') 03:34:38 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) listxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000440)=""/4096, 0x1000) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) dup(r1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="2335143fbb6ce45a67"], 0xd) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x68e146a1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r2, r4, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:34:38 executing program 3: r0 = epoll_create(0x2b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000), 0x4) 03:34:38 executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup(r0) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000000)=""/25, 0x19}, {&(0x7f0000000040)=""/122, 0x7a}, {&(0x7f00000000c0)=""/199, 0xc7}, {&(0x7f00000001c0)=""/163, 0xfffffffffffffeea}], 0x4) 03:34:38 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000903000/0x3000)=nil, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) 03:34:38 executing program 3: keyctl$link(0x18, 0x0, 0xfffffffffffffffd) 03:34:38 executing program 1: r0 = syz_io_uring_setup(0x3a2d, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000080)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000300), 0x500) 03:34:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="140000006a00ff"], 0x14}], 0x1}, 0x0) 03:34:38 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000300)) 03:34:38 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r2 = dup2(r1, r0) write$binfmt_aout(r2, &(0x7f0000000080)={{}, "16d34093c36411e89aa4f98fa099"}, 0x2e) ppoll(&(0x7f0000000280)=[{r0}], 0x1, &(0x7f0000000300)={0x0, 0x989680}, 0x0, 0x0) 03:34:38 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) 03:34:38 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000903000/0x3000)=nil, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) 03:34:38 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 03:34:39 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = getpid() fcntl$setown(r0, 0x8, r1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) 03:34:39 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) 03:34:39 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)={0x0, 0x0, 0x8}) 03:34:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f00000000c0)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='pids.events\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) socketpair(0x28, 0x3, 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000200), 0x4) syz_open_dev$mouse(0x0, 0x7, 0x0) read$ptp(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f00000003c0)) dup2(r2, r0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000004c0)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x3, 0x0, "57884cebb5d440167593b9ba2264fc47a3b2ad418d94b4fa17b8dcef81c0b811897898b67433296d5d6e8ca5f18a09d57dec53a100a13b604491c75056ee33dbee44d763348e55686eb1eb4b9cf7dd35"}, 0xd8) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) pipe2(&(0x7f0000000640), 0x80000) 03:34:39 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000903000/0x3000)=nil, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) 03:34:39 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x18d101, 0x0) r2 = accept$packet(r0, 0x0, &(0x7f0000000040)) io_setup(0x572, &(0x7f0000000140)=0x0) clock_gettime(0x0, &(0x7f0000001500)={0x0, 0x0}) futimesat(r0, &(0x7f00000014c0)='./file0\x00', &(0x7f0000001540)={{r4, r5/1000+60000}, {0x0, 0xea60}}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x8, 0x8, 0x0, r6, 0x0}]) sendfile(r2, r6, &(0x7f0000000140)=0xfffffffffffeffff, 0x80) r7 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r7, &(0x7f00000000c0)=[{&(0x7f0000000100)='!', 0x1}], 0x1, 0x7ffff, 0x0, 0x4) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r8, 0x0, 0xffffffff000) 03:34:39 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x1, &(0x7f00000013c0)=[{0x0}], 0x1) 03:34:39 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) listxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000440)=""/4096, 0x1000) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) dup(r1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="2335143fbb6ce45a67"], 0xd) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x68e146a1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r2, r4, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:34:39 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000200)=""/94, 0x5e}], 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5423, &(0x7f0000000000)) 03:34:39 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = getpid() fcntl$setown(r0, 0x8, r1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) 03:34:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f00000000c0)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='pids.events\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) socketpair(0x28, 0x3, 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000200), 0x4) syz_open_dev$mouse(0x0, 0x7, 0x0) read$ptp(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f00000003c0)) dup2(r2, r0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000004c0)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x3, 0x0, "57884cebb5d440167593b9ba2264fc47a3b2ad418d94b4fa17b8dcef81c0b811897898b67433296d5d6e8ca5f18a09d57dec53a100a13b604491c75056ee33dbee44d763348e55686eb1eb4b9cf7dd35"}, 0xd8) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) pipe2(&(0x7f0000000640), 0x80000) 03:34:39 executing program 5: openat$cdrom(0xffffffffffffff9c, &(0x7f0000000600), 0x70, 0x0) 03:34:39 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000903000/0x3000)=nil, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) 03:34:39 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) listxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000440)=""/4096, 0x1000) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) dup(r1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="2335143fbb6ce45a67"], 0xd) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x68e146a1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r2, r4, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:34:39 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000240)=0x53580000, 0x4) 03:34:39 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCDELRT(r0, 0x890c, 0x0) 03:34:39 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000200)=""/94, 0x5e}], 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5423, &(0x7f0000000000)) 03:34:40 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = getpid() fcntl$setown(r0, 0x8, r1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) 03:34:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f00000000c0)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='pids.events\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) socketpair(0x28, 0x3, 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000200), 0x4) syz_open_dev$mouse(0x0, 0x7, 0x0) read$ptp(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f00000003c0)) dup2(r2, r0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000004c0)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x3, 0x0, "57884cebb5d440167593b9ba2264fc47a3b2ad418d94b4fa17b8dcef81c0b811897898b67433296d5d6e8ca5f18a09d57dec53a100a13b604491c75056ee33dbee44d763348e55686eb1eb4b9cf7dd35"}, 0xd8) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) pipe2(&(0x7f0000000640), 0x80000) 03:34:40 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) statx(r0, 0x0, 0x1000, 0x6000, &(0x7f0000000240)) 03:34:40 executing program 4: r0 = memfd_create(&(0x7f0000000080)=':^/\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x40000000) 03:34:40 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x18d101, 0x0) r2 = accept$packet(r0, 0x0, &(0x7f0000000040)) io_setup(0x572, &(0x7f0000000140)=0x0) clock_gettime(0x0, &(0x7f0000001500)={0x0, 0x0}) futimesat(r0, &(0x7f00000014c0)='./file0\x00', &(0x7f0000001540)={{r4, r5/1000+60000}, {0x0, 0xea60}}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x8, 0x8, 0x0, r6, 0x0}]) sendfile(r2, r6, &(0x7f0000000140)=0xfffffffffffeffff, 0x80) r7 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r7, &(0x7f00000000c0)=[{&(0x7f0000000100)='!', 0x1}], 0x1, 0x7ffff, 0x0, 0x4) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r8, 0x0, 0xffffffff000) 03:34:40 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000200)=""/94, 0x5e}], 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5423, &(0x7f0000000000)) 03:34:40 executing program 6: modify_ldt$write2(0x11, &(0x7f0000000000)={0xffffffff}, 0x10) 03:34:40 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000001540)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_retopts={{0x3c, 0x0, 0x7, {[@rr={0x7, 0x27, 0x32, [@remote, @empty, @multicast1, @remote, @loopback, @loopback, @broadcast, @rand_addr, @empty]}, @timestamp={0x44, 0x4}]}}}], 0x40}, 0x0) 03:34:40 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 03:34:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f00000000c0)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='pids.events\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) socketpair(0x28, 0x3, 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000200), 0x4) syz_open_dev$mouse(0x0, 0x7, 0x0) read$ptp(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f00000003c0)) dup2(r2, r0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000004c0)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x3, 0x0, "57884cebb5d440167593b9ba2264fc47a3b2ad418d94b4fa17b8dcef81c0b811897898b67433296d5d6e8ca5f18a09d57dec53a100a13b604491c75056ee33dbee44d763348e55686eb1eb4b9cf7dd35"}, 0xd8) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) pipe2(&(0x7f0000000640), 0x80000) 03:34:40 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x3, 0x0, &(0x7f00000018c0)) 03:34:40 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) read(r0, 0x0, 0x0) 03:34:40 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mq_unlink(0x0) 03:34:40 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = getpid() fcntl$setown(r0, 0x8, r1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) 03:34:40 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000200)=""/94, 0x5e}], 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5423, &(0x7f0000000000)) 03:34:40 executing program 6: recvmsg(0xffffffffffffffff, 0x0, 0x0) 03:34:40 executing program 4: set_mempolicy(0xc000, 0x0, 0x0) 03:34:40 executing program 6: munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) mbind(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000001c0), 0x1ff, 0x0) 03:34:41 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 03:34:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) 03:34:41 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000400)) timer_settime(0x0, 0x0, &(0x7f0000000000), 0x0) clock_gettime(0x0, &(0x7f0000002180)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000002240)={{}, {0x0, r0+10000000}}, 0x0) timer_delete(0x0) 03:34:41 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) signalfd(0xffffffffffffffff, &(0x7f00000014c0), 0x8) 03:34:41 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mq_unlink(0x0) 03:34:41 executing program 3: r0 = memfd_create(&(0x7f0000001b80)='(\xc8\xf5\x82j\xca', 0x3) fcntl$addseals(r0, 0x409, 0x9) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0'}, 0xb) 03:34:41 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000880), 0x1a9140, 0x0) 03:34:41 executing program 7: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00009c000052"]) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000002a00f9ffff7f0000000000000c00000001"], 0x34}], 0x1}, 0x0) 03:34:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_COOKIE(r0, 0x1, 0x39, 0x0, &(0x7f00000020c0)) 03:34:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_DFS_REGION={0x5}]}, 0x2c}}, 0x0) 03:34:41 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 03:34:41 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, 0x0) 03:34:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x5) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f00000000c0)={0xfffffffb, 0x0, 0x0, 0x0, 0x0, "ef84d3de7469887f5f8dcc322da0fe2f113323"}) ioctl$TCSETSW(r0, 0x541a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "d724b9d80cdcbde661c6a666d13d0ea35cc8c0"}) 03:34:41 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mq_unlink(0x0) 03:34:41 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x17, 0x0, 0x0) 03:34:41 executing program 0: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) r2 = eventfd2(0x0, 0x0) dup3(r2, r0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 03:34:41 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mq_unlink(0x0) 03:34:41 executing program 6: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20102) writev(r0, &(0x7f00000013c0)=[{&(0x7f0000001080)="fb", 0x1}], 0x1) write(r0, 0x0, 0x0) 03:34:41 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 03:34:41 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents(r0, &(0x7f0000000040)=""/211, 0x18) 03:34:41 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4bfb, &(0x7f0000000080)) 03:34:41 executing program 3: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_script(r0, 0x0, 0x0) 03:34:41 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0) write$vga_arbiter(r0, &(0x7f0000000000)=@other={'decodes', ' ', 'none'}, 0x9) [ 1218.494304] kernel write not supported for file [eventfd] (pid: 11078 comm: kworker/1:1) 03:34:42 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 03:34:42 executing program 2: ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000001b00)) openat$cdrom(0xffffffffffffff9c, &(0x7f0000001b80), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) 03:34:42 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4bfb, &(0x7f0000000080)) 03:34:42 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x40e5, &(0x7f0000000100), &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) r2 = fcntl$dupfd(r1, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000dc0)=[{0x0}, {&(0x7f0000000880)=""/118, 0x76}, {&(0x7f00000014c0)=""/4096, 0x1000}, {0x0}], 0x4) 03:34:42 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = epoll_create(0x6) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x4}) epoll_pwait2(r0, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) 03:34:42 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup3(r0, r1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x5, &(0x7f0000000040)={'filter\x00', 0x2, [{}, {}]}, 0x48) 03:34:42 executing program 6: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20102) writev(r0, &(0x7f00000013c0)=[{&(0x7f0000001080)="fb", 0x1}], 0x1) write(r0, 0x0, 0x0) 03:34:42 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000001cc0)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev}, 0x42, 0x0}}], 0x1, 0x24044994) 03:34:42 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20102) writev(r0, &(0x7f00000013c0)=[{&(0x7f0000001080)="fb", 0x1}], 0x1) write(r0, 0x0, 0x0) 03:34:42 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4bfb, &(0x7f0000000080)) 03:34:42 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup3(r0, r1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x5, &(0x7f0000000040)={'filter\x00', 0x2, [{}, {}]}, 0x48) 03:34:42 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9}) 03:34:42 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, 0xfffffffffffffffe) 03:34:42 executing program 6: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20102) writev(r0, &(0x7f00000013c0)=[{&(0x7f0000001080)="fb", 0x1}], 0x1) write(r0, 0x0, 0x0) 03:34:42 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file1', [{}]}, 0xc) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000038c0)=[@cred={{0x1c}}], 0x20}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000300), 0x4) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xcf2ff) 03:34:42 executing program 6: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20102) writev(r0, &(0x7f00000013c0)=[{&(0x7f0000001080)="fb", 0x1}], 0x1) write(r0, 0x0, 0x0) 03:34:42 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20102) writev(r0, &(0x7f00000013c0)=[{&(0x7f0000001080)="fb", 0x1}], 0x1) write(r0, 0x0, 0x0) 03:34:42 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4bfb, &(0x7f0000000080)) 03:34:42 executing program 4: unshare(0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x80) unshare(0x6020000) 03:34:42 executing program 2: r0 = socket$inet(0x2, 0x80003, 0xff) sendto$inet(r0, &(0x7f00000000c0)="d5281261cd2d29f21a5fd826351b1444f25f3a5d", 0x14, 0x0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 03:34:42 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, 0xfffffffffffffffe) 03:34:42 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup3(r0, r1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x5, &(0x7f0000000040)={'filter\x00', 0x2, [{}, {}]}, 0x48) 03:34:42 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file1', [{}]}, 0xc) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000038c0)=[@cred={{0x1c}}], 0x20}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000300), 0x4) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xcf2ff) 03:34:42 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20102) writev(r0, &(0x7f00000013c0)=[{&(0x7f0000001080)="fb", 0x1}], 0x1) write(r0, 0x0, 0x0) 03:34:42 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) 03:34:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x1c, 0x13, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x1c}], 0x1}, 0x0) 03:34:42 executing program 7: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000500)=""/164) 03:34:42 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, 0xfffffffffffffffe) 03:34:42 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup3(r0, r1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x5, &(0x7f0000000040)={'filter\x00', 0x2, [{}, {}]}, 0x48) 03:34:42 executing program 6: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) 03:34:42 executing program 7: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_tcp(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)={'trans=tcp,', {}, 0x2c, {[{@privport}]}}) 03:34:42 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) 03:34:42 executing program 6: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) 03:34:42 executing program 1: io_setup(0x80572, &(0x7f0000000040)) 03:34:42 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@polexpire={0xc0, 0x1b, 0x3, 0x0, 0x0, {{{@in=@private, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x10000000}}}, 0xc0}}, 0x0) 03:34:42 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, 0xfffffffffffffffe) [ 1219.296892] 9pnet_fd: p9_fd_create_tcp (67766): problem connecting socket to 127.0.0.1 03:34:42 executing program 6: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) [ 1219.315930] 9pnet_fd: p9_fd_create_tcp (67766): problem connecting socket to 127.0.0.1 03:34:42 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001880)='/proc/locks\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001880)='/proc/locks\x00', 0x0, 0x0) read$char_usb(r1, &(0x7f0000000080)=""/168, 0xa8) read$char_usb(r0, &(0x7f0000000080)=""/168, 0xa8) 03:34:42 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) 03:34:42 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) fsetxattr$security_selinux(r0, &(0x7f00000001c0), 0x0, 0x0, 0x0) 03:34:42 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000bc0)) 03:34:42 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file1', [{}]}, 0xc) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000038c0)=[@cred={{0x1c}}], 0x20}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000300), 0x4) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xcf2ff) 03:34:42 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = eventfd2(0x7, 0x0) io_setup(0x2, &(0x7f0000000080)=0x0) io_submit(r1, 0x3, &(0x7f00000007c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f00000001c0)="6980eece356f4c90d2", 0x9, 0x0, 0x0, 0x1, r0}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)="1333c23693143e3c3006f78461a2e79e", 0x10}]) 03:34:43 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup(r0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000000), 0x4) 03:34:43 executing program 6: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) 03:34:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000005c0)={0x13, 0x32, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x18}], 0x1}, 0x0) 03:34:43 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) 03:34:43 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, 0xe8) 03:34:43 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0xffff, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3c}, 0x0, @in6=@ipv4}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:34:43 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = eventfd2(0x7, 0x0) io_setup(0x2, &(0x7f0000000080)=0x0) io_submit(r1, 0x3, &(0x7f00000007c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f00000001c0)="6980eece356f4c90d2", 0x9, 0x0, 0x0, 0x1, r0}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)="1333c23693143e3c3006f78461a2e79e", 0x10}]) 03:34:43 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file1', [{}]}, 0xc) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000038c0)=[@cred={{0x1c}}], 0x20}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000300), 0x4) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xcf2ff) 03:34:43 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x80089203, &(0x7f0000000080)) 03:34:43 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) 03:34:43 executing program 6: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000140)=0xffefffff, 0x4) 03:34:43 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = eventfd2(0x7, 0x0) io_setup(0x2, &(0x7f0000000080)=0x0) io_submit(r1, 0x3, &(0x7f00000007c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f00000001c0)="6980eece356f4c90d2", 0x9, 0x0, 0x0, 0x1, r0}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)="1333c23693143e3c3006f78461a2e79e", 0x10}]) 03:34:43 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r0, 0x80045432, &(0x7f00000005c0)) 03:34:43 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) ioctl$SNAPSHOT_S2RAM(r0, 0x541b) 03:34:43 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) sched_getscheduler(0x0) 03:34:43 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@empty}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@empty}, 0x14) close(r2) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@empty}, 0x14) 03:34:43 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x80089203, &(0x7f0000000080)) 03:34:43 executing program 6: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000500)="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", 0x182}, {&(0x7f0000001500)="eb", 0x1}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4800) 03:34:43 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = eventfd2(0x7, 0x0) io_setup(0x2, &(0x7f0000000080)=0x0) io_submit(r1, 0x3, &(0x7f00000007c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f00000001c0)="6980eece356f4c90d2", 0x9, 0x0, 0x0, 0x1, r0}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)="1333c23693143e3c3006f78461a2e79e", 0x10}]) [ 1219.811448] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 03:34:43 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000019140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000190c0)={0x18, 0x2, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x4, 0x1b}]}, 0x18}}, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x1120) 03:34:43 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept(r0, 0x0, 0x0) 03:34:43 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000380)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @loopback}, 0x1c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)='dummy0\x00'}) 03:34:43 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x80089203, &(0x7f0000000080)) 03:34:43 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) accept(r0, 0x0, 0x0) 03:34:43 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @loopback}}) 03:34:43 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x80089203, &(0x7f0000000080)) 03:34:43 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@empty}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@empty}, 0x14) close(r2) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@empty}, 0x14) 03:34:43 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/41, 0x29, 0x7) 03:34:43 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x3) 03:34:43 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 03:34:43 executing program 6: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) getrusage(0x0, &(0x7f0000000180)) 03:34:43 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0xce, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff5e52989c7e3208"], 0x0) 03:34:43 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@empty}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@empty}, 0x14) close(r2) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@empty}, 0x14) 03:34:43 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@empty}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@empty}, 0x14) close(r2) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@empty}, 0x14) 03:34:43 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) fallocate(r0, 0x0, 0x0, 0x105) 03:34:43 executing program 6: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2261, &(0x7f0000003a00), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:34:43 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=""/121) 03:34:43 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@empty}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@empty}, 0x14) close(r2) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@empty}, 0x14) 03:34:43 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)) fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4) 03:34:43 executing program 1: mq_open(&(0x7f0000000000)='-$\xb4$$\x00', 0x40, 0x0, &(0x7f0000000040)={0x83b, 0x100, 0xffffffff, 0x2}) 03:34:43 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6, 0x3, {0xaa}}]}, 0x1c}}, 0x0) [ 1220.234853] audit: type=1326 audit(2000000083.725:147): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=68402 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f33e32cfb19 code=0x0 03:34:43 executing program 3: r0 = getpid() r1 = pidfd_open(r0, 0x0) waitid$P_PIDFD(0x3, r1, 0x0, 0x4, 0x0) 03:34:43 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@empty}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@empty}, 0x14) close(r2) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@empty}, 0x14) 03:34:43 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@empty}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@empty}, 0x14) close(r2) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@empty}, 0x14) 03:34:43 executing program 1: syz_mount_image$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) lgetxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='security.selinux\x00', 0x0, 0x2) 03:34:43 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) recvmsg(r0, &(0x7f0000002600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002580)=""/68, 0x44}, 0x0) 03:34:43 executing program 2: set_mempolicy(0x1, 0x0, 0x0) clone3(&(0x7f0000005880)={0x64060100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:34:44 executing program 7: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:34:44 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) ioctl$SG_IO(r0, 0x401070cd, 0x0) 03:34:44 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x5db) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x25, 0x0, 0x0, 0x0, {r3}}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) 03:34:44 executing program 2: set_mempolicy(0x1, 0x0, 0x0) clone3(&(0x7f0000005880)={0x64060100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:34:44 executing program 6: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000640), 0x8, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000000), &(0x7f0000000180)=@v3, 0x18, 0x0) 03:34:44 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x1000, 0x0, 0x0, "6ebb7ccdb338a7f9"}) 03:34:44 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000470000004f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000010f00)) getdents(r0, &(0x7f0000000040)=""/177, 0xb1) getdents64(r0, 0x0, 0x0) 03:34:44 executing program 5: personality(0x0) 03:34:44 executing program 6: flock(0xffffffffffffffff, 0x43cd009f2137ee77) 03:34:44 executing program 5: creat(0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 03:34:44 executing program 7: creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x83158c, 0x0) unlink(&(0x7f0000000000)='./file0\x00') 03:34:44 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0f000000000000000008"]}) [ 1221.499215] syz-executor.6(68555): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. 03:34:45 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x105001, 0x0) 03:34:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$SO_BINDTODEVICE(r1, 0x29, 0x1e, &(0x7f0000000000)='lo\x00', 0x10) 03:34:45 executing program 5: symlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0\x00') renameat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 03:34:45 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x14, 0x18, 0xffffffffffffffff, 0x0, 0x0, "", [@generic="02"]}, 0x14}], 0x1}, 0x0) 03:34:45 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100), 0x6) write$bt_hci(r0, &(0x7f0000000140)={0x5, @remote_name_req_cancel={{0x41a, 0x6}}}, 0x178) 03:34:45 executing program 2: set_mempolicy(0x1, 0x0, 0x0) clone3(&(0x7f0000005880)={0x64060100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:34:45 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000000)={0x17, 0x0, 0x0}) 03:34:45 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x5db) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x25, 0x0, 0x0, 0x0, {r3}}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) 03:34:45 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x5db) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x25, 0x0, 0x0, 0x0, {r3}}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) 03:34:45 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x105001, 0x0) 03:34:45 executing program 5: symlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0\x00') renameat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 03:34:45 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@mpol={'mpol', 0x3d, {'prefer'}}}]}) 03:34:45 executing program 6: syz_mount_image$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='system.posix_acl_access\x00', &(0x7f00000049c0)={{}, {}, [], {}, [{}], {0x10, 0x6}}, 0x2c, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r0, 0x0) setxattr$security_capability(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000b00), 0x0, 0x0, 0x0) [ 1222.262632] tmpfs: Bad value for 'mpol' [ 1222.272471] tmpfs: Bad value for 'mpol' 03:34:45 executing program 1: r0 = getpid() r1 = pidfd_open(r0, 0x0) process_madvise(r1, 0x0, 0x0, 0x4, 0x0) 03:34:45 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x105001, 0x0) 03:34:45 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, 0x0) 03:34:45 executing program 6: syz_mount_image$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='system.posix_acl_access\x00', &(0x7f00000049c0)={{}, {}, [], {}, [{}], {0x10, 0x6}}, 0x2c, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r0, 0x0) setxattr$security_capability(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000b00), 0x0, 0x0, 0x0) 03:34:45 executing program 2: set_mempolicy(0x1, 0x0, 0x0) clone3(&(0x7f0000005880)={0x64060100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:34:45 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x5db) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x25, 0x0, 0x0, 0x0, {r3}}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) 03:34:45 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x5db) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x25, 0x0, 0x0, 0x0, {r3}}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) 03:34:45 executing program 5: symlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0\x00') renameat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 03:34:46 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = fork() wait4(r2, 0x0, 0x2, &(0x7f0000001340)) r3 = fork() wait4(r3, 0x0, 0x1, &(0x7f00000006c0)) r4 = fork() wait4(r4, 0x0, 0x1, &(0x7f00000006c0)) r5 = getpid() r6 = fork() r7 = fork() wait4(r7, 0x0, 0x1, &(0x7f00000006c0)) wait4(r7, 0x0, 0x40000000, &(0x7f00000006c0)) process_vm_readv(r6, &(0x7f00000019c0)=[{&(0x7f0000001400)=""/42, 0x2a}, {&(0x7f0000001440)=""/97, 0x61}, {&(0x7f00000014c0)=""/138, 0x8a}, {&(0x7f0000001580)=""/105, 0x69}, {&(0x7f0000001600)=""/70, 0x46}, {&(0x7f0000001680)=""/255, 0xff}, {&(0x7f0000001780)=""/103, 0x67}, {&(0x7f0000001800)=""/165, 0xa5}, {&(0x7f00000018c0)=""/196, 0xc4}], 0x9, &(0x7f0000002d00)=[{&(0x7f0000001a80)=""/104, 0x68}, {&(0x7f0000001b00)=""/13, 0xd}, {&(0x7f0000001b40)=""/123, 0x7b}, {&(0x7f0000001bc0)=""/141, 0x8d}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/101, 0x65}], 0x6, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000100001d0018000100", @ANYRES32=r0, @ANYBLOB="0000d1000000000000c8658902000000"]) clone3(&(0x7f00000012c0)={0x2000880, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {}, &(0x7f00000001c0)=""/4096, 0x1000, &(0x7f00000011c0)=""/238, &(0x7f00000000c0)=[r2, r3, 0x0, r4, 0x0, 0xffffffffffffffff, 0x0, r5, r6], 0x9, {r8}}, 0x58) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$AUTOFS_IOC_READY(r9, 0x9360, 0x5c5c) 03:34:46 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x105001, 0x0) 03:34:46 executing program 6: syz_mount_image$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='system.posix_acl_access\x00', &(0x7f00000049c0)={{}, {}, [], {}, [{}], {0x10, 0x6}}, 0x2c, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r0, 0x0) setxattr$security_capability(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000b00), 0x0, 0x0, 0x0) 03:34:46 executing program 5: symlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0\x00') renameat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 03:34:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000040), 0x4) 03:34:46 executing program 6: syz_mount_image$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='system.posix_acl_access\x00', &(0x7f00000049c0)={{}, {}, [], {}, [{}], {0x10, 0x6}}, 0x2c, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r0, 0x0) setxattr$security_capability(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000b00), 0x0, 0x0, 0x0) 03:34:46 executing program 1: syz_emit_ethernet(0x46, &(0x7f0000000040)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x10, 0x3a, 0x0, @empty, @mcast2, {[], @ni={0x8c}}}}}}, 0x0) 03:34:46 executing program 3: openat$binderfs(0xffffffffffffff9c, &(0x7f0000002f80)='./binderfs/custom0\x00', 0x2, 0x0) 03:34:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 03:34:46 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x5db) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x25, 0x0, 0x0, 0x0, {r3}}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) 03:34:46 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x5db) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x25, 0x0, 0x0, 0x0, {r3}}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) 03:34:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045436, 0x0) 03:34:46 executing program 1: memfd_create(0x0, 0x0) 03:34:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 03:34:46 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x9, 0x0, &(0x7f00000023c0)) 03:34:46 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00') read$rfkill(r0, &(0x7f0000000240), 0x80000) 03:34:46 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETMODE(r0, 0x4b4a, 0x0) 03:34:46 executing program 4: r0 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = dup(r0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000040)='mand\x00', 0x0, 0x0) 03:34:46 executing program 6: setregid(0xee01, 0x0) setresgid(0x0, 0x0, 0xee01) 03:34:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 03:34:46 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x8004, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 03:34:46 executing program 3: r0 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0x3, r0, 0x0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000200)) 03:34:46 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETMODE(r0, 0x4b4a, 0x0) 03:34:46 executing program 6: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0xd4000a8b) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 03:34:46 executing program 1: io_uring_setup(0x0, 0x0) 03:34:46 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETMODE(r0, 0x4b4a, 0x0) 03:34:46 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x3b, 0x0, &(0x7f0000000140)=0x47) 03:34:46 executing program 4: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xc0085508, 0x0) 03:34:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 03:34:46 executing program 3: r0 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0x3, r0, 0x0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000200)) 03:34:46 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4}, 0xe) 03:34:47 executing program 1: syz_mount_image$nfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="04"]) 03:34:47 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) lseek(r0, 0x0, 0x3) 03:34:47 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETMODE(r0, 0x4b4a, 0x0) 03:34:47 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x6}, 0x4) syz_emit_ethernet(0x11, &(0x7f00000000c0)={@remote, @random="5e52989c7e32", @void, {@x25}}, 0x0) 03:34:47 executing program 7: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) fcntl$setpipe(r0, 0x407, 0x0) write$P9_RSTAT(r1, &(0x7f0000000080)=ANY=[], 0xffd3) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000040)=""/21, 0x15}], 0x1) 03:34:47 executing program 3: r0 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0x3, r0, 0x0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000200)) 03:34:47 executing program 5: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'wlan0\x00'}) 03:34:47 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwrite64(r0, 0x0, 0x0, 0x0) 03:34:47 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) (fail_nth: 1) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:34:47 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) (fail_nth: 1) 03:34:47 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x10, 0x0, 0x0) 03:34:47 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r0, &(0x7f0000004b40)=[{{&(0x7f0000000200)=@nfc={0x27, 0x1}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="e557ce3bd6d952e732a1369d550d", 0xe}], 0x1, &(0x7f0000000280)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}}], 0x1, 0x0) [ 1223.721206] FAULT_INJECTION: forcing a failure. [ 1223.721206] name failslab, interval 1, probability 0, space 0, times 1 [ 1223.722192] CPU: 0 UID: 0 PID: 69024 Comm: syz-executor.7 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) [ 1223.722211] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1223.722219] Call Trace: [ 1223.722223] [ 1223.722229] dump_stack_lvl+0xfa/0x120 [ 1223.722252] should_fail_ex+0x4d7/0x5e0 [ 1223.722270] should_failslab+0xc2/0x120 [ 1223.722284] kmem_cache_alloc_lru_noprof+0x73/0x460 [ 1223.722303] ? sock_alloc_inode+0x27/0x1d0 [ 1223.722325] sock_alloc_inode+0x27/0x1d0 [ 1223.722340] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1223.722355] alloc_inode+0x67/0x250 [ 1223.722370] sock_alloc+0x40/0x270 [ 1223.722386] __sock_create+0xc1/0x810 [ 1223.722408] __sys_socket+0x145/0x260 [ 1223.722427] ? __pfx___sys_socket+0x10/0x10 [ 1223.722443] ? lock_release+0xc8/0x290 [ 1223.722459] ? __might_fault+0xe0/0x190 [ 1223.722477] __x64_sys_socket+0x73/0xb0 [ 1223.722495] do_syscall_64+0xbf/0x360 [ 1223.722515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1223.722528] RIP: 0033:0x7f010bb84197 [ 1223.722538] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1223.722549] RSP: 002b:00007f01090f7098 EFLAGS: 00000293 ORIG_RAX: 0000000000000029 [ 1223.722566] RAX: ffffffffffffffda RBX: 00007f010bc95f60 RCX: 00007f010bb84197 [ 1223.722575] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1223.722582] RBP: 00007f01090f81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1223.722589] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000020000040 [ 1223.722596] R13: 0000000000000000 R14: 0000000000000006 R15: 0000000020000080 [ 1223.722615] [ 1223.737077] socket: no more sockets [ 1223.738093] FAULT_INJECTION: forcing a failure. [ 1223.738093] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1223.739104] CPU: 1 UID: 0 PID: 69027 Comm: syz-executor.0 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) [ 1223.739123] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1223.739131] Call Trace: [ 1223.739136] [ 1223.739141] dump_stack_lvl+0xfa/0x120 [ 1223.739168] should_fail_ex+0x4d7/0x5e0 [ 1223.739189] _copy_from_user+0x30/0xd0 [ 1223.739209] rfkill_fop_write+0x124/0x540 [ 1223.739239] ? __pfx_rfkill_fop_write+0x10/0x10 [ 1223.739256] ? security_file_permission+0x22/0x90 [ 1223.739277] vfs_write+0x2b7/0x10c0 [ 1223.739297] ? __pfx_rfkill_fop_write+0x10/0x10 [ 1223.739314] ? lock_acquire+0x15e/0x2f0 [ 1223.739329] ? __fget_files+0x34/0x3b0 [ 1223.739348] ? __pfx_vfs_write+0x10/0x10 [ 1223.739366] ? __fget_files+0x203/0x3b0 [ 1223.739382] ? lock_release+0xc8/0x290 [ 1223.739399] ? __fget_files+0x20d/0x3b0 [ 1223.739424] ksys_write+0x1ef/0x240 [ 1223.739441] ? __pfx_ksys_write+0x10/0x10 [ 1223.739458] ? __might_fault+0xe0/0x190 [ 1223.739474] ? __might_fault+0x151/0x190 [ 1223.739491] do_syscall_64+0xbf/0x360 [ 1223.739512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1223.739525] RIP: 0033:0x7f02b2719b19 [ 1223.739535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1223.739546] RSP: 002b:00007f02afc8f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1223.739562] RAX: ffffffffffffffda RBX: 00007f02b282cf60 RCX: 00007f02b2719b19 [ 1223.739570] RDX: 0000000000000008 RSI: 0000000020000080 RDI: 0000000000000003 [ 1223.739578] RBP: 00007f02afc8f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1223.739585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1223.739592] R13: 00007fff3fbe73bf R14: 00007f02afc8f300 R15: 0000000000022000 [ 1223.739612] [ 1223.780511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:34:47 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) (fail_nth: 2) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:34:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="140000005800ff"], 0x14}], 0x1}, 0x0) 03:34:47 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) (fail_nth: 2) 03:34:47 executing program 1: syz_emit_ethernet(0x52, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "7437b8", 0x8, 0x2b, 0x0, @private2, @local, {[@routing={0x88}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 03:34:47 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x10, 0x0, 0x0) 03:34:47 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001880)='/proc/diskstats\x00', 0x0, 0x0) fcntl$lock(r0, 0x25, 0x0) 03:34:47 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x28, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934f5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000005900000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0300000004000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x1000}, {&(0x7f0000010500)="ff030000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000e2f4655fe2f4655fe2f4655f00"/8224, 0x2020, 0x2000}, {&(0x7f0000012600)="ed41000000100000e2f4655fe2f4655fe2f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x4100}, {&(0x7f0000012700)="20000000b4253260b425326000000000e2f4655f00"/32, 0x20, 0x4180}, {&(0x7f0000012800)="8081000000180000e2f4655fe2f4655fe2f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030000000", 0x40, 0x4200}, {&(0x7f0000012900)="20000000000000000000000000000000e2f4655f00"/32, 0x20, 0x4280}, {&(0x7f0000012a00)="8081000000180000e2f4655fe2f4655fe2f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000040000000", 0x40, 0x4300}, {&(0x7f0000012b00)="20000000000000000000000000000000e2f4655f00"/32, 0x20, 0x4380}, {&(0x7f0000012c00)="c041000000400000e2f4655fe2f4655fe2f4655f00000000000002008000000000000800000000000af301000400000000000000000000000400000020000000", 0x40, 0x4a00}, {&(0x7f0000012d00)="20000000000000000000000000000000e2f4655f00"/32, 0x20, 0x4a80}, {&(0x7f0000012e00)="ed41000000100000e2f4655fe2f4655fe2f4655f00000000000002008000000000000800030000000af3010004000000000000000000000001000000500000000000000000000000000000000000000000000000000000000000000000000000000000005bcc129100000000000000000000000000000000000000000000000020000000b4253260b4253260b4253260e2f4655fb42532600000000000000000", 0xa0, 0x4b00}, {&(0x7f0000012f00)="ed8100001a040000e2f4655fe2f4655fe2f4655f00000000000001008000000000000800010000000af3010004000000000000000000000001000000600000000000000000000000000000000000000000000000000000000000000000000000000000005f43fa2400000000000000000000000000000000000000000000000020000000b4253260b4253260b4253260e2f4655fb42532600000000000000000", 0xa0, 0x4c00}, {&(0x7f0000013000)="ffa1000026000000e2f4655fe2f4655fe2f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3032353733363935382f66696c65302f66696c6530000000000000000000000000000000000000000000006561281700000000000000000000000000000000000000000000000020000000b4253260b4253260b4253260e2f4655fb42532600000000000000000", 0xa0, 0x4d00}, {&(0x7f0000013100)="ed8100000a000000e2f4655fe2f4655fe2f4655f00000000000001008000000000000800010000000af3010004000000000000000000000001000000700000000000000000000000000000000000000000000000000000000000000000000000000000002a20390700000000000000000000000000000000000000000000000020000000b4253260b4253260b4253260e2f4655fb42532600000000000000000000002ea06015400000000000600000000000000786174747231000006014c0000000000060000000000000078617474723200000000000000000000000000000000000000000000000000000000000078617474723200007861747472310000ed81000028230000e2f4655fe2f4655fe2f4655f00000000000002008000000000000800010000000af30100040000000000000000000000030000008000000002000000010000008200000002000000018000008200000000000000000000000000000033142f1800000000000000000000000000000000000000000000000020000000b4253260b4253260b4253260e2f4655fb42532600000000000000000", 