Warning: Permanently added '[localhost]:1970' (ECDSA) to the list of known hosts. 2025/07/17 12:24:14 fuzzer started 2025/07/17 12:24:14 dialing manager at localhost:34589 syzkaller login: [ 51.308312] cgroup: Unknown subsys name 'net' [ 51.401559] cgroup: Unknown subsys name 'cpuset' [ 51.418226] cgroup: Unknown subsys name 'rlimit' 2025/07/17 12:24:25 syscalls: 2214 2025/07/17 12:24:25 code coverage: enabled 2025/07/17 12:24:25 comparison tracing: enabled 2025/07/17 12:24:25 extra coverage: enabled 2025/07/17 12:24:25 setuid sandbox: enabled 2025/07/17 12:24:25 namespace sandbox: enabled 2025/07/17 12:24:25 Android sandbox: enabled 2025/07/17 12:24:25 fault injection: enabled 2025/07/17 12:24:25 leak checking: enabled 2025/07/17 12:24:25 net packet injection: enabled 2025/07/17 12:24:25 net device setup: enabled 2025/07/17 12:24:25 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/07/17 12:24:25 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/07/17 12:24:25 USB emulation: enabled 2025/07/17 12:24:25 hci packet injection: enabled 2025/07/17 12:24:25 wifi device emulation: enabled 2025/07/17 12:24:25 802.15.4 emulation: enabled 2025/07/17 12:24:25 fetching corpus: 50, signal 17006/18806 (executing program) 2025/07/17 12:24:25 fetching corpus: 100, signal 27765/31175 (executing program) 2025/07/17 12:24:25 fetching corpus: 150, signal 40304/45046 (executing program) 2025/07/17 12:24:25 fetching corpus: 200, signal 45298/51404 (executing program) 2025/07/17 12:24:25 fetching corpus: 250, signal 51505/58818 (executing program) 2025/07/17 12:24:25 fetching corpus: 300, signal 56011/64497 (executing program) 2025/07/17 12:24:25 fetching corpus: 350, signal 58559/68306 (executing program) 2025/07/17 12:24:25 fetching corpus: 400, signal 60780/71695 (executing program) 2025/07/17 12:24:25 fetching corpus: 450, signal 64545/76469 (executing program) 2025/07/17 12:24:25 fetching corpus: 500, signal 67422/80386 (executing program) 2025/07/17 12:24:25 fetching corpus: 550, signal 69404/83406 (executing program) 2025/07/17 12:24:25 fetching corpus: 600, signal 71398/86432 (executing program) 2025/07/17 12:24:25 fetching corpus: 650, signal 73223/89229 (executing program) 2025/07/17 12:24:25 fetching corpus: 700, signal 75192/92136 (executing program) 2025/07/17 12:24:25 fetching corpus: 750, signal 77279/95024 (executing program) 2025/07/17 12:24:25 fetching corpus: 800, signal 79010/97678 (executing program) 2025/07/17 12:24:25 fetching corpus: 850, signal 80902/100388 (executing program) 2025/07/17 12:24:26 fetching corpus: 900, signal 82444/102810 (executing program) 2025/07/17 12:24:26 fetching corpus: 950, signal 84749/105795 (executing program) 2025/07/17 12:24:26 fetching corpus: 1000, signal 86441/108241 (executing program) 2025/07/17 12:24:26 fetching corpus: 1050, signal 87573/110225 (executing program) 2025/07/17 12:24:26 fetching corpus: 1100, signal 88944/112364 (executing program) 2025/07/17 12:24:26 fetching corpus: 1150, signal 90515/114571 (executing program) 2025/07/17 12:24:26 fetching corpus: 1200, signal 91980/116721 (executing program) 2025/07/17 12:24:26 fetching corpus: 1250, signal 93337/118731 (executing program) 2025/07/17 12:24:26 fetching corpus: 1300, signal 94700/120745 (executing program) 2025/07/17 12:24:26 fetching corpus: 1350, signal 96000/122661 (executing program) 2025/07/17 12:24:26 fetching