0x1a0, 0x4e00}, {&(0x7f0000013300)="ed81000064000000e2f4655fe2f4655fe2f4655f00000000000001008000000000000800010000000af301000400000000000000000000000100000090000000000000000000000000000000000000000000000000000000000000000000000000000000eaaaeb6900000000000000000000000000000000000000000000000020000000b4253260b4253260b4253260e2f4655fb42532600000000000000000", 0xa0, 0x5000}, {&(0x7f0000013400)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c653300000011000000940f090166696c652e636f6c64000000", 0x80, 0x10000}, {&(0x7f0000013500)="0b0000000c0001022e00000002000000f40f02022e2e00"/32, 0x20, 0x20000}, {&(0x7f0000013600)="00000000001000"/32, 0x20, 0x21000}, {&(0x7f0000013700)="00000000001000"/32, 0x20, 0x22000}, {&(0x7f0000013800)="00000000001000"/32, 0x20, 0x23000}, {&(0x7f0000013900)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x30000}, {&(0x7f0000013a00)="0200"/32, 0x20, 0x30400}, {&(0x7f0000013b00)="0300"/32, 0x20, 0x30800}, {&(0x7f0000013c00)="0400"/32, 0x20, 0x30c00}, {&(0x7f0000013d00)="0500"/32, 0x20, 0x31000}, {&(0x7f0000013e00)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000700"/96, 0x60, 0x31400}, {&(0x7f0000013f00)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x40000}, {&(0x7f0000014000)="0200"/32, 0x20, 0x40400}, {&(0x7f0000014100)="0300"/32, 0x20, 0x40800}, {&(0x7f0000014200)="0400"/32, 0x20, 0x40c00}, {&(0x7f0000014300)="0500"/32, 0x20, 0x41000}, {&(0x7f0000014400)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000700"/96, 0x60, 0x41400}, {&(0x7f0000014500)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d80f050766696c653100"/64, 0x40, 0x50000}, {&(0x7f0000014600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x60000}, {&(0x7f0000014b00)='syzkallers\x00'/32, 0x20, 0x70000}, {&(0x7f0000014c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x90000}], 0x0, &(0x7f0000014d00)) 03:34:47 executing program 3: r0 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0x3, r0, 0x0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000200)) [ 1224.180261] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1224.181003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1224.187112] FAULT_INJECTION: forcing a failure. [ 1224.187112] name failslab, interval 1, probability 0, space 0, times 0 [ 1224.188202] CPU: 1 UID: 0 PID: 69247 Comm: syz-executor.0 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) [ 1224.188220] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1224.188229] Call Trace: [ 1224.188234] [ 1224.188239] dump_stack_lvl+0xfa/0x120 [ 1224.188266] should_fail_ex+0x4d7/0x5e0 [ 1224.188288] should_failslab+0xc2/0x120 [ 1224.188303] __kmalloc_cache_noprof+0x73/0x470 [ 1224.188321] ? __queue_work+0x521/0x1230 [ 1224.188339] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1224.188362] ? kobject_uevent_env+0x22e/0xf90 [ 1224.188384] ? kobject_uevent_env+0x22e/0xf90 [ 1224.188399] kobject_uevent_env+0x22e/0xf90 [ 1224.188422] rfkill_set_block+0x3bc/0x540 [ 1224.188445] rfkill_fop_write+0x2c3/0x540 [ 1224.188463] ? __pfx_rfkill_fop_write+0x10/0x10 [ 1224.188482] ? security_file_permission+0x22/0x90 [ 1224.188503] vfs_write+0x2b7/0x10c0 [ 1224.188524] ? __pfx_rfkill_fop_write+0x10/0x10 [ 1224.188542] ? lock_acquire+0x15e/0x2f0 [ 1224.188558] ? __fget_files+0x34/0x3b0 [ 1224.188582] ? __pfx_vfs_write+0x10/0x10 [ 1224.188601] ? __fget_files+0x203/0x3b0 [ 1224.188619] ? lock_release+0xc8/0x290 [ 1224.188637] ? __fget_files+0x20d/0x3b0 [ 1224.188664] ksys_write+0x1ef/0x240 [ 1224.188683] ? __pfx_ksys_write+0x10/0x10 [ 1224.188701] ? __might_fault+0xe0/0x190 [ 1224.188718] ? __might_fault+0x151/0x190 [ 1224.188736] do_syscall_64+0xbf/0x360 [ 1224.188761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1224.188775] RIP: 0033:0x7f02b2719b19 [ 1224.188786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1224.188798] RSP: 002b:00007f02afc8f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1224.188811] RAX: ffffffffffffffda RBX: 00007f02b282cf60 RCX: 00007f02b2719b19 [ 1224.188820] RDX: 0000000000000008 RSI: 0000000020000080 RDI: 0000000000000003 [ 1224.188828] RBP: 00007f02afc8f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1224.188836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1224.188843] R13: 00007fff3fbe73bf R14: 00007f02afc8f300 R15: 0000000000022000 [ 1224.188866] 03:34:47 executing program 4: mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000800)='./binderfs2\x00', 0x1ff) 03:34:47 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000040)="88f465000000ddffff1600080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000140)=ANY=[]) symlinkat(&(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000280)='./file0\x00') [ 1224.208005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:34:47 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x10, 0x0, 0x0) 03:34:47 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x3, 0x0, 0x0, 0x8}, {0x6}]}) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) [ 1224.286398] audit: type=1326 audit(2000000087.779:148): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=69248 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f33e32cfb19 code=0x0 03:34:47 executing program 1: syz_io_uring_setup(0x33f7, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1225.012003] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1225.013067] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1225.123196] audit: type=1326 audit(2000000088.613:149): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=69248 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f33e32cfb19 code=0x0 03:34:48 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) 03:34:48 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x10, 0x0, 0x0) 03:34:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000000)={0x10, 0x13}, 0x10}, {&(0x7f00000011c0)={0x10, 0x1b, 0x1}, 0x10}], 0x2}, 0x0) 03:34:48 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) 03:34:48 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 03:34:48 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) shmdt(r1) 03:34:48 executing program 1: syz_io_uring_setup(0x33f7, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:34:48 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) (fail_nth: 3) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:34:48 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x28, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_MODE={0xa}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x28}}, 0x0) [ 1225.308698] FAULT_INJECTION: forcing a failure. [ 1225.308698] name failslab, interval 1, probability 0, space 0, times 0 [ 1225.310702] CPU: 0 UID: 0 PID: 69280 Comm: syz-executor.7 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) [ 1225.310732] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1225.310745] Call Trace: [ 1225.310753] [ 1225.310761] dump_stack_lvl+0xfa/0x120 [ 1225.310799] should_fail_ex+0x4d7/0x5e0 [ 1225.310829] ? security_inode_alloc+0x3e/0x130 [ 1225.310849] should_failslab+0xc2/0x120 [ 1225.310873] kmem_cache_alloc_noprof+0x5f/0x470 [ 1225.310906] ? lockdep_init_map_type+0x4b/0x240 [ 1225.310942] security_inode_alloc+0x3e/0x130 [ 1225.310965] inode_init_always_gfp+0xc94/0xff0 [ 1225.311007] alloc_inode+0x8d/0x250 [ 1225.311033] sock_alloc+0x40/0x270 [ 1225.311063] __sock_create+0xc1/0x810 [ 1225.311104] __sys_socket+0x145/0x260 [ 1225.311138] ? __pfx___sys_socket+0x10/0x10 [ 1225.311168] ? lock_release+0xc8/0x290 [ 1225.311193] ? __might_fault+0xe0/0x190 [ 1225.311226] __x64_sys_socket+0x73/0xb0 [ 1225.311278] do_syscall_64+0xbf/0x360 [ 1225.311314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1225.311337] RIP: 0033:0x7f010bb84197 [ 1225.311354] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1225.311375] RSP: 002b:00007f01090f7098 EFLAGS: 00000293 ORIG_RAX: 0000000000000029 [ 1225.311397] RAX: ffffffffffffffda RBX: 00007f010bc95f60 RCX: 00007f010bb84197 [ 1225.311412] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1225.311425] RBP: 00007f01090f81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1225.311438] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000020000040 [ 1225.311452] R13: 0000000000000000 R14: 0000000000000006 R15: 0000000020000080 [ 1225.311486] [ 1225.311529] socket: no more sockets [ 1225.317757] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=69281 comm=syz-executor.5 [ 1225.362426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1225.375814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=69281 comm=syz-executor.5 03:34:48 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x1, 0x4}]) 03:34:48 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/mcfilter6\x00') r0 = fork() ptrace(0x10, r0) ptrace$getregs(0x1a, r0, 0x0, &(0x7f0000000000)=""/205) 03:34:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x21, 0x0, &(0x7f00000018c0)) 03:34:48 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 03:34:48 executing program 1: syz_io_uring_setup(0x33f7, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:34:48 executing program 5: syz_read_part_table(0x0, 0x2, &(0x7f0000000b00)=[{&(0x7f0000000700)="bb5247f1a1589f6d69e75d37a1ca81467d43c190cd8ef1c21aa97294ba4c43bb879aadc8966d2ad2396b1b937ac6fb04a8cbbaf19dd917208866fa47d6479bd5222e6d8f628e67b5075ab238d706e57cb3ebea30bdd84b5769ea64e80f4dace12684ee757c387e5a59b37badf4fd41ca6dbef34700bfceb38b040a63ddb6b6ca5c6c4e1ef488ddbba4d2049cab742d35d09e", 0x92, 0x1}, {0x0}]) 03:34:49 executing program 6: read$ptp(0xffffffffffffffff, 0x0, 0x0) [ 1225.550268] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 1225.551941] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1225.553216] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1225.554351] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 01 00 [ 1225.555473] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 03:34:49 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) write$P9_RWALK(r0, 0x0, 0x0) 03:34:49 executing program 4: clone3(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000000)=""/18, 0x12, 0x0, 0x0}, 0xfffffd84) 03:34:49 executing program 1: syz_io_uring_setup(0x33f7, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:34:49 executing program 5: r0 = getpgid(0x0) ioprio_get$pid(0x2, r0) 03:34:49 executing program 6: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) 03:34:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000480), &(0x7f00000004c0)='./file1\x00', 0x0, 0x3, &(0x7f0000000bc0)=[{&(0x7f0000000500)="86", 0x1}, {0x0}, {0x0}], 0x0, &(0x7f0000000cc0)) 03:34:49 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) (fail_nth: 4) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:34:49 executing program 2: iopl(0x3) syz_io_uring_setup(0x0, &(0x7f0000003a00), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) 03:34:49 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x2, 0x0, 0x3, 0x1}, 0x8) [ 1225.907553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:34:49 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) 03:34:49 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)) 03:34:49 executing program 4: r0 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000180)='i\xf87Z)\x95\xa0\x9f\xfc\x84\xcf') 03:34:49 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x4, 0x0, 0x3, 0x1}, 0x8) 03:34:49 executing program 2: ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) r0 = socket(0x8, 0x3, 0x8) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x4e22, @dev}}, 0x0, 0x0, 0x38, 0x0, "51ac043c5ed35d5f0da61262d4b52c7a63d8e878d48c1a398ef104e80aaba0fcd66b13a690ebb52986ee9e92fb7bcffc82788002a62d8f610e7f10380cc6b69139ebc075170dfe85ed0a9be3b4784f4d"}, 0xd8) getsockname$unix(r0, 0x0, 0x0) geteuid() 03:34:49 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x5053, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000cc0)) ppoll(&(0x7f0000000c80)=[{r0}], 0x1, 0x0, 0x0, 0x0) 03:34:49 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)='4', 0x7ffffff7}], 0x1}}], 0x2, 0x8005) 03:34:49 executing program 6: ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, 0x0) r0 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000180)='bbr\x00', 0x4) clone(0x0, &(0x7f0000000400)="2f966fabf109c5a6eeee1cfdfbd1d70d85c3b85b3af8a37a678eb8beee35444d28d88607fe961ee2c8e20459899567dd085e1b03a94bfcc2dae1dc5a90ddec26519bf38acce00d854112343f0a68349a9e44207329ea598a523521505531fc366fe511091749f104ac5d1244f36762e821c63e4f0f126fec404a0c7442d90064b66ba6f2bbcffd35b0e3a4cbad4aefd03ca39cc111c2a2882bfb51560b857604527ed4b685cde8e28b34a25cdc24dd5c0248f3ae4c57d4bd382bfee88b2048ad2e5ff5d6e9646e281595578c581605daef61238c4173099bc7caa8b7286451da1a", &(0x7f0000000500), 0x0, &(0x7f0000000580)="9bdd6aa83be71e7eb57874bb74a8012950195c5963c10cde28d9a47f369870825f9986d6809c179f676ecd2d1d7ed92bfc2af98a6734cc034b91cd5f2393a7176cd0d71ab37b7ec4344256c569f070503f3809897bcbac2a89fb981436ae46e7a29616077e3f70b78682a062fc44f6cf1ea964393bc641ff8e9cbce782338dc86b85ba9e2a9bed580de8e3731850809d3b5f5dfcef6cddfcd038c98e2941d1de88493528094d9979324d") 03:34:49 executing program 4: r0 = mq_open(&(0x7f0000000040)='syz', 0x0, 0x0, 0x0) clone3(&(0x7f00000002c0)={0x157281100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mq_notify(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) 03:34:50 executing program 1: add_key$keyring(&(0x7f0000000d80), &(0x7f0000000dc0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) 03:34:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r2 = dup2(r1, r0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x2e) ioctl$SG_GET_PACK_ID(r2, 0x2275, &(0x7f0000000040)) 03:34:50 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) (fail_nth: 5) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:34:50 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001e80)='/proc/asound/seq/clients\x00', 0x0, 0x0) fcntl$setstatus(r0, 0xa, 0x0) 03:34:50 executing program 2: mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000740)=""/173) 03:34:50 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_buf(r0, 0x29, 0xb, 0x0, 0x0) 03:34:50 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r0, &(0x7f0000000140)="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", 0x7f9) 03:34:50 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x8, 0x0, 0x3, 0x1}, 0x8) [ 1227.056141] FAULT_INJECTION: forcing a failure. [ 1227.056141] name failslab, interval 1, probability 0, space 0, times 0 [ 1227.058002] CPU: 1 UID: 0 PID: 69563 Comm: syz-executor.7 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) [ 1227.058033] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1227.058046] Call Trace: [ 1227.058054] [ 1227.058062] dump_stack_lvl+0xfa/0x120 [ 1227.058103] should_fail_ex+0x4d7/0x5e0 [ 1227.058136] ? sk_prot_alloc+0x157/0x280 [ 1227.058166] should_failslab+0xc2/0x120 [ 1227.058190] __kmalloc_noprof+0xb4/0x4b0 [ 1227.058224] ? do_raw_spin_lock+0x123/0x260 [ 1227.058261] sk_prot_alloc+0x157/0x280 [ 1227.058295] sk_alloc+0x34/0xbd0 [ 1227.058320] ? __pfx_genl_release+0x10/0x10 [ 1227.058347] __netlink_create+0x5d/0x280 [ 1227.058380] ? __wake_up+0x3f/0x60 [ 1227.058409] netlink_create+0x3ad/0x620 [ 1227.058430] ? __pfx_genl_bind+0x10/0x10 [ 1227.058454] ? __pfx_genl_unbind+0x10/0x10 [ 1227.058484] __sock_create+0x369/0x810 [ 1227.058525] __sys_socket+0x145/0x260 [ 1227.058558] ? __pfx___sys_socket+0x10/0x10 [ 1227.058596] ? lock_release+0xc8/0x290 [ 1227.058621] ? __might_fault+0xe0/0x190 [ 1227.058655] __x64_sys_socket+0x73/0xb0 [ 1227.058689] do_syscall_64+0xbf/0x360 [ 1227.058725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1227.058749] RIP: 0033:0x7f010bb84197 [ 1227.058766] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1227.058786] RSP: 002b:00007f01090f7098 EFLAGS: 00000293 ORIG_RAX: 0000000000000029 [ 1227.058808] RAX: ffffffffffffffda RBX: 00007f010bc95f60 RCX: 00007f010bb84197 [ 1227.058824] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1227.058838] RBP: 00007f01090f81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1227.058852] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000020000040 [ 1227.058866] R13: 0000000000000000 R14: 0000000000000006 R15: 0000000020000080 [ 1227.058902] 03:34:50 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40086602, &(0x7f0000000000)=ANY=[]) creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) creat(0x0, 0x0) 03:34:50 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x7, 0x0, 0x0) 03:34:50 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x40000, 0x0, 0x3, 0x1}, 0x8) 03:34:50 executing program 4: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) pwritev2(r0, &(0x7f0000000280)=[{&(0x7f0000000080)="8c", 0x1}], 0x1, 0x0, 0x0, 0xc) [ 1227.170998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:34:50 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='status\x00') pread64(r0, &(0x7f0000000140)=""/183, 0xb7, 0x0) 03:34:50 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)={{0x2d}}, 0x20) 03:34:50 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x82, @none, 0x0, 0x1}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x82, @none, 0x0, 0x1}, 0xe) 03:34:51 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x2d, &(0x7f0000000040)="3eac2fff942274d59f57be7c9c45606a47006eb9f3e6f38807cc6250125c2c52b75738f90a4f70ca310a43781091c26641463f5ef88f034a0488566d34b415bdcb19e9180bdce13c2465efb26e204b565122ad1991072396b6d532fcfa0e4f8e023dcccf7d55f3372fe0c2fb4e3250179cbe7be20aafd32110faed266a15641fadc260b5800aff27", 0x88) 03:34:51 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x80000, 0x0, 0x3, 0x1}, 0x8) 03:34:51 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='status\x00') pread64(r0, &(0x7f0000000140)=""/183, 0xb7, 0x0) 03:34:51 executing program 1: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={[0x7]}, 0x8}) fork() 03:34:51 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)={{0x2d}}, 0x20) 03:34:51 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="fbffffff00000000001501"], 0x3c}}, 0x0) 03:34:51 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) (fail_nth: 6) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:34:51 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x4b71, &(0x7f00000000c0)) [ 1228.058301] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1228.071554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:34:51 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x4b71, &(0x7f00000000c0)) 03:34:51 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='status\x00') pread64(r0, &(0x7f0000000140)=""/183, 0xb7, 0x0) 03:34:51 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x1000000, 0x0, 0x3, 0x1}, 0x8) 03:34:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x14) 03:34:51 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)={{0x2d}}, 0x20) 03:34:51 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x2000000, 0x0, 0x3, 0x1}, 0x8) 03:34:51 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='status\x00') pread64(r0, &(0x7f0000000140)=""/183, 0xb7, 0x0) 03:34:52 executing program 3: r0 = inotify_init() close_range(r0, 0xffffffffffffffff, 0x4) 03:34:52 executing program 4: io_setup(0x2, &(0x7f00000002c0)=0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000002500)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0xfe}]) 03:34:52 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x4b71, &(0x7f00000000c0)) 03:34:52 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) accept$unix(0xffffffffffffffff, 0x0, 0x0) 03:34:52 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x8000000, 0x0, 0x3, 0x1}, 0x8) 03:34:52 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)={{0x2d}}, 0x20) 03:34:52 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) (fail_nth: 7) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:34:52 executing program 6: r0 = syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4008700c, 0x0) [ 1229.037711] FAULT_INJECTION: forcing a failure. [ 1229.037711] name failslab, interval 1, probability 0, space 0, times 0 [ 1229.039447] CPU: 0 UID: 0 PID: 69831 Comm: syz-executor.7 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) [ 1229.039477] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1229.039490] Call Trace: [ 1229.039499] [ 1229.039508] dump_stack_lvl+0xfa/0x120 [ 1229.039547] should_fail_ex+0x4d7/0x5e0 [ 1229.039585] ? security_sk_alloc+0x101/0x160 [ 1229.039618] should_failslab+0xc2/0x120 [ 1229.039642] __kmalloc_noprof+0xb4/0x4b0 [ 1229.039672] ? __kasan_kmalloc+0x7f/0x90 [ 1229.039696] ? trace_kmalloc+0x1f/0xb0 [ 1229.039725] security_sk_alloc+0x101/0x160 [ 1229.039762] sk_prot_alloc+0x20b/0x280 [ 1229.039797] sk_alloc+0x34/0xbd0 [ 1229.039823] ? __pfx_genl_release+0x10/0x10 [ 1229.039849] __netlink_create+0x5d/0x280 [ 1229.039881] ? __wake_up+0x3f/0x60 [ 1229.039911] netlink_create+0x3ad/0x620 [ 1229.039932] ? __pfx_genl_bind+0x10/0x10 [ 1229.039956] ? __pfx_genl_unbind+0x10/0x10 [ 1229.039985] __sock_create+0x369/0x810 [ 1229.040026] __sys_socket+0x145/0x260 [ 1229.040060] ? __pfx___sys_socket+0x10/0x10 [ 1229.040091] ? lock_release+0xc8/0x290 [ 1229.040116] ? __might_fault+0xe0/0x190 [ 1229.040149] __x64_sys_socket+0x73/0xb0 [ 1229.040183] do_syscall_64+0xbf/0x360 [ 1229.040219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1229.040243] RIP: 0033:0x7f010bb84197 [ 1229.040260] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1229.040281] RSP: 002b:00007f01090f7098 EFLAGS: 00000293 ORIG_RAX: 0000000000000029 [ 1229.040302] RAX: ffffffffffffffda RBX: 00007f010bc95f60 RCX: 00007f010bb84197 [ 1229.040318] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1229.040331] RBP: 00007f01090f81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1229.040344] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000020000040 [ 1229.040357] R13: 0000000000000000 R14: 0000000000000006 R15: 0000000020000080 [ 1229.040393] 03:34:52 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000880)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:34:52 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 03:34:52 executing program 6: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000700), 0x202100, 0x0) r0 = fork() process_vm_readv(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/124, 0x7c}, {&(0x7f0000000340)=""/12, 0xc}, {&(0x7f0000000380)=""/122, 0x7a}, {&(0x7f00000017c0)=""/4096}], 0x3, &(0x7f00000006c0)=[{&(0x7f0000000180)=""/133, 0x79}, {&(0x7f00000004c0)=""/143, 0x8f}, {&(0x7f0000000580)=""/103, 0x6f}, {&(0x7f0000000600)=""/171, 0xfffffe9b}], 0x4, 0x0) 03:34:52 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x4b71, &(0x7f00000000c0)) 03:34:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) [ 1229.172066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:34:52 executing program 1: r0 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffd}) io_uring_register$IORING_REGISTER_FILES(r0, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 03:34:52 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x16) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)) 03:34:52 executing program 4: openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x800, 0x0) 03:34:53 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) (fail_nth: 8) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:34:53 executing program 1: r0 = socket$inet(0x2, 0x80003, 0xff) sendto$inet(r0, &(0x7f00000000c0)="81fae9825787e09fe3846059c13cf51540b5ac8d", 0x14, 0x0, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) 03:34:53 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5392, 0x0) 03:34:53 executing program 4: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r0}) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r1) 03:34:53 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x2, 0x3, 0x1}, 0x8) 03:34:53 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) 03:34:53 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') futimesat(r0, 0x0, 0x0) 03:34:53 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x16) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)) [ 1229.649051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:34:53 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x16) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)) 03:34:53 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f00000000c0)={0x0, 0x0, 0x2}, 0x8) 03:34:53 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000140)={0x11, 0xf6}, 0x14) 03:34:53 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x8, 0x3, 0x1}, 0x8) 03:34:53 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x16) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)) 03:34:53 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5}) 03:34:53 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x16) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)) 03:34:53 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0x0, 0x0, 0xffffff95}) 03:34:53 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x16) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)) 03:34:53 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x16) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)) 03:34:53 executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000000)={0x0, 0x3, 0xffffffffffffffff, 0xcb3}) 03:34:53 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) (fail_nth: 9) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:34:53 executing program 4: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000b80)=[{&(0x7f00000008c0)='!', 0x1}], 0x1, 0x4bbe, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x1480000) write$binfmt_script(r1, &(0x7f0000000bc0)={'#! ', './file0', [], 0xa, "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"}, 0x442) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) 03:34:53 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f00000000c0)={0x0, 0x0, 0x2}, 0x8) 03:34:53 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x1}, 0x8) 03:34:53 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001680)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="2f10de80e75b", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1230.133954] FAULT_INJECTION: forcing a failure. [ 1230.133954] name failslab, interval 1, probability 0, space 0, times 0 [ 1230.135383] CPU: 1 UID: 0 PID: 70109 Comm: syz-executor.7 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) [ 1230.135407] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1230.135418] Call Trace: [ 1230.135424] [ 1230.135431] dump_stack_lvl+0xfa/0x120 [ 1230.135464] should_fail_ex+0x4d7/0x5e0 [ 1230.135489] should_failslab+0xc2/0x120 [ 1230.135509] kmem_cache_alloc_lru_noprof+0x73/0x460 [ 1230.135538] ? __d_alloc+0x31/0xa10 [ 1230.135567] __d_alloc+0x31/0xa10 [ 1230.135588] d_alloc_pseudo+0x1d/0xc0 [ 1230.135609] alloc_file_pseudo+0xbe/0x220 [ 1230.135633] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1230.135653] ? _raw_spin_unlock+0x1e/0x40 [ 1230.135674] ? alloc_fd+0x2c1/0x560 [ 1230.135705] sock_alloc_file+0x53/0x220 [ 1230.135729] __sys_socket+0x1ba/0x260 [ 1230.135756] ? __pfx___sys_socket+0x10/0x10 [ 1230.135780] ? lock_release+0xc8/0x290 [ 1230.135802] ? __might_fault+0xe0/0x190 [ 1230.135829] __x64_sys_socket+0x73/0xb0 [ 1230.135855] do_syscall_64+0xbf/0x360 [ 1230.135883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1230.135901] RIP: 0033:0x7f010bb84197 [ 1230.135915] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1230.135931] RSP: 002b:00007f01090f7098 EFLAGS: 00000293 ORIG_RAX: 0000000000000029 [ 1230.135949] RAX: ffffffffffffffda RBX: 00007f010bc95f60 RCX: 00007f010bb84197 [ 1230.135960] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1230.135971] RBP: 00007f01090f81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1230.135981] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000020000040 [ 1230.135992] R13: 0000000000000000 R14: 0000000000000006 R15: 0000000020000080 [ 1230.136019] 03:34:53 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, r0, 0x2, 0x0) 03:34:53 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x9, 0x1}, 0x8) 03:34:53 executing program 5: r0 = creat(0x0, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000580), &(0x7f00000005c0)=0xc) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x7f) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) 03:34:53 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$lock(r0, 0x25, &(0x7f0000000180)={0x0, 0x0, 0x80000000}) fcntl$lock(r0, 0x26, &(0x7f0000000100)={0x2, 0x0, 0x0, 0x2}) 03:34:53 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f00000000c0)={0x0, 0x0, 0x2}, 0x8) 03:34:53 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROMREADRAW(r0, 0x2272, &(0x7f00000003c0)) [ 1230.272061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:34:53 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f00000000000004000400000000000000050000000c", 0x29, 0x2200}, {&(0x7f0000011b00)="ed8100000a000000daf4655fdaf4655fdaf4655f000000000000010000000000000000100100000073797a6b616c6c6572730000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aa02805e000000000000000000000000000000000000000000000000200000007412ab417412ab417412ab41daf4655f7412ab410000000000000000000002ea040700000000000000000000000000006461746106015401000000000600000000000000786174747231000006014c01000000000600000000000000786174747232", 0xe6, 0x3c00}, {&(0x7f0000011f00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x6000}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) close(r1) 03:34:53 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x9}, 0x8) 03:34:53 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$lock(r0, 0x25, &(0x7f0000000180)={0x0, 0x0, 0x80000000}) fcntl$lock(r0, 0x26, &(0x7f0000000100)={0x2, 0x0, 0x0, 0x2}) 03:34:53 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'trylock', ' ', 'none'}, 0xd) 03:34:54 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f00000000c0)={0x0, 0x0, 0x2}, 0x8) 03:34:54 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000640)='\x00', &(0x7f0000000680)="82", 0x1) 03:34:54 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$lock(r0, 0x25, &(0x7f0000000180)={0x0, 0x0, 0x80000000}) fcntl$lock(r0, 0x26, &(0x7f0000000100)={0x2, 0x0, 0x0, 0x2}) 03:34:54 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) (fail_nth: 10) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:34:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x3, 0x1}, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, &(0x7f00000011c0)=0x20) 03:34:54 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 03:34:54 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROMREADRAW(r0, 0x2272, &(0x7f00000003c0)) 03:34:54 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) getpeername$unix(r0, 0x0, 0x0) 03:34:54 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$lock(r0, 0x25, &(0x7f0000000180)={0x0, 0x0, 0x80000000}) fcntl$lock(r0, 0x26, &(0x7f0000000100)={0x2, 0x0, 0x0, 0x2}) 03:34:54 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x103401, 0x0) r1 = memfd_create(&(0x7f0000001280)='\x00', 0x0) sendfile(r0, r1, 0x0, 0x0) 03:34:54 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[]) 03:34:54 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROMREADRAW(r0, 0x2272, &(0x7f00000003c0)) 03:34:54 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'lo\x00', &(0x7f0000000000)=@ethtool_ringparam={0x11}}) [ 1230.741524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:34:54 executing program 3: r0 = syz_io_uring_setup(0x40e5, &(0x7f0000000100), &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000200), 0x0) fork() 03:34:54 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1, 0x2}, 0x8) 03:34:54 executing program 1: getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) sync() 03:34:54 executing program 6: syz_emit_vhci(&(0x7f0000001680)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0xa1, 0x2}, {0x1000}}}}, 0xf) 03:34:54 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROMREADRAW(r0, 0x2272, &(0x7f00000003c0)) 03:34:54 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x63020180, 0x0, &(0x7f0000005700), 0x0, {0x1c}, 0x0, 0x0, &(0x7f0000000100)=""/32, 0x0}, 0x58) 03:34:54 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x63020180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000500)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x0, &(0x7f0000000580), 0x0, 0x4) r1 = creat(0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_setup(0xc5a, &(0x7f00000053c0)={0x0, 0x48f7, 0x8, 0x0, 0x41}, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000005100), &(0x7f0000005440)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20001099, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x3, 0x244}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x1091}}, 0x2) 03:34:54 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r0, &(0x7f0000000000)) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) chown(0x0, 0xee01, 0x0) capset(0x0, 0x0) 03:34:54 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1, 0x8}, 0x8) 03:34:54 executing program 6: syz_io_uring_setup(0x77b6, &(0x7f0000000000)={0x0, 0x44e20, 0x1a}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000001240)) 03:34:54 executing program 3: r0 = syz_io_uring_setup(0x40e5, &(0x7f0000000100), &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000200), 0x0) fork() 03:34:54 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) (fail_nth: 11) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:34:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000002840), 0x4) sendmmsg$inet6(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 1231.117530] FAULT_INJECTION: forcing a failure. [ 1231.117530] name failslab, interval 1, probability 0, space 0, times 0 [ 1231.118529] CPU: 1 UID: 0 PID: 70378 Comm: syz-executor.7 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) [ 1231.118546] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1231.118555] Call Trace: [ 1231.118564] [ 1231.118569] dump_stack_lvl+0xfa/0x120 [ 1231.118598] should_fail_ex+0x4d7/0x5e0 [ 1231.118618] ? alloc_empty_file+0x58/0x1e0 [ 1231.118633] should_failslab+0xc2/0x120 [ 1231.118649] kmem_cache_alloc_noprof+0x5f/0x470 [ 1231.118667] ? d_instantiate+0x79/0xa0 [ 1231.118681] ? lock_release+0xc8/0x290 [ 1231.118700] alloc_empty_file+0x58/0x1e0 [ 1231.118716] alloc_file_pseudo+0x12b/0x220 [ 1231.118732] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1231.118748] ? alloc_fd+0x2c1/0x560 [ 1231.118771] sock_alloc_file+0x53/0x220 [ 1231.118790] __sys_socket+0x1ba/0x260 [ 1231.118809] ? __pfx___sys_socket+0x10/0x10 [ 1231.118826] ? lock_release+0xc8/0x290 [ 1231.118840] ? __might_fault+0xe0/0x190 [ 1231.118860] __x64_sys_socket+0x73/0xb0 [ 1231.118879] do_syscall_64+0xbf/0x360 [ 1231.118903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1231.118917] RIP: 0033:0x7f010bb84197 [ 1231.118927] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1231.118939] RSP: 002b:00007f01090f7098 EFLAGS: 00000293 ORIG_RAX: 0000000000000029 [ 1231.118952] RAX: ffffffffffffffda RBX: 00007f010bc95f60 RCX: 00007f010bb84197 [ 1231.118961] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1231.118969] RBP: 00007f01090f81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1231.118977] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000020000040 [ 1231.118984] R13: 0000000000000000 R14: 0000000000000006 R15: 0000000020000080 [ 1231.119005] [ 1231.175075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:34:54 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r0, &(0x7f0000000000)) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) chown(0x0, 0xee01, 0x0) capset(0x0, 0x0) 03:34:54 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000300)={[{@sbsector}, {@utf8}, {@check_strict}, {@gid={'gid', 0x3d, 0xee01}}, {@nocompress}]}) 03:34:54 executing program 6: syz_io_uring_setup(0x77b6, &(0x7f0000000000)={0x0, 0x44e20, 0x1a}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000001240)) 03:34:54 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x6) 03:34:54 executing program 3: r0 = syz_io_uring_setup(0x40e5, &(0x7f0000000100), &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000200), 0x0) fork() 03:34:54 executing program 6: syz_io_uring_setup(0x77b6, &(0x7f0000000000)={0x0, 0x44e20, 0x1a}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000001240)) 03:34:54 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x63020180, 0x0, &(0x7f0000005700), 0x0, {0x1c}, 0x0, 0x0, &(0x7f0000000100)=""/32, 0x0}, 0x58) 03:34:54 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_int(r0, 0x1, 0x46, &(0x7f0000000140), 0x4) 03:34:54 executing program 6: syz_io_uring_setup(0x77b6, &(0x7f0000000000)={0x0, 0x44e20, 0x1a}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000001240)) 03:34:54 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x63020180, 0x0, &(0x7f0000005700), 0x0, {0x1c}, 0x0, 0x0, &(0x7f0000000100)=""/32, 0x0}, 0x58) 03:34:54 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006580)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@flowinfo={{0x13}}], 0x18}}], 0x1, 0x0) 03:34:54 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x9) 03:34:54 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r0, &(0x7f0000000000)) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) chown(0x0, 0xee01, 0x0) capset(0x0, 0x0) 03:34:54 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x17, &(0x7f0000000000)={0x0, 0x1}, 0x4) 03:34:54 executing program 3: r0 = syz_io_uring_setup(0x40e5, &(0x7f0000000100), &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000200), 0x0) fork() 03:34:54 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) (fail_nth: 12) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:34:55 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000240)="40008d004900a5bea1b7c5ca110b7021799de00ffb22856a66196c37e455236c89424ae3d9649d227f0a9af9b8365032cfe853c1ca103905d7b66d6e27cfb53bd4799d75ef2aea58c532e405000000ebe8d41e9f091eb1885b8ad83af93f5ef3a3f4d0f8dfa005a77442ac16396384a214a8f7a574e6ebd5ea02d96db3bc87f45049c1151fdfad4ae4bbbde7ba3f5893768472b8eefc59f2da01b619573201730a6e7c9b9459c05c5afe5c6f978e5e09f23948721f212f1c785a9174344feca299e5", 0xc57d4077604cc144) [ 1231.579202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:34:55 executing program 2: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0xb}}}, 0x414d02) 03:34:55 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r0, &(0x7f0000000000)) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) chown(0x0, 0xee01, 0x0) capset(0x0, 0x0) 03:34:55 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x3, 0x200) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="74000000080601040000000027a68e90437c21598bd36d000000000200000a0900020073797a300008000005000100070000000900020073797a31000000000900020073797a30000000000500010007000000050001000700000005000100070000000900020073797a32000000000500010007"], 0x74}, 0x1, 0x0, 0x0, 0x4040040}, 0x40000) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000200)) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 03:34:55 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:34:55 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r2 = dup2(r1, r0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x2e) ioctl$SG_GET_PACK_ID(r2, 0x1274, &(0x7f0000000040)) 03:34:55 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x20, 0x0, &(0x7f000000dd00)) 03:34:55 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:34:55 executing program 0: fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x131) r1 = dup(0xffffffffffffffff) copy_file_range(r1, 0x0, 0xffffffffffffffff, 0x0, 0x401, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000740)={0x0, 'erspan0\x00', 0x4}, 0x18) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast1}}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x0}) sendto$inet6(r2, &(0x7f0000000100)="faeee0ddc8614dcc4782d65ea6520fb30b518c89c3aeb6036eeacca8eb122e2ba899a1058c9b6546fbeafef3f06e64d83779428cdb87a6d9be4d3f99ede9db0db9d13d20ac4a1bb3f81bcac4de0027dd3551d79ed83e8a6db11c934eb332440d2a2bfb7228553f6afd30a3472a43f72e0a3193daa9ebf9829abe841ab3f9cc3a186be3ba8e70ffa0ea2a56aace5bbd172aa5cb508b39fa7077be62d1300d07efbec52592c777625a80241e6bbefa0f780b9233580f8d17b265cac71a36ed400f0e5492d9081e962f9931590eab66507df9ba6154d5f10bd368", 0xd9, 0x50, &(0x7f0000000240)={0xa, 0x4e23, 0x36e6, @private0, 0x6}, 0x1c) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$binfmt_script(r5, &(0x7f00000002c0)=ANY=[], 0x131) copy_file_range(0xffffffffffffffff, 0x0, r5, 0x0, 0x401, 0x0) getpeername$inet6(r5, &(0x7f0000000300)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000440)=0x1c) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'gretap0\x00', &(0x7f0000000600)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="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"]}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xbc, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9c97f60dc2a8eaef}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40040}, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000780)) 03:34:55 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0xffffff8a}) 03:34:55 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x63020180, 0x0, &(0x7f0000005700), 0x0, {0x1c}, 0x0, 0x0, &(0x7f0000000100)=""/32, 0x0}, 0x58) 03:34:55 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000380)=@ethtool_drvinfo={0x3, "9d4e023fd796e236152e0fb2b1a94b3232f667102ba38490a61d712912a589ae", "25cb89c452960c30d580948d00e79ac1a211f27bd490e2782777deec4252d6cf", "17f19df7935b007cc541d8d0fdf995e442254fdeb32b6dab4d01c4f2f028a140", "1e7c1205d03b497f92d5134b61634a49fa15ea9c3be97ba06c389d9d56699029", "33e21265d9630203fd4527948a38775bc3024980fb562b938d2b60f2ea44b951", "faae7f3e513094a19aec72da"}}) 03:34:55 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) (fail_nth: 13) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:34:55 executing program 5: r0 = getpid() move_pages(r0, 0x2, &(0x7f0000000100)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], &(0x7f0000000140), &(0x7f0000000180), 0x0) [ 1231.956370] FAULT_INJECTION: forcing a failure. [ 1231.956370] name failslab, interval 1, probability 0, space 0, times 0 [ 1231.957408] CPU: 0 UID: 0 PID: 70663 Comm: syz-executor.7 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) [ 1231.957426] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1231.957434] Call Trace: [ 1231.957439] [ 1231.957444] dump_stack_lvl+0xfa/0x120 [ 1231.957470] should_fail_ex+0x4d7/0x5e0 [ 1231.957489] ? security_file_alloc+0x35/0x130 [ 1231.957503] should_failslab+0xc2/0x120 [ 1231.957518] kmem_cache_alloc_noprof+0x5f/0x470 [ 1231.957537] ? __create_object+0x59/0x80 [ 1231.957564] security_file_alloc+0x35/0x130 [ 1231.957578] init_file+0x95/0x4c0 [ 1231.957593] alloc_empty_file+0x76/0x1e0 [ 1231.957609] alloc_file_pseudo+0x12b/0x220 [ 1231.957625] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1231.957640] ? alloc_fd+0x2c1/0x560 [ 1231.957662] sock_alloc_file+0x53/0x220 [ 1231.957680] __sys_socket+0x1ba/0x260 [ 1231.957699] ? __pfx___sys_socket+0x10/0x10 [ 1231.957716] ? lock_release+0xc8/0x290 [ 1231.957731] ? __might_fault+0xe0/0x190 [ 1231.957750] __x64_sys_socket+0x73/0xb0 [ 1231.957768] do_syscall_64+0xbf/0x360 [ 1231.957789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1231.957802] RIP: 0033:0x7f010bb84197 [ 1231.957812] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1231.957823] RSP: 002b:00007f01090f7098 EFLAGS: 00000293 ORIG_RAX: 0000000000000029 [ 1231.957835] RAX: ffffffffffffffda RBX: 00007f010bc95f60 RCX: 00007f010bb84197 [ 1231.957844] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1231.957851] RBP: 00007f01090f81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1231.957859] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000020000040 [ 1231.957868] R13: 0000000000000000 R14: 0000000000000006 R15: 0000000020000080 [ 1231.957887] [ 1231.986191] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO 03:34:55 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0xfffffffffffffd83}, './cgroup/cgroup.procs\x00'}) 03:34:55 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000040)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x30, 0x2c, 0x0, @empty, @mcast2, {[], @time_exceed={0x5, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "b07b00", 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}}}}}, 0x0) 03:34:55 executing program 0: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[], 0x131) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xec, 0x0, 0x500, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0xc4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x52979851}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x227}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x35}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa0000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x500}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9c}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008800) r3 = dup(r1) copy_file_range(r3, 0x0, r0, 0x0, 0x401, 0x0) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000000)) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 03:34:55 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{0x15}, {0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) 03:34:55 executing program 5: pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000a40)) 03:34:55 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1232.056238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:34:55 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x1267, &(0x7f0000000000)) [ 1232.125443] audit: type=1326 audit(2000000095.615:150): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=70679 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f04558e5b19 code=0x0 [ 1232.952901] audit: type=1326 audit(2000000096.445:151): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=70679 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f04558e5b19 code=0x0 03:34:56 executing program 5: r0 = memfd_create(&(0x7f0000001280)='\x00', 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000080), &(0x7f0000000000)='system_u:object_r:klogd_var_run_t:s0\x00', 0xb, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syncfs(0xffffffffffffffff) 03:34:56 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:34:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000002840)=0xffffffffffffffff, 0x4) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="d7", 0xfd58}], 0x1}}], 0x1, 0x48080) sendmmsg$inet6(r0, &(0x7f00000021c0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)='0', 0x1}], 0x1}}], 0x1, 0xd0) 03:34:56 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') read$char_usb(r0, &(0x7f0000000080)=""/153, 0x99) 03:34:56 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) 03:34:56 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{0x15}, {0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) 03:34:56 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) r2 = fork() wait4(0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x140, 0x0) tkill(r2, 0x1d) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x0, "a2aafab3eb596f2c8ce4e26705d4e404b10992d072d6d642216ca45ad8efab6f"}) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="0900140007000000121466696c653000f1713f0c59b3604bc4737dafdae2c5fcc3d1dff17db09b3f4d1fb6aeaf28a95c381a2f2ca84dd5f6ff0f000061801c4c6f220f3cf987d12585c8cf0697ff63d4f34b4bdfd656330a856dce8883392ccc876bee9f156761cd4d3a372f79853e3614f625e273df096bbfb19cbc20799938f63c"]) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x41002206}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0xb, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x20008000) 03:34:56 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) (fail_nth: 14) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) [ 1233.067208] SELinux: Context system_u:ob is not valid (left unmapped). [ 1233.073800] audit: type=1400 audit(2000000096.563:152): avc: denied { associate } for pid=70687 comm="syz-executor.5" name="memfd:" dev="tmpfs" ino=536 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:ob" 03:34:56 executing program 5: r0 = memfd_create(&(0x7f0000001280)='\x00', 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000080), &(0x7f0000000000)='system_u:object_r:klogd_var_run_t:s0\x00', 0xb, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syncfs(0xffffffffffffffff) [ 1233.164492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1233.180844] audit: type=1326 audit(2000000096.672:153): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=70704 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f04558e5b19 code=0x0 03:34:56 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000d9f4655fd9f4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000085f42d27379e44ba9a8dcb77402e9f71010040000c000000000002", 0x27, 0x4e0}], 0x0, &(0x7f0000013e00)) 03:34:56 executing program 6: set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x5db) syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) 03:34:56 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_audit(0x10, 0x3, 0x9) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) 03:34:56 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x400445a0, &(0x7f0000000000)) 03:34:56 executing program 4: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:34:56 executing program 5: r0 = memfd_create(&(0x7f0000001280)='\x00', 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000080), &(0x7f0000000000)='system_u:object_r:klogd_var_run_t:s0\x00', 0xb, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syncfs(0xffffffffffffffff) 03:34:56 executing program 6: set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x5db) syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) 03:34:56 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) setns(r0, 0x0) 03:34:57 executing program 0: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[], 0x131) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000019c0)={0x0, 0x200, 0xffff, 0x1}) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$binfmt_script(r3, &(0x7f00000002c0)=ANY=[], 0x131) r5 = dup(r4) copy_file_range(r5, 0x0, r3, 0x0, 0x401, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x802, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r6, 0x50009401, &(0x7f0000000100)={{r7}, "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"}) syz_mount_image$msdos(&(0x7f0000001100), &(0x7f0000001140)='./file0\x00', 0x5, 0x8, &(0x7f00000016c0)=[{&(0x7f0000001180)="d5c3e7ac700b619c64bd93bd1c4cca97d95a11b4368c9fa5b74617c2102a33876fac98dc35bc8eab4f4d7f93a65a59c6e33ce09574221eea0d87319adb5f64a3aa5ad7a3edb5a44078eb4a83f0c900fcd7f5dfda3e81df0ac47dad2a2b03b31f5b7a17fe03b7db0b42d946b6361424132c7f57cbffd7f7503ec9f9b065cff8b663087d03a39db57ae7692db9dc71de3f82b49e9c6b0bf67bbb02497a", 0x9c, 0x8}, {&(0x7f0000001240)="ce2bcf521b868c37ad0a026e56c6e3e822f663aef53da622b441e23944bd5af7a5bc021cc36063e231ccc2bc12945c6747b835b42c5eb9a212c36f99d836c425ac9120e778ecd719d5b4ece79fd988b3faddfeb4e62192c941d44675680437ca5ff939081a573b0c74e3c514204ac49cee44b6e9d8ba07c1a46ccab62e0c24c641d2e5350e48a5619857db79c4732aa3da236625d1a258d127970b8857bbfb8acbd90baf8b77f20fb4c21d322c3394a174f2db1e244266fee684668da987eb96e6141c2e7033bad766d3415421be56b4608c50a181a0b04c5659bc455d8e9301c2dc2602f2b504", 0xe7, 0x40000000}, {&(0x7f0000001340)="11f9a7d3bf1f4e6698b9bf94a2b57aa01ee65212072546db058fa384c3df60dafba4233ae78a267c7c7f278b1f57e37a1373a530201f69ad4631ef6c0efee129d3bbaf89a60c5205433ffa60a4548a9970fbe2f0a46b33314c0a9057e078f9136551b3ad3c38692cc61b4bae40ed90db274bff9f035502fd4a5e1a8366aeeabbb8080fd5946dd916c760ddd558177f335905e8466e4a6b87199d473f0b511a41da0200d0139cbd87a29fa17d22aff420d7b8a11ba19e4a663682b1685b496b8c3ef315a828853b501d670cb907f01a41127f547783e2d6241a324efd660399a0cc72b4c2e5b74a7de89007c8", 0xec}, {&(0x7f0000001440)="ce2044f2b1b382289a6e2876e4fa10107ae69e42a9475cafb76289d9c79ee84baa6ad25662b9bc6c989554dea0c55cd685d271060943c2e03ef65edeb37f2e7dc0d0dcb290a43ab79faeae79ea6bf56fe9181a131629a6d0167be4cd70702a710f3a0ce2b41d3ae359f226057bf25eaca7b4ae0aa278c6fc945fc83f34a3cf33c86f1737c98aa27424d6b2d28afaf5dcaa78b73e2d975e41c0a68f78bb24d236f8500ae28a1df06ab57fc7ec8eba14a427ed7e4b89362075cf76c6d3fae978bdebb6923b8e874057aa62effed56c883c34678b3a7df81a6d9314cb8678fb2fff6491b033e37c2c04cc8c0886c8692c328a", 0xf1, 0x5}, {&(0x7f0000001540)="8bc9db72b1a7c20b8b", 0x9, 0xfffffffffffffffe}, {&(0x7f0000001580)="ee7131565042ed9e49a048dbfd390a3e232539028193868702899a6160dc74904459d77cb5e6c22bb2a95056bcef6244582e7b69fbcf368f915c3945", 0x3c}, {&(0x7f00000015c0)="eb2e5400cf2e0d27366ed601c94ba1718b9fec5eab735063fecd1b8632b6038ddd75432f49bf75d2c5a249c0ef5df9110d088df983f382b93dae273ca65c6f5b6c636f8b595a44ec975e54a9f9579eea2677ba1a144657", 0x57, 0x7fffffff}, {&(0x7f0000001640)="4a2745cadf89fe9349ddebc144f54eefc3ce7f5e7fd7583989dbe017986fe3dc1786a825b127177cae873cc82ee886893bfe7470dd3f31b2e954015fc9574fcdd3954e909dd87a591110b8d44484ffe50e6e0fd7779e12bc18d824f4ce23cca4dd7381bb5fc812bb8375412d7b300f48e9f86be48be8afd7ca8d", 0x7a, 0xfffffffffffeffff}], 0x802, &(0x7f00000018c0)=ANY=[@ANYRES64=r3, @ANYRESDEC=0x0, @ANYBLOB="0000566489c28070077b9cbb4e0fec91ed4c2a37f77d3b990c49a80617d4916d2a032d606bd412d56abcd807b7eabb51b6da1995e0486717ce1b371c546bb52d2b06348563db01a2ddacf8372310bb55dcee203e4e463829b1ec059a591435f3501a55656fdf81b3421f6fe7c788f8688489ede35ce42e01238ac34beb73c883b3fe651c5e454ef89ac345ea9f9ec6eb3fa6155b4e4a0bb699d7de200e1d5680a818f373ea55c3a7d429687536dc28472a209e7486897e"]) [ 1233.669306] loop0: detected capacity change from 0 to 264192 [ 1233.672431] msdos: Unknown parameter '' [ 1233.694681] loop0: detected capacity change from 0 to 264192 [ 1233.697159] msdos: Unknown parameter '' 03:34:57 executing program 2: syz_emit_ethernet(0x36, &(0x7f00000002c0)={@link_local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "2f2802", 0x0, 0x11, 0x0, @local, @local}}}}, 0x0) 03:34:57 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) (fail_nth: 15) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:34:57 executing program 5: r0 = memfd_create(&(0x7f0000001280)='\x00', 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000080), &(0x7f0000000000)='system_u:object_r:klogd_var_run_t:s0\x00', 0xb, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syncfs(0xffffffffffffffff) 03:34:57 executing program 6: set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x5db) syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) 03:34:57 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{0x15}, {0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) 03:34:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f00000000c0), 0x4) 03:34:57 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) shutdown(r0, 0x0) recvmmsg$unix(r0, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 03:34:57 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x1}, 0x8) read$rfkill(r0, &(0x7f0000000000), 0x8) [ 1234.099552] FAULT_INJECTION: forcing a failure. [ 1234.099552] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1234.102009] CPU: 1 UID: 0 PID: 70844 Comm: syz-executor.7 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) [ 1234.102041] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1234.102055] Call Trace: [ 1234.102063] [ 1234.102072] dump_stack_lvl+0xfa/0x120 [ 1234.102113] should_fail_ex+0x4d7/0x5e0 [ 1234.102146] should_fail_alloc_page+0xe0/0x110 [ 1234.102173] prepare_alloc_pages+0x1af/0x500 [ 1234.102200] ? __is_insn_slot_addr+0x2e/0x290 [ 1234.102239] __alloc_frozen_pages_noprof+0x17f/0x1f10 [ 1234.102280] ? __is_insn_slot_addr+0x140/0x290 [ 1234.102314] ? kernel_text_address+0x5b/0xc0 [ 1234.102339] ? local_lock_acquire+0xf/0x80 [ 1234.102359] ? __kernel_text_address+0xd/0x40 [ 1234.102385] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1234.102415] ? arch_stack_walk+0x9c/0xf0 [ 1234.102455] ? perf_trace_lock_acquire+0xc9/0x700 [ 1234.102491] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1234.102520] ? policy_nodemask+0xeb/0x4e0 [ 1234.102557] alloc_pages_mpol+0xed/0x340 [ 1234.102595] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1234.102627] ? __pfx_perf_trace_lock+0x10/0x10 [ 1234.102652] ? get_vma_policy+0x23b/0x350 [ 1234.102688] vma_alloc_folio_noprof+0xe9/0x440 [ 1234.102720] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1234.102750] ? find_held_lock+0x2b/0x80 [ 1234.102783] ? __handle_mm_fault+0x7ed/0x30f0 [ 1234.102821] ? lock_release+0xc8/0x290 [ 1234.102867] __handle_mm_fault+0x142c/0x30f0 [ 1234.102914] ? do_user_addr_fault+0x4aa/0xeb0 [ 1234.102950] ? __pfx___handle_mm_fault+0x10/0x10 [ 1234.102980] ? lock_release+0x121/0x290 [ 1234.103036] handle_mm_fault+0x2c3/0x900 [ 1234.103068] ? access_error+0x17d/0x380 [ 1234.103098] do_user_addr_fault+0x4fa/0xeb0 [ 1234.103133] exc_page_fault+0xb0/0x180 [ 1234.103166] asm_exc_page_fault+0x26/0x30 [ 1234.103188] RIP: 0033:0x7f010bb20858 [ 1234.103206] Code: b9 0c 00 00 00 89 57 50 31 c9 89 d2 44 89 f7 4c 8d 44 24 14 c7 44 24 1c 00 00 00 00 48 c7 44 24 14 00 00 00 00 66 89 44 24 14 e3 4f 01 00 48 89 c6 8b 43 50 48 39 f0 74 48 40 84 ed 0f 85 79 [ 1234.103228] RSP: 002b:00007f01090f7000 EFLAGS: 00010246 [ 1234.103248] RAX: 0000000000000010 RBX: 00007f01090f70f0 RCX: 0000000000000000 [ 1234.103262] RDX: 0000000000000020 RSI: 00007f01090f7140 RDI: 0000000000000004 [ 1234.103276] RBP: 0000000000000001 R08: 00007f01090f7014 R09: 000000000000000c [ 1234.103290] R10: 00007f010bbdc800 R11: 00007f010bbdc801 R12: 00007f01090f7068 [ 1234.103305] R13: 00007f01090f7140 R14: 0000000000000004 R15: 0000000000000000 [ 1234.103357] [ 1234.137220] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF 03:34:57 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) shutdown(r0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) 03:34:57 executing program 6: set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x5db) syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) 03:34:57 executing program 0: setxattr$incfs_size(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=0xfffffffffffffff8, 0x8, 0x2) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 03:34:57 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f00000004c0)={0x0, 0x8}) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000540), 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000480)={0x1, 0x1, 0x15, 0x1d, 0x1c7, &(0x7f0000000080)}) [ 1234.251003] audit: type=1326 audit(2000000097.738:154): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=70862 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f04558e5b19 code=0x0 [ 1234.303747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:34:58 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{0x15}, {0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) 03:34:58 executing program 4: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 03:34:58 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002dbd7000fbdbdf2505000008000300", @ANYRES32=r2, @ANYBLOB="0c00060001000000010000000c00060001000000010000000c00060002000000020000000c0006000100000001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4084800}, 0x4004841) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000380)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0xff}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x15}]}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)={0x150, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x4}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_SEC_DEVKEY={0x60, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x3c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0xffffffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7fffffff}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xffffff00}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x84, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xffffffff}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xd5}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xe}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x3c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6a1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x150}, 0x1, 0x0, 0x0, 0x801}, 0x4000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r8) sendmsg$IEEE802154_LLSEC_GETPARAMS(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r9, 0x409, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000680)={0x6c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_KEY={0x28, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xb3}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "6ecc19f69ac6295fb21e7fde7a909e38"}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8001}, 0x4) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 03:34:58 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f00000004c0)={0x0, 0x8}) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000540), 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000480)={0x1, 0x1, 0x15, 0x1d, 0x1c7, &(0x7f0000000080)}) 03:34:58 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) (fail_nth: 16) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:34:58 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x800001a}) 03:34:58 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/module/e1000', 0x4001, 0x0) [ 1235.174263] FAULT_INJECTION: forcing a failure. [ 1235.174263] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1235.176191] CPU: 1 UID: 0 PID: 71071 Comm: syz-executor.7 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) [ 1235.176223] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1235.176238] Call Trace: [ 1235.176246] [ 1235.176255] dump_stack_lvl+0xfa/0x120 [ 1235.176297] should_fail_ex+0x4d7/0x5e0 [ 1235.176332] _copy_from_user+0x30/0xd0 [ 1235.176368] move_addr_to_kernel.part.0+0x40/0x120 [ 1235.176408] __sys_sendto+0x1da/0x570 [ 1235.176434] ? __pfx___sys_sendto+0x10/0x10 [ 1235.176476] ? __pfx_perf_trace_lock+0x10/0x10 [ 1235.176506] ? rcu_read_unlock+0x2d/0xb0 [ 1235.176539] ? lock_acquire+0x15e/0x2f0 [ 1235.176572] ? __might_fault+0xe0/0x190 [ 1235.176598] ? find_held_lock+0x2b/0x80 [ 1235.176632] ? __might_fault+0x138/0x190 [ 1235.176657] ? lock_release+0xc8/0x290 [ 1235.176684] ? __might_fault+0xe0/0x190 [ 1235.176714] __x64_sys_sendto+0xe1/0x1c0 [ 1235.176737] ? syscall_trace_enter+0xf2/0x240 [ 1235.176765] do_syscall_64+0xbf/0x360 [ 1235.176806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1235.176830] RIP: 0033:0x7f010bb358ac [ 1235.176849] Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b [ 1235.176872] RSP: 002b:00007f01090f6fc0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1235.176895] RAX: ffffffffffffffda RBX: 00007f01090f70f0 RCX: 00007f010bb358ac [ 1235.176911] RDX: 0000000000000020 RSI: 00007f01090f7140 RDI: 0000000000000004 [ 1235.176926] RBP: 0000000000000000 R08: 00007f01090f7014 R09: 000000000000000c [ 1235.176941] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f01090f7068 [ 1235.176955] R13: 00007f01090f7140 R14: 0000000000000004 R15: 0000000000000000 [ 1235.176993] 03:34:58 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x0) 03:34:58 executing program 1: mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) mlock(&(0x7f0000525000/0x4000)=nil, 0x4000) mlock2(&(0x7f00007df000/0x3000)=nil, 0x3000, 0x0) munmap(&(0x7f00004a2000/0x1000)=nil, 0x1000) mlock(&(0x7f00005bf000/0x4000)=nil, 0x4000) munmap(&(0x7f00008b4000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x97d, 0x8000, 0x0) madvise(&(0x7f00007f6000/0x2000)=nil, 0x2000, 0x1) mlock(&(0x7f00009a9000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000) 03:34:58 executing program 4: pselect6(0x40, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000280)={0x0, 0x3938700}, &(0x7f0000000200)={&(0x7f00000001c0), 0x67}) 03:34:58 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001e80)='/proc/asound/seq/clients\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x403, 0x0) 03:34:58 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:34:58 executing program 4: r0 = inotify_init() mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000006, 0x11, r0, 0x0) 03:34:58 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x0) 03:34:58 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x2c, 0x30]}}}}]}) [ 1235.310190] audit: type=1326 audit(2000000098.796:155): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=71075 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f04558e5b19 code=0x0 [ 1235.537112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1235.585083] tmpfs: Bad value for 'mpol' [ 1235.590089] tmpfs: Bad value for 'mpol' 03:34:59 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000140)={@multicast, @link_local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @empty, @private, @random="645b467e8bd0", @rand_addr=0x7f000000}}}}, 0x0) 03:34:59 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x0) 03:34:59 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0xfffffffffffffffc) 03:34:59 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup2(r0, r1) 03:34:59 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000002c0)={0x4147, 0x0, 0x0, 'queue1\x00'}) io_uring_setup(0x1ff, &(0x7f0000000000)) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, 0x0) ftruncate(0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40605346, &(0x7f0000000080)={0x0, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000000)={0x4}) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000240)=""/107) 03:34:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f00000004c0)={0x0, 0x8}) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000540), 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000480)={0x1, 0x1, 0x15, 0x1d, 0x1c7, &(0x7f0000000080)}) 03:34:59 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 03:34:59 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x2, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:34:59 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000480)={0x0, @can, @ethernet={0x0, @remote}, @vsock}) [ 1236.247875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:34:59 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0xec4, 0x0, 0x4, 0x3, 0x0, 0x0, {}, [@typed={0x8, 0x84, 0x0, 0x0, @fd}, @nested={0xea5, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="1a53f900cdf3041ce324edc70b38da458f995287d7749654bde630bef04a5586194c5e57936e1c20374e555843f63b8736a702bdf195", @typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="7358126aa0cf6ff5520ad3d1f7bee5030987b99b992f6a1ba45f510eb622b59acc18fc3c516a601fb1963f42d72af1c3ecd23ebe8f35f4ac0a81ef9e746259d160d274bb8e578a660883aa71f8bb49cfe60e6e4cf9d48100d9d4a1db3a25aeb900a6182c58bf8fd5ba1df1105c3d1537192b0115417869327f455aadbf9d0f0c8963bfc71038f20133cabcf5", @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@empty}, @generic="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"]}]}, 0xec4}}, 0x0) 03:34:59 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x2, 0x0) lseek(r0, 0x0, 0x0) 03:34:59 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x0) 03:34:59 executing program 0: ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 03:34:59 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_mcast\x00') pread64(r0, &(0x7f0000000080)=""/120, 0x78, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) 03:34:59 executing program 3: getrandom(0x0, 0x0, 0x562fa4a55958f902) 03:35:00 executing program 5: io_setup(0x400, &(0x7f0000000000)=0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 03:35:00 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x4000056) dup3(r1, r0, 0x0) 03:35:00 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000140)=""/4096, 0x1000) getdents64(r0, 0x0, 0x0) 03:35:00 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x0, @any, 0x1, 0x2}, 0xe) 03:35:00 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x3, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:35:00 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f00000004c0)={0x0, 0x8}) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000540), 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000480)={0x1, 0x1, 0x15, 0x1d, 0x1c7, &(0x7f0000000080)}) 03:35:00 executing program 4: r0 = io_uring_setup(0x5053, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r0, 0x17, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 03:35:00 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r2, 0x8982, &(0x7f00000001c0)) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[], 0x131) r4 = dup(r3) copy_file_range(r4, 0x0, r1, 0x0, 0x401, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r5, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000001f00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="01fb6bfcff00000000001d"], 0x18}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r6, 0x2, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x5}, 0x4000) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 03:35:00 executing program 5: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) sigaltstack(&(0x7f0000ffb000/0x3000)=nil, 0x0) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000dec000/0x4000)=nil) 03:35:00 executing program 1: move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x300) 03:35:00 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{}]}]}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x38}}, 0x0) 03:35:00 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) fspick(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 03:35:00 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, r2, 0x3, 0x0, 0x0, {0x9}}, 0x14}}, 0x0) 03:35:00 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c0a, &(0x7f0000000840)) 03:35:00 executing program 3: setresuid(0xee01, 0xee00, 0x0) mlockall(0x5) 03:35:00 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000b80)=[{&(0x7f00000008c0)='!', 0x1}], 0x1, 0x4bbe, 0x0, 0x0) write(r0, &(0x7f00000000c0)='8', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 03:35:00 executing program 4: sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="17", 0x1, 0x0, 0x0, 0x0) getresgid(&(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800)) 03:35:00 executing program 3: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) pipe2(&(0x7f0000000080), 0x0) 03:35:00 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r2, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r0, r3, &(0x7f0000000040), 0x68e146a1) 03:35:00 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={{0x14, 0x28}, [], {0x14}}, 0x28}}, 0x0) [ 1236.865229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:01 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80003, 0xff) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{}, {0x0, @broadcast}, 0x8, {0x2, 0x0, @broadcast}, 'sit0\x00'}) 03:35:01 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x101a81, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[], 0x131) r3 = dup(r2) copy_file_range(r3, 0x0, r1, 0x0, 0x401, 0x0) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$binfmt_script(r4, &(0x7f00000002c0)=ANY=[], 0x131) r6 = dup(r5) copy_file_range(r6, 0x0, r4, 0x0, 0x401, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}, {@gid={'gid', 0x3d, r7}}]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r6, {0xee00, r7}}, './file0\x00'}) 03:35:01 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:35:01 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') read$char_usb(r0, &(0x7f0000000040)=""/109, 0x6d) write$tcp_congestion(r0, 0x0, 0x0) 03:35:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 03:35:01 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x4, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:35:01 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r2, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r0, r3, &(0x7f0000000040), 0x68e146a1) 03:35:01 executing program 4: r0 = io_uring_setup(0x44a, &(0x7f0000000100)={0x0, 0x0, 0x1}) io_uring_enter(r0, 0x0, 0x0, 0x3, 0x0, 0x0) 03:35:01 executing program 2: r0 = fork() move_pages(r0, 0x2, &(0x7f0000000000)=[&(0x7f00007a0000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil], 0x0, &(0x7f0000000040)=[0x0], 0x2) 03:35:01 executing program 4: prctl$PR_SET_MM_MAP(0x4a, 0xe, &(0x7f0000000380)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff4000/0x2000)=nil, 0x0}, 0x68) [ 1238.104038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:01 executing program 3: syz_read_part_table(0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000000)="fa61520d", 0x4, 0xb2e9}, {0x0}]) syz_read_part_table(0x0, 0x1, &(0x7f0000000b00)=[{0x0}]) 03:35:01 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0) 03:35:01 executing program 0: ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000180)={0x200, 0x81}) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x20a080, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000140)=0x20) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x101}}, './file0\x00'}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) dup(r2) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f00000001c0)={0x0, 0x5, 0x1}) ioctl$PTP_PIN_GETFUNC(r1, 0xc0603d06, &(0x7f00000000c0)={'\x00', 0x4, 0x2, 0xff}) 03:35:01 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = eventfd(0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/71, 0x47}], 0x1) write$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, 0x0) socket$nl_route(0x10, 0x3, 0x0) 03:35:01 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = memfd_secret(0x0) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000000)={0x5, 0x80, 0x64d}) write$rfkill(r0, &(0x7f00000000c0)={0xb, 0x4, 0x3, 0x1}, 0x12) 03:35:01 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f00000000000004000400000000000000050000000c", 0x29, 0x2200}, {&(0x7f0000011b00)="ed8100000a000000daf4655fdaf4655fdaf4655f000000000000010000000000000000100100000073797a6b616c6c6572730000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aa02805e000000000000000000000000000000000000000000000000200000007412ab417412ab417412ab41daf4655f7412ab410000000000000000000002ea040700000000000000000000000000006461746106015401000000000600000000000000786174747231000006014c01000000000600000000000000786174747232", 0xe6, 0x3c00}, {&(0x7f0000011f00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x6000}], 0x0, &(0x7f0000012c00)) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r1, 0x0) openat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) 03:35:01 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigaction(0x39, 0x0, 0x0, 0x8, &(0x7f0000000440)) 03:35:02 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) creat(&(0x7f0000000080)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 03:35:02 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fallocate(r0, 0x8, 0x0, 0xffffffff000) 03:35:02 executing program 0: write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 03:35:02 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x5, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:35:02 executing program 4: r0 = mq_open(&(0x7f0000000000)='\\\x00', 0x0, 0x0, 0x0) mq_notify(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) 03:35:02 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0xffffff85}) 03:35:02 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:35:02 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r2, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r0, r3, &(0x7f0000000040), 0x68e146a1) 03:35:02 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='proc\x00', 0xc009, 0x0) mount(0x0, &(0x7f0000000e00)='./file0/../file0\x00', 0x0, 0x20, 0x0) [ 1239.056658] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1239.058216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:02 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000f40)=[{{&(0x7f0000000480)={0xa, 0x4e21, 0x0, @loopback}, 0x1b, 0x0}}], 0x1, 0x0) 03:35:02 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x26, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) 03:35:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x1c, 0x12, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x1c}], 0x1}, 0x0) 03:35:02 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='proc\x00', 0xc009, 0x0) mount(0x0, &(0x7f0000000e00)='./file0/../file0\x00', 0x0, 0x20, 0x0) 03:35:03 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r2, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r0, r3, &(0x7f0000000040), 0x68e146a1) 03:35:03 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x26, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) 03:35:03 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='proc\x00', 0xc009, 0x0) mount(0x0, &(0x7f0000000e00)='./file0/../file0\x00', 0x0, 0x20, 0x0) 03:35:03 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:35:03 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[], 0x131) r3 = dup(r2) copy_file_range(r3, 0x0, r1, 0x0, 0x401, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000e80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_RULES={0x64, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9295}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x156}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x90000000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}]}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="38040000f303000127bd7000fbdbdf2500000000000000003f0000000600000000100000eb0a0000010000000800000005000000010000805b000000ac00000044810000070000008100000000000000070000002000000004000000050000007f0000000200000001800000000000000900000007000000fcffffff0000000004000000fbffffff0200000010c80000be0800000100000003000000000100000600000000010000090000000200000087da00000200000000020000050000000500000002000000ffffff7f01000000010000803be200000080000000000100bc0c0000000000003f0000005f000000fcfffffff9ffffff11f2ffff0500000008000000ffffffff050000000008000003000000f9ffffff050000003f0000002e660000fcffffff05000000d3000000000000000500000008000000955f0000af0000000800000000000000070000000101000072050000228ec8254000000000800000090000000000001e00040000080000007b0000003f000000e700000000020000cc00000000000000030000000000000005000000000000000100008011000000000000000235ba0000000800000000000000000001000100000001000080faffffff4000000001000000010000004000000005000000060000000700000008000000010100000700000009000000000000801f0000000500000000400000ffffff7f06000000090000000800000001000000fbe20000090000002c00000002000000000000009d42ffff050000000300000004000000ffffffff050000000000000000000000040000000000000005000000ffffff7f000ccd01f9ffffff890d0000717d0000000001000800000001000000040000003f00000081fffffffbffffff4a0000003e000000000000000500000008000000fdffffff7f0000000000000001000000ff0f000003000000010100008000000001040000010000000600000005000000050000000000000001000000ff000000feffffff050000000000000000020000d804000004000000dd000000f153133af9ffffff0100000006000000020000000000000001000000030000000700000001000000020000001f0000000500000009000000dc00000000010000730100000100000002000000090000000100000041010000ff0100000008000007000000feffffff92c8000009000000000000000800000015060000ffffffff568500000600000047d3000001000100ff0000000a09000002000000ff03000006000000040000000700000007000000080000001b000000ffff000000000000ff000000d50b0000080000000000000002000000000000000500000064040000a600000001000000030000000700000002000000040000000500000006000000ff0000001b3b00000500000001000000010000000000008004000000ffffffff0700000086000000160000005b16402a5d26407b5e2e247d5c290040005b2a5b2f000000"], 0x438}, 0x1, 0x0, 0x0, 0x4010001}, 0x40) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r5, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000001f00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="01fb6bfcff00000000001d"], 0x18}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000009c0)=""/160, 0xa0}, {&(0x7f0000000a80)=""/227, 0xe3}, {&(0x7f0000000b80)=""/184, 0xb8}, {&(0x7f00000004c0)=""/13, 0xd}, {&(0x7f0000000c40)=""/90, 0x5a}], 0x5, &(0x7f0000000d40)=""/73, 0x49}, 0x2040) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000e40)={'ip6gre0\x00', &(0x7f0000000dc0)={'ip6_vti0\x00', 0x0, 0x2f, 0x7f, 0x2, 0xc0, 0x22, @private0, @empty, 0x7801, 0x20, 0x5, 0x8ad7}}) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@empty, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f0000000100)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000fc0)={'wg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000002000)={'ip6_vti0\x00', &(0x7f0000001f80)={'syztnl0\x00', 0x0, 0x4, 0x7f, 0x9, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x3e}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x10, 0x7800, 0x1, 0x5}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000002040)={@initdev, @multicast1, 0x0}, &(0x7f0000002080)=0xc) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000002240)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002200)={&(0x7f00000020c0)=ANY=[@ANYBLOB="38010000", @ANYRES16=r6, @ANYBLOB="00002abd7000fbdbdf25130000003c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000300000000000800030001000000080003000100000008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="64000180080003000100000008000100", @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r9, @ANYBLOB="0800030001000000140002007465616d5f736c6176655f3000000000080003000200000008000100", @ANYRES32=r10, @ANYBLOB="140002006261746164763000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000100", @ANYRES32=r11, @ANYBLOB="180001801400020076657468305f746f5f62617461647600180001801400020064756d6d7930000000000000000000002c000180140002006272696467655f736c6176655f30000014000200626f6e645f736c6176655f30000000001c0001800800030001000000080003000100000008000100", @ANYRES32=r12, @ANYBLOB], 0x138}, 0x1, 0x0, 0x0, 0x4040000}, 0x8058) 03:35:03 executing program 2: setresuid(0xee01, 0xee00, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) 03:35:03 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x8, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:35:03 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:35:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)={0x24, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e9}]]}, 0x24}}, 0x0) 03:35:03 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x26, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) [ 1240.052804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:03 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x80a01, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 03:35:03 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='proc\x00', 0xc009, 0x0) mount(0x0, &(0x7f0000000e00)='./file0/../file0\x00', 0x0, 0x20, 0x0) 03:35:03 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x26, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) 03:35:03 executing program 2: perf_event_open(&(0x7f0000000340)={0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:35:03 executing program 1: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000}) 03:35:03 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[], 0x131) preadv2(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/224, 0xe0}, {&(0x7f0000000000)=""/17, 0x11}, {&(0x7f00000002c0)=""/183, 0xb7}], 0x3, 0xb06, 0xa, 0x20) r3 = dup(r2) copy_file_range(r1, 0x0, r2, 0x0, 0x38, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f00000000c0)) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x448401, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000400)={{0x1, 0x1, 0x18, r4, {0xffffffff}}, './file0\x00'}) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 03:35:04 executing program 2: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0xfff) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000008c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) 03:35:04 executing program 3: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "6b1000", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "f2cef8", 0x0, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], "6921c46dea706b26"}}}}}}}, 0x0) 03:35:04 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)) 03:35:04 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:35:04 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) dup(r1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x26100, 0x0) write$binfmt_script(r2, &(0x7f00000002c0)=ANY=[], 0x131) r4 = dup(r3) copy_file_range(r4, 0x0, r2, 0x0, 0x401, 0x0) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$binfmt_script(r5, &(0x7f00000002c0)=ANY=[], 0x131) r7 = dup(r6) copy_file_range(r7, 0x0, r5, 0x0, 0x401, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r5, 0xf501, 0x0) 03:35:04 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0xf, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:35:04 executing program 4: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(0x0, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x0) 03:35:04 executing program 5: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000001}) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000100)={0x0, 0x512, 0x4}) [ 1241.004517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:04 executing program 3: r0 = memfd_create(&(0x7f0000000000)=':^/\x00', 0x7) fstatfs(r0, &(0x7f000000b480)=""/139) 03:35:04 executing program 4: r0 = fsopen(&(0x7f0000000000)='securityfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000002c0)='(.}(,#}\x00', &(0x7f0000000040)='\xc8\xac#\x90\xfa\x06HQ#\xe6ed\"t\xba\xc1\xe4F\xb2\xfd\x84B:.\xa8S\xc2\x1c\xf7;G\x8fih\xafd\xbc\xbf\xf9<\xf8\xd9\xf9\x9a\x89u\xb5\x80p\xb8\xf0\xbe\xfd1\xc3%\x99S\xa73\xbc\xa1q\xae;\x0f\x02\x10\x8fqy\xfcR\xace\xe1\xadv\xb4\r\xff9\x82\xe5\xbb\xf0&\x84\x12hP\xa4\xc6\xfc\x1b\x18\xdb\xd3\xe6\xa6\xd2\xf9\x80O\x8a\xc2\b\xb4ka\xf5\xcbAW9|\xeb\x9b\xf3\x95\xc6\x01\x95sK\x95\xee\x7f4\x94#I\xbbf\xd0f$\xa4\xcd\xd69XIm\x8cR,L\x89\xb1\x7f\x8c\bo\xbd\xb4k9\xbd\xbf\xf1Y\xc9\xa7&t\x92\x97\x10\x8a0<=\xees\x01$\xa98v\xbc\'\xf4V*~\xf8\x99\x13\x826\x86\x1d9\x1b\xc1\xac\xc3\xe0\xd9\xd0\x98i\xa7\xc3\xd9-d1\x1d\x8d\xebJ\xe8b\xf5\x1b\xbb\x9f\xc26\xa5\x8by\x11\x9d\x12\xcd\xb5\n\xac\xedD:\xab`\x95\x05\xe4\x91T\xf4j\xa8\xa5hs\xf6\x04\xaa|\xb4\nE\x96i\xdf\x1f\xe9\xa6\xeaui\xf5\xc7$U\xa8-q\xfd\xce\xc1\xa9\xcb\xf9\xd4\xe0\xd3~;4i#\xb5q/5e4\xcf\xd1\xb4}k\xd3\x067l\xc8\x1d`\xb4\xf4\xeb\xc3e\x12A\xe4\xbeU[\xa8h\x9c\x12\xdf\x12P\x18\x1b\xfafpi\xb8\\M|/\xa7\xc5\t\x14\xcc\xc5\xb7\xa5H\xf1!\x89\xb3s\xd7\xa6\x97\xf2\x8d%\xca\"\xa3zV\ao9\xb4\xa7Ki\xe2i\xcd\xd0\xc0\xda_xE\x95%\xf3X\xc7\xb3\x11\xb5YW\xe8\xef\n\xabX\xaa*\xdd\xb5\x9e#\x140x0) io_submit(r0, 0x3a, &(0x7f0000000000)) 03:35:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) 03:35:05 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = creat(&(0x7f0000000400)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[], 0x131) r3 = syz_open_dev$vcsu(&(0x7f0000000100), 0x5, 0x2000) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r2) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$EXT4_IOC_GETSTATE(r5, 0x40046629, &(0x7f0000000340)) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x64, r4, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9ecc}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4000800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) dup(r6) r7 = dup(r1) copy_file_range(r7, 0x0, r0, 0x0, 0x405, 0x0) ioctl$FIBMAP(r7, 0x1, &(0x7f0000000000)=0x1) removexattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=@random={'osx.', '/dev/vcsu#\x00'}) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0xfa}, 0x8) 03:35:06 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') lseek(r0, 0x10000, 0x0) 03:35:06 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/time_for_children\x00') 03:35:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$SO_BINDTODEVICE(r1, 0x29, 0x17, &(0x7f0000000000)='lo\x00', 0x10) 03:35:06 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r0, 0x400, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='system.posix_acl_access\x00') 03:35:06 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) close(0xffffffffffffffff) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0) 03:35:06 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x3}, 0x4) 03:35:06 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0xffffff99, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:35:06 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x6a02, &(0x7f0000000000)=0x0) io_submit(r0, 0x3a, &(0x7f0000000000)) [ 1242.721351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:06 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x6a02, &(0x7f0000000000)=0x0) io_submit(r0, 0x3a, &(0x7f0000000000)) 03:35:06 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) setresuid(0x0, 0xee01, 0x0) ioctl$VT_SETMODE(r0, 0x5606, 0x0) 03:35:06 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x2}) 03:35:06 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x3e, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) 03:35:06 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) 03:35:06 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x6a02, &(0x7f0000000000)=0x0) io_submit(r0, 0x3a, &(0x7f0000000000)) 03:35:06 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000340)={0xffffffffffffffff, 0x8}) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) 03:35:06 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup2(0x20100000, &(0x7f0000001580)='./file0\x00', &(0x7f00000015c0), 0x0, 0x0) 03:35:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x7fffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000180)="601c6d9c98ae506e544cbf00088020000400000000f8000020004000030000000000000001", 0x25}], 0x0, &(0x7f0000000140)) 03:35:06 executing program 3: syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@fat=@discard}, {@fat=@sys_immutable}]}) 03:35:06 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x6a02, &(0x7f0000000000)=0x0) io_submit(r0, 0x3a, &(0x7f0000000000)) [ 1242.944080] No source specified [ 1242.947710] No source specified 03:35:06 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup2(0x20100000, &(0x7f0000001580)='./file0\x00', &(0x7f00000015c0), 0x0, 0x0) 03:35:06 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='cmdline\x00') pread64(r0, 0x0, 0x0, 0x0) 03:35:06 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x6a02, &(0x7f0000000000)=0x0) io_submit(r0, 0x3a, &(0x7f0000000000)) 03:35:06 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x6a02, &(0x7f0000000000)=0x0) io_submit(r0, 0x3a, &(0x7f0000000000)) 03:35:06 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup2(0x20100000, &(0x7f0000001580)='./file0\x00', &(0x7f00000015c0), 0x0, 0x0) 03:35:06 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d, 0xffffffffffffffff}}]}}) 03:35:06 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup2(0x20100000, &(0x7f0000001580)='./file0\x00', &(0x7f00000015c0), 0x0, 0x0) 03:35:06 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000340)={0xffffffffffffffff, 0x8}) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) 03:35:06 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x2) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) [ 1243.124111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1243.129488] 9p: Unknown access argument 18446744073709551615: -34 [ 1243.152361] 9p: Unknown access argument 18446744073709551615: -34 03:35:06 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup2(0x20100000, &(0x7f0000001580)='./file0\x00', &(0x7f00000015c0), 0x0, 0x0) 03:35:06 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup2(0x20100000, &(0x7f0000001580)='./file0\x00', &(0x7f00000015c0), 0x0, 0x0) 03:35:06 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa40024, &(0x7f0000000040)=ANY=[]) mknodat$loop(r0, &(0x7f0000000000)='./file0\x00', 0xffffc000, 0x0) 03:35:06 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000340)={0xffffffffffffffff, 0x8}) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) 03:35:06 executing program 6: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="1d", 0x1}], 0x1}, 0x40011) recvmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) 03:35:06 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000340)={0xffffffffffffffff, 0x8}) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) 03:35:06 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_linger(r0, 0x1, 0x2f, 0x0, &(0x7f0000000140)) 03:35:06 executing program 0: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[], 0x131) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000180)={0xff, 0x7ff, 0x3, 0x3, 0x15, "c9eb95f2795436a676ea18493290e00f92f919"}) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000740)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f0000000240)={0x4bc, 0x1, 0x5, 0x801, 0x0, 0x0, {}, [{{0x254, 0x1, {{0x2, 0x7}, 0x1, 0x6, 0x4, 0x800, 0xc, 'syz0\x00', "ed12fde5077d81822381045a38e0032995f5d3dc4c93afcfbd50375179c2712d", "3af5b0b746af9f7c8e29462b782ef98b84f04dd72e4ecf1a15f9334d8115edb3", [{0x0, 0x9, {0x0, 0x3}}, {0x146, 0x9, {0x2, 0x8000}}, {0x9, 0x180, {0x2, 0x3ff}}, {0x4, 0x3, {0x2, 0x10001}}, {0x8, 0x2, {0x1, 0x3}}, {0x401, 0xfff, {0x2, 0x1}}, {0x7, 0x1, {0x2, 0x6}}, {0x400, 0x4, {0x2, 0x1}}, {0x3ff, 0x20, {0x3, 0x7}}, {0x7ff, 0x2, {0x1, 0x81}}, {0xb9, 0x0, {0x1, 0x803}}, {0x4, 0x1, {0x1, 0x40}}, {0x1ff, 0x8, {0x1}}, {0x7ff, 0x5, {0x2, 0x7}}, {0x400, 0x2, {0x0, 0x2}}, {0xf001, 0x1, {0x2, 0x7fff}}, {0x8000, 0xf7ca, {0x0, 0xbb9}}, {0x80, 0x3, {0x1}}, {0x5, 0x4, {0x1, 0xffffffff}}, {0x8001, 0xef, {0x1, 0x7}}, {0x9, 0x0, {0x0, 0xfffffa81}}, {0x7f, 0x2548, {0x3, 0x7}}, {0x0, 0x8, {0x2, 0x401}}, {0x9, 0x9, {0x3, 0x8001}}, {0x0, 0x0, {0x2, 0x5f}}, {0x81, 0x1000, {0x3, 0x8}}, {0xe4, 0x3, {0x0, 0x9}}, {0x3f, 0x101, {0x1, 0x4}}, {0x1, 0x8, {0x2, 0x5}}, {0x5, 0x2, {0x1, 0x6}}, {0x6, 0x7, {0x2, 0x3}}, {0x7fff, 0x3f, {0x2, 0x3f41}}, {0x7ba4, 0x1, {0x2, 0x6e}}, {0x0, 0x9, {0x3, 0x2}}, {0x3, 0x1, {0x3, 0x6}}, {0x2, 0x400, {0x1, 0x3}}, {0xfffc, 0x1000, {0x3, 0x401}}, {0x5, 0x100, {0x3, 0xffff}}, {0xfff, 0x3, {0x0, 0x1}}, {0x1, 0x400, {0x3, 0x6}}]}}}, {{0x254, 0x1, {{0x0, 0x48}, 0x9, 0x8, 0x9, 0x3, 0xe, 'syz1\x00', "4b7a6326ec414672ffab0907fff8fa4885b4863316dbeb10559aebb408d57a50", "2ce4702ec49ad9d4864b6adc2d9dcce55b85da1bfbf1db1c04d0d9362bf138d1", [{0x2800, 0x3, {0x3, 0x2}}, {0x1, 0x6, {0x1, 0x5}}, {0x1f, 0x5, {0x3, 0x9}}, {0xfff8, 0x7a5, {0x0, 0x10001}}, {0x6, 0x1000, {0x0, 0x7ed3d2b7}}, {0x0, 0x200, {0x0, 0x200}}, {0xf87a, 0x3, {0x1, 0x1f}}, {0x1f, 0x395, {0x2}}, {0x1ff, 0x7f, {0x3, 0x9}}, {0x7, 0x2, {0x0, 0x68c842d5}}, {0x7, 0x3, {0x3, 0x5}}, {0x1, 0x9, {0x2, 0x1ff}}, {0x1, 0x8b0, {0x3, 0x8}}, {0xd1, 0xe7fa, {0x1, 0x7}}, {0x9, 0xff, {0x3, 0x7}}, {0x0, 0x6, {0x1, 0x401}}, {0x9, 0x6, {0x0, 0x3}}, {0x8, 0x0, {0x0, 0x6}}, {0x8, 0x8, {0x3, 0x5}}, {0x80, 0x8, {0x2, 0x9}}, {0x1, 0x7f, {0x1}}, {0x9, 0x8001, {0x0, 0x7}}, {0x3ea, 0x7, {0x1, 0x3}}, {0x4, 0x3, {0x3, 0xb9}}, {0x80, 0x0, {0x1, 0x93cf}}, {0x5c5, 0x4, {0x2, 0x6}}, {0x2, 0xb0e, {0x2, 0x1}}, {0x0, 0xad4, {0x1, 0xffffffff}}, {0x3ff, 0xce, {0x1, 0xcf8}}, {0xa2, 0x1000, {0x1, 0x3}}, {0x1000, 0xff}, {0x3ff, 0x4, {0x3, 0x5}}, {0xf5, 0x6, {0x2, 0x53067959}}, {0x2, 0x98, {0x1, 0x8}}, {0x2, 0x3, {0x1, 0xf63}}, {0x0, 0x200, {0x2, 0x1}}, {0x1, 0x4, {0x1, 0x1c}}, {0x0, 0x129f, {0x0, 0xfffffffb}}, {0x0, 0x27, {0x2, 0x7}}, {0x2, 0x5, {0x2}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x20}, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x40000000, 0x80, 0x3, 0x41, 0xfe}, 0x8) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$binfmt_script(r4, &(0x7f00000002c0)=ANY=[], 0x131) r6 = dup(r5) copy_file_range(r6, 0x0, r4, 0x0, 0x401, 0x0) accept$inet(r4, 0x0, &(0x7f00000001c0)) 03:35:07 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup2(0x20100000, &(0x7f0000001580)='./file0\x00', &(0x7f00000015c0), 0x0, 0x0) 03:35:07 executing program 4: getresgid(&(0x7f0000012540), 0x0, 0x0) 03:35:07 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') dup2(r0, r1) 03:35:07 executing program 5: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'syz_tun\x00', &(0x7f00000000c0)=@ethtool_test}) 03:35:07 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x44c801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 03:35:07 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) 03:35:07 executing program 6: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) kexec_load(0x0, 0x0, 0x0, 0x0) 03:35:07 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x3) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:35:07 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, 0x0) [ 1244.286245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:07 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="0f", 0x1}], 0x1, 0x0) 03:35:07 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) dup(r2) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4202, 0x0) write$binfmt_script(r3, &(0x7f00000002c0)=ANY=[], 0x131) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$binfmt_script(r5, &(0x7f00000002c0)=ANY=[], 0x131) r7 = dup(r6) copy_file_range(r7, 0x0, r5, 0x0, 0x401, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', r5, &(0x7f0000000180)='./file0\x00', 0x5) r8 = dup(r4) ppoll(&(0x7f0000000000)=[{r2, 0x400}, {r8, 0x1}], 0x2, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000100)={[0xfff]}, 0x8) 03:35:07 executing program 6: r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1}, 0x6e) bind$unix(r0, &(0x7f0000000100)=@abs={0x1}, 0x6e) 03:35:07 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 03:35:07 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0200000003000000040000006a000f000300040000000000000000000f00bc0f", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d5f4655fd5f4655fd5f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000012c00)) 03:35:08 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000140)={@dev={0xac, 0x14, 0x14, 0xc}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7, 0x20}}, './file0\x00'}) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e22, @remote}, {0x6, @local}, 0x8, {0x2, 0x4e24, @local}, 'veth1_vlan\x00'}) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @multicast2=0xe000000a}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x8}}, {0x2, 0x0, @broadcast}, 0x104, 0x0, 0x0, 0x0, 0x401, 0x0, 0x4}) 03:35:08 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x1000000) 03:35:08 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/116, 0x74}, {0x0}, {&(0x7f0000000340)=""/199, 0xc7}], 0x3, 0x0, 0xa8}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000080), 0x10, 0x0) 03:35:08 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:ssh_exec_t:s0\x00', 0x20) 03:35:08 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x4) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:35:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@private2, @mcast1, @loopback={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000a}) 03:35:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x1c, 0x24, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x1c}], 0x1}, 0x0) [ 1244.802415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:08 executing program 6: r0 = memfd_create(&(0x7f0000000040)='\x86e\x1a`z\xa2V\xcd\x92\xfb%\x1a\x1fj&\t\x18\x00\xa1\xe0\x15\x0f\n\xd5:?