corpus: 1400, signal 97363/124651 (executing program) 2025/07/17 12:24:26 fetching corpus: 1450, signal 99071/126801 (executing program) 2025/07/17 12:24:26 fetching corpus: 1500, signal 99822/128299 (executing program) 2025/07/17 12:24:26 fetching corpus: 1550, signal 100955/130006 (executing program) 2025/07/17 12:24:26 fetching corpus: 1600, signal 101775/131483 (executing program) 2025/07/17 12:24:27 fetching corpus: 1650, signal 102677/133020 (executing program) 2025/07/17 12:24:27 fetching corpus: 1700, signal 104149/134955 (executing program) 2025/07/17 12:24:27 fetching corpus: 1750, signal 105359/136563 (executing program) 2025/07/17 12:24:27 fetching corpus: 1800, signal 106395/138076 (executing program) 2025/07/17 12:24:27 fetching corpus: 1850, signal 107239/139462 (executing program) 2025/07/17 12:24:27 fetching corpus: 1900, signal 108160/140878 (executing program) 2025/07/17 12:24:27 fetching corpus: 1950, signal 109450/142474 (executing program) 2025/07/17 12:24:27 fetching corpus: 2000, signal 110213/143766 (executing program) 2025/07/17 12:24:27 fetching corpus: 2050, signal 111509/145345 (executing program) 2025/07/17 12:24:27 fetching corpus: 2100, signal 112130/146499 (executing program) 2025/07/17 12:24:27 fetching corpus: 2150, signal 113657/148155 (executing program) 2025/07/17 12:24:27 fetching corpus: 2200, signal 114580/149472 (executing program) 2025/07/17 12:24:28 fetching corpus: 2250, signal 115533/150745 (executing program) 2025/07/17 12:24:28 fetching corpus: 2300, signal 116148/151827 (executing program) 2025/07/17 12:24:28 fetching corpus: 2350, signal 116973/153024 (executing program) 2025/07/17 12:24:28 fetching corpus: 2400, signal 117671/154138 (executing program) 2025/07/17 12:24:28 fetching corpus: 2450, signal 118598/155352 (executing program) 2025/07/17 12:24:28 fetching corpus: 2500, signal 119327/156480 (executing program) 2025/07/17 12:24:28 fetching corpus: 2550, signal 120045/157535 (executing program) 2025/07/17 12:24:28 fetching corpus: 2600, signal 120557/158539 (executing program) 2025/07/17 12:24:28 fetching corpus: 2650, signal 121492/159697 (executing program) 2025/07/17 12:24:28 fetching corpus: 2700, signal 122230/160759 (executing program) 2025/07/17 12:24:28 fetching corpus: 2750, signal 122813/161746 (executing program) 2025/07/17 12:24:28 fetching corpus: 2800, signal 123614/162795 (executing program) 2025/07/17 12:24:28 fetching corpus: 2850, signal 124251/163770 (executing program) 2025/07/17 12:24:29 fetching corpus: 2900, signal 125117/164811 (executing program) 2025/07/17 12:24:29 fetching corpus: 2950, signal 126111/165853 (executing program) 2025/07/17 12:24:29 fetching corpus: 3000, signal 127095/166854 (executing program) 2025/07/17 12:24:29 fetching corpus: 3050, signal 127751/167761 (executing program) 2025/07/17 12:24:29 fetching corpus: 3100, signal 128797/168782 (executing program) 2025/07/17 12:24:29 fetching corpus: 3150, signal 129319/169614 (executing program) 2025/07/17 12:24:29 fetching corpus: 3200, signal 129788/170393 (executing program) 2025/07/17 12:24:29 fetching corpus: 3250, signal 130737/171317 (executing program) 2025/07/17 12:24:29 fetching corpus: 3300, signal 131156/172072 (executing program) 2025/07/17 12:24:29 fetching corpus: 3350, signal 131573/172791 (executing program) 2025/07/17 12:24:29 fetching corpus: 3400, signal 