\xf1\xc22\xe2\xfe\xbb\n\xbb\x10\xbe9>\xceo\x8cu.\xac\bEhd\x83\xa1\xdf\x90_\v\xc5]\x96W\'%:a\x94g\xe4]i\xdf~\"vyEf\x85?)Z\x1a\x9a\xb74)\xd0(\x01', 0x6) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x800}) 03:35:08 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000140)={@dev={0xac, 0x14, 0x14, 0xc}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7, 0x20}}, './file0\x00'}) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e22, @remote}, {0x6, @local}, 0x8, {0x2, 0x4e24, @local}, 'veth1_vlan\x00'}) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @multicast2=0xe000000a}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x8}}, {0x2, 0x0, @broadcast}, 0x104, 0x0, 0x0, 0x0, 0x401, 0x0, 0x4}) 03:35:08 executing program 0: ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000280)) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[], 0x131) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xfffffffc}}, './file0\x00'}) r3 = openat$cgroup_int(r0, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) mount$9p_unix(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00', &(0x7f00000007c0), 0x2008803, &(0x7f0000000800)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x80000001}}, {@noextend}, {@access_any}, {@loose}], [{@smackfstransmute={'smackfstransmute', 0x3d, ',,'}}, {@fowner_gt={'fowner>', 0xee01}}]}}) r4 = dup(r1) copy_file_range(r4, 0x0, r0, 0x0, 0x401, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000000c0)={0x0, @empty, @local}, &(0x7f0000000100)=0xc) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r6 = accept$inet6(r2, 0x0, &(0x7f0000000200)) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r6, 0x4018f50b, &(0x7f0000000240)={0x9, 0x5, 0x6}) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffff9c, 0xc0406618, &(0x7f0000000000)={@desc={0x1, 0x0, @auto="2c2f318a556a70c1"}}) syz_usb_connect$cdc_ecm(0x3, 0x71, &(0x7f00000002c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x1, 0x3f, 0x10, 0x7f, [{{0x9, 0x4, 0x0, 0x9, 0x3, 0x2, 0x6, 0x0, 0x34, {{0x5}, {0x5, 0x24, 0x0, 0xc8}, {0xd, 0x24, 0xf, 0x1, 0x80000001, 0xce74, 0x1ff, 0x8}, [@country_functional={0x10, 0x24, 0x7, 0xfc, 0x20, [0x4, 0x0, 0xfffb, 0x7, 0x800]}, @obex={0x5, 0x24, 0x15, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x89}, @acm={0x4, 0x24, 0x2, 0x8}, @ncm={0x6, 0x24, 0x1a, 0x0, 0xb}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x81, 0xfc, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x5, 0x0, 0x9}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x201, 0x50, 0x20, 0x0, 0x40, 0x68}, 0x5, &(0x7f0000000380)={0x5, 0xf, 0x5}, 0x7, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0xc09}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x44a}}, {0x74, &(0x7f00000006c0)=ANY=[@ANYBLOB="740315010dbfc5ec1682edd75d7596b53fbde44eec90169be1278c354400debea4975f37c715ceed9951b657198d908f2a809407891dced42f9865af121f94638f56fa17dc27c32bc8b6a60eef4b94704c2f646bd0f028e085e3ec4ed28936cd25e0e3added23c2fcdbe44316c28b1feb858e196dc4ad82da4e623a8a0cc6e1557f2cef66b2d6d0eae2c355ecc7644bb84026a45d463887db0e338204654e481093a33aea0dfe2910b69029a5eaf437416c775ffae2e70b51d14b5ea0b3439ba608c335bf58ca2804ec0e1e03c1300"]}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0xc04}}, {0xa1, &(0x7f0000000500)=@string={0xa1, 0x3, "2c5eafe15c498fbea5757e52273034c3f7285ea4e5289e2d561321d847df194a2102369140b71f91264bb18e621f2f72fb239582bea9766aaa7fa4974a18f5e971ac161d31de5955c89b5f611d47eaff724dfa9930c64d5de5485823ee63d01e14b4d6d6c9ab0e0b1a6cff8a2f2a57adf4a07bdd302e58f3d5a1c18491a65a2a73578dd548f55ca8cc20ffecc5e7904bf01494328b54404ae46be2e280da7e"}}, {0x39, &(0x7f00000005c0)=@string={0x39, 0x3, "7162033b40c567971f30ea40a2ee1e414ce4a93a0e929689d681df25cf0a4b282d03921b9ff59ad1221ea06b977c800c715d0cfad02c49"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x500a}}]}) 03:35:08 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000004240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004140)=[@rights={{0x10, 0x1, 0x2}}], 0x10}}], 0x2, 0x0) [ 1245.002171] 9pnet_fd: p9_fd_create_unix (72846): problem connecting socket: ./file0: -111 [ 1245.024248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1245.031669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1245.551880] 9pnet_fd: p9_fd_create_unix (72846): problem connecting socket: ./file0: -111 [ 1245.555269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1245.557990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 03:35:09 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setregid(0x0, 0xee01) 03:35:09 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000140)={@dev={0xac, 0x14, 0x14, 0xc}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7, 0x20}}, './file0\x00'}) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e22, @remote}, {0x6, @local}, 0x8, {0x2, 0x4e24, @local}, 'veth1_vlan\x00'}) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @multicast2=0xe000000a}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x8}}, {0x2, 0x0, @broadcast}, 0x104, 0x0, 0x0, 0x0, 0x401, 0x0, 0x4}) 03:35:09 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) 03:35:09 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={[{@mpol={'mpol', 0x3d, {'default', '=relative', @val={0x3a, [0x36, 0xa]}}}}]}) 03:35:09 executing program 1: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$sock(r0, &(0x7f0000003180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1) 03:35:09 executing program 6: r0 = socket$inet(0x2, 0x80003, 0xa) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000)=0x3f, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) 03:35:09 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x5) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:35:09 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x84000, 0x124) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000140), 0x40, 0x800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000180)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000380)={{r4}, r5, 0x4, @unused=[0x1ff, 0x8, 0x100000001, 0x100000001], @name="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"}) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[], 0x131) r6 = dup(r2) copy_file_range(r6, 0x0, r1, 0x0, 0x401, 0x0) ioctl$CDROMMULTISESSION(r1, 0x5310, &(0x7f0000000000)={@lba=0x7, 0x0, 0x3}) [ 1245.626467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1245.687120] tmpfs: Bad value for 'mpol' [ 1245.699737] tmpfs: Bad value for 'mpol' 03:35:09 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) 03:35:09 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0xc0189436, 0x0) 03:35:09 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0xc0189436, 0x0) 03:35:09 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') pread64(r0, &(0x7f0000000380)=""/4096, 0x1000, 0x0) 03:35:09 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000140)={@dev={0xac, 0x14, 0x14, 0xc}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7, 0x20}}, './file0\x00'}) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e22, @remote}, {0x6, @local}, 0x8, {0x2, 0x4e24, @local}, 'veth1_vlan\x00'}) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @multicast2=0xe000000a}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x8}}, {0x2, 0x0, @broadcast}, 0x104, 0x0, 0x0, 0x0, 0x401, 0x0, 0x4}) 03:35:09 executing program 3: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000b80)=[{&(0x7f0000000a80)="36af5e1a", 0x4}], 0x0, 0x0) 03:35:09 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[], 0x131) r3 = dup(r2) copy_file_range(r3, 0x0, r1, 0x0, 0x401, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000000)={0x2, 0x1, 0x2, 0x7, 0x8}) 03:35:09 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) read(r1, &(0x7f0000000cc0)=""/4096, 0x1000) 03:35:09 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x6) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:35:09 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0xc0189436, 0x0) [ 1246.150132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:09 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0xc0189436, 0x0) 03:35:09 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind(r0, &(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast1, 0x1}, 0x80) 03:35:09 executing program 2: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x210002, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) 03:35:09 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETLED(r0, 0x4b32, 0x0) 03:35:09 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0xc0189436, 0x0) 03:35:09 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x210000, 0x0) 03:35:09 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0xc0189436, 0x0) 03:35:09 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x0, 0x1, 0x401}, 0x14}}, 0x0) 03:35:09 executing program 4: syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 03:35:09 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = gettid() tgkill(r0, r1, 0x0) 03:35:09 executing program 0: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[], 0x131) r2 = dup(r1) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000500), 0x400000, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) dup(r4) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$binfmt_script(r5, &(0x7f00000002c0)=ANY=[], 0x131) r7 = dup(r6) read(r5, &(0x7f0000000540)=""/72, 0x48) copy_file_range(r7, 0x0, r5, 0x0, 0x401, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xa, 0x3}) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f00000000c0)={0x0, 0x401, 0x0, [0x8001, 0x40, 0x0, 0xffffffff, 0x5], [0x9, 0x8, 0x100, 0x0, 0xd7, 0x4, 0x0, 0x9, 0x6, 0xfffffffffffffbff, 0x5, 0xffffffff, 0x7, 0x1ab, 0xfffffffffffffffa, 0x10000, 0x5, 0xffffffff80000000, 0x1, 0x81, 0x1, 0x5, 0x9b, 0x8, 0x1f, 0x1, 0x6, 0x20, 0x1f, 0x2, 0x6, 0x4, 0xffff, 0x955, 0x3, 0x7, 0x100000001, 0x0, 0xfff, 0x5, 0x1dbe0, 0xffffffff, 0x6, 0xbd, 0x80000000, 0x99, 0x200, 0xff, 0x3, 0x2, 0xffff, 0x886, 0xea, 0x8, 0x5, 0x1000, 0x1, 0x40, 0x4, 0x8, 0x1, 0x4, 0x4, 0x9, 0x0, 0x3, 0x80000001, 0x8, 0x2, 0xfffffffffffffffe, 0x7f, 0x7, 0x40, 0x6, 0x0, 0x6, 0xfffffffffffffff7, 0x0, 0x120000000, 0x7f, 0x8, 0x9, 0xfffffffffffffff8, 0x2, 0x3, 0x2, 0xcb, 0x686, 0x9, 0xfffffffffffffffe, 0x7, 0x0, 0x3f, 0x5, 0x4, 0x10000, 0xc2ee, 0x1ff, 0x9, 0x1, 0x2, 0x4, 0x40, 0x1, 0xdc2, 0x1ff, 0x1e8f, 0x4f, 0x0, 0x0, 0x6, 0x800, 0x5, 0x9, 0x0, 0xc, 0x0, 0x97, 0x4, 0x7]}) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 03:35:09 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000480), 0x0) read(r0, 0x0, 0x0) 03:35:10 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0xc0189436, 0x0) 03:35:10 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8910, &(0x7f0000000040)={'lo\x00'}) 03:35:10 executing program 4: syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 03:35:10 executing program 1: r0 = epoll_create(0x2b) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) r2 = epoll_create(0x8002) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0) dup3(r3, r2, 0x0) 03:35:10 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000480), 0x0) read(r0, 0x0, 0x0) 03:35:10 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = inotify_init() sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x0, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x3f}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x9}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x6}, @ETHTOOL_A_LINKINFO_PORT={0x5}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x8c0}, 0x20040090) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000000000)) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x160) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$binfmt_script(r2, &(0x7f00000002c0)=ANY=[], 0x131) r4 = dup(r3) copy_file_range(r4, 0x0, r2, 0x0, 0x401, 0x0) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$binfmt_script(r5, &(0x7f00000002c0)=ANY=[], 0x131) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0xfffffffffffffdef, r1, {0x80000000, 0x1000}}, './file0\x00'}) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$binfmt_script(r6, &(0x7f00000002c0)=ANY=[], 0x131) r8 = dup(r7) copy_file_range(r8, 0x0, r6, 0x0, 0x401, 0x0) fsetxattr(r8, &(0x7f0000000280)=@random={'system.', '/dev/rfkill\x00'}, &(0x7f00000002c0)='\x00', 0x1, 0x2) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 03:35:10 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLCREATE(r1, &(0x7f0000000080)={0x18}, 0x18) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getpgrp(0x0) tee(r0, r2, 0x20000000a, 0x0) 03:35:10 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) 03:35:10 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x7) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) [ 1246.809875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:10 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000480), 0x0) read(r0, 0x0, 0x0) 03:35:10 executing program 1: timer_create(0x8, 0x0, &(0x7f00000007c0)) timer_delete(0x0) 03:35:10 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x3c, 0x0, &(0x7f00000018c0)) 03:35:10 executing program 4: syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 03:35:10 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x8) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:35:10 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000480), 0x0) read(r0, 0x0, 0x0) 03:35:10 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080), 0x6) ioctl$sock_bt_hci(r0, 0x400448e6, 0x0) 03:35:10 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x20, r2, 0x1, 0x0, 0x0, {0x23}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) 03:35:10 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLCREATE(r1, &(0x7f0000000080)={0x18}, 0x18) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getpgrp(0x0) tee(r0, r2, 0x20000000a, 0x0) 03:35:10 executing program 0: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) 03:35:10 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLCREATE(r1, &(0x7f0000000080)={0x18}, 0x18) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getpgrp(0x0) tee(r0, r2, 0x20000000a, 0x0) [ 1247.197727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:10 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080), 0x6) ioctl$sock_bt_hci(r0, 0x400448e6, 0x0) 03:35:10 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendto(r0, &(0x7f00000005c0)="8c7fc64129ac560da60bdc0b888e", 0xe, 0x0, &(0x7f0000000040)=@hci={0x1f, 0x0, 0x4}, 0x80) 03:35:10 executing program 4: syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 03:35:10 executing program 3: io_setup(0x7, &(0x7f0000000000)=0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_submit(r0, 0x0, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000001980)='./file0\x00', 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x88080, 0x0) [ 1247.509034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:11 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x9) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:35:11 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLCREATE(r1, &(0x7f0000000080)={0x18}, 0x18) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getpgrp(0x0) tee(r0, r2, 0x20000000a, 0x0) 03:35:11 executing program 5: ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) sync() 03:35:11 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$unix(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}}], 0x1, 0x0) recvmmsg$unix(r1, &(0x7f0000004500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 03:35:11 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = inotify_init() getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0xd400080b) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 03:35:11 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080), 0x6) ioctl$sock_bt_hci(r0, 0x400448e6, 0x0) 03:35:11 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLCREATE(r1, &(0x7f0000000080)={0x18}, 0x18) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getpgrp(0x0) tee(r0, r2, 0x20000000a, 0x0) 03:35:11 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x131) r2 = dup(r1) copy_file_range(r2, 0x0, 0xffffffffffffffff, 0x0, 0x401, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000000)=0x5) r4 = pidfd_getfd(0xffffffffffffffff, r3, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c80), r4) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000d40)={&(0x7f0000000c40), 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x30, r5, 0x0, 0x0, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x0, @bearer=@udp='udp:syz0\x00'}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40014}, 0x4) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f00000001c0)={0x490, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0x58, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4000400}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x80e}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x401}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x40}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1000}]}]}, @NL80211_ATTR_REG_RULES={0x15c, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x48f87c05}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x81}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x814}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7fffffff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xdef}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x19483fbf}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffff9}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xa8ad}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x400}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xed8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x80}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x400}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xb7a}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x200}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x36}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x200}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xd99f}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xd39ef4ed}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x924}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x63}, @NL80211_ATTR_REG_RULES={0xd8, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000001}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffff9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9c0f}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1ff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x101}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2000000}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x318}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x200}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4d3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8000}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xe6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000001}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xd8}]}]}, @NL80211_ATTR_REG_RULES={0x64, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x800}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3ff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8001}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x400}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xf}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0x16c, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffff8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2fc}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2b05}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffffd}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x400}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xc6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x81}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xffff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3ff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x270fe567}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x20}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x400}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xda80}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x45}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x41e}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7a0}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}]}, 0x490}, 0x1, 0x0, 0x0, 0x8a0}, 0x4044) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r5, 0x400, 0x70bd27, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x48004}, 0x46895) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) 03:35:11 executing program 5: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) readahead(r0, 0x0, 0x0) [ 1247.706345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:11 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLCREATE(r1, &(0x7f0000000080)={0x18}, 0x18) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getpgrp(0x0) tee(r0, r2, 0x20000000a, 0x0) 03:35:11 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLCREATE(r1, &(0x7f0000000080)={0x18}, 0x18) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getpgrp(0x0) tee(r0, r2, 0x20000000a, 0x0) 03:35:11 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080), 0x6) ioctl$sock_bt_hci(r0, 0x400448e6, 0x0) 03:35:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x1c, 0x21, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x1c}], 0x1}, 0x0) 03:35:11 executing program 3: r0 = epoll_create(0x6) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x20000011}) epoll_pwait(r1, &(0x7f00000000c0)=[{}], 0x1, 0x80000001, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)={0x4}) 03:35:11 executing program 3: setgroups(0x0, 0x0) 03:35:11 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_linger(r0, 0x1, 0xd, 0x0, &(0x7f0000000140)) [ 1248.010587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:11 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x9) epoll_pwait2(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x20002000}) 03:35:11 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0xf) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:35:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x24}}, 0x0) 03:35:11 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) recvmmsg$unix(r0, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10000, 0x0) write$P9_RLINK(r2, 0x0, 0x0) 03:35:11 executing program 0: ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000000)) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f00000000c0)) r1 = msgget(0x1, 0x2a) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[], [{@euid_lt={'euid<', r3}}]}) r5 = getpid() pidfd_open(r5, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f00000001c0)={{0x3, 0xee00, 0xffffffffffffffff, r2, r4, 0x20, 0x2}, 0x0, 0x0, 0xa3, 0x8, 0x6, 0xffff, 0x9, 0x3ff, 0x1, 0x0, 0x0, r5}) 03:35:11 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f00000003c0)=@ethtool_dump={0x3f}}) 03:35:11 executing program 3: setresuid(0xee01, 0xee00, 0x0) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') 03:35:12 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x40049409, &(0x7f0000000040)) [ 1248.549318] tmpfs: Unknown parameter 'euid<00000000000000000000' [ 1248.569293] tmpfs: Unknown parameter 'euid<00000000000000000000' 03:35:12 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) [ 1248.592443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:12 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 03:35:12 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 03:35:12 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000240)=""/3) 03:35:12 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) recvmmsg$unix(r0, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10000, 0x0) write$P9_RLINK(r2, 0x0, 0x0) [ 1248.808853] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=73745 comm=syz-executor.1 03:35:12 executing program 4: write$tun(0xffffffffffffffff, 0x0, 0x0) 03:35:12 executing program 2: modify_ldt$read_default(0x2, 0xfffffffffffffffc, 0x0) 03:35:12 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x648b43, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[], 0x131) r3 = dup(r2) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$binfmt_script(r4, &(0x7f00000002c0)=ANY=[], 0x131) symlink(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0\x00') r6 = dup(r5) copy_file_range(r6, 0x0, r4, 0x0, 0x401, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f0000000700)={0x1, 0x3, 0x1000, 0x8f, &(0x7f0000000540)="aead5d1a10923898c571845c5e78ad76c25283766340f8f37e14a105f0ede434d43b2896aca9e067fdc2dc23d0e71a033be92b89ccafa3a1f4b21bcf874216b5f3a6027da1fea26e468b22761a294a0f32a1b8f5d19dd0f57894d929ab40384d6eee6a299cb791b2aa2662a2d71ddae9b0a3bff1d37034bbfb1e45f0e952811bf1d9a01d81c154b162fc04631c9716", 0xd5, 0x0, &(0x7f0000000600)="f9c0af89d1982b9219062051db70983b662dfdbd8f3c31ef977cdff0bd18aa0a04df477b2942fcbba4cb3a85a40a60f1f696c776f3089cddc4e9a6b301f4a13829507d431196638898906f44814406c491603ef5ed5aeeffb4488d7159b3e8b0b50dd4f4522a6640480b7a4698da457e0497ae5495c781f60424c3c46c4bddd563d162d71ee9baeeb6d6bde1392217faaf41642b3fe664d75573fb0e613aa5883054c35623ae810fd6ca505d851aaf436d5457df8c50ba392c6056aa39614ccc5590c8718da070268149195bd9fb6c296b3d08c798"}) r7 = signalfd4(r1, &(0x7f0000000000)={[0x9]}, 0x8, 0x800) ioctl$BTRFS_IOC_GET_DEV_STATS(r7, 0xc4089434, &(0x7f0000000100)={0x0, 0xffff, 0x1, [0x6, 0x0, 0xfffffffffffffffa, 0xf4ac, 0x3], [0x2, 0x86c, 0x3f, 0x101, 0x2, 0x9, 0x100000000, 0x8, 0x2, 0x9, 0x10001, 0x400, 0xd0fd, 0xdc7a, 0x3e, 0x401, 0x7, 0x9, 0x1, 0x6, 0x3, 0x6, 0x7fffffff, 0xfffffffffffffffa, 0x60, 0x3, 0x9, 0x9, 0x0, 0xfffffffffffffff8, 0x2, 0x7fff, 0x7fffffff, 0x8000, 0x0, 0x8, 0x7, 0x7a270073, 0x4f4, 0x20, 0x9, 0x9, 0x80000001, 0x6, 0x40, 0x1, 0x80, 0x7, 0x6, 0x7, 0x4e, 0x80000001, 0xffffffffec389c7c, 0x380, 0x9, 0x1, 0x800, 0x4, 0x8, 0x7fffffff, 0x200, 0x1, 0x0, 0x9, 0x200000000, 0x0, 0x20, 0x6, 0x9, 0xd69, 0x3, 0x0, 0x6, 0x2, 0x5, 0x7, 0x0, 0x2, 0x4000, 0x6eb000000000000, 0x0, 0x8, 0x5, 0x0, 0x7, 0x108c, 0xa1, 0xffffffff, 0x6a200000000000, 0x7, 0x8000000000000000, 0x800, 0x7, 0x8, 0x2067, 0x4f82, 0x10000, 0x101, 0x5, 0x4000000000000000, 0x40, 0x357, 0x80000000, 0xf5, 0x0, 0xffffffffffffff00, 0x6, 0x7f, 0xff, 0x4, 0x4, 0x10000, 0xbe, 0x4, 0xfffffffffffffff7, 0xbf2, 0xade, 0x9, 0x97, 0xc32c, 0x5]}) copy_file_range(r3, 0x0, r1, 0x0, 0x401, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/89}) fcntl$setlease(r1, 0x400, 0x3) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 03:35:12 executing program 6: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000008600)) 03:35:12 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x24040841, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) getsockname$inet(r0, 0x0, &(0x7f0000000040)) 03:35:12 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee00, 0x0) keyctl$chown(0x4, r0, 0x0, 0x0) 03:35:12 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 03:35:12 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) recvmmsg$unix(r0, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10000, 0x0) write$P9_RLINK(r2, 0x0, 0x0) 03:35:12 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x41a2c3, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[], 0x131) r3 = dup(r2) copy_file_range(r3, 0x0, r1, 0x0, 0x401, 0x0) readahead(r1, 0x7fff, 0x7) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 03:35:12 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000880)=[{&(0x7f0000000800)="100000001e2d0bf5a232d892e8b6bd4a", 0x10}], 0x1) 03:35:12 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x15, &(0x7f00000000c0), 0x4) 03:35:12 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x10) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) [ 1249.156125] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=73770 comm=syz-executor.1 [ 1249.161639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:12 executing program 3: r0 = epoll_create(0xe8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) r2 = epoll_create1(0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)) 03:35:12 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 03:35:12 executing program 6: syz_io_uring_setup(0x6ced, &(0x7f0000000000), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 03:35:12 executing program 0: link(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 03:35:12 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) recvmmsg$unix(r0, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10000, 0x0) write$P9_RLINK(r2, 0x0, 0x0) [ 1249.346095] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=73983 comm=syz-executor.1 03:35:12 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000140)="ed41000000100000daf4655fdbf4655fdbf4655f000000000000040008", 0x1d, 0x4100}, {0x0, 0x0, 0x50a21931}], 0x0, &(0x7f0000000280)=ANY=[]) 03:35:12 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{0x4}, {0x6}]}) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, 0x0) 03:35:12 executing program 4: r0 = socket$inet(0x2, 0x3, 0x26) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) recvfrom(r0, 0x0, 0x0, 0x10102, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:35:12 executing program 2: io_setup(0x8, &(0x7f0000000040)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000034c0)=0x1, 0x4) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='z', 0x1}]) [ 1249.481640] audit: type=1326 audit(2000000112.974:156): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=73992 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f33e32cfb19 code=0x0 [ 1250.314383] audit: type=1326 audit(2000000113.807:157): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=73992 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f33e32cfb19 code=0x0 03:35:13 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x42841, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x2000) 03:35:13 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 03:35:13 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1005841, 0x0) 03:35:13 executing program 4: r0 = fsopen(&(0x7f0000000180)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) 03:35:13 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000006c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) 03:35:13 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x894c, 0x0) 03:35:13 executing program 3: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffffffff000) pwritev2(r0, &(0x7f0000000380)=[{&(0x7f0000000040)="02", 0x1}], 0x1, 0x0, 0x0, 0x14) 03:35:13 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x11) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) [ 1250.476645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1250.490043] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=74027 comm=syz-executor.1 03:35:14 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000006c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) 03:35:14 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 03:35:14 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x894c, 0x0) 03:35:14 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000006c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) 03:35:14 executing program 4: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000340), 0x20000, 0x0) [ 1250.790388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:14 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x894c, 0x0) 03:35:14 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000006c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) 03:35:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) 03:35:14 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000006c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) 03:35:14 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) dup(r1) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000200)={0xffffffffffffffc1, 0x7}) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8b2e34c3c46d8472}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x3, 0x7, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfdf}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1000}]}, @NFACCT_PKTS={0xc}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000810}, 0x4000081) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) dup(r2) mkdirat(r2, &(0x7f00000001c0)='./file0\x00', 0x102) 03:35:14 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x12) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:35:14 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)='raw\x00', 0x0, 0x0, 0x0) 03:35:14 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x894c, 0x0) 03:35:14 executing program 3: mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x5) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000140)={0x0, 0x1}) openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) r0 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) clone3(&(0x7f0000000580)={0x0, &(0x7f0000000340), &(0x7f0000000380), 0x0, {}, &(0x7f0000000400)=""/113, 0x71, 0x0, &(0x7f0000000540)=[0x0], 0x1, {r0}}, 0x58) syz_mount_image$iso9660(0x0, &(0x7f0000001840)='./file0\x00', 0x3, 0x1, &(0x7f0000001980)=[{&(0x7f0000001880)="22724400ce17a1c656cb5ebf6ba28708e162ba6303e86ac6f4c0e0030deb85074923ff114555d5f7ded27bb4a8d0d774540dfb6a3d9826b3faedfe7a83ae4476b0d529241d3294d5b1f832db31f18b939f4cdbf43c9703fc6397c1", 0x5b, 0x895a}], 0x8, &(0x7f00000019c0)={[{@hide}, {@cruft}, {@map_normal}], [{@obj_type={'obj_type', 0x3d, 'tasks\x00'}}]}) accept(0xffffffffffffffff, &(0x7f0000001a00)=@in={0x2, 0x0, @remote}, &(0x7f0000001a80)=0x80) [ 1251.459978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:14 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) lseek(r0, 0x0, 0x4) 03:35:15 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000006c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) 03:35:15 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000006c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) 03:35:15 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[], 0x131) r3 = dup(r2) copy_file_range(r3, 0x0, r1, 0x0, 0x401, 0x0) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x6b) write$rfkill(r0, &(0x7f0000000080)={0xc75b, 0x1, 0xa, 0x1, 0x40}, 0x8) 03:35:15 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000), &(0x7f0000000040)=0x1) 03:35:15 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000040)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f00000001c0)={[{@usrquota}]}) 03:35:15 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000), &(0x7f0000000040)=0x1) 03:35:15 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000780)={0x8, 0x0, 0x0, 0x0, 0x0, "76c2c886334c5250"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000680)=0xff) 03:35:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x4a, 0x0, &(0x7f00000018c0)) 03:35:15 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000280)="d37a0be44b0a3b4cbf2261b16154bacc", 0x10) 03:35:15 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[], 0x131) r3 = dup(r2) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$binfmt_script(r4, &(0x7f00000002c0)=ANY=[], 0x131) r6 = dup(r5) copy_file_range(r6, 0x0, r4, 0x0, 0x401, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r7, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000800}, 0x8d4) copy_file_range(r3, 0x0, r1, 0x0, 0x401, 0x0) sendmsg$IPSET_CMD_HEADER(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0xc, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x4000801) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r8, 0x8982, &(0x7f0000000000)={0x8, 'wg0\x00', {'batadv_slave_1\x00'}, 0x3}) write$rfkill(r0, &(0x7f0000000080)={0x40000000, 0x8, 0x3, 0x3, 0x21}, 0x8) 03:35:15 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x14) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:35:15 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() pidfd_open(r0, 0x0) [ 1252.412469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:15 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) r1 = socket$unix(0x1, 0x5, 0x0) dup2(r1, r0) 03:35:15 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') pread64(r0, &(0x7f0000000300)=""/173, 0xad, 0x0) 03:35:15 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x3e, &(0x7f0000000240), 0x4) 03:35:16 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000), &(0x7f0000000040)=0x1) 03:35:16 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = epoll_create(0xe9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x4, r0, &(0x7f0000000280)={0x10000000}) 03:35:16 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@updpolicy={0xb8, 0x19, 0x441, 0x0, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}}}, 0xb8}}, 0x0) 03:35:16 executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @none={0x3}}, 0x14) 03:35:16 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000000080)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000010300)="030000000400", 0x6, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {0x0, 0x0, 0xffffffffffffff85}, {&(0x7f0000012e00)="ed41000000080000d8f4655fd8f4655fd8f4655f000000000000040004", 0x1d, 0x11080}], 0x1000049, &(0x7f0000013c00)) 03:35:16 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)={0x18, 0x0, 0x1, 0x3, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}}, 0x0) 03:35:16 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000), &(0x7f0000000040)=0x1) 03:35:16 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x15) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:35:16 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 03:35:16 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x5, 0x0, 0x2, 0x1}, 0x8) [ 1253.019222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:16 executing program 3: arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) 03:35:16 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) 03:35:16 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0xffffffffffffffff) 03:35:16 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/handlers\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/41, 0x72, 0x1fb) 03:35:16 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 03:35:16 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x16) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:35:16 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 03:35:16 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@updpolicy={0xb8, 0x19, 0x441, 0x0, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}}}, 0xb8}}, 0x0) 03:35:16 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x5422, 0x0) [ 1253.496476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:16 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000440)={0x0, 0x0, 0xa, 0x3c, 0x0, &(0x7f0000000040)="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"}) 03:35:17 executing program 5: prctl$PR_SET_MM_MAP(0x29, 0xe, &(0x7f0000000380)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff4000/0x2000)=nil, 0x0}, 0x68) 03:35:17 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@updpolicy={0xb8, 0x19, 0x441, 0x0, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}}}, 0xb8}}, 0x0) 03:35:17 executing program 6: move_pages(0x0, 0x1, &(0x7f0000000100)=[&(0x7f0000fff000/0x1000)=nil], &(0x7f0000000140), 0x0, 0x0) 03:35:17 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 03:35:17 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffe000/0x2000)=nil) 03:35:17 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x17) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:35:17 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') pread64(r0, &(0x7f0000000140)=""/81, 0xfffffffffffffe74, 0x0) 03:35:17 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/prev\x00') write$P9_RATTACH(r0, 0x0, 0x0) 03:35:17 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@updpolicy={0xb8, 0x19, 0x441, 0x0, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}}}, 0xb8}}, 0x0) 03:35:17 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) accept4(r0, 0x0, 0x0, 0x0) 03:35:17 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) 03:35:17 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 03:35:17 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000480)={0x20, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x20}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r3, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3f}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000044}, 0x4000000) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 03:35:17 executing program 6: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000100)={0x24, @short={0x2, 0x0, 0xffff}}, 0x14) 03:35:17 executing program 3: openat$cdrom(0xffffffffffffff9c, &(0x7f0000000600), 0xf0, 0x0) [ 1254.006542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:17 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readlink(0x0, 0x0, 0x0) 