132408/173623 (executing program) 2025/07/17 12:24:29 fetching corpus: 3450, signal 132850/174369 (executing program) 2025/07/17 12:24:29 fetching corpus: 3500, signal 133321/175080 (executing program) 2025/07/17 12:24:30 fetching corpus: 3550, signal 133884/175793 (executing program) 2025/07/17 12:24:30 fetching corpus: 3600, signal 134301/176501 (executing program) 2025/07/17 12:24:30 fetching corpus: 3650, signal 134884/177238 (executing program) 2025/07/17 12:24:30 fetching corpus: 3700, signal 135323/177919 (executing program) 2025/07/17 12:24:30 fetching corpus: 3750, signal 135898/178618 (executing program) 2025/07/17 12:24:30 fetching corpus: 3800, signal 136289/179255 (executing program) 2025/07/17 12:24:30 fetching corpus: 3850, signal 136715/179902 (executing program) 2025/07/17 12:24:30 fetching corpus: 3900, signal 137137/180569 (executing program) 2025/07/17 12:24:30 fetching corpus: 3950, signal 137806/181261 (executing program) 2025/07/17 12:24:30 fetching corpus: 4000, signal 138228/181883 (executing program) 2025/07/17 12:24:30 fetching corpus: 4050, signal 138681/182511 (executing program) 2025/07/17 12:24:30 fetching corpus: 4100, signal 139217/183113 (executing program) 2025/07/17 12:24:30 fetching corpus: 4150, signal 139724/183676 (executing program) 2025/07/17 12:24:31 fetching corpus: 4200, signal 140188/184241 (executing program) 2025/07/17 12:24:31 fetching corpus: 4250, signal 140760/184798 (executing program) 2025/07/17 12:24:31 fetching corpus: 4300, signal 141334/185378 (executing program) 2025/07/17 12:24:31 fetching corpus: 4350, signal 141716/185890 (executing program) 2025/07/17 12:24:31 fetching corpus: 4400, signal 141997/186407 (executing program) 2025/07/17 12:24:31 fetching corpus: 4450, signal 142485/186912 (executing program) 2025/07/17 12:24:31 fetching corpus: 4500, signal 142986/187449 (executing program) 2025/07/17 12:24:31 fetching corpus: 4550, signal 143556/187954 (executing program) 2025/07/17 12:24:31 fetching corpus: 4600, signal 143909/188447 (executing program) 2025/07/17 12:24:31 fetching corpus: 4650, signal 144425/188972 (executing program) 2025/07/17 12:24:31 fetching corpus: 4700, signal 145271/189449 (executing program) 2025/07/17 12:24:32 fetching corpus: 4750, signal 145658/189860 (executing program) 2025/07/17 12:24:32 fetching corpus: 4800, signal 146052/189860 (executing program) 2025/07/17 12:24:32 fetching corpus: 4850, signal 146474/189860 (executing program) 2025/07/17 12:24:32 fetching corpus: 4900, signal 146826/189860 (executing program) 2025/07/17 12:24:32 fetching corpus: 4950, signal 147546/189860 (executing program) 2025/07/17 12:24:32 fetching corpus: 5000, signal 147963/189860 (executing program) 2025/07/17 12:24:32 fetching corpus: 5050, signal 148381/189860 (executing program) 2025/07/17 12:24:32 fetching corpus: 5100, signal 148914/189860 (executing program) 2025/07/17 12:24:32 fetching corpus: 5150, signal 149242/189860 (executing program) 2025/07/17 12:24:32 fetching corpus: 5200, signal 149502/189860 (executing program) 2025/07/17 12:24:32 fetching corpus: 5250, signal 149947/189860 (executing program) 2025/07/17 12:24:32 fetching corpus: 5300, signal 150332/189860 (executing program) 2025/07/17 12:24:32 fetching corpus: 5350, signal 150778/189860 (executing program) 2025/07/17 12:24:33 fetching corpus: 5400, signal 151260/189860 (executing program) 2025/07/17 12:24:33 fetching corpus: 5450, signal 151592/189860 (executing program) 2025/07/17 12:24:33 fetching corpus: 5500, signal 151993/189860 (executing program) 2025/07/17 12:24:33 fetching corpus: 5550, signal 152281/189860 (executing program) 2025/07/17 12:24:33 fetching corpus: 5600, signal 152596/189860 (executing program) 2025/07/17 12:24:33 fetching corpus: 5650, signal 152862/189860 (executing program) 2025/07/17 12:24:33 fetching corpus: 5700, signal 153227/189860 (executing program) 2025/07/17 12:24:33 fetching corpus: 5750, signal 153423/189860 (executing program) 2025/07/17 12:24:33 fetching corpus: 5800, signal 154097/189860 (executing program) 2025/07/17 12:24:33 fetching corpus: 5850, signal 154295/189860 (executing program) 2025/07/17 12:24:33 fetching corpus: 5900, signal 154682/189860 (executing program) 2025/07/17 12:24:33 fetching corpus: 5950, signal 155060/189860 (executing program) 2025/07/17 12:24:33 fetching corpus: 6000, signal 155447/189860 (executing program) 2025/07/17 12:24:34 fetching corpus: 6050, signal 155753/189860 (executing program) 2025/07/17 12:24:34 fetching corpus: 6100, signal 156040/189860 (executing program) 2025/07/17 12:24:34 fetching corpus: 6150, signal 156355/189860 (executing program) 2025/07/17 12:24:34 fetching corpus: 6200, signal 156856/189860 (executing program) 2025/07/17 12:24:34 fetching corpus: 6250, signal 157089/189860 (executing program) 2025/07/17 12:24:34 fetching corpus: 6300, signal 157399/189860 (executing program) 2025/07/17 12:24:34 fetching corpus: 6350, signal 157664/189860 (executing program) 2025/07/17 12:24:34 fetching corpus: 6400, signal 157935/189860 (executing program) 2025/07/17 12:24:34 fetching corpus: 6450, signal 158562/189860 (executing program) 2025/07/17 12:24:34 fetching corpus: 6500, signal 158856/189860 (executing program) 2025/07/17 12:24:34 fetching corpus: 6550, signal 159150/189860 (executing program) 2025/07/17 12:24:34 fetching corpus: 6600, signal 159445/189860 (executing program) 2025/07/17 12:24:34 fetching corpus: 6650, signal 159843/189860 (executing program) 2025/07/17 12:24:35 fetching corpus: 6700, signal 160043/189860 (executing program) 2025/07/17 12:24:35 fetching corpus: 6750, signal 160266/189860 (executing program) 2025/07/17 12:24:35 fetching corpus: 6800, signal 160592/189860 (executing program) 2025/07/17 12:24:35 fetching corpus: 6850, signal 160906/189860 (executing program) 2025/07/17 12:24:35 fetching corpus: 6900, signal 161193/189860 (executing program) 2025/07/17 12:24:35 fetching corpus: 6950, signal 161685/189860 (executing program) 2025/07/17 12:24:35 fetching corpus: 7000, signal 161989/189860 (executing program) 2025/07/17 12:24:35 fetching corpus: 7050, signal 162247/189860 (executing program) 2025/07/17 12:24:35 fetching corpus: 7100, signal 162455/189860 (executing program) 2025/07/17 12:24:35 fetching corpus: 7150, signal 162794/189860 (executing program) 2025/07/17 12:24:35 fetching corpus: 7200, signal 163083/189860 (executing program) 2025/07/17 12:24:36 fetching corpus: 7250, signal 163401/189860 (executing program) 2025/07/17 12:24:36 fetching corpus: 7300, signal 163618/189860 (executing program) 2025/07/17 12:24:36 fetching corpus: 7350, signal 163845/189860 (executing program) 2025/07/17 12:24:36 fetching corpus: 7400, signal 164176/189860 (executing program) 2025/07/17 12:24:36 