03:35:17 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0/file0\x00', 0x0) 03:35:17 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x24040841, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) 03:35:17 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_open_pts(r0, 0x0) 03:35:17 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x2, @ax25={0x3, @default}, @in={0x2, 0x0, @multicast2}, @sco={0x1f, @none}, 0x0, 0x0, 0x0, 0xfe80}) 03:35:17 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpriority(0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}, {@gid={'gid', 0x3d, r1}}]}) pipe(0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)) 03:35:17 executing program 2: r0 = syz_io_uring_setup(0x77b6, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000001240)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x15, &(0x7f00000011c0)=[{0x0}, {0x0}], 0x2) 03:35:17 executing program 0: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x200}}, './file0\x00'}) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, 0x2, 0x8, 0x301, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x20004}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7fff}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9300}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1f}, @CTA_TIMEOUT_UDP_REPLIED={0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000080}, 0x804) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000480)={0x20, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xe9}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x80}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008090}, 0x20000000) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 03:35:17 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000040)) flistxattr(0xffffffffffffffff, &(0x7f0000000080)=""/150, 0x96) 03:35:17 executing program 6: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000080)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f00000000c0)={[{@cruft}, {@hide}]}) 03:35:17 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b45, 0x4) 03:35:17 executing program 1: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f00000013c0)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1) 03:35:17 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x18) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) [ 1254.369256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:17 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "2f2802", 0x8, 0x0, 0x0, @local, @mcast2, {[], "d827c871e0866d27"}}}}}, 0x0) [ 1254.444145] tmpfs: Invalid gid '0x00000000ffffffff' 03:35:17 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) [ 1254.489878] tmpfs: Invalid gid '0x00000000ffffffff' 03:35:17 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x80108906, 0x0) 03:35:18 executing program 0: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[], 0x131) r2 = dup(r1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) dup(r3) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f00000001c0)={&(0x7f0000000100)=""/170, 0xaa, 0x0, 0xa6}) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0x0) write$rfkill(r0, &(0x7f0000000080)={0xfffffffd, 0x3, 0x3}, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) accept4(r2, &(0x7f00000003c0)=@qipcrtr, &(0x7f0000000440)=0x80, 0x80000) 03:35:18 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5312) recvfrom$inet(r0, &(0x7f0000000280)=""/152, 0x98, 0x103, &(0x7f0000000340)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) setgroups(0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0]) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f00000000c0)=""/10, &(0x7f0000000100)=0xa) recvfrom$inet6(r1, &(0x7f0000000140)=""/133, 0x85, 0x40002001, &(0x7f0000000200)={0xa, 0x4e24, 0x2, @loopback}, 0x1c) getgroups(0x1, &(0x7f0000000000)=[0x0]) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e20, 0x4, @local, 0xd503}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x1ff) 03:35:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$sock(r0, &(0x7f0000007800)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000000180)='#', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000002d40)='H', 0x1}], 0x1, &(0x7f0000003000)=[@txtime={{0x18}}], 0x18}}], 0x2, 0x0) 03:35:18 executing program 1: shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) [ 1254.680521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:18 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) get_robust_list(0x0, &(0x7f0000000f40)=&(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)}, &(0x7f0000000f80)=0x18) 03:35:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 03:35:18 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) 03:35:18 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_setup(0x6aff, &(0x7f0000000140)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:35:18 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 03:35:18 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_mount_image$msdos(&(0x7f00000005c0), &(0x7f0000000640)='./file0\x00', 0x1f, 0x8, &(0x7f0000001a40)=[{&(0x7f0000000680)="9a74e989600047988072f246ec10077447c23778e4c0baa2b4eb8b9e712018e4918c567ec81af02c686976753d630a8ca5fe000342286e040e4a83add9550205e3801112ab1010b34bda3b391deb40082df6a8f822432b403fe83299be210b57a67198597f80adcd96da44b4c8869191196294120cf5a839fa9245a1c90f277bbb49d1a6", 0x84, 0x59f}, {&(0x7f0000000740)="1ecce608f5ac42e0c9aee7", 0xb, 0x23}, {&(0x7f0000000780)="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", 0xfb, 0x9409}, {&(0x7f0000000880)="f1e964c32abdcf2983f89044bb61d745d47c647f6df96c750a97b72f98acdea2a16973d82c5504ff609de075380f34241522", 0x32, 0x3ff}, {&(0x7f00000008c0)="97a7a72a043b5fe10034983b8c61f7626b0259f24e92b094", 0x18, 0x2251}, {&(0x7f0000000900)="3cde4a987be710e34ebb4e9b41ab290286b4e91c06aeb392cf948ae4751c418aac1da365a16add083e5068e854a78a5c1003b35626e21d1c58b1dbd12190204f704f698c9572236400ed2a636285e33f96ee85f96b4fd1cd5c5eb32cd190874a7f9ca2925a405256a51f333a58507741c097ca49fef25f32d7b044febe146ccaa99b1803e34ce4934e6ff524f026256f6536a7af05b93be0ce5deacbc8d1e9021a8aa7b331402c6cfc57829bd46a4d33d4421a238222e53615759a1c510fc5692e6d1f19312d05ff8a85d79fa9c42540e6d835e60b3ce753d0bf493143b4b8dea8046c7df8047ee9c85a0879b45b7771", 0xf0, 0x6}, {&(0x7f0000000a00)="e07fad87eba8b2980d3bb361e597685cfd8c42b6315859c3a30e8b2476de338fdfc1a42cb0d59a8304c41db7a3cf64545b70833701dad519a59965c7e43e8385350018313a2b2e3cf9fc98573f50ad84807be4fa42d9d69acc48ef3120f913b2244c376be982603ebf45f51613b87946bd69cb341cae90f03cf592433e25295112e60eb905ba2580993ad070cc02ecdbc71ad3d6989d898ac3a828f650d6469f15af9125738d9996e12db182c3646c91001e11a51b52cbb80532ba9dfbf5807103dd0038ee525a88301192a39c629b1603eebcb5e66d2b8cf818bbdc2e9ab9eecff5ae72bb9cab254c9d113015cde90562be8b756f0a351bf7ab1ffc8fbe23f8a975bb365082bcf07ba347fb994bed98b30902a51730641470520f2fc6640462c87297d96e61f106a146b0f5974f0a8993df21420d260da9b728d93f68169a5fc95cf38a5099827c44a9d4c5a9e5731cc1c2611093a62e882e478f49eca3257dd9176862ec282cc7d6ab9287ad070af601df9ad3ac95ab63c5742e111cc16c0b1651f3b0a939f01b9c5a99f8e5a903318f624ff60dad4482919dee2697ae1f083379f6a4f829bdd9fa1212b48cc2faab9f03daf487f870d92cd0b2abed13353aee5ed23e76acda1538a2d44cf83c47d61723103b903ec99b49c8dcdca18ec2ceeeb332bb73fad9f5359330bec07a7e4d3d3fead262e2c11a8a8245c136cf08c9d3c0a9563d41f437358153d32ed0ea90f501f8560abbd0f0c5bebe6b7ebc3023ad28a41ef727f5cd42de712960f36a04ec4e4a3683328632ec7a7b9701d4375d5a53285386c1deec51bc9556376c95832724656c3fac11f3d256df5c8883c9539b6e494db9463e3bc3e2a974e055ff230a1bcd9abb45ecd0d662cf0965e096eab8a50b4ba94719af27e22cd2e18016c77b9988f58b7f5295b402217d37682f3931a8938a223cea3d7f2af42e774433a0841874397ecfc38a21e94332ae9f751ef7d76ec476e737301e21e6c6646659f2a3ba93eeed079d160acbe61272218e59bd25dc16f5b6be63d61a39a8df8d6a8ae9c18acb58fd849c9e5e898095071994fcce645e5ffc78a3483c050925a26108e8e565c4a908f9fa69f01f4fc9ae42ee6df539e6a86544010258615acd1ad233126ade8b8c23b3eee5febaa0c31ae239f99bc005d22e57d2d0feab9064eada991ce5c9975ebbddd59771b924145b653ff8e35bb6effc9c8c971a5278a8751b7c5d9e14617d1d5aaf8dd3116fd9e4b7c896a1f43bfbac4b8e1686586758706a2ac9dae81971b7f0d0d8002195e87bdfdf236f24d98e0dfc963f88c7cb62aa84f0fb92b9263050c419850f73e1d19dc20cb7ec7b6062aa969a35b471f139b89676fd92aa1b59224afca54d330288d0726f43976a3d28dd223a70a3c3cbbc76531dbc0d1ceac33a395000c441d057ff969d03df6683f416d67fafb01315438fb2b997d7c2eb57d0d6a474fbe7f21c5add4f67ba24db71841e329c3d3d178b108559117d30ca2471008dc9de3403e98fe8c0e7452551856519e98116bc7b1a42681f78e46d23e89449e25515bfe15f6db3ad5ac53c07d952f31357ea44e7f5ffeb5a40f0396571c0ec614a5585d035d899c8a502bc0c8973ea9d8dfffc726243e9a417e0d8786e81de3708911d593b90cec47ef22d6edb50a3428d6d5759027eff070389dc63859f00cfed1fe54f4e2bfe205f45e0726d6f8b88fb2e845336d1c1cd27848736a54e7b6cfd05bed7d1d0a34e1b09de546272d171dfd21f15839e97ee09cc8df5bc7a73d63c9221fa34ebaf84c64f983f27ad78b87af5f2b8158b9f1ab67718e552b8a0f869f3e2c1b5b8ada990059b39d38e00f4c55bc14b59764c8009faa911e20e9a29fd8250b039196a437fee932581e3d5d6a8028714915319d18271107d4f0a02b7470b96518234d665eddd42cd206037921f5a1fe484c0759c93bf8ae60fd34c5c0376390e9538ed594f7ad6e2cbb5c1efb9acaf53ea080cab32838d482f3d61d09b479fbf8d457ce33fd7e6aaa6c653af36b42182441529eaaa478a8b29b8263ab446926cb567bdf8ea5e3fcb5f212c97e93f988dc56aa75cbe73a75d8fc71e185b0d9e5d38ed99576e1cc082e3f1dc91f3566c17473cfa6d2804234f0b5343a97200670891627dbb5d2da51b02b811b35f045d83a5b9dcaa177f76c88febc7fdc7eed6c455d797560731d77b90e852d5addbe41b7a4b2eab3c3b21f45c1e8ba642f95d491ccbe68f187437d1ee05490bccc04e0d268c3726509cd95760ba33d59be9d3de1327f11db1e9f50493258ab1675a21dae034ee6d3cb0c8999df604ab8d064d3c3f6110dd57b79bfb6a2e05e99a408dc51e1b92ffd67f44fb54cb438bcdeeaf98e2d3c9f4f058d513ae4826e3e657c2ba01f564f5c7adfbce3ef0a9a9c5f59581eff8c383afe64e63de1ccb7d25f92d876ba1c1fee924c4b08c4c8376ed6f10cd665e334d5e7b7f30d17a65ab17578001a02192b13846952f03c229e52210afa7a71500795f5572fea0ae96d017ca5a6987906a81443a902abb0388fed24453acafa3d93beff7f1e3381b73c22c4c410c9516a4bfdb8e677dc90b5550db6bb2b6eb1d994ab51a8f83672e8f6a78620ee1e7b4b9ef5ca569f44c62dc859deebb82f8d511fe76e8db0005d873aecb8ea1e86ab342a794c9ce47bc331ef3a54a1cd6928ede7f73d7ea9c289eebca064e52a6b38be219d800c97e0a0557026cebf1c7df895e12ed6aa5c6de29a2eb8e550340ecfca44b6601d5241eb1006eee7da845efd85a52d20a7b1b2e7682c803e4da19426594564339cc5e362b79cef35f07c3c059fa1178c0068f654d3b3d229cc2fad5730965d0ecc4af6d324a00f3b7170d461d04d1881ef13cf557715f994493f4bdd100aac0eae19bb6c7e94a16a93610d0448954e08306f04ce89b723e6ad2181657ff98af975581ab5733cfcfcaa97afa2f6e13dc9c114a6fa69c48a64783faf2e68ac24ed86a9bd6abd8026bdf6ba043656f171c01c16cad5d153b89fb72603bd580297decb16bebccd53b9ca152f7c002094ad86c445e2f0f09cccf89669622c0391aba94cc47bab3442ec364976e729a1bfa8d0fd2b883541024c3bbf8175416afaeaec6c2058011ff3ed461341668dd1955355b05694aa96367c91057897add4697039ba4191233220fcf5121197a5242eb0edf35378c3c14140f812525de5258d190bdbb5a5ba9d9092cd235a5ce9e67fabda50073f794163158b6711903ab13cc7f84ed2f2c9e0036552ec682ec8055af910f4ebfb881440f434430a2b192427278a534923dcf5f88e14e38387649a45e132ec726fb10034b2750cb4a9c8de0a65a71cb140d988bbf5856ef2a10f25fea18c0d60a4a6c7befccc549f230aee7b452ad2b7d70355be780dda72104151070206fd0e9865f8f0287deaee80e65c1e5d840ea0e698460e437813f51b4bb0bee354a183475491ebc90d2457f232c8977a0f7031e1a5fd9ae127f3df1ec661426978ac7c7ddf3bfcacd764a9ec9aa84ae1f03a2c29d689d08b2e5e6ea17585cb96eee37cdb7fefd295e21f7d4a45c6c1aecd75d403ce43f8100004904af3c64463c36839983fe94675e2f1221a272eacdfb93c91f24f80204ae01fc60f15efee5d7faa01ca6af67041b2f4808e881d798e95e6d85eb3250386f4a08f0fcaba3bb327f349ae0780d8224a4490dac80af754bd8dd34594611f6033e5d1268a05f69c54cadc16c7ef72504ec4aacfc109d20d5f95c8cd133b7929803d51936b902c738589e77650ba79a5253f6be7904aec00776f17b40ba2e5fcd3158a9177c799e82ea8b59b406cc062cbb7c31383f7e59c69fe5efdf4d4c899cfb7289e59244a6786164b17b2f9b63aa84e079c66c8f921248f5b294b32f5c6b206d0aa0d3f45d1b6462d1d2a6346c91187c09ab5173174e3b35f181fc2cc18ef6906a6ec057fa2abe8fe1944d08033cf9189d1a5feb130dfe3c04ab823c69c992467bffbcc81f2801fd14c88760cb15068a763d37f502817b13b34fc8bf36553c48c25a2b6ce5781f95fac1004760b99470e643557d3479edd99043b98239545a4a17ac137b6d1a4c4bd5c86f7769ad745861be7b6ddeedb27bda606db44c54ca6f362d51c02e2f23b9150e1643fad7c9a687ac792b7b6c6ceadb47c49388e88a8c6d081d63c2eece9ced8c430656af987bf436f723d3104dff98f240c6255d1be58d249829961a9caa305c5b3c184ee5eda337cc479654a4ded4e6d7171c4151a6e48fd7ddaf02e3327b1223b6b63a19087b7062b9cd9d0573cc56328b6ceed16a30c4b63fa861666faa3b9fb9bd94d476b496f837f7f12edcaa416efb1a827aea04032f85829dd4c61af86b4c0adf13301026836ae723cac49a7c659012b0fcf0a2ce9af164f0b849cbb14df11d584d11ed1fc64659bdd65fd2de0081476102981f23a79bb96bfd865d8fd820e069677cec8a97e07701e46b70cdcb74266aa9d449c0bc6144d98ecf2289c771cf7c9cd357b804eaaa8d9da8a5475e4eb245dfb9a2334f355efaa106ca545446b82d319838edb892ae9acc03f6339e3a09940dabe3959560e81fbe0f6b16ea65ca12a7c8e29ec2b9fe9076297c6313edd41b24ff245d3a947feef21c44df8d716a6f37101fe83d97e426f35f7335418283e792c220f8e9003bb7285f27d32339b8276a03a26f4310064847554ef8872856b9075d5b46da9fb05956df58daddd1a59f62f4b17193c297ca93875acd27c7b82a4d1ed1e41ae0854c869c9641b1d2222a2d059bf342b13f9f26aacac7de0f7f14e9b77fad77c170174db7f31fe603bd4079a0b37e0ebba9b8a70132e0cb41e973afe27ba952b70979fef834f72d96892cf51f1281b6bee2c0ec411eea48fdc70cc55f2e8224ea62c9229769a58ebf0846b6c6fcf7b084ae4bd4324a84d68e9a137749454b6925adfbe5a2cc66ab07e87dec6e695e02734e9b9b986fd8cb37b99581def5335ff1e8224a8c3792a70ec59dc2acac9e89b601ecd9ce640873165af4fba4183c4cff86b3c3e1ebb73b97311c6387f8171bbd1189b7c05168994996d40df8283b99da2aa3f277b1a934a0773ba7aa95288e70f355382ac62ff1f913f7454783894f42c57afd0e9a7e84de01d233c98f339de87d8bbf53f3c9cd1ec0f3945dca5232eb13a60ed0e569809ca3538a9d4d78e56fb29ff3f7f9611a0185382b7ea4e30490587e7ec1fa9d2dd621fda4bf08ff143adbd33d98759a884047851d97eeac721aaf9a09b8f36cdc6655141db27ff5c87da83829f5756a26d6200bdfd6e9a4936aefabd232c122a4b7f7028f64d3dc2ce0279266556f97dad2719151362f25c0464cdc6abd22364a9bb35669d896fa1d097e85cbefd396e15953a45764dffcd3e7b1a3f3a422b84f2b448b8d3392d0cffa9a53b6b91489f1442c3ec7461c8e7803dccf9822d73ccd645b3d9cef96eaf4986aa1cc6edbc59709bc9c3bcb07d0bd0e5fe6717c0a53a15b684a08642fc1213369b8d97044db0007c6949553c17834d8a0a6eae726160285462bf737cd0d6239335afb5dc96c91d655aab1e6e4281796c8097e4bd1d633c0a0e82cdcf037a69b5beb05d98f2265e5006e1c75a423df99866170d3da276caa6a748bb98a315db2bad544d37fd17b5c7a3fcb9d60f6b63995f5f01d145b6de4169aab9355f75f3d2296ad04128d648e2ba6e40a0d25933559258b9b4d9d2e64ff67b164b8e5e4a207391e89a86a3411a778b5975bbbe57fd3", 0x1000, 0xe4}, {&(0x7f0000001a00)="6a545c9080813285d53d", 0xa}], 0xc6, &(0x7f0000001b00)={[{@dots}, {@fat=@quiet}, {@fat=@fmask={'fmask', 0x3d, 0x7}}, {@nodots}, {@fat=@nfs}, {@dots}], [{@dont_appraise}]}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000004c0)=@ccm_128={{0x304}, "5c49548badba179d", "547520b1472e9f2ca737c05bb7203369", "bf7f5ddf", "d7db49b1338df1a7"}, 0x28) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x3}, 0x8) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f00000000c0)) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x488840, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000001b80), 0x0, 0x400000) ioctl$PIO_FONTX(r4, 0x4b6c, &(0x7f0000001fc0)={0x8c, 0x17, &(0x7f0000001bc0)="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"}) recvmsg$unix(r3, &(0x7f0000000600)={&(0x7f0000000540)=@abs, 0x6e, &(0x7f00000005c0)}, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x4) 03:35:18 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x8, 0xfff}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000440)="85", 0x40000}], 0x1, 0x1000, 0x0) 03:35:18 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x19) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) [ 1254.780766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1254.835819] loop0: detected capacity change from 0 to 148 [ 1254.839682] msdos: Unknown parameter 'dont_appraise' [ 1254.862224] loop0: detected capacity change from 0 to 148 03:35:18 executing program 6: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) creat(&(0x7f0000000000)='./file0\x00', 0x0) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 03:35:18 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) 03:35:18 executing program 3: syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local, {[@lsrr={0x83, 0x7, 0x0, [@local]}, @timestamp_prespec={0x44, 0x4}, @timestamp={0x44, 0x4}]}}}}}}, 0x0) 03:35:18 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[], 0x131) r3 = dup(r2) copy_file_range(r3, 0x0, r1, 0x0, 0x401, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000000)) write$rfkill(r0, &(0x7f0000000080)={0xd2, 0x0, 0x3, 0x1}, 0x8) 03:35:18 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setresgid(0x0, 0x0, 0xee01) sendmmsg$unix(r0, &(0x7f0000001f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001e80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x20}}], 0x1, 0x0) 03:35:18 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 03:35:18 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) 03:35:18 executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0xc0182101, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x57676fd663354bee}) 03:35:18 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0}, 0x58) [ 1255.097127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:18 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x1a) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:35:18 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_setup(0x6aff, &(0x7f0000000140)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:35:18 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 03:35:18 executing program 1: r0 = io_uring_setup(0x1ff, &(0x7f0000000000)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='sched\x00') io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000080)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x3, 0x0, 0x0) 03:35:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) recvmmsg$unix(r0, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40010160, 0x0) 03:35:18 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0}, 0x58) 03:35:18 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f00000004c0), 0x4) 03:35:18 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r1 = syz_io_uring_setup(0x1571, &(0x7f00000000c0)={0x0, 0x93de, 0x4, 0x2, 0x216}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000140)) fchdir(r1) [ 1255.361182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:18 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'decodes', ' ', 'io+mem'}, 0xf) 03:35:18 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) 03:35:18 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_setup(0x6aff, &(0x7f0000000140)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:35:18 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYBLOB="5ca78abf1129ea661e3a645a122fa00525e76f828b0a851bbaf1fab92477a528b891ee273402e20c329ebededa7930deb67e742b86b33e303e055197b66b10b96467b059edd210d4c0f6d8659e06edeedf428326fa911c05f39b8bcfcd0033fe3a69fccbde7a438d836813af5136a8671a4d772f5af09d7a", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f00000000c0)) fcntl$setstatus(r0, 0x4, 0x2000) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$binfmt_script(r2, &(0x7f00000002c0)=ANY=[], 0x131) r4 = dup(r3) copy_file_range(r4, 0x0, r2, 0x0, 0x401, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x48, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2b, 0xe, {@wo_ht={{0x0, 0x3}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @val={0x2a, 0x1}, @void, @void, @void, @void, @void}}]]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r6, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x75}, @void, @val={0xc, 0x99, {0x101, 0x3f}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x8040) 03:35:18 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000140)) 03:35:18 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0}, 0x58) 03:35:18 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 03:35:18 executing program 1: syz_io_uring_setup(0x4b3e, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x3aa}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x15) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x80) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) [ 1255.678002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:19 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_setup(0x6aff, &(0x7f0000000140)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:35:19 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x1b) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:35:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0xffff3710, 0x401, 0x0, "215278324f3114ec1002ce513402c7d2d9eccb"}) 03:35:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}]}, 0x1c}}, 0x0) 03:35:19 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000140)) 03:35:19 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0}, 0x58) 03:35:19 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x501b}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0x3}, {0x5}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 03:35:19 executing program 1: mbind(&(0x7f0000873000/0x2000)=nil, 0x2000, 0x2000, 0x0, 0x0, 0x0) [ 1255.751500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:19 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000500)="6275f1eb7eba3ebc2fe4caa80c1510dc2867af45f83ed2b953bf0b18d60799f7cb8abb1783633adb95108525d28c295ae9c65e3d897e7d449544a9403770a7db6beee79cc7605de6e09916200c2cc5f5bf71fbc65d4ca25b9201dfeea13ba1a4b88f985f18a32a4ff0ec5abc06606b4e96b4e183d05032c75baf5d2d775408e54f26ab0ced1fd4c1dd813d68686ba3bb582aaf6d48ab79c56a846e63ecef94d7f1814f40edbb9b98767b4fa45b78bea1308e2d8c80a804c5790fd005a35ab54928da4ce9b984cf497bde93423423a7622bfa30b5bf2f8a1c85b4d7ad02072eb7f5b728392b7271969670ab03c0d3e11e5619d342d45fd6e40ffdf421b0496d76f608a1890f4e44a8fae6f75058643607edac7f1dc1aa0bd4e895e19527d25d606010f769ea65de091a76f9f36363d962e8c68547c115edd1a551f0c84e57d39786c1326ff856a550776fd071638ceaaa8bc69d1e460572ee685907a1d202ef6cb48f1b56cc454f8e5071c7780dc91226540e5e0760d7f6856e1736e926f14d459831bf6d06d5c89c26bd95ead19ab21b4b3e96c35dddb8e7c0bf7705dd67178d68392395c1ac95d3779993814d97d9054babc1da4241de653c3b56a13199d88d29edbf04f30c8a5bc1c118963bd13d4e03b66bd974c0c9d4a18a9df736249e0163c81e93705e9a1bf5a0c074a2cb9846ad95f18d801e719b2e9e19b9763012a96fa5f9006e6d89fd7453224f85e17e2e6f7333ab8da9b6e6f23292fe050b6f418400e5be759af43d7bcac0f5405813c55a62a2a92d0533beedacb2571d3caeb0f72ccb28d375f71d48e6fa1e4eb21055f8692b851df5676c69e74c808867db4d1f7cb21cd885c1a1d3320214b7e2df18d463d514949ffea24e5b8a9d7fa6c0deb11025e16b9ab38c96f33c08764f4c360bf66f48eb84195ee1cffdcd5a78761d0a32db5e24bbc49880d7df8332a35cd7fe63ff80e2640728d5578835bcef3c9195e40bda7e6c90ce5296f85d029de86f410b71905526d4e60a1eee8fea43b78d75aec359f94882a756dff30663dadff72c1235663fe924059f6404ac6436a38ac7fdd5df481bb7e8167d42753234d242389c3179a97332030c4558c5a93a2aa708bc5cec2f5df231c58575c721ad6e9b3bb5b6a4eeffb77af15378c3fc6e10087c839bce1b9f9cc92f98b0732aff5b04c9cb6e9f88a959071b3c07ab68bb28065d9af33ad4629e62526038a4e5bf6fc8f99f9a73c6e45aa937b4c729e715423f28cccdbf7a73a91918484fed015808a8a53757e7f7586c58dd87bb8b5f4ae7d2f83d65679e90d591cdb1416159442201e4a850216396aa2df28878b185210f11671abaccc631f3579a9ccf95fecf1690a0f3eb6bb174f2fee588801e4e4fe280a1017878651dc2fba3a008c02a9d5f02cb0c712037b12f4366cde4d06e7a67473050a8f713d5bd9c9e33e552433d3cee3688d817202781f3246d1f730f0bc2fb30f8a1258633cef3c424db9396e7892e5e7396d0adf93294bc637dacebc0afd1635a492603891aac1bb1c81b8e95b5be9d6e101ced8d3acb67485226a33ca8cbaac3cbdd0d12a6cd5b3d8c8d8de6ea9879914580e48a499094e45e3db05400f4c8df5d0f0dbb21d574f7a90882fada9da2ca75fbc5ad3296c5cb9f6c2aaf0800d4705f2a5dee76b43fd8a50a3d709fdf3c23c2825d06fc3e781932c9c83591417e96c429a725377d60f49c3094643ae4753d2e4e6cc4d341b3243a4e3bbeadc7a1c6d55606640089f22291f66e9b86ed76104964fc7f7ba4caa16d6238a0ba6934a66a95dcfb4ab01a46511673ca5266ab30d18a5b1afd92f32668a24180cfd1d241625684b1f5d3891cca2111f77a0407a188f64b5a1ad912b3b4c6d74e75ffdd21cc8f1930a08873af69e086cbb7dbe499c18810288eba101f5d2c52321f7cbb734e5937a4755149aabe845b767ee068db3c74503f15b312b30336c8b88ef254d57d75ded7bc0e1509ac80eb1eef3ca97e844c0ec4351229edbaa676920257203d99919a6176612f763eca6b86b4d2cb4310e7d4b6f691f146840ec66676fd7a2f5e96e4fb684f9eb0be178838fd8be018098b0e01ce6e32281e8345d6a462b043fca8c215deec8a03123ca7446752fff8adccaf72bdde10aeadf140556d7e2adc77e8f5d11149560c02c7a75ba19e1185c8cd2c86283d3893f8d63883dcb98065fd97bb4e72982fc3bc677158106fc4bead14ca76b0db5c0a3a1971f3781b057f1aee140d55bd7a1b73de633650400b4f42044149730756587fd75bee12e82b8c90d45dcdc42dedf672a16a8e205505938a6f80b89799bf691ecd901e71afd90901c3a81f33d9d7ee479a1e51e6ec66eba62b6e116b787192b598409aef5396f3a587d5297150c3f209493b2b51a0c63159861ed52cdeaa829ce20614515e9596201df97a8451cf7dd411f4b0fef08ebfb043212d8bfc34fdee6e6b892cc66b3e2717462fd74365db30a17e2074462d263ec155f4aca4b829703cebb0443bc35e230bba2527fcb7b6b8ea61e034aaa1ed5ed4eef210896288d6cbfc399d2034d6af6ff263038832d4c38c3b726851f7afb4695c8f9026bd6a12f7251f20b1359914b479cbffa2feed00a8b4f7e0ef2b4fe4166e90b1205fe77eac7f1d9f85e775e51eff8bf98d4da76ff3a2ad54be19fc16ecee5b60b8545698b4213a5ff39768ea0f20768c21b6898a2fc40a22795061004c1dc2f9458d8cb51ee89351c30e337abf5b0f9adf27db733c63f876d3ed577bb5", 0x7b4}], 0x1) 03:35:19 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8080) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000100)=""/102400, 0x19002, 0x0) 03:35:19 executing program 5: r0 = mq_open(&(0x7f0000000000)='\\\x00', 0x0, 0x0, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)) 03:35:19 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000140)) 03:35:19 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 03:35:19 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) 03:35:19 executing program 0: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x40040, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x2, 0x3, 0x101, 0x0, 0x0, {0xb, 0x0, 0x8}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x101, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x15}}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x8}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x14}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x11}}]}, 0x48}}, 0x20040000) 03:35:19 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000140)) 03:35:19 executing program 3: r0 = memfd_create(&(0x7f0000001280)='\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0xfffffd1f) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000080), 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x800}) 03:35:19 executing program 5: r0 = memfd_create(&(0x7f0000001280)='\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0xfffffd1f) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000080), 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x800}) 03:35:19 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_matches\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_matches\x00') copy_file_range(r0, &(0x7f0000000000), r1, &(0x7f0000000040), 0x0, 0x0) 03:35:19 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8080) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000100)=""/102400, 0x19002, 0x0) 03:35:19 executing program 3: r0 = memfd_create(&(0x7f0000001280)='\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0xfffffd1f) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000080), 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x800}) 03:35:19 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f00000004c0)) 03:35:19 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {r2}}, './file0\x00'}) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@private0, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in=@private}}, &(0x7f0000000500)=0xe8) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x0, 0x60}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x45}]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x4822) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) dup(r4) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r6 = creat(&(0x7f0000000200)='./file0\x00', 0x80) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r6, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x29}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x58}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x25}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r7 = dup(0xffffffffffffffff) ioctl$BTRFS_IOC_ADD_DEV(r5, 0x5000940a, &(0x7f0000000640)={{r7}, "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"}) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 03:35:19 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) 03:35:19 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x1c) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) [ 1256.474338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:19 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed", 0x1, 0x4200}], 0x0, &(0x7f0000000080)) 03:35:20 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x5) 03:35:20 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8080) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000100)=""/102400, 0x19002, 0x0) 03:35:20 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x52f9, &(0x7f0000000000), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:35:20 executing program 5: r0 = memfd_create(&(0x7f0000001280)='\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0xfffffd1f) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000080), 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x800}) 03:35:20 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8080) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000100)=""/102400, 0x19002, 0x0) 03:35:20 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[], 0x131) r3 = dup(r2) copy_file_range(r3, 0x0, r1, 0x0, 0x401, 0x0) pwritev2(r1, &(0x7f00000014c0)=[{&(0x7f00000000c0)="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", 0x1000}, {&(0x7f00000010c0)="303a62066013a9acea46c09055ccc21ac47a2c0f42666e6e7b5ffa77a56ae9010e492a99114d4ab49f400518366b205f21dddf30eea7db9eda8db1dd217d4e1fb15549cfdf18324a73f53bd548602f88d79e69107203b8a7e7c08f7d10e34d0a978723e683612c449568dd7764", 0x6d}, {&(0x7f0000001140)="9499d02c954fcf29e0dcea08942529504e284bea0a88ad002d9fbcce452a26efb06a1bb562b9df201a25861522047760eb97608cd4d1777f6d08f19f5d4c6d399d02e5684bb97b7023d2", 0x4a}, {&(0x7f00000011c0)="2a529fa68ebdc66c72e207e69e08e4e6990ccc61bd0fe28cc4a85638129c7d729eb16cc931f8678b469fe879439c6f006879c685a0b50cbe9767cfce2e4bacf49e3696a9d99562e7f3f17fe25c5ed6499b7da97ec5cb7ad7c3e57a82", 0x5c}, {&(0x7f0000001240)="d60df8a60aef36feaf80673e0fb17691ddf8a839fbcae4a47ce39a7395952948d51d237e9f5f0ab90ab3c0ff593d2a7e97e628b76ddf3777de7b8cda43f60bca64f6b6cc86b7692c32641d5562e19ce5ae7e08d2a3a5f7e32fc5661fd3ad1bdde3c192d618a4abf3f2940abeebd0383edd8b546a", 0x74}, {&(0x7f00000012c0)="d8c244459f23b94be638a1398772958ca70e8318dc5551ad8f3a9cbcdf93793fe5e8a2e4bbc60e004dfc82553405b1d3308eb50f36437080a02a7611e3b9c641aab388d2d4a551a1248bce7d4c502eccdab1f98c45a2ddd3edcf76146f81e860269d577acd14eeb8e6ad852aae76fb78defb45aebfc31027b1d8302507672c843497fe5fe2e8c50fbf780322cee029b059625a64dbcc0b0a5d4adfb88aee2401d906050e1d49f626e6dfb0ba4b672d8cc291e75338ac25c9c22a065fb02cd197e7264adfdaf3bc4c6887a25358f2cfe6988b872777210386619727107b46b3c6ab92a1d399b45d58414f9780", 0xec}, {&(0x7f00000013c0)="3f093079790660d9c551480421b3b4f7d59a9acd32e54b9cad5abc2caa05bf447fccf1f58eb8955f8f944667291025dca5ffabc62aff9de4cebd7387a75366b75fc24615e67a24a38664c1f6cce9ced6de68805ddeef132d7914c553c7600b04b14c32618800746120e64fb1be2eb76ce42e939119a66a28f3f6f246d70007e27435f715d6e8d5058d16331bbec7b05c63c39777b5d2917a0b84db2bcfcb9524f2f1a679064581f0aaf55885cf838cf00c3c1e0ab09cee69897cfbfb4b81bce78b8c1fa5ee8861e665274f5877", 0xcd}], 0x7, 0x1, 0x4, 0x5) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) ioctl$FIONCLEX(r0, 0x5450) 03:35:20 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f00000004c0)) 03:35:20 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x52f9, &(0x7f0000000000), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:35:20 executing program 3: r0 = memfd_create(&(0x7f0000001280)='\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0xfffffd1f) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000080), 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x800}) 03:35:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000002}, 0xc) 03:35:20 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x1d) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) [ 1257.003528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:20 executing program 2: r0 = getpid() tkill(r0, 0xbea3) 03:35:20 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x52f9, &(0x7f0000000000), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:35:20 executing program 1: add_key(&(0x7f0000000000)='id_legacy\x00', 0x0, &(0x7f0000000080)='&', 0x1, 0xffffffffffffffff) 03:35:20 executing program 0: setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x1b, 0x0, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000002}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x8c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8891}, 0x88) 03:35:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x2, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_HELP_NAME={0xe, 0x6, 'ftp-20000\x00'}]}, 0x24}}, 0x0) 03:35:20 executing program 1: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000200)=[{}], 0x1f4, &(0x7f0000000280)) 03:35:20 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x52f9, &(0x7f0000000000), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:35:20 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f00000004c0)) 03:35:21 executing program 1: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000200)=[{}], 0x1f4, &(0x7f0000000280)) 03:35:21 executing program 4: mlock2(&(0x7f0000870000/0x1000)=nil, 0x1000, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x9) 03:35:21 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 03:35:21 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x1e) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:35:21 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_ttl={{0x14}}], 0xf}, 0x0) 03:35:21 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f00000004c0)) 03:35:21 executing program 3: r0 = memfd_create(&(0x7f0000001280)='\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0xfffffd1f) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000080), 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x800}) 03:35:21 executing program 5: r0 = memfd_create(&(0x7f0000001280)='\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0xfffffd1f) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000080), 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x800}) [ 1257.686321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:21 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x80) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000001c0)=ANY=[@ANYBLOB="ff070000000000000900000000000000030000000500000002000000000000000800000000000000ffffffff00000000a47b000000000000000000000000000000000000000000008c0e00000000000000000000000000000600000000000000ff7f0000000000000500000018bf4cceb5cf4ac2000000000000000000000000000000000000000080210000000000003f6b55b87b3a1829d97112cee6f44338a86dc303a33f04994da2ce1caf91aaa6d82a2e35c0496fdea2e8943dd6e8ca8f47e56ff4f1d53502c21b"]) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f00000000c0)={0x100, 0x0, 0x3, 0x1, 0x2}, 0x8) 03:35:21 executing program 1: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000200)=[{}], 0x1f4, &(0x7f0000000280)) 03:35:21 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)={0x4, 0x0, 0x40028, "40ef70f8"}) 03:35:21 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) 03:35:21 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0xc6e00, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$binfmt_script(r4, &(0x7f00000002c0)=ANY=[], 0x131) r6 = dup(r5) copy_file_range(r6, 0x0, r4, 0x0, 0x401, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x7fffffff}, {0x6, 0x16, 0x6}, {0x5}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004081}, 0x10) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x48, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2b, 0xe, {@wo_ht={{0x0, 0x3}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @val={0x2a, 0x1}, @void, @void, @void, @void, @void}}]]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x88, r3, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x12}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x56}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x73}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 03:35:21 executing program 6: syz_open_dev$mouse(0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0xa) 03:35:21 executing program 1: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000200)=[{}], 0x1f4, &(0x7f0000000280)) 03:35:21 executing program 4: openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 03:35:21 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}}, @in6=@private2, {@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {{@in=@multicast1, @in=@broadcast}}}}, 0x128}}, 0x0) 03:35:21 executing program 4: perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:35:21 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semget(0x0, 0x0, 0x24b) recvmmsg$unix(r0, 0x0, 0x0, 0x0, 0x0) 03:35:21 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x21) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:35:21 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff}) io_setup(0x9, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 03:35:21 executing program 0: write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 03:35:21 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) getsockname$inet6(r0, 0x0, &(0x7f0000000100)) 03:35:21 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}}, @in6=@private2, {@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {{@in=@multicast1, @in=@broadcast}}}}, 0x128}}, 0x0) [ 1258.358103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:21 executing program 1: creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x9432, 0xfffffffffffffff7}) 03:35:21 executing program 0: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000000)={0x3c06, 0x519, 0x2, 0x6, 0x9, "060f6c837c876764a7cfad87654cd5b9768663", 0x7, 0x8}) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f00000000c0)=0x3) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 03:35:21 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}}, @in6=@private2, {@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {{@in=@multicast1, @in=@broadcast}}}}, 0x128}}, 0x0) 03:35:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)={0x18, 0x0, 0x1, 0x3, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}}, 0x0) 03:35:21 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getspdinfo={0x14, 0x1d, 0x1}, 0x14}}, 0x0) 03:35:21 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}}, @in6=@private2, {@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {{@in=@multicast1, @in=@broadcast}}}}, 0x128}}, 0x0) 03:35:22 executing program 0: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[], 0x131) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f00000000c0)={{0x1, 0x1}, 'port1\x00', 0x2, 0x8, 0x5, 0x9, 0xff, 0xffffffff, 0x34, 0x0, 0x0, 0x36}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x8c, r4, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40804}, 0x4) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1, 0xff}, 0x8) [ 1258.555397] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 03:35:22 executing program 4: mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=']) fork() [ 1258.572082] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 03:35:22 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getspdinfo={0x14, 0x1d, 0x1}, 0x14}}, 0x0) [ 1258.668056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1258.680219] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 03:35:22 executing program 1: creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x9432, 0xfffffffffffffff7}) 03:35:22 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') pread64(r0, &(0x7f0000000040)=""/105, 0x69, 0x79) 03:35:22 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x400}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x54}}, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 03:35:22 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getspdinfo={0x14, 0x1d, 0x1}, 0x14}}, 0x0) 03:35:22 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x22) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) [ 1258.760421] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1258.761977] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 03:35:22 executing program 0: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0xb8882, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x98, 0x0, 0x3, 0x41}, 0x8) 03:35:22 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getspdinfo={0x14, 0x1d, 0x1}, 0x14}}, 0x0) 03:35:22 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x13, r0, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 03:35:22 executing program 1: creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x9432, 0xfffffffffffffff7}) [ 1258.846485] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 03:35:22 executing program 4: add_key(&(0x7f00000020c0)='asymmetric\x00', 0x0, &(0x7f0000002140)="10ed", 0x2, 0xffffffffffffffff) 03:35:22 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r1 = open(&(0x7f0000000000)='./file0\x00', 0x400000, 0x40) bind(r1, &(0x7f00000000c0)=@in6={0xa, 0x4e23, 0x8, @private2, 0x4}, 0x80) 03:35:22 executing program 1: creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x9432, 0xfffffffffffffff7}) 03:35:22 executing program 4: syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) 03:35:22 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000000c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 03:35:22 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000400)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x0, 0x0, @loopback}, 0x1c) 03:35:22 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x23) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:35:22 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr$security_evm(r0, &(0x7f0000000000), &(0x7f00000000c0)=@v2={0x3, 0x3, 0x10, 0x80, 0x67, "f04cdd675854f7364eef28b0f1c225884b4f27cbe3e49452a3f0a0bf2fcf0a012e0b5b57dd28859a6f6917808dca99069e3e919cd493ce5cc16af3269174c5af601cfb9ffd95b111ea646250a743557b6fccb4ee461c62c3f0e8f8605f2f688bdd42f45a75f67d"}, 0x70, 0x1) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) recvfrom(r0, &(0x7f0000000140)=""/153, 0x99, 0x40004002, &(0x7f0000000200)=@ethernet={0x6, @remote}, 0x80) [ 1259.105605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:22 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000400)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x0, 0x0, @loopback}, 0x1c) 03:35:22 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000400)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x0, 0x0, @loopback}, 0x1c) 03:35:22 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000400)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x0, 0x0, @loopback}, 0x1c) 03:35:22 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x24) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) [ 1259.481354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:23 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x25) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) [ 1259.846894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:23 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev, @empty, @empty, @dev}}}}, 0x0) 03:35:23 executing program 5: ioprio_set$pid(0x2, 0x0, 0x0) clone3(&(0x7f0000001fc0)={0x100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:35:23 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) 03:35:23 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) ppoll(&(0x7f00000002c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x122, 0x0, 0x0) 03:35:23 executing program 6: r0 = add_key(&(0x7f0000000700)='user\x00', &(0x7f0000000740)={'syz', 0x1}, &(0x7f0000000780)="d8", 0x1, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='id_legacy\x00', 0x0) 03:35:23 executing program 1: getsockname(0xffffffffffffffff, 0x0, 0x0) 03:35:23 executing program 3: r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r1) mknodat$loop(r0, &(0x7f0000000140)='./file0\x00', 0x6000, 0x0) 03:35:23 executing program 5: ioprio_set$pid(0x2, 0x0, 0x0) clone3(&(0x7f0000001fc0)={0x100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:35:23 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000006440), 0xffffffffffffffff) 03:35:23 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002380)={0xffffffffffffffff}) connect(r2, &(0x7f00000023c0)=@rc={0x1f, @fixed}, 0x80) write$rfkill(r1, &(0x7f0000000080)={0x1, 0x0, 0x3, 0x1}, 0x8) fchmod(r0, 0x154) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) dup(r3) fstat(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$security_capability(r1, &(0x7f0000000000), &(0x7f0000000140)=@v3={0x3000000, [{0xffffffff, 0xbaa0}, {0x3, 0xffff0001}], r4}, 0x18, 0x0) 03:35:23 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, r0, &(0x7f00000000c0), 0x401, 0x0) 03:35:23 executing program 5: ioprio_set$pid(0x2, 0x0, 0x0) clone3(&(0x7f0000001fc0)={0x100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:35:23 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x26) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:35:23 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x4011, r0, 0x2495f000) [ 1260.478098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:24 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x4840, 0x0) r1 = syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRES16=r0, @ANYRESHEX]) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DVD_AUTH(r0, 0x5390, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) 03:35:24 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0xf0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:35:24 executing program 5: ioprio_set$pid(0x2, 0x0, 0x0) clone3(&(0x7f0000001fc0)={0x100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:35:24 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[], 0x131) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f00000014c0)={0x6, &(0x7f0000001400)=[{0x1}, {0x3, 0x57, &(0x7f00000000c0)="93c64cc7e504ecc68b79207e037f4f96b2a823729ba9e6d43416d12c86573bef3d55047affdbde19001f23d0a26431a5fb336ced11e3a8124d18bb463e8e23d6214fc9cbc1fa5f2d53d6d31cc462c32875486035a7252c", 0x0, 0x1}, {0x3, 0x40, &(0x7f00000001c0)="527204f2278335445c7a6b83cb64fe69a4e0d3da1efd2971380b0fcd11ad16375e64bbf3fd7a00e88482d4cca83824e14af7ef32162bcb230fffab911e1025ca", 0x1, 0x1}, {0x1, 0xf3, &(0x7f0000000200)="b5005f7885b1e8585a113b092a06d7487c44a3ca03ce4f7926c5fe20bd51aadb71e2a0aa883c7c42f8751603487c596cc617fff6eb51ddf715ad0ea0185d4029cb6c4b795ac4f7d4909b8baf9c8ecdd37002f7b1dd01c5c4dbefe6dc750ecd5bac4c9689f1d39c9bcb2a6db0ed2a0872a3ad04e6d2430fb600236539aa4791cd36b4f713e23dae9dedd39c168bb14c5639c7015655ce9259a4e4d72332e8a04084cd4f83609f1f0ff332ef1113f7e799aca5f2bc7b8898e06d1ff5a95a334a4751bd429ae2f0a5f29ba1e34eaa458d0cafebc711deeeacec92da249eddcde6f20c546687db78fcfe3b2da5cad9d3616508e695", 0x0, 0x1}, {0x1, 0xf2, &(0x7f0000000300)="27d67f532c755f9a340de0a0f8abb215e94baca20c75e8c228a11dc6d7065b5bef8b283220c17a3052e4554c39087e56ed297f958e7ca6a95c9e861ad8c0d479cd111c33e1c54c6707efd419da6ebc79653b32047e00b8063779f38e697477023bb9363eb0367c2b2c8a96e7873da6dc49e2d9bf0c0c9b7af96b992098d7ca33a4f97d5642c2087ba904fff6ae83d6e1e58ca3c89e80a22bd92a44e425d8da70f5dedb144a7956fc789d6ffacea52d4b58c9a4dfa39e5f89e497358592907f80d9098ea70ff01c5d5d4badd53226266bbd62beb3930a23419c17ba985670b4c139e0cd252d3a0f69fc7468a88fe15239a73d", 0x0, 0x1}, {0x0, 0x1000, &(0x7f0000000400)="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", 0x1, 0x1}]}) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x1310c0, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x3ffffff, 0x8, 0x0, 0x4}, 0x8) dup2(r3, r3) 03:35:24 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) utimes(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={{0x0, 0xea60}}) 03:35:24 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)=""/148) 03:35:24 executing program 4: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x4000020}) 03:35:24 executing program 2: move_pages(0x0, 0x2, &(0x7f0000000040)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil], 0x0, &(0x7f00000000c0), 0x0) 03:35:24 executing program 2: unlinkat(0xffffffffffffff9c, 0x0, 0x2) [ 1260.955775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:24 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0xf2, 0x0, 0x3, 0x1}, 0x8) 03:35:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 03:35:24 executing program 6: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x103041, 0x0) write$vga_arbiter(r0, &(0x7f0000000000)=@other={'lock', ' ', 'none'}, 0xa) 03:35:24 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000140)=@v3, 0x18, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 03:35:24 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@raw={0xc, 0x0, {"0822e88d093c875f42"}}, 0x0) 03:35:24 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x4840, 0x0) r1 = syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRES16=r0, @ANYRESHEX]) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DVD_AUTH(r0, 0x5390, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) 03:35:24 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000000)) 03:35:24 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40605346, &(0x7f0000000080)={0x0, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000000)={0x5}) 03:35:24 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x4840, 0x0) r1 = syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRES16=r0, @ANYRESHEX]) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DVD_AUTH(r0, 0x5390, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) 03:35:24 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000100)={0x0, "e5e6b3459db1b0ad461df7032b16dd86b23942a6d104f75d65120c522c950a4bec2af469b5544fef8d0358fe875a6d9ff557e83394cc6a227eebfb0dfc6014dd"}, 0x48, 0xffffffffffffffff) keyctl$invalidate(0x15, r0) keyctl$set_timeout(0xf, r0, 0x0) 03:35:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, 0x0, 0x46) 03:35:24 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x106) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:35:24 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 03:35:24 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x4840, 0x0) r1 = syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRES16=r0, @ANYRESHEX]) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DVD_AUTH(r0, 0x5390, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) 03:35:24 executing program 4: r0 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) fsmount(r0, 0x0, 0x83) [ 1261.541528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:25 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r0, 0x5603, &(0x7f0000000000)) 03:35:25 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 03:35:25 executing program 4: prctl$PR_SET_SECCOMP(0x41, 0x2, 0x0) 03:35:25 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) dup(r1) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000100)={r0}) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 03:35:25 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x4840, 0x0) r1 = syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRES16=r0, @ANYRESHEX]) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DVD_AUTH(r0, 0x5390, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) 03:35:25 executing program 2: sched_setscheduler(0x0, 0x0, &(0x7f0000000000)) 03:35:25 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x4840, 0x0) r1 = syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRES16=r0, @ANYRESHEX]) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DVD_AUTH(r0, 0x5390, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) 03:35:25 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x4b56, &(0x7f0000000080)=0x0) io_destroy(r0) 03:35:25 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x4840, 0x0) r1 = syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRES16=r0, @ANYRESHEX]) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DVD_AUTH(r0, 0x5390, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) 03:35:25 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x2f0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:35:25 executing program 4: mount$9p_fd(0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0) 03:35:25 executing program 2: r0 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x3000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "81c0a66f5500a95a5759e87ec74566c1b90b03cc27321517e5b9fb1653dd6332c800000100010000000000e62c006576853c56f049ef8b796b7f2c7d0e498b04"}, 0x48, 0xffffffffffffffff) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r1, 0x0) shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x6000) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) 03:35:25 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600)='binfmt_misc\x00', 0x0, 0x0) 03:35:25 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x27}}}}, [@NL80211_ATTR_SMPS_MODE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) 03:35:25 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000080)={0x0, 0x8, 0x1f00}) [ 1262.107370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:25 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40605346, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0x40605346, 0x0) 03:35:25 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_setup(0x6cf4, &(0x7f0000000040)={0x0, 0x0, 0x2}) 03:35:25 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x4b56, &(0x7f0000000080)=0x0) io_destroy(r0) 03:35:25 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) memfd_secret(0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x8}}, './file1\x00'}) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x8, 0x3) 03:35:25 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mq_notify(0xffffffffffffffff, 0x0) 03:35:25 executing program 6: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)=0x80, &(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @dev}}, 0x4) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x4001, 0x0) syz_io_uring_setup(0x11e0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000880), &(0x7f00000008c0)) 03:35:25 executing program 2: r0 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x3000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "81c0a66f5500a95a5759e87ec74566c1b90b03cc27321517e5b9fb1653dd6332c800000100010000000000e62c006576853c56f049ef8b796b7f2c7d0e498b04"}, 0x48, 0xffffffffffffffff) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r1, 0x0) shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x6000) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) 03:35:25 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x4b56, &(0x7f0000000080)=0x0) io_destroy(r0) 03:35:25 executing program 4: perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:35:26 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_setup(0x6cf4, &(0x7f0000000040)={0x0, 0x0, 0x2}) 03:35:26 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x300) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:35:26 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto(r0, 0x0, 0x4000, 0xfc00, &(0x7f0000000140)=@in6={0x2, 0x4e24, 0x0, @empty}, 0x80) 03:35:26 executing program 2: r0 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x3000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "81c0a66f5500a95a5759e87ec74566c1b90b03cc27321517e5b9fb1653dd6332c800000100010000000000e62c006576853c56f049ef8b796b7f2c7d0e498b04"}, 0x48, 0xffffffffffffffff) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r1, 0x0) shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x6000) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) 03:35:26 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00b\x00\x00'], &(0x7f00000002c0), 0x0) 03:35:26 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000280)={0x0, 0x0, "d017e9"}) 03:35:26 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x4b56, &(0x7f0000000080)=0x0) io_destroy(r0) 03:35:26 executing program 0: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[], 0x131) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x5, 0x1}, 0x8) 03:35:26 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug', 0x0, 0x0) close(r0) [ 1262.667170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:26 executing program 6: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockname(r0, 0x0, 0x0) 03:35:26 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x80086601, 0x0) 03:35:26 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000880)={0x0, 0xf00, &(0x7f0000000840)={&(0x7f0000000800)={0x32, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 03:35:26 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) listen(r0, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, 0x0) 03:35:26 executing program 2: r0 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x3000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "81c0a66f5500a95a5759e87ec74566c1b90b03cc27321517e5b9fb1653dd6332c800000100010000000000e62c006576853c56f049ef8b796b7f2c7d0e498b04"}, 0x48, 0xffffffffffffffff) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r1, 0x0) shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x6000) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) 03:35:26 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000470000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8fffffff0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100080ec70325132510000ec70325103", 0x5b, 0xa00}], 0x0, &(0x7f0000010f00)) r1 = fcntl$dupfd(r0, 0x0, r0) futimesat(r1, &(0x7f0000000040)='./file0\x00', 0x0) getdents(r0, &(0x7f0000000080)=""/2, 0x2) 03:35:26 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x480) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:35:26 executing program 6: kexec_load(0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x3e0000000000, 0x1000}], 0x0) 03:35:26 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_setup(0x6cf4, &(0x7f0000000040)={0x0, 0x0, 0x2}) 03:35:26 executing program 0: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="e80000fb", @ANYRES16=r0, @ANYBLOB="00022cbd7000fbdbdf25110000002400018008000800200000000600020067000000060002007300000006000100000000002000038008000500ac141415140002006772653000000000000000000000000008000500070000004000028005000d000100000014000100000000000000000000000000000000010800030002000000080005000800000006000b0002000000060000010000000800060080ffffff3800028008000400ff0f000014000100fe80000000000000000000000000001106000e004e23000006000f002c5d000008000400ff0100"/226], 0xe8}}, 0x804) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$binfmt_script(r2, &(0x7f00000002c0)=ANY=[], 0x131) r4 = dup(r3) copy_file_range(r4, 0x0, r2, 0x0, 0x401, 0x0) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xe0, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xdf}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff}]}, @TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "7b98400ab86b24bb30f38994a5922cb518dfe2033bd4894d"}}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x8004}, 0x20000002) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fgetxattr(r5, &(0x7f0000000280)=@known='user.incfs.id\x00', &(0x7f00000002c0)=""/184, 0xb8) write$binfmt_script(r5, &(0x7f00000002c0)=ANY=[], 0x131) r7 = dup(r6) copy_file_range(r7, 0x0, r5, 0x0, 0x401, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r8, 0x80089419, &(0x7f0000000540)) dup3(r5, r1, 0x80000) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) [ 1263.100460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:26 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x4, 0x0, &(0x7f0000000040)) 03:35:26 executing program 3: dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000540)) recvmmsg(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000004940)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, 0x0}}], 0x2, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:35:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, r1, 0x1}, 0x14}}, 0x0) 03:35:26 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_setup(0x6cf4, &(0x7f0000000040)={0x0, 0x0, 0x2}) 03:35:26 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0), 0x8) 03:35:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x5}}}}}, 0x28}}, 0x0) 03:35:26 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, @link_local, @remote}}}}, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) 03:35:26 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0), 0x8) 03:35:26 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000006c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) 03:35:26 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x500) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:35:27 executing program 3: dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000540)) recvmmsg(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000004940)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, 0x0}}], 0x2, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:35:27 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000006c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) 03:35:27 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x404c055) 03:35:27 executing program 5: syz_genetlink_get_family_id$nl80211(&(0x7f0000001500), 0xffffffffffffffff) 03:35:27 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0), 0x8) 03:35:27 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000006c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) [ 1263.616013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:27 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0), 0x8) 03:35:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x5}}}}}, 0x28}}, 0x0) 03:35:27 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000006c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) 03:35:27 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x280a02, 0x8a) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[], 0x131) r3 = dup(r2) copy_file_range(r3, 0x0, r1, 0x0, 0x401, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000000)=0x5) r6 = pidfd_getfd(0xffffffffffffffff, r5, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c80), r6) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r6, &(0x7f0000000d40)={&(0x7f0000000c40), 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x30, r7, 0x0, 0x0, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x0, @bearer=@udp='udp:syz0\x00'}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40014}, 0x4) sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r7, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x4008000) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000000)={0x57, 0x100, 0x4a, {0xdc92, 0x8}, {0x5, 0x7f}, @ramp={0x0, 0x2, {0x19, 0x101, 0x9, 0x8}}}) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 03:35:27 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0x40}}) 03:35:27 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x600) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:35:27 executing program 3: dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000540)) recvmmsg(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000004940)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, 0x0}}], 0x2, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:35:27 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/bus/input/devices\x00', 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r0}, {r0}], 0x2, &(0x7f0000000100), 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000001b00)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40) close(r1) [ 1264.107372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:27 executing program 1: pipe(&(0x7f0000000880)={0xffffffffffffffff}) fcntl$setstatus(r0, 0x407, 0x1000000) fcntl$setstatus(r0, 0x407, 0x0) 03:35:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x5}}}}}, 0x28}}, 0x0) 03:35:27 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 03:35:27 executing program 3: dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000540)) recvmmsg(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000004940)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, 0x0}}], 0x2, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:35:27 executing program 2: syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xb}, @hci_rp_read_buffer_size={{}, {0x6}}}}, 0xe) 03:35:27 executing program 6: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa40024, &(0x7f0000000040)=ANY=[]) mknodat$loop(r0, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) creat(&(0x7f00000001c0)='./file0/file0\x00', 0x0) 03:35:27 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x2, 0x3, 0x3, 0x1}, 0x8) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000000)) 03:35:27 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x601) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) [ 1264.593535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:28 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x40003, 0x0) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000040)={0x16, @multicast1, 0x4e21, 0x0, 'nq\x00', 0x21, 0x8ea, 0x73}, 0x2c) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, &(0x7f0000000280)={{r0}, "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"}) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x7) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x3c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TWT_RESPONDER={0x4}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}], @NL80211_ATTR_SSID={0xa, 0x34, @random="2864a62cae95"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = accept$unix(r1, &(0x7f0000001300)=@abs, &(0x7f0000000200)=0x6e) accept(r4, &(0x7f0000001380)=@caif=@dbg, &(0x7f0000001400)=0x80) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0}, 0x58) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 03:35:28 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[], 0x131) r3 = dup(r2) copy_file_range(r3, 0x0, r1, 0x0, 0x401, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x260, 0x14, 0x20, 0x70bd28, 0x25dfdbfd, {0xb, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x61, 0x1, "f8a9daa79bf4854d506063cb78818a4ddea1bf473388212c43fb9a62570898bdb98c5587494b1a5c26d1b46f27fd8bae529d20948b5f1a0d00df698d9977601057651157fd472fa0614134245db86fa03e9bf6196afdfac3f4dbe5dced"}, @INET_DIAG_REQ_BYTECODE={0x59, 0x1, "36908d9946f91dce3f79a669c347af1a379af02eb45b90a2dcb482f26579652f8cb855958635c10d49f816581d2a576e7e875f7dc9ac38fc5ee4a537f65e787883b8bbca4e8a8e43ccf5ea0bc971f0f59086f19a51"}, @INET_DIAG_REQ_BYTECODE={0x9b, 0x1, "17958437dbaf892faf7fbf06c45647e0f36befb7cda8eed62d02f235d3366480d352669ba7a936af9d0865bdf18b061f2345113be42125a64ef2039707acb9bc7d0e6176ce02d2ab6e7d15c0bb3ac6cfd59d7097b26e0b8050d789d902df73ea0e7ac271b2416d87ddfd1b202e5cbe5844148a65303f185e0751ae135f2b6b9ef9309ee06c2018159a719f232f68e1e7b8656378766c1f"}, @INET_DIAG_REQ_BYTECODE={0xed, 0x1, "a173e10eb53c21f649052bc674d22bd21cdb541ce8ebf7fc52dd18a9f4feec1d23848c0749193d1a9a507d3f5224d72513c6f3fd6102a22afafdbf05dfc8c3fa79295fd2127bfbe533ec65de1fb38a88615e5d0d8b6037e73b6511eae39d7a3f515871d3bc2ef1f8602942d9c56879b396393b00e6860c6b5378b6beeaddbece38ceb40ee2a2c036c7b2738bc7109675d6ac3f31ef85790e936211263d5ed15123ac03831301fed03477a2eee03f8e237128042f7b1db96979897501f0c15061c83337653fa67acf2d690c52790ed1b146aad53cdb7e75b93f8d257f333475b199ae914a61e4170143"}]}, 0x260}, 0x1, 0x0, 0x0, 0x800}, 0x80) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 03:35:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x5}}}}}, 0x28}}, 0x0) 03:35:28 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, &(0x7f0000000100), 0x4, 0x0) 03:35:28 executing program 1: pipe(&(0x7f0000000880)={0xffffffffffffffff}) fcntl$setstatus(r0, 0x407, 0x1000000) fcntl$setstatus(r0, 0x407, 0x0) 03:35:28 executing program 6: syz_emit_ethernet(0x2a, &(0x7f0000000180)={@broadcast, @link_local, @void, {@arp={0x806, @ether_ipv4={0x6, 0x800, 0x6, 0x4, 0x0, @random="9d23f2344ab6", @private, @empty, @loopback}}}}, 0x0) 03:35:28 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in6=@private2, 0x0, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'wp512-generic\x00'}}}]}, 0x138}}, 0x0) 03:35:28 executing program 0: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x5, 0xfffffffffffffffe, 0x2}) write$rfkill(r2, &(0x7f00000000c0)={0x0, 0xe, 0x7, 0xff, 0x6}, 0x8) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000080)) 03:35:28 executing program 1: pipe(&(0x7f0000000880)={0xffffffffffffffff}) fcntl$setstatus(r0, 0x407, 0x1000000) fcntl$setstatus(r0, 0x407, 0x0) [ 1264.914798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1267.762791] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1267.766686] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1267.768955] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1267.773820] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1267.777304] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1267.813012] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1267.817154] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1267.823043] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1267.829135] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1267.837913] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1269.860994] Bluetooth: hci6: Opcode 0x0c1a failed: -110 [ 1269.861939] Bluetooth: hci6: Error when powering off device on rfkill (-110) [ 1269.862076] Bluetooth: hci6: command 0x0409 tx timeout [ 1289.300735] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1289.302298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1289.381461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1289.382881] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1289.752681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:53 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x4) 03:35:53 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4, 0x401) clone3(0x0, 0x0) 03:35:53 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in6=@private2, 0x0, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'wp512-generic\x00'}}}]}, 0x138}}, 0x0) 03:35:53 executing program 1: pipe(&(0x7f0000000880)={0xffffffffffffffff}) fcntl$setstatus(r0, 0x407, 0x1000000) fcntl$setstatus(r0, 0x407, 0x0) 03:35:53 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x700) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:35:53 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x145900, 0x0) r1 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) write$binfmt_aout(r1, &(0x7f0000000340)={{0x107, 0x0, 0x1c, 0x395, 0x2a7, 0x6, 0x1b8, 0x6}, "3778decdcb6cb33ce94c1a587af0b5c358425312575cf92d53f034fde03abdc2407ba1ecf39ba5ef4fe2be3f178a26436cc058692da5379dce8d42d300cb698df7dcb6db2a478a0413a6420442ba092c61af4e7f58f3892b2cdee59ccedbaa7139a843606b54b8179ff2c443140e019ffe95ca2634e7c04a7076114dd84a892afea73c15173f4b35c70361301d1069e4c3ebb8edfce044108fa70f90322d67bb634b0caa8372d65a41f5eee75bcfbd888b0e9c2ff0435655eb63046dc85e2cd07e35968b8ad6ac194c08ae62c5342d558a58648731e9cfe9c422c1", ['\x00', '\x00']}, 0x2fb) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000240)="3827ea1a75b76bae3e99efe19a90b3ea22c6ab04c7580b1bcd25b059f8b648c1ab2c91b17c3aece174484c3178f15e093dd6b1af24732a9ec94d8269889c3ba58097a4a64923e325dec7e21a65fa33e00909262041d939535aea9e95dc2b6360f746a642cc67ce3d81198d04ab916f0a9d5b3a404e3b33a4bb1a7bf75bfcfecdb642c954d24985cd084a8f72f356d01d8f3e44ff0b4e5886e47a108fa91b0c7b1e1c5c158da31c77b096e3aeed05b7a6633126223a4e3420442b24064ff0c3886f53b7896e96c84f3a62d83910fd2b0a", 0xd0, r0}, 0x68) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000000)={0x4000000000000251}) 03:35:53 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r2, 0x1}, 0x14}}, 0x0) 03:35:53 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETLED(r0, 0x5424, 0xfffdfffdffffffff) [ 1290.224241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:53 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000001000)=@qipcrtr, 0x80) 03:35:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$netlink(r0, &(0x7f0000000580)=@proc, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) 03:35:53 executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40082104, &(0x7f0000000000)) 03:35:53 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x24, r3, 0x100, 0x0, 0x3, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042dbd6e8c96b8dd957000fcdbdf25160000000a00060008021100000000000a000600ffffffffffff00000a000600ffff1400000001000a000600ffffffffffff00000a001a000802110000000000"], 0x50}, 0x1, 0x0, 0x0, 0x20000080}, 0xc0000) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='lo\x00', 0x10) signalfd(r1, &(0x7f00000000c0)={[0x5]}, 0x8) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r5, 0x8010671f, &(0x7f0000000200)={&(0x7f0000000140)=""/166, 0xa6}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$binfmt_script(r4, &(0x7f00000002c0)=ANY=[], 0x131) r7 = dup(r6) copy_file_range(r7, 0x0, r4, 0x0, 0x401, 0x0) ioctl$KDDELIO(r4, 0x4b35, 0x24) flistxattr(r7, &(0x7f0000000280)=""/72, 0x48) 03:35:53 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in6=@private2, 0x0, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'wp512-generic\x00'}}}]}, 0x138}}, 0x0) 03:35:53 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x22b6, &(0x7f00000014c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000001440)) poll(&(0x7f0000001480)=[{r0}], 0x1, 0x9) 03:35:53 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/212, 0xd4}], 0x1) 03:35:54 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001180)=[{&(0x7f0000000000)="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", 0x18a}], 0x1) 03:35:54 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r2, 0x1}, 0x14}}, 0x0) 03:35:54 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x541b) 03:35:54 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/212, 0xd4}], 0x1) 03:35:54 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffffffff000) 03:35:54 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r2, 0x1}, 0x14}}, 0x0) 03:35:54 executing program 0: write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[], 0x131) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0x0) ioctl$KDDELIO(r2, 0x4b35, 0x1) 03:35:54 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x48, &(0x7f0000000040), 0x4) 03:35:54 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x900) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:35:55 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in6=@private2, 0x0, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'wp512-generic\x00'}}}]}, 0x138}}, 0x0) [ 1291.624181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:55 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/212, 0xd4}], 0x1) 03:35:55 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r2, 0x1}, 0x14}}, 0x0) 03:35:55 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x541b) 03:35:55 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x541b) 03:35:55 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5394, &(0x7f0000000380)={"bda9af4ed4fd7225ee6c0edc", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:35:55 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000f40)=[{{&(0x7f0000000480)={0xa, 0x4e21, 0x0, @loopback={0x0, 0x3}}, 0x1c, 0x0}}], 0x1, 0x0) 03:35:55 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/212, 0xd4}], 0x1) 03:35:55 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x541b) 03:35:55 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000f40)=[{{&(0x7f0000000480)={0xa, 0x4e21, 0x0, @loopback={0x0, 0x3}}, 0x1c, 0x0}}], 0x1, 0x0) 03:35:55 executing program 2: creat(0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 03:35:55 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x23, &(0x7f00000000c0)="ad", 0x1) 03:35:55 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0xea5) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:35:55 executing program 6: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) sysinfo(&(0x7f0000000040)=""/81) 03:35:55 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x541b) 03:35:55 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r2) sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r3, 0x409, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x1c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r6) sendmsg$IEEE802154_LLSEC_GETPARAMS(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r7, 0x409, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x1c}}, 0x0) ioctl$CDROM_CHANGER_NSLOTS(0xffffffffffffffff, 0x5328) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x68}, 0x1, 0x0, 0x0, 0x841}, 0x40) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0xec, 0x0, 0x18, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x3c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_LEVEL={0x54, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x81}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xff}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}]}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7f}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x24008010) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r10, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) [ 1292.180845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:55 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x541b) 03:35:55 executing program 6: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0x2}}}, 0x6) 03:35:55 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) 03:35:55 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x541b) 03:35:55 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) link(0x0, 0x0) 03:35:55 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000f40)=[{{&(0x7f0000000480)={0xa, 0x4e21, 0x0, @loopback={0x0, 0x3}}, 0x1c, 0x0}}], 0x1, 0x0) 03:35:55 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) 03:35:55 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpgid(0x0, 0x0) 03:35:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4b, 0x0, 0x46) 03:35:56 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0xf00) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:35:56 executing program 3: io_setup(0x8, &(0x7f0000000040)=0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x800, 0x0) io_submit(r0, 0x2, &(0x7f0000001e00)=[&(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000001b80)='r', 0x1}]) 03:35:56 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000f40)=[{{&(0x7f0000000480)={0xa, 0x4e21, 0x0, @loopback={0x0, 0x3}}, 0x1c, 0x0}}], 0x1, 0x0) 03:35:56 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) 03:35:56 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) 03:35:56 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpgid(0x0, 0x0) 03:35:56 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x181840, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x3, 0x1, 0x3, 0x1}, 0x8) [ 1292.744479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1292.772144] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 1292.773501] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1292.774534] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1292.775510] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 01 00 [ 1292.776426] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1292.777401] buffer_io_error: 32 callbacks suppressed [ 1292.777411] Buffer I/O error on dev sr0, logical block 0, async page read 03:35:56 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) 03:35:56 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpgid(0x0, 0x0) [ 1292.820293] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 1292.821525] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1292.822386] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1292.823195] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 01 00 00 01 00 [ 1292.824109] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1292.825091] Buffer I/O error on dev sr0, logical block 1, async page read 03:35:56 executing program 1: syz_mount_image$vfat(&(0x7f0000013cc0), &(0x7f0000013d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000015140)={[{@shortname_win95}, {@uni_xlateno}], [{@smackfshat={'smackfshat', 0x3d, 'sit0\x00'}}]}) 03:35:56 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) [ 1292.912115] vfat: Unknown parameter 'smackfshat' [ 1292.914805] vfat: Unknown parameter 'smackfshat' 03:35:56 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r0, 0x29, 0x50, 0x0, &(0x7f0000000080)) 03:35:56 executing program 0: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x200400, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x89, 0x7, 0x0, 0x1}, 0x8) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[], 0x131) r3 = dup(r2) copy_file_range(r3, 0x0, r1, 0x0, 0x401, 0x0) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f00000000c0)=""/182) 03:35:56 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') write$cgroup_freezer_state(r0, 0x0, 0x0) 03:35:56 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) 03:35:56 executing program 3: io_setup(0x8, &(0x7f0000000040)=0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x800, 0x0) io_submit(r0, 0x2, &(0x7f0000001e00)=[&(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000001b80)='r', 0x1}]) [ 1293.064225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1293.094101] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 1293.095101] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1293.095978] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1293.096818] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 01 00 [ 1293.097715] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1293.098523] Buffer I/O error on dev sr0, logical block 0, async page read [ 1293.115265] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 1293.116645] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1293.117401] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1293.119207] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 01 00 00 01 00 [ 1293.120201] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1293.121240] Buffer I/O error on dev sr0, logical block 1, async page read 03:35:56 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 03:35:56 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpgid(0x0, 0x0) 03:35:56 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lsetxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x0) 03:35:56 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x1100) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:35:56 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) 03:35:56 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3}, 0x0, 0x0, 0x21}) 03:35:56 executing program 3: io_setup(0x8, &(0x7f0000000040)=0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x800, 0x0) io_submit(r0, 0x2, &(0x7f0000001e00)=[&(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000001b80)='r', 0x1}]) 03:35:56 executing program 0: sync_file_range(0xffffffffffffffff, 0x3, 0x8000000080000000, 0x3) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) [ 1293.205336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1293.248415] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 1293.249503] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1293.250266] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1293.250982] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 01 00 [ 1293.251798] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1293.252660] Buffer I/O error on dev sr0, logical block 0, async page read 03:35:56 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/net\x00') mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000980)={0x100000, 0x0, 0x0, {r0}}, 0x20) [ 1293.270122] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 1293.271091] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1293.271808] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1293.272520] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 01 00 00 01 00 03:35:56 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) [ 1293.273318] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1293.274326] Buffer I/O error on dev sr0, logical block 1, async page read 03:35:56 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40014}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f00000001c0)={0x0, 0x26}, &(0x7f0000000200)) dup2(0xffffffffffffffff, 0xffffffffffffffff) timer_delete(0x0) 03:35:56 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') close_range(r0, 0xffffffffffffffff, 0x0) 03:35:56 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) statx(r0, 0x0, 0x1000, 0x0, &(0x7f0000000240)) 03:35:56 executing program 3: io_setup(0x8, &(0x7f0000000040)=0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x800, 0x0) io_submit(r0, 0x2, &(0x7f0000001e00)=[&(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000001b80)='r', 0x1}]) 03:35:56 executing program 6: remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff, 0x0) [ 1293.430687] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 1293.431638] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1293.432261] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1293.432898] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 01 00 [ 1293.433610] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1293.434338] Buffer I/O error on dev sr0, logical block 0, async page read [ 1293.445001] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 1293.446011] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1293.446730] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1293.447329] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 01 00 00 01 00 [ 1293.448016] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1293.448766] Buffer I/O error on dev sr0, logical block 1, async page read [ 1293.514553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:57 executing program 2: prlimit64(0x0, 0x0, &(0x7f0000000200)={0xb9f0ef9}, 0x0) 03:35:57 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x1200) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:35:57 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xd, &(0x7f0000000280), 0x4) 03:35:57 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40014}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f00000001c0)={0x0, 0x26}, &(0x7f0000000200)) dup2(0xffffffffffffffff, 0xffffffffffffffff) timer_delete(0x0) 03:35:57 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x40603d10, &(0x7f0000000380)) io_uring_setup(0x5df4, &(0x7f0000000440)={0x0, 0x11f5, 0x10}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, 0x0) 03:35:57 executing program 4: clone3(&(0x7f0000001fc0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x58) 03:35:57 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x6, @none, 0x3f}, 0xe) 03:35:57 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[], 0x131) r3 = dup(r2) copy_file_range(r3, 0x0, r1, 0x0, 0x401, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000100)={0x298, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [{{0x8}, {0x200, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x1, 0xfb, 0x9, 0x3}, {0xfff8, 0xca, 0x7, 0x5}, {0x3f, 0x1, 0x1f, 0x6}, {0x4, 0x2, 0x8, 0x3}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xfff, 0x4, 0x0, 0x7fff}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x79}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x4000805}, 0x804) 03:35:57 executing program 2: r0 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x15, 0x0, r1) 03:35:57 executing program 4: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RSTAT(r1, &(0x7f0000000080)=ANY=[], 0xffd3) write$P9_RLINK(r1, &(0x7f0000000040)={0x7}, 0x7) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227b, 0x0) readv(r0, &(0x7f00000014c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) 03:35:57 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000c00)='/sys/kernel/kexec_loaded', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0x12, r0, 0x8000000) 03:35:57 executing program 3: syz_mount_image$tmpfs(&(0x7f00000007c0), &(0x7f0000000800)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYRESDEC]) 03:35:57 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r0, r1, 0x0, 0x68e146a1) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000040)={0x0, 0x10001, 0x3}) [ 1293.636247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:57 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x1, 0x20}, 0x8) 03:35:57 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40014}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f00000001c0)={0x0, 0x26}, &(0x7f0000000200)) dup2(0xffffffffffffffff, 0xffffffffffffffff) timer_delete(0x0) [ 1293.697888] tmpfs: Bad value for 'uid' [ 1293.698290] tmpfs: Bad value for 'uid' [ 1293.705870] tmpfs: Bad value for 'uid' [ 1293.706219] tmpfs: Bad value for 'uid' 03:35:57 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000028c0)='/proc/tty/ldiscs\x00', 0x0, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) 03:35:57 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[], 0x131) r3 = dup(r2) copy_file_range(r3, 0x0, r1, 0x0, 0x401, 0x0) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x51}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x20000040) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 03:35:57 executing program 0: read(0xffffffffffffffff, &(0x7f0000000000)=""/26, 0x1a) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) dup(r1) fcntl$setflags(r1, 0x2, 0x1) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 03:35:57 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x42, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) 03:35:57 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40014}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f00000001c0)={0x0, 0x26}, &(0x7f0000000200)) dup2(0xffffffffffffffff, 0xffffffffffffffff) timer_delete(0x0) 03:35:57 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x1400) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:35:57 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x530b) 03:35:57 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) membarrier(0x1, 0x0) 03:35:57 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1, 0x0, &(0x7f0000001ec0)) [ 1294.027100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:57 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000080)={'lo\x00', &(0x7f0000000000)=@ethtool_coalesce}) 03:35:57 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) 03:35:57 executing program 4: r0 = gettid() ptrace$setregset(0x8, r0, 0x0, 0x0) 03:35:57 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000000580)=[{{&(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0x38}}], 0x1, 0x0) [ 1294.334067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:58 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 03:35:58 executing program 0: unlink(&(0x7f0000000000)='./file0\x00') r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r1 = getpid() pidfd_open(r1, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x1, 0x99, 0x40, 0x0, 0x1, 0x2, 0x8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20fd, 0x0, @perf_config_ext={0x10000, 0x80000001}, 0x40100, 0xffff, 0x7364, 0x3, 0x7, 0x5, 0x8001, 0x0, 0x202f, 0x0, 0xffffffffffffff7f}, r1, 0x9, 0xffffffffffffffff, 0x0) 03:35:58 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c, &(0x7f0000000a00)=[{&(0x7f0000000080)="add176fd18e8d85c98cf9586689cb0c6472de50db9306a43f1a0f561cde9ce1524df0d44a17877e54d7a19bfb7b81e2a6d955dcc9ee40efa03b6ca85edafbe67554d9f0997c720db58d1daf4bc2ccadf65b14022e56f9275edcc44f8d578119f", 0x60}, {&(0x7f0000000700)="63a8544c060000001a49ad1dd5fbc344b1ef32463c9cc29ae63d360e894327d3825a0adee47e1a21da1b8a21c09017493959a73a9f21f8810f82b885f0088d1d97832f11661fb66f5a093fd7f1d1db85cea3aec5e28c463a2f6e2cc6507d1bde945e95986ced97f07a14f66ee1473cc9dc4322aa865c3d739a065db09a007bfb46be6c04c50efcba99d42ebd165094ab0307b6626100eaddf7c22e6f8c9ee0a456a1523d1251cf6daa36e95fe32b72b5cfe98c324f1a8d4da6df5b0ec0167830ab9127ef144bb397c5e8ad4cf0e170a36ef360490893e83b5a4b59f5b990875a382dc6b0b5ad59f552a44161e3f384", 0xef}, {&(0x7f0000000100)="011b0bc7fc29ce89ef6f206adf67cad40912e17ebe9578b8963a", 0x1a}, {&(0x7f0000000280)="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", 0x444}], 0x4}}], 0x1, 0x0) 03:35:58 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) 03:35:58 executing program 1: madvise(&(0x7f0000904000/0x3000)=nil, 0x3000, 0x10) mlock(&(0x7f0000f13000/0x1000)=nil, 0x1000) mlock2(&(0x7f00008b6000/0x2000)=nil, 0x2000, 0x0) madvise(&(0x7f00008b6000/0x3000)=nil, 0x3000, 0x12) mlock(&(0x7f00007fd000/0x3000)=nil, 0x3000) munmap(&(0x7f0000c68000/0x1000)=nil, 0x1000) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 03:35:58 executing program 3: getgroups(0x3ffffffffffffe5e, &(0x7f0000000080)=[0x0, 0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0x0]) 03:35:58 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r0, r1, 0x0, 0x68e146a1) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000040)={0x0, 0x10001, 0x3}) 03:35:58 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x1500) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) [ 1294.592951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1294.901126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:58 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r0, r1, 0x0, 0x68e146a1) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000040)={0x0, 0x10001, 0x3}) 03:35:58 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r1, r0, 0x4) 03:35:58 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000470000004f801", 0x17}, {&(0x7f0000010100), 0x0, 0x1e0}], 0x0, &(0x7f0000010f00)) 03:35:58 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x40086602, &(0x7f0000000000)=ANY=[]) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 03:35:58 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x1600) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:35:58 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x3c, &(0x7f0000000900)={@private1}, 0x14) 03:35:58 executing program 4: r0 = socket$inet(0x2, 0x3, 0x26) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) ioctl$int_in(r0, 0x5421, &(0x7f0000000240)=0x1) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:35:58 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x9) [ 1295.560436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:59 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736642a3c400088001000440000004f801", 0x17}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x2800}], 0x2010080, &(0x7f0000001300)=ANY=[]) unlink(&(0x7f0000000040)='./file0/file0\x00') 03:35:59 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) creat(&(0x7f00000003c0)='./file0\x00', 0x0) lchown(&(0x7f0000000280)='./file0\x00', 0xee00, 0x0) 03:35:59 executing program 1: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x18d101, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fadvise64(r3, 0x0, 0x0, 0x2) sendfile(r0, r3, 0x0, 0x68e146a1) 03:35:59 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='uni_xlate=0,uni_xlate']) 03:35:59 executing program 3: ioprio_set$pid(0x2, 0x0, 0x4000) clone3(&(0x7f0000000240)={0x100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:35:59 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) [ 1295.740091] loop0: detected capacity change from 0 to 40 [ 1295.776367] No source specified [ 1295.782976] No source specified 03:35:59 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736642a3c400088001000440000004f801", 0x17}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x2800}], 0x2010080, &(0x7f0000001300)=ANY=[]) unlink(&(0x7f0000000040)='./file0/file0\x00') 03:35:59 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r0, r1, 0x0, 0x68e146a1) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000040)={0x0, 0x10001, 0x3}) 03:35:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc) 03:35:59 executing program 3: ioprio_set$pid(0x2, 0x0, 0x4000) clone3(&(0x7f0000000240)={0x100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:35:59 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x1700) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:35:59 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448cc, &(0x7f0000000280)={0x0, 0x0, "d017e9"}) 03:35:59 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x55}) 03:35:59 executing program 1: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x18d101, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fadvise64(r3, 0x0, 0x0, 0x2) sendfile(r0, r3, 0x0, 0x68e146a1) [ 1296.542050] loop0: detected capacity change from 0 to 40 [ 1296.563936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:36:00 executing program 1: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x18d101, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fadvise64(r3, 0x0, 0x0, 0x2) sendfile(r0, r3, 0x0, 0x68e146a1) 03:36:00 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000001100)=[{0x64}, {0x6}]}) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:36:00 executing program 3: ioprio_set$pid(0x2, 0x0, 0x4000) clone3(&(0x7f0000000240)={0x100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:36:00 executing program 4: pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:36:00 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="4a67cfa26e0f6af7e7081afe9aeae03fcf7f3645ea430e07c710897dc5ada02e8ea59d806fc125a3a64cc866b911af8ad5b49b06554bb600000000000025bcac585a47b6c40000000000000000000000000008", 0x53}], 0x1000000000000313, 0x0, 0x0, 0x15) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:36:00 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736642a3c400088001000440000004f801", 0x17}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x2800}], 0x2010080, &(0x7f0000001300)=ANY=[]) unlink(&(0x7f0000000040)='./file0/file0\x00') [ 1296.712616] audit: type=1326 audit(2000000160.202:158): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=78745 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2455008b19 code=0x0 03:36:00 executing program 1: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x18d101, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fadvise64(r3, 0x0, 0x0, 0x2) sendfile(r0, r3, 0x0, 0x68e146a1) [ 1296.835253] loop0: detected capacity change from 0 to 40 [ 1297.539746] audit: type=1326 audit(2000000161.032:159): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=78745 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2455008b19 code=0x0 03:36:01 executing program 3: ioprio_set$pid(0x2, 0x0, 0x4000) clone3(&(0x7f0000000240)={0x100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:36:01 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept(r0, 0x0, 0x0) 03:36:01 executing program 1: syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0xc) 03:36:01 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="4a67cfa26e0f6af7e7081afe9aeae03fcf7f3645ea430e07c710897dc5ada02e8ea59d806fc125a3a64cc866b911af8ad5b49b06554bb600000000000025bcac585a47b6c40000000000000000000000000008", 0x53}], 0x1000000000000313, 0x0, 0x0, 0x15) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:36:01 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x1800) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:36:01 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736642a3c400088001000440000004f801", 0x17}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x2800}], 0x2010080, &(0x7f0000001300)=ANY=[]) unlink(&(0x7f0000000040)='./file0/file0\x00') 03:36:01 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setitimer(0x1, 0x0, 0x0) 03:36:01 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="4a67cfa26e0f6af7e7081afe9aeae03fcf7f3645ea430e07c710897dc5ada02e8ea59d806fc125a3a64cc866b911af8ad5b49b06554bb600000000000025bcac585a47b6c40000000000000000000000000008", 0x53}], 0x1000000000000313, 0x0, 0x0, 0x15) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1297.691486] loop0: detected capacity change from 0 to 40 03:36:01 executing program 3: syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), 0xffffffffffffffff) syz_mount_image$tmpfs(0x0, &(0x7f0000000a40)='./file0\x00', 0x40, 0x2, &(0x7f0000000b80)=[{&(0x7f0000000a80)="36af5e", 0x3, 0x3}, {&(0x7f0000000b00)="a38e451f4e6bec128091729427f4e51b5282730f", 0x14, 0xc0e}], 0x8000, 0x0) 03:36:01 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) [ 1297.746896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:36:01 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="4a67cfa26e0f6af7e7081afe9aeae03fcf7f3645ea430e07c710897dc5ada02e8ea59d806fc125a3a64cc866b911af8ad5b49b06554bb600000000000025bcac585a47b6c40000000000000000000000000008", 0x53}], 0x1000000000000313, 0x0, 0x0, 0x15) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:36:01 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="4a67cfa26e0f6af7e7081afe9aeae03fcf7f3645ea430e07c710897dc5ada02e8ea59d806fc125a3a64cc866b911af8ad5b49b06554bb600000000000025bcac585a47b6c40000000000000000000000000008", 0x53}], 0x1000000000000313, 0x0, 0x0, 0x15) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:36:01 executing program 4: setresuid(0x0, 0xee01, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, 0x0, 0x0) 03:36:01 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setitimer(0x1, 0x0, 0x0) 03:36:01 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x6, 0x0, 0x1f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:36:01 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) 03:36:01 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="4a67cfa26e0f6af7e7081afe9aeae03fcf7f3645ea430e07c710897dc5ada02e8ea59d806fc125a3a64cc866b911af8ad5b49b06554bb600000000000025bcac585a47b6c40000000000000000000000000008", 0x53}], 0x1000000000000313, 0x0, 0x0, 0x15) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:36:01 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$unix(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x18, 0x1, 0x1, [r2, r0]}}], 0x18}, 0x0) 03:36:01 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="4a67cfa26e0f6af7e7081afe9aeae03fcf7f3645ea430e07c710897dc5ada02e8ea59d806fc125a3a64cc866b911af8ad5b49b06554bb600000000000025bcac585a47b6c40000000000000000000000000008", 0x53}], 0x1000000000000313, 0x0, 0x0, 0x15) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:36:01 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x1900) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:36:01 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) 03:36:01 executing program 0: futex(&(0x7f0000000040), 0x5, 0x0, 0x0, &(0x7f0000000100), 0x2000000) 03:36:01 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setitimer(0x1, 0x0, 0x0) 03:36:01 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x560e, &(0x7f00000000c0)) 03:36:01 executing program 2: io_setup(0x2, &(0x7f0000000000)=0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) io_submit(r0, 0x2, &(0x7f0000000240)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, r2, &(0x7f00000001c0)}]) 03:36:01 executing program 3: clock_gettime(0x6, &(0x7f0000000140)) 03:36:01 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) 03:36:01 executing program 0: r0 = eventfd(0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(&(0x7f00000000c0)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) 03:36:01 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000009e80), 0x1ab880, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 1298.197534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:36:01 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setitimer(0x1, 0x0, 0x0) 03:36:01 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001ec0), 0x0, 0x0) readv(r0, 0x0, 0x0) 03:36:01 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind(r0, &(0x7f0000000000)=@l2={0x1f, 0x0, @fixed}, 0x80) 03:36:02 executing program 0: creat(&(0x7f0000000080)='./file0\x00', 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000002840)='./file0\x00', 0x0, 0xee00, 0x1000) 03:36:02 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x1a00) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:36:02 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKSECTGET(r0, 0x125e, &(0x7f0000000000)) 03:36:02 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40220}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pkey_alloc(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) 03:36:02 executing program 4: getitimer(0x2, &(0x7f0000000040)) 03:36:02 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r2 = dup2(r1, r0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x2e) 03:36:02 executing program 6: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug', 0x0, 0x0) name_to_handle_at(r0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) 03:36:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x14, 0x0, 0x0) 03:36:02 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_linger(r0, 0x1, 0x1e, 0x0, &(0x7f0000000140)) 03:36:02 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETLED(r0, 0x5424, 0x2000000000000000) 03:36:02 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, 0x0) 03:36:02 executing program 0: creat(&(0x7f0000000080)='./file0\x00', 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000002840)='./file0\x00', 0x0, 0xee00, 0x1000) 03:36:02 executing program 4: getitimer(0x2, &(0x7f0000000040)) [ 1298.671432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:36:02 executing program 6: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug', 0x0, 0x0) name_to_handle_at(r0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) 03:36:02 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKSECTGET(r0, 0x125e, &(0x7f0000000000)) 03:36:02 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) syz_mount_image$nfs(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa40024, &(0x7f0000000040)=ANY=[]) 03:36:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) fcntl$getflags(r0, 0x40a) 03:36:02 executing program 4: getitimer(0x2, &(0x7f0000000040)) 03:36:02 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@polexpire={0xc0, 0x13, 0x3, 0x0, 0x0, {{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xc0}}, 0x0) 03:36:02 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r2 = dup2(r1, r0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x2e) 03:36:02 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x1b00) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:36:02 executing program 6: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug', 0x0, 0x0) name_to_handle_at(r0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) 03:36:02 executing program 5: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) 03:36:02 executing program 0: creat(&(0x7f0000000080)='./file0\x00', 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000002840)='./file0\x00', 0x0, 0xee00, 0x1000) 03:36:02 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKSECTGET(r0, 0x125e, &(0x7f0000000000)) [ 1299.041971] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1299.049548] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1299.075156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:36:02 executing program 0: creat(&(0x7f0000000080)='./file0\x00', 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000002840)='./file0\x00', 0x0, 0xee00, 0x1000) 03:36:02 executing program 1: openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000002e00), 0x0, 0x0) 03:36:02 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r2 = dup2(r1, r0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x2e) 03:36:02 executing program 4: getitimer(0x2, &(0x7f0000000040)) 03:36:02 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{0x0, 0x9}}) 03:36:02 executing program 6: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug', 0x0, 0x0) name_to_handle_at(r0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) 03:36:02 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKSECTGET(r0, 0x125e, &(0x7f0000000000)) 03:36:02 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000), 0x10) 03:36:02 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r2 = dup2(r1, r0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x2e) 03:36:02 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') pread64(r0, &(0x7f0000000180)=""/222, 0xde, 0x200) 03:36:02 executing program 3: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) finit_module(0xffffffffffffffff, 0x0, 0x0) 03:36:02 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:36:02 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x1c00) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:36:02 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r3, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r4, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, 0x0, &(0x7f0000005640)) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setregid(r7, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000005680)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fffffff}}, './file0\x00'}) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r8, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) clone3(&(0x7f0000005880)={0x61020100, &(0x7f00000056c0), &(0x7f0000005700), &(0x7f0000005740), {0x34}, &(0x7f0000005780)=""/85, 0x55, &(0x7f0000005800)=""/32, &(0x7f0000005840)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8, {r2}}, 0x58) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x24000010) 03:36:02 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000000)=""/52) 03:36:02 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./mnt\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000180)={{}, {}, [], {}, [{0x8, 0x0, 0xee01}, {}]}, 0x34, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='mnt/encrypted_dir\x00', 0x0) 03:36:02 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000002880)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)={'trans=tcp,', {}, 0x2c, {[{@msize}]}}) [ 1299.534886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:36:03 executing program 4: r0 = getpid() r1 = pidfd_open(r0, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) 03:36:03 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {}, [{}], {}, [{}]}, 0x34, 0x0) 03:36:03 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44800) fcntl$setstatus(r0, 0x4, 0x44000) 03:36:03 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="ed6214e7dd6a0e9d1a2a0c7b1e2ad426d69b004b", 0x14}], 0x1) 03:36:03 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/kexec_crash_size', 0x88001, 0x0) write$tun(r0, &(0x7f0000000300)={@val={0x2b}, @val, @eth={@broadcast, @random="c9cff13f9b5a", @val={@void}, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, '>K\a', 0x28, 0x6, 0x0, @mcast1, @empty, {[], @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}}}}, 0x70) 03:36:03 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x301}, 0x14}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, 0x3, 0x1, 0x905}, 0x14}}, 0x0) 03:36:03 executing program 3: r0 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 03:36:03 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000003c40)=ANY=[@ANYBLOB="34000000680001"], 0x34}], 0x1}, 0x0) [ 1299.774996] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.6'. 03:36:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, 0x0, &(0x7f00000018c0)=0x2700) 03:36:03 executing program 6: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) 03:36:03 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xd4c2) 03:36:03 executing program 3: r0 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 03:36:03 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x1d00) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:36:03 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x5, 0x0, 0x0) 03:36:03 executing program 5: syz_io_uring_setup(0x1d35, &(0x7f0000001cc0)={0x0, 0x0, 0x20}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) 03:36:03 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r3, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r4, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, 0x0, &(0x7f0000005640)) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setregid(r7, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000005680)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fffffff}}, './file0\x00'}) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r8, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) clone3(&(0x7f0000005880)={0x61020100, &(0x7f00000056c0), &(0x7f0000005700), &(0x7f0000005740), {0x34}, &(0x7f0000005780)=""/85, 0x55, &(0x7f0000005800)=""/32, &(0x7f0000005840)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8, {r2}}, 0x58) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x24000010) [ 1299.941536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:36:03 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r3, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r4, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, 0x0, &(0x7f0000005640)) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setregid(r7, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000005680)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fffffff}}, './file0\x00'}) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r8, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) clone3(&(0x7f0000005880)={0x61020100, &(0x7f00000056c0), &(0x7f0000005700), &(0x7f0000005740), {0x34}, &(0x7f0000005780)=""/85, 0x55, &(0x7f0000005800)=""/32, &(0x7f0000005840)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8, {r2}}, 0x58) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x24000010) 03:36:03 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) setresuid(0x0, 0xee01, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) 03:36:03 executing program 2: creat(&(0x7f0000000180)='./file0\x00', 0x0) mount$9p_xen(0x0, &(0x7f0000005980)='./file0\x00', 0x0, 0x0, 0x0) 03:36:03 executing program 5: kexec_load(0x0, 0x1, &(0x7f00000001c0)=[{0x0, 0x0, 0x10001, 0xffffffffffffffff}], 0x0) 03:36:03 executing program 4: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8}) 03:36:03 executing program 3: r0 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 03:36:03 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r2 = dup2(r1, r0) write$binfmt_aout(r2, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x8000000}, "", ['\x00']}, 0x120) 03:36:03 executing program 4: perf_event_open$cgroup(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x808a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x9000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:36:03 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r0, 0xffffffffffffffff) 03:36:03 executing program 3: r0 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 03:36:03 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r3, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r4, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, 0x0, &(0x7f0000005640)) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setregid(r7, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000005680)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fffffff}}, './file0\x00'}) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r8, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) clone3(&(0x7f0000005880)={0x61020100, &(0x7f00000056c0), &(0x7f0000005700), &(0x7f0000005740), {0x34}, &(0x7f0000005780)=""/85, 0x55, &(0x7f0000005800)=""/32, &(0x7f0000005840)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8, {r2}}, 0x58) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x24000010) 03:36:03 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000b80)=[{&(0x7f00000008c0)='!', 0x1}], 0x1, 0x4bbe, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000000)={0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x3, [{}, {}, {}]}) 03:36:03 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x1e00) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:36:03 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r3, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r4, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, 0x0, &(0x7f0000005640)) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setregid(r7, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000005680)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fffffff}}, './file0\x00'}) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r8, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) clone3(&(0x7f0000005880)={0x61020100, &(0x7f00000056c0), &(0x7f0000005700), &(0x7f0000005740), {0x34}, &(0x7f0000005780)=""/85, 0x55, &(0x7f0000005800)=""/32, &(0x7f0000005840)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8, {r2}}, 0x58) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x24000010) [ 1300.351247] sg_write: data in/out 134217692/246 bytes for SCSI command 0x0-- guessing data in; [ 1300.351247] program syz-executor.6 not setting count and/or reply_len properly [ 1300.355450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1300.365297] sg_write: data in/out 134217692/246 bytes for SCSI command 0x0-- guessing data in; [ 1300.365297] program syz-executor.6 not setting count and/or reply_len properly 03:36:03 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/mnt\x00') ftruncate(r0, 0x0) 03:36:03 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) 03:36:03 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) close(r0) 03:36:03 executing program 5: mlock(&(0x7f0000fee000/0x12000)=nil, 0x12000) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6) 03:36:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x34, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x63, 0x0, 0x0, @ipv6=@local}]}]}, 0x34}], 0x1}, 0x0) 03:36:04 executing program 2: r0 = mq_open(&(0x7f00000000c0)='\',\x00', 0x0, 0x0, 0x0) ppoll(&(0x7f0000000280)=[{r0}], 0x1, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000800), 0x2, 0x2000) r1 = mq_open(&(0x7f00000000c0)='\',\x00', 0x0, 0x0, 0x0) ppoll(&(0x7f0000000280)=[{r1}], 0x1, &(0x7f00000002c0), 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0}, &(0x7f0000008600)=0xc) setresuid(r3, r3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setresgid(0x0, r5, 0xee01) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000840)) r6 = fork() r7 = gettid() kcmp(r6, r7, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) 03:36:04 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=""/129, 0x81) 03:36:04 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r3, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r4, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, 0x0, &(0x7f0000005640)) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setregid(r7, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000005680)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fffffff}}, './file0\x00'}) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r8, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) clone3(&(0x7f0000005880)={0x61020100, &(0x7f00000056c0), &(0x7f0000005700), &(0x7f0000005740), {0x34}, &(0x7f0000005780)=""/85, 0x55, &(0x7f0000005800)=""/32, &(0x7f0000005840)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8, {r2}}, 0x58) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x24000010) [ 1300.635352] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1300.640077] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 03:36:04 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="ee", 0x1}], 0x1) 03:36:04 executing program 4: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f00000000c0)=""/27) 03:36:04 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x1f00) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) [ 1300.776046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1301.083784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:36:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 03:36:04 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)) 03:36:04 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x2000) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:36:04 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=""/129, 0x81) 03:36:04 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r3, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r4, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, 0x0, &(0x7f0000005640)) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setregid(r7, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000005680)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fffffff}}, './file0\x00'}) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r8, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) clone3(&(0x7f0000005880)={0x61020100, &(0x7f00000056c0), &(0x7f0000005700), &(0x7f0000005740), {0x34}, &(0x7f0000005780)=""/85, 0x55, &(0x7f0000005800)=""/32, &(0x7f0000005840)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8, {r2}}, 0x58) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x24000010) 03:36:04 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROMREADAUDIO(r0, 0x530e, &(0x7f0000000280)={@lba, 0x2, 0x0, 0x0}) 03:36:04 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r0, &(0x7f0000000100)=""/51, 0x33) getdents64(r0, &(0x7f0000000300)=""/133, 0x85) 03:36:04 executing program 5: mlock(&(0x7f0000fee000/0x12000)=nil, 0x12000) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6) 03:36:04 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$search(0xa, r0, &(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0) [ 1301.225925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:36:04 executing program 4: set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x5db) set_mempolicy(0x0, 0x0, 0x0) 03:36:04 executing program 5: mlock(&(0x7f0000fee000/0x12000)=nil, 0x12000) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6) 03:36:04 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x48, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x20) 03:36:04 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=""/129, 0x81) 03:36:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]]}, 0x2c}}, 0x0) 03:36:04 executing program 5: mlock(&(0x7f0000fee000/0x12000)=nil, 0x12000) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6) [ 1301.541369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:36:05 executing program 0: syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000001340), 0x8, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mount$9p_fd(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000001300), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 03:36:05 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=""/129, 0x81) 03:36:05 executing program 4: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) 03:36:05 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') pread64(r0, &(0x7f0000000140)=""/178, 0xb2, 0x7) 03:36:05 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) fallocate(r1, 0x0, 0x0, 0x4) 03:36:05 executing program 3: futex(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 03:36:05 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x2100) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:36:05 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$DVD_WRITE_STRUCT(r0, 0x5390, &(0x7f0000000480)=@disckey={0x2, 0x0, "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"}) [ 1301.620385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:36:05 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000001540)='./file0\x00', &(0x7f0000001580)='./file0\x00') [ 1301.661962] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. 03:36:05 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4, 0x20, 0xb1, 0xc1, 0x0, 0x1, 0x404e, 0x7, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x400, 0x4, @perf_config_ext={0x4f7, 0x1}, 0x1200, 0x100000000, 0x8001, 0x1, 0x6, 0xff, 0x19, 0x0, 0x8, 0x0, 0x3}, r0, 0xe, 0xffffffffffffffff, 0x0) ptrace(0x10, r0) 03:36:05 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @timestamp}}}}, 0x0) 03:36:05 executing program 1: openat$hpet(0xffffffffffffff9c, &(0x7f0000002e80), 0x2a400, 0x0) 03:36:05 executing program 6: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) 03:36:05 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000000)) 03:36:05 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000000040)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f000000000000040008000000000000000500000008", 0x29, 0x4200}, {&(0x7f0000012a00)="ed4100003c000000e2f4655fe2f4655fe2f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c653100000000000000000000000000000000000000000000000000000048c5e5fc00000000000000000000000000000000000000000000000020000000d4c49a2ed4c49a2ed4c49a2ee2f4655fd4c49a2e0000000000000000000002ea0407000000000000000000000000000064617461", 0xb8, 0x5600}, {&(0x7f0000013100)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x8000}, {0x0, 0x0, 0x8000000000a000}], 0x0, &(0x7f0000000140)) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 03:36:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x28, 0x11, 0x1, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@local}]}]}, 0x28}], 0x1}, 0x0) 03:36:05 executing program 2: r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) fadvise64(r0, 0x0, 0x5, 0xc765cdd63ce15ea6) [ 1301.828093] loop0: detected capacity change from 0 to 264192 03:36:05 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_buf(r0, 0x29, 0x35, 0x0, 0x0) [ 1301.859221] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1301.894401] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. 03:36:05 executing program 0: clock_gettime(0x0, &(0x7f0000000000)) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227b, &(0x7f0000000000)) read(r0, 0x0, 0x2300) 03:36:05 executing program 6: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fstat(r0, &(0x7f0000004400)) [ 1301.946544] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:36:05 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x2200) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:36:05 executing program 5: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "ec3ba1", 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x11}, @routing={0x0, 0x1f}]}}}}}}}, 0x0) 03:36:05 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ptrace(0xffffffffffffffff, 0x0) ptrace$getenv(0x4201, 0x0, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) 03:36:05 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, &(0x7f0000005640)) 03:36:05 executing program 0: clock_gettime(0x0, &(0x7f0000000000)) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227b, &(0x7f0000000000)) read(r0, 0x0, 0x2300) [ 1302.043603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:36:05 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x10}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d5, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x7}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:36:05 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x31, 0x0, &(0x7f00000023c0)) 03:36:05 executing program 0: clock_gettime(0x0, &(0x7f0000000000)) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227b, &(0x7f0000000000)) read(r0, 0x0, 0x2300) 03:36:05 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x2300) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:36:05 executing program 1: r0 = io_uring_setup(0x5053, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r0, 0x21, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 03:36:05 executing program 5: io_setup(0x572, &(0x7f0000000140)=0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) dup3(r3, r1, 0x0) io_submit(r0, 0x3, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) 03:36:05 executing program 6: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fstat(r0, &(0x7f0000004400)) 03:36:05 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, &(0x7f0000005640)) 03:36:05 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup.net/syz1\x00', 0x200002, 0x0) 03:36:05 executing program 0: clock_gettime(0x0, &(0x7f0000000000)) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227b, &(0x7f0000000000)) read(r0, 0x0, 0x2300) 03:36:05 executing program 6: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fstat(r0, &(0x7f0000004400)) [ 1302.484051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:36:06 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, 0x0, 0x0) 03:36:06 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}}, 0x0) 03:36:06 executing program 5: r0 = epoll_create(0x8001) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xa2942) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 03:36:06 executing program 6: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fstat(r0, &(0x7f0000004400)) 03:36:06 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, &(0x7f0000005640)) 03:36:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) listen(r0, 0x0) 03:36:06 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) 03:36:06 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xfff) 03:36:06 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)='\f', 0x1}], 0x1) r1 = dup2(r0, r0) write$binfmt_elf64(r1, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1bf}, [{}]}, 0x78) 03:36:06 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setgroups(0x0, 0x0) 03:36:06 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x2400) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:36:06 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, &(0x7f0000005640)) 03:36:06 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x10}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d5, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x7}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 1302.872748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1302.879989] random: crng reseeded on system resumption 03:36:06 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x10}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d5, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x7}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:36:06 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='\xc4@^%\x00') [ 1302.896860] random: crng reseeded on system resumption 03:36:06 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) ioprio_get$pid(0x3, r0) 03:36:06 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x10}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d5, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x7}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:36:07 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) r2 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc) 03:36:07 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) 03:36:07 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001880)='/proc/locks\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) flock(r0, 0x2) 03:36:07 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:36:07 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) ioprio_get$pid(0x3, r0) 03:36:07 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r0, &(0x7f0000004b40)=[{{&(0x7f0000000200)=@nfc={0x27, 0x1}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="e557ce3bd6d952e732a1369d550d", 0x10012}], 0x1, &(0x7f0000000280)=[@timestamping={{0x14}}], 0x18}}], 0x1, 0x0) 03:36:07 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @multicast2}, {0x0, @link_local}, 0xac141497, {0x2, 0x0, @empty}, 'lo\x00'}) 03:36:07 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x2500) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:36:07 executing program 4: clone3(0x0, 0x0) 03:36:07 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) 03:36:07 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) [ 1303.655045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:36:07 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) ioprio_get$pid(0x3, r0) 03:36:07 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x49, &(0x7f0000000100), 0x4) 03:36:07 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @multicast2}, {0x0, @link_local}, 0xac141497, {0x2, 0x0, @empty}, 'lo\x00'}) 03:36:07 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000006f00), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0x2, 0x0, 0x80000001}) 03:36:07 executing program 4: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x0) utime(&(0x7f0000000280)='./file0\x00', 0x0) 03:36:07 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) 03:36:07 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x2600) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:36:07 executing program 5: fstatfs(0xffffffffffffffff, 0x0) 03:36:07 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) ioprio_get$pid(0x3, r0) 03:36:07 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup2(r0, r1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x13, r2, 0x0) syz_io_uring_submit(r3, 0x0, 0x0, 0x0) 03:36:07 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @multicast2}, {0x0, @link_local}, 0xac141497, {0x2, 0x0, @empty}, 'lo\x00'}) [ 1304.073895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:36:07 executing program 4: clock_gettime(0xb, &(0x7f0000000940)) 03:36:07 executing program 3: getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) 03:36:07 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast1, 0x0, 0x3c}, 0x0, @in6=@empty, 0x0, 0x5}}, 0xe8) 03:36:07 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @multicast2}, {0x0, @link_local}, 0xac141497, {0x2, 0x0, @empty}, 'lo\x00'}) 03:36:07 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:36:07 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000240)) 03:36:07 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x3f00) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:36:07 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) listen(r0, 0x3ff) 03:36:07 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x9, &(0x7f0000000180)="72cdfff13faab736d9"}) [ 1304.524326] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:36:08 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000640), r1) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x1}, 0x14}}, 0x0) 03:36:08 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1, 0x1}, {{@in=@private, 0x0, 0x3c}, 0x0, @in=@dev}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x0, 0x0, @loopback}, 0x1c) 03:36:08 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x9, &(0x7f0000000180)="72cdfff13faab736d9"}) 03:36:08 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000240)) 03:36:08 executing program 1: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:36:08 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080), 0x6) write$bt_hci(r0, &(0x7f0000000140)={0x2, @write_local_name={{0xc13, 0xf8}, {"a2bc28c5a09879cce88bea317e86fb2a97954f177b915c49f77e34e570782066d17b003d59143bc5a1c813f25166d5b21ade4261b1a1afe2b48611d925ef7b4ceea45609407db9e5dc91c72cc721b3dfd7a30cca9c6051e1623d8ca1a16a3e222dbfcd3bbca269ea0d540993af2265b2aa28d63839a61eebbea991f4c40488a42cff5054e80789cfa1d699ddf08bf971365c208c2045a59efb314620717dcf48cc70ba5920946f6f4336439de3c909e5677afba9da65d10575cbe9bcbc8a9413b41f6f92700424fd2f321d9961163ea4f170cfdb50fbffcbb60568027d8141d72c75478361c2c14a94b2d81da407439a34cf72c450f3eb69"}}}, 0xfc) 03:36:08 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:36:08 executing program 2: pkey_alloc(0x0, 0x4) 03:36:08 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x9, &(0x7f0000000180)="72cdfff13faab736d9"}) 03:36:08 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000240)) 03:36:08 executing program 1: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') read$char_usb(r0, &(0x7f0000000040)=""/1, 0x1) 03:36:08 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000900), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f00000000c0)={0x6}) 03:36:08 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000240)) 03:36:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, 0x0, 0x0) 03:36:08 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r0, &(0x7f0000000780)="d0fb8d73ce1916f9d4b89c0e40851db5", 0x10) 03:36:08 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:36:08 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x4000) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:36:08 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x9, &(0x7f0000000180)="72cdfff13faab736d9"}) 03:36:08 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) [ 1305.043404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:36:08 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x40045201, &(0x7f0000001800)) 03:36:08 executing program 5: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000005, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents(r0, 0x0, 0x0) 03:36:08 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = getpgrp(0x0) kcmp(r1, r0, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) 03:36:08 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) close_range(r0, 0xffffffffffffffff, 0x0) 03:36:08 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x14389, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10d040, 0x0) r0 = getpgrp(0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x18d101, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffffffff000) sched_getscheduler(r0) 03:36:08 executing program 4: syz_genetlink_get_family_id$batadv(&(0x7f0000002a40), 0xffffffffffffffff) 03:36:08 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:36:08 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) iopl(0x0) iopl(0x0) 03:36:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f0000000000)={0x0, {{0x2, 0x0, @dev}}, {{0x2, 0x0, @loopback}}}, 0x108) 03:36:08 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000001180)=[{&(0x7f0000000080)=""/143, 0x8f}, {&(0x7f0000000180)=""/4096, 0x1000}], 0x2, 0x0, 0x0) 03:36:08 executing program 0: futex(0x0, 0x8, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000000), 0x8, 0x0, 0x0, 0x0, 0x0) 03:36:09 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) shmctl$SHM_UNLOCK(0x0, 0xc) 03:36:09 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7ff, 0x0, "9145dee459374817"}) write$binfmt_misc(r0, 0x0, 0x0) 03:36:09 executing program 1: socketpair(0x0, 0x0, 0x0, 0x0) 03:36:09 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x8004) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:36:09 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000002840)=0xffffffffffffffff, 0x4) sendfile(r1, r0, 0x0, 0x8001) 03:36:09 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) ioctl$SNAPSHOT_S2RAM(r0, 0x80083314) 03:36:09 executing program 4: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) setpriority(0x0, 0x0, 0x0) 03:36:09 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/132, 0x84}], 0x1, &(0x7f0000000680)=[{&(0x7f0000000800)=""/102400, 0x19000}], 0x1, 0x0) [ 1305.611716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:36:09 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x10000, 0x0, 0x3, 0x1}, 0x20) 03:36:09 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) 03:36:09 executing program 4: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000280)=[{&(0x7f0000000080)="8c", 0x1}], 0x1, 0x0, 0x0, 0x0) 03:36:09 executing program 2: clock_gettime(0x0, &(0x7f0000000000)) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227b, &(0x7f0000000000)) read(r0, 0x0, 0x0) 03:36:09 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r0, 0x40043d14, &(0x7f0000000140)) 03:36:09 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000280)={@empty, @empty, @dev}, 0xc) [ 1305.919475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:36:10 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000001f00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01fb6bfcff000000000006"], 0x18}}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) poll(&(0x7f0000000080), 0x0, 0x1142) 03:36:10 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x5406, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000c00), 0x121001, 0x0) 03:36:10 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:36:10 executing program 4: r0 = syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) 03:36:10 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newspdinfo={0x1c, 0x1c, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) 03:36:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r0, &(0x7f0000000400)=@un=@abs, 0x80) 03:36:10 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/nfs', 0x0, 0x0) getdents64(r0, &(0x7f0000000140)=""/242, 0xf2) 03:36:10 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0xa50e) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) [ 1306.775209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:36:10 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) 03:36:10 executing program 0: symlink(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 03:36:10 executing program 4: futex(0x0, 0xa, 0x0, &(0x7f0000000480), 0x0, 0x0) 03:36:10 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:36:10 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x7, 0x4) sendmmsg$inet6(r0, &(0x7f0000002280)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @local}, 0x1c, 0x0}}], 0x1, 0x0) 03:36:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r0, &(0x7f0000000400)=@un=@abs, 0x80) 03:36:10 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 03:36:10 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 1307.095088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1309.624035] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1309.628800] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1309.632612] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1309.640294] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1309.654634] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1312.240426] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1312.244243] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1312.248000] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1312.257060] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1312.261083] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1314.277879] Bluetooth: hci6: command tx timeout [ 1314.342651] Bluetooth: hci6: Opcode 0x0c1a failed: -110 [ 1314.343720] Bluetooth: hci6: Error when powering off device on rfkill (-110) [ 1332.452220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1332.453192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1332.483817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1332.484713] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1332.855677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:36:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r0, &(0x7f0000000400)=@un=@abs, 0x80) 03:36:36 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 03:36:36 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x5423) 03:36:36 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:36:36 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0xf000) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:36:36 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003380)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001cc0)=ANY=[@ANYBLOB="24000000000000002900000032000000fe800000000000000000000000000025", @ANYRES32, @ANYBLOB="00000000380000000000000029000000390000001d04000000000000fe8000000000000000000000000000bb00000000000000dd00000000000000011400000000000000290000000b00000000000005000000001400000000000000290000003e000000070000000000000024"], 0xb8}}], 0x2, 0x0) 03:36:36 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$read(0x1100, 0x0, 0x0) modify_ldt$read(0x0, 0x0, 0x0) 03:36:36 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_selinux(r0, &(0x7f0000000440), &(0x7f0000000280)='system_u:object_r:system_cron_spool_t:s0\x00', 0x29, 0x1) [ 1333.315985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:36:36 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$read(0x1100, 0x0, 0x0) modify_ldt$read(0x0, 0x0, 0x0) 03:36:36 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$read(0x1100, 0x0, 0x0) modify_ldt$read(0x0, 0x0, 0x0) 03:36:36 executing program 6: r0 = getpid() sched_getattr(r0, &(0x7f0000001900)={0x38}, 0x38, 0x0) 03:36:36 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 03:36:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r0, &(0x7f0000000400)=@un=@abs, 0x80) 03:36:36 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='\x00') setgroups(0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0xc8c00, 0x0) 03:36:36 executing program 6: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readlink(0x0, 0x0, 0x0) 03:36:36 executing program 2: r0 = io_uring_setup(0x4d8a, &(0x7f0000000740)={0x0, 0x5014}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 03:36:36 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$read(0x1100, 0x0, 0x0) modify_ldt$read(0x0, 0x0, 0x0) 03:36:37 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$read(0x1100, 0x0, 0x0) modify_ldt$read(0x0, 0x0, 0x0) 03:36:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000001a00ffff000000000004000080"], 0x14}], 0x1}, 0x0) 03:36:37 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 03:36:37 executing program 6: r0 = getpgid(0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) prlimit64(r0, 0x0, 0x0, 0x0) 03:36:37 executing program 2: timer_create(0x0, 0x0, &(0x7f0000000280)) timer_gettime(0x0, &(0x7f00000002c0)) 03:36:37 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$read(0x1100, 0x0, 0x0) modify_ldt$read(0x0, 0x0, 0x0) 03:36:37 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0xf002) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:36:37 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x40e5, &(0x7f0000000100), &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) [ 1333.790933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:36:37 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getgroups(0x0, 0x0) 03:36:37 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) bind(r0, 0x0, 0x13) 03:36:37 executing program 0: kexec_load(0x0, 0x1, &(0x7f00000018c0)=[{0x0}], 0x1) 03:36:37 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$read(0x1100, 0x0, 0x0) modify_ldt$read(0x0, 0x0, 0x0) 03:36:37 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5419, &(0x7f00000001c0)) 03:36:37 executing program 6: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00') 03:36:37 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000001540)={&(0x7f0000000740)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000100)="5ec7", 0x2}], 0x1, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback}}}], 0x20}, 0x0) 03:36:37 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug', 0x0, 0x0) getdents(r0, &(0x7f0000000180)=""/187, 0x18) getdents64(r0, &(0x7f0000000140)=""/31, 0x1f) getdents(r0, &(0x7f0000000080)=""/186, 0xba) 03:36:37 executing program 2: setresuid(0x0, 0xee01, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) 03:36:37 executing program 0: syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local, {[@lsrr={0x83, 0x7, 0x7, [@local]}, @timestamp={0x44, 0x4}]}}}}}}, 0x0) 03:36:37 executing program 6: sched_getattr(0x0, &(0x7f0000000280)={0x38}, 0x65, 0x0) 03:36:37 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000004fc0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001a40)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3663c2b228265b519f686ced4979bbe74fe4fa7108b8f371ea96b323d1ba7cb85399d30530085781dd50c4fde896320e5831dfbb988c3e0c8c77749d4a30"}, 0x80, 0x0, 0x0, 0x0, 0x803e0000}}], 0x2, 0x0) 03:36:37 executing program 3: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001600)='ns/uts\x00') fchown(r0, 0x0, 0x0) 03:36:37 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d0c, &(0x7f00000000c0)={{}, {}, 0x0, 0x4}) 03:36:37 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_getaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000140)) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) 03:36:37 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0xff0f) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) [ 1334.183546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:36:37 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @private}}) 03:36:37 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsu(&(0x7f0000000040), 0x4, 0x0) 03:36:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x12, 0x0, &(0x7f0000000280)) 03:36:37 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}], 0x0, &(0x7f0000000040)={[{@data_ordered}]}) 03:36:37 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') statx(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 03:36:37 executing program 5: mlockall(0x3) mlockall(0x1) mlock(&(0x7f0000ff5000/0x4000)=nil, 0x4000) 03:36:38 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0x3, 0x1000, 0x4, &(0x7f0000ffb000/0x1000)=nil) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) 03:36:38 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x7fffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="601c6d9c98ae506e544cbf00088020000400000000f8000020004000030000000000000001", 0x25}], 0x0, &(0x7f0000000040)=ANY=[]) futimesat(r0, 0x0, 0x0) statfs(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=""/153) 03:36:38 executing program 0: r0 = creat(&(0x7f0000000800)='./file0\x00', 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f00000008c0)=0x40) close_range(r0, r1, 0x0) 03:36:38 executing program 1: r0 = add_key$user(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x3}, &(0x7f0000000a00)='p', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f0000000ac0)="b4", 0x1) 03:36:38 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_getaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000140)) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) 03:36:38 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000b80)=[{&(0x7f00000008c0)='!', 0x1}], 0x1, 0x0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffffffff000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff000) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x401, 0xfcb5}) sendfile(r3, r4, 0x0, 0xa0103) 03:36:38 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x30000) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:36:38 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='cgroup2\x00', 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@FILEID_NILFS_WITH_PARENT={0x20}, &(0x7f00000002c0), 0x0) [ 1334.706475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:36:38 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') pread64(r0, 0x0, 0x0, 0x0) 03:36:38 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_getaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000140)) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) 03:36:38 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/timer\x00', 0x0, 0x0) close(r0) 03:36:38 executing program 1: prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) 03:36:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000002e00f9ffff7f0000000000000c00000001"], 0x34}], 0x1}, 0x0) [ 1334.883512] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1334.890433] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 03:36:38 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x5452, &(0x7f0000000080)) fcntl$getown(r0, 0x10) 03:36:39 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/timer\x00', 0x0, 0x0) close(r0) 03:36:39 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_getaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000140)) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) 03:36:39 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@private2, @mcast1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000a}) 03:36:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="28000000220001c2"], 0x28}], 0x1}, 0x0) 03:36:39 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0x3, 0x1000, 0x4, &(0x7f0000ffb000/0x1000)=nil) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) 03:36:39 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000002480), 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f00000024c0)) 03:36:39 executing program 5: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) mq_open(0x0, 0x0, 0x0, &(0x7f0000001780)) 03:36:39 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x40000) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:36:39 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/timer\x00', 0x0, 0x0) close(r0) 03:36:39 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006040)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c, 0x0}}], 0x2, 0x4048801) 03:36:39 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x0, 0x178}) [ 1335.704958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:36:39 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)={0x1c, r1, 0xb810bc7f369e155, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}}, 0x0) 03:36:39 executing program 4: r0 = add_key$keyring(&(0x7f0000000480), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000100)=@chain) 03:36:39 executing program 3: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) write(r0, 0x0, 0x0) 03:36:39 executing program 5: ppoll(&(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) 03:36:39 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/timer\x00', 0x0, 0x0) close(r0) 03:36:39 executing program 1: syz_io_uring_setup(0x4c01, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) io_uring_setup(0x610b, &(0x7f00000001c0)) 03:36:39 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0x3, 0x1000, 0x4, &(0x7f0000ffb000/0x1000)=nil) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) 03:36:39 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x41) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 03:36:39 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fstatfs(r0, &(0x7f0000000140)=""/47) 03:36:39 executing program 5: ppoll(&(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) 03:36:39 executing program 0: ppoll(&(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) [ 1336.042091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:36:39 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x50a21931}], 0x0, &(0x7f0000000280)=ANY=[]) 03:36:39 executing program 0: ppoll(&(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) 03:36:39 executing program 5: ppoll(&(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) 03:36:39 executing program 1: r0 = fsopen(&(0x7f0000000000)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000080)='mand\x00', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) 03:36:39 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0x3, 0x1000, 0x4, &(0x7f0000ffb000/0x1000)=nil) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) 03:36:39 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x80000) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:36:39 executing program 6: r0 = eventfd(0xffffffd1) ppoll(&(0x7f0000001240)=[{r0}], 0x1, &(0x7f0000001280)={0x0, 0x989680}, 0x0, 0x0) 03:36:39 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, 0x0, 0x0) [ 1336.193864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:36:39 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x31, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) 03:36:39 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000f80)={'ip6_vti0\x00', &(0x7f0000000f00)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @remote}}) syz_open_procfs$namespace(0x0, &(0x7f0000001180)='ns/user\x00') 03:36:40 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)) 03:36:40 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x100000) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:36:40 executing program 5: ppoll(&(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) 03:36:40 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, 0x0, 0x0) 03:36:40 executing program 1: mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 03:36:40 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, 0x0, 0x0) 03:36:40 executing program 0: ppoll(&(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) 03:36:40 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40189206, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffffffa}) 03:36:40 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, 0x0, 0x0) 03:36:40 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) [ 1336.623285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:36:40 executing program 4: r0 = socket$inet(0x2, 0x3, 0x26) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0xfff, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000000c0)="9a", 0x1) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:36:40 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) 03:36:40 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, 0x0, 0x0) 03:36:40 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, 0x0, 0x0) 03:36:40 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x4000) 03:36:40 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000140)={0x11, 0xf6}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040), 0x4) 03:36:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}]}, 0x28}}, 0x0) 03:36:40 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, 0x0, 0x0) 03:36:40 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x80800) readv(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/242, 0xf2}], 0x1) 03:36:40 executing program 6: clock_adjtime(0x97a0f663, &(0x7f0000000000)) 03:36:40 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) setresuid(0x0, 0xee01, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b3b, &(0x7f0000000080)={0x0, 0x0}) 03:36:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)={0x1c, 0x1a, 0xffffffffffffffff, 0x0, 0x0, "", [@nested={0x4}, @generic="93e095e1f79e"]}, 0x1c}], 0x1}, 0x0) 03:36:40 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)={0x61, 0x0, 0x12, "02771b0306995ef8f3e05bc997bb3c6b6ae760c87d87d0a3ce80549787f0da8161ffffbb4da4889ae4c0252164acf65878e0da8d026088bf249099222d9899e31efca5ccf9db08c1632eda3b54db30018bd98c7fc0808aef5cef479676ad6a7906"}) 03:36:40 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0xfffffffffffffffe, 0x1) 03:36:40 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x200000) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:36:40 executing program 5: r0 = syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000000)) ioctl$RTC_UIE_OFF(r0, 0x80287010) 03:36:40 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000140)='\\}\x7f\x00', 0x40, 0x0, &(0x7f0000000180)={0x296, 0x1c00000000000, 0x4, 0xfffffffffffffffa}) 03:36:40 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x22, 0x0, &(0x7f0000000240)) [ 1337.033293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:36:40 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40086602, &(0x7f0000000000)=ANY=[]) 03:36:40 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x3, 0x1, 0x7, 0x56c}, 0x20) 03:36:40 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x80800) readv(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/242, 0xf2}], 0x1) 03:36:40 executing program 1: setpriority(0x1, 0xffffffffffffffff, 0x0) 03:36:40 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$rfkill(r0, 0x0, 0x0) 03:36:40 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setuid(0x0) 03:36:40 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$uid(0x3, 0x0) fork() 03:36:40 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x21000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = msgget$private(0x0, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) 03:36:40 executing program 1: r0 = getpid() r1 = fork() kcmp(r0, r1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)=0x0) r4 = getpid() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r6 = getpid() r7 = getpid() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000009c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="680300000a0701082dbd7000fddbdf25000000060400318008004d00080000001c02568008001200", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\b\x00<\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00=\x00', @ANYRES32=r7, @ANYBLOB="9e13306de60d719a6411e297a627844febf88c31f6d79d3c0e8fdbb0c6ff4566e581fc095e5c73e1f8942bb85ac100214b18fff5f44786fe5c8cbf58beffc513147e0683902592c8a4fdee4b6c38a0afb121f4e099f6edc81bcf215ee527f8e8ed7cca18d9180e705546b2e4f2104d3543fd8c2963e17770fa4eec59ea3a7c52f945e8e082f5d9f686fc4783ef0b245c99e195048b40c9e050ac05984637f9ca0580db55004dcdf3255d02bd54be317a08e92ac52390c84cee2d3ae6fa460000950e40262347d1b5b732ee45fda01c9591f0f29300d6115d0108001f00ffffffff0000"], 0x368}, 0x1, 0x0, 0x0, 0x440d0}, 0x8000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) r9 = creat(&(0x7f0000000480)='./file0\x00', 0x18b) clone3(&(0x7f00000004c0)={0x100000000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {0x25}, &(0x7f0000000280)=""/252, 0xfc, &(0x7f0000000380)=""/24, &(0x7f0000000440)=[r8, r0, r3], 0x3, {r9}}, 0x58) fork() fork() syz_open_procfs(r6, &(0x7f0000000000)='net/unix\x00') 03:36:40 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x80800) readv(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/242, 0xf2}], 0x1) [ 1337.345426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:36:41 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000001240)='/sys/bus/pnp', 0xc0, 0x0) 03:36:41 executing program 6: creat(&(0x7f00000003c0)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000018c0)='./file0\x00', 0x0) 03:36:41 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = epoll_create(0x6) r1 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) 03:36:41 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x80800) readv(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/242, 0xf2}], 0x1) 03:36:41 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0xf0ffff) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:36:41 executing program 2: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0x1}], 0x1, 0x0, 0x0, 0x2) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000000)={0x2, 0x2d0, 0x0, 0x80000001, 0x0, [0xa1, 0x0, 0xbb6, 0x101]}) 03:36:41 executing program 5: io_setup(0x800000, &(0x7f0000000000)) 03:36:41 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x101100, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:36:41 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="1d", 0x1}], 0x1}, 0x40011) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001040)="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", 0xec1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 1338.324311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:36:41 executing program 6: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x24}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) 03:36:41 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$lock(r0, 0x26, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x2}) fcntl$lock(r0, 0x25, &(0x7f0000000240)={0x1, 0x0, 0x9}) [ 1341.360990] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1341.364179] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1341.366933] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1341.373711] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1341.378534] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1343.460705] Bluetooth: hci2: command tx timeout [ 1345.508659] Bluetooth: hci2: command tx timeout [ 1347.556747] Bluetooth: hci2: command tx timeout [ 1349.604715] Bluetooth: hci2: command tx timeout [ 1362.045855] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1362.047360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1362.087774] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1362.088999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 03:37:06 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000040)=@srh={0x0, 0x0, 0x4, 0x0, 0x9}, 0x8) 03:37:06 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0x0) pidfd_open(r0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:37:06 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) close(r0) 03:37:06 executing program 7: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x1000000) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 03:37:06 executing program 6: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x24}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) 03:37:06 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x44840, 0x0) fadvise64(r0, 0x7fff, 0x3, 0x4) 03:37:06 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000001240)='/sys/bus/pnp', 0xc0, 0x0) 03:37:06 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, 0x0) [ 1362.618714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:37:06 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) fcntl$setownex(r1, 0xf, &(0x7f0000000040)) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x5) close_range(r0, 0xffffffffffffffff, 0x0) 03:37:06 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000001240)='/sys/bus/pnp', 0xc0, 0x0) 03:37:06 executing program 1: r0 = getpid() r1 = pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xff0a, 0x0) 03:37:06 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x62e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) clone(0x20004500, 0x0, 0x0, 0x0, 0x0) 03:37:06 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000003280), 0x800, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x77359400}) [ 1362.931600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1363.166248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1363.544210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1363.576526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1364.009735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1364.035633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1364.412882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1364.421400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1364.788277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1364.806060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1365.092785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1365.148459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1365.188896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1365.507222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1366.397851] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1366.398765] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1366.495290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1366.874264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1367.255497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1367.614353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1367.920344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1367.994715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1368.410002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1368.770861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1369.140707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1369.499802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1369.860434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1370.223111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1370.595243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1370.957191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1371.325859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1371.633473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1371.696781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1372.065261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1372.456073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1372.820618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1373.186076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1373.563537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1373.921983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1374.289258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1374.647430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1375.013195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1375.376983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1375.741362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1376.105132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1376.465770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1376.829037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1377.194464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1377.558706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1377.916077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1378.277764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1378.637039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1378.996649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1379.354392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1379.713429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1380.074805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1380.433427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1380.794314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1381.135396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1381.483973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1381.837542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1382.193607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1382.552269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1382.920151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1383.288804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1383.659500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1384.018447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1384.381237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1384.747442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1385.114423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1385.479307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1385.841227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1386.211280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1386.520954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1386.579138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1386.934273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1387.291530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1387.661914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1388.029235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1388.394855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1388.779017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1389.152140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1389.520075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1389.899424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1390.266632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1390.632542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1390.941440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1391.003834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1391.375695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1391.741331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1392.115838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1392.489669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1392.859225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1393.234080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1393.604975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1393.977833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1394.347373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1394.724137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1395.093811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1395.472832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1395.841514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1396.212505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1396.588791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1396.962094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1397.333724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1397.713081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1398.076703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1398.451441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1398.818104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1399.195816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1399.573048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1399.947678] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1400.326327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1400.696868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1401.063262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1401.445924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1401.857195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1401.977193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1402.283443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1402.346537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1402.715327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1403.084811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1403.455101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1403.774433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1403.852497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1404.168904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1404.233643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1404.545903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1404.619121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1404.926029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1404.995735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1405.363548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1405.716355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1405.836443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1406.151206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1406.219480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1406.534450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1406.601611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1406.910308] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1406.985111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1407.300405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1407.301661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1407.366535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1407.677717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1407.744297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1408.106923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1408.224222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1408.544863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1408.617388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1408.977303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1409.285638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1409.359089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1409.671520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1409.795896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1410.104217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1410.164836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1410.551496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1410.869073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1410.948503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1411.269738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1411.350852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1411.662748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1411.736932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1412.125641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1412.540463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1412.658449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1413.045109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1413.429672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1413.760338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1413.837203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1414.215908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1414.528802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1414.601267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1414.978874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1415.345782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1415.717816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1416.027986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1416.088700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1416.093361] audit: type=1326 audit(2000000279.585:160): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=84525 comm="syz-executor.7" exe="/syz-executor.7" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f71e9e83b19 code=0x0 [ 1417.220484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1417.292451] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1417.602773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1417.662422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1417.969420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1418.039198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1418.419096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1418.736787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1418.828620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1419.136259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1419.202506] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1419.513358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1419.580608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1419.891757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1419.961779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1420.270109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1420.707439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1421.085285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1421.398330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1421.470065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1421.850781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1422.221755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1422.592560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1422.903366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1422.970710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1423.339618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1423.649892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1423.715453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1424.091384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1424.406682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1424.471362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1424.784199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1424.844232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1425.151060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1425.214234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1425.583817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1425.953256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1426.313959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1426.622149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1427.108770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1427.415500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1427.478270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1427.908150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1428.262412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1428.341250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1428.707740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1429.022771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1429.089939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1429.459501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1429.771409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1429.838193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1430.145261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1430.215941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1430.585825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1430.951303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1431.260957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1431.325369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1431.695030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1432.005371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1432.069803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1432.377013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1432.450847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1432.759645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1432.831018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1433.582895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1433.954481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1434.338112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1434.648210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1434.711421] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1435.084775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1435.400865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1435.487808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1435.805337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1435.885326] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1436.203353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1436.268407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1436.634036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1436.941781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1437.008319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1437.449077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1437.765102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1437.834849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1438.150447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1438.214503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1438.587602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1438.967025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1439.291998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1439.365378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1439.671850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1439.739251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1440.051663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1440.116896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1440.513522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1440.905837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1441.285910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1441.654269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1442.028625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1442.398341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1442.773410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1443.143822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1443.509363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1443.872265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1444.238423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1444.609234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1444.989903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1445.360453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1445.730408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1446.097409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1446.468400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1446.843879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1447.221234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium VM DIAGNOSIS: 09:51:16 Registers: info registers vcpu 0 RAX=00000000008eff3d RBX=0000000000000000 RCX=ffffffff84b8e167 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814c7874 RBP=dffffc0000000000 RSP=ffffffff85a07e00 R8 =0000000000000001 R9 =ffffed100d9c630a R10=ffff88806ce31853 R11=0000000000000001 R12=ffffffff8643a150 R13=1ffffffff0b40fc7 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84b8ce9e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e55ea000 00000000 00000000 LDT=0000 ffff888000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000563dc7e9357c CR3=000000000ec46000 CR4=00350ef0 DR0=ffffffffffff7693 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000040ad0084a7a26ef4 XMM02=00000000000000000000000000000000 XMM03=732f646d65747379732f6e75722f2065 XMM04=40404040404040404040404040404040 XMM05=5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a XMM06=20202020202020202020202020202020 XMM07=00000000000000000000000000000000 XMM08=000073252f732500242b5d2d5f392d30 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=00000000008bee09 RBX=0000000000000001 RCX=ffffffff84b8e167 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814c7874 RBP=dffffc0000000000 RSP=ffff888009717e58 R8 =0000000000000001 R9 =ffffed100d9e630a R10=ffff88806cf31853 R11=0000000000000001 R12=ffffffff8643a150 R13=1ffff110012e2fd2 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84b8ce9e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e56ea000 00000000 00000000 LDT=0000 ffffc90000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6abd0cfe58 CR3=000000000d28b000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000015d720d6fc0983d4 XMM02=00000000000000000000000000000000 XMM03=00000000000000210000656369767265 XMM04=2e2e2e2e2e2e2e2e2e2e2e2e2e2e2e2e XMM05=ffff000100010000ffffffff00000000 XMM06=697665000000006563697665642e3569 XMM07=00000000000000000000000000000000 XMM08=6563696c732e6d65747379732f3a3a30 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000200000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000