fetching corpus: 7450, signal 164359/189860 (executing program) 2025/07/17 12:24:36 fetching corpus: 7500, signal 164686/189860 (executing program) 2025/07/17 12:24:36 fetching corpus: 7550, signal 164958/189860 (executing program) 2025/07/17 12:24:36 fetching corpus: 7600, signal 165301/189860 (executing program) 2025/07/17 12:24:36 fetching corpus: 7650, signal 165457/189860 (executing program) 2025/07/17 12:24:36 fetching corpus: 7700, signal 165665/189860 (executing program) 2025/07/17 12:24:36 fetching corpus: 7750, signal 165861/189860 (executing program) 2025/07/17 12:24:36 fetching corpus: 7800, signal 166125/189860 (executing program) 2025/07/17 12:24:36 fetching corpus: 7850, signal 166350/189860 (executing program) 2025/07/17 12:24:36 fetching corpus: 7900, signal 166664/189860 (executing program) 2025/07/17 12:24:36 fetching corpus: 7950, signal 166894/189860 (executing program) 2025/07/17 12:24:37 fetching corpus: 8000, signal 167182/189860 (executing program) 2025/07/17 12:24:37 fetching corpus: 8050, signal 167428/189860 (executing program) 2025/07/17 12:24:37 fetching corpus: 8100, signal 167756/189860 (executing program) 2025/07/17 12:24:37 fetching corpus: 8150, signal 168059/189860 (executing program) 2025/07/17 12:24:37 fetching corpus: 8200, signal 168233/189860 (executing program) 2025/07/17 12:24:37 fetching corpus: 8250, signal 168429/189860 (executing program) 2025/07/17 12:24:37 fetching corpus: 8300, signal 168606/189860 (executing program) 2025/07/17 12:24:37 fetching corpus: 8350, signal 169109/189860 (executing program) 2025/07/17 12:24:37 fetching corpus: 8400, signal 169353/189860 (executing program) 2025/07/17 12:24:37 fetching corpus: 8450, signal 170606/189860 (executing program) 2025/07/17 12:24:37 fetching corpus: 8500, signal 170831/189861 (executing program) 2025/07/17 12:24:37 fetching corpus: 8550, signal 171043/189861 (executing program) 2025/07/17 12:24:37 fetching corpus: 8600, signal 171286/189861 (executing program) 2025/07/17 12:24:37 fetching corpus: 8650, signal 171584/189861 (executing program) 2025/07/17 12:24:38 fetching corpus: 8700, signal 171750/189861 (executing program) 2025/07/17 12:24:38 fetching corpus: 8750, signal 172063/189861 (executing program) 2025/07/17 12:24:38 fetching corpus: 8800, signal 172294/189861 (executing program) 2025/07/17 12:24:38 fetching corpus: 8850, signal 172765/189861 (executing program) 2025/07/17 12:24:38 fetching corpus: 8900, signal 173053/189861 (executing program) 2025/07/17 12:24:38 fetching corpus: 8950, signal 173372/189861 (executing program) 2025/07/17 12:24:38 fetching corpus: 9000, signal 173551/189861 (executing program) 2025/07/17 12:24:38 fetching corpus: 9050, signal 173776/189861 (executing program) 2025/07/17 12:24:38 fetching corpus: 9100, signal 173944/189861 (executing program) 2025/07/17 12:24:38 fetching corpus: 9150, signal 174090/189861 (executing program) 2025/07/17 12:24:38 fetching corpus: 9200, signal 174302/189861 (executing program) 2025/07/17 12:24:38 fetching corpus: 9250, signal 174598/189861 (executing program) 2025/07/17 12:24:38 fetching corpus: 9300, signal 174745/189861 (executing program) 2025/07/17 12:24:38 fetching corpus: 9350, signal 174975/189861 (executing program) 2025/07/17 12:24:38 fetching corpus: 9400, signal 175165/189861 (executing program) 2025/07/17 12:24:39 fetching corpus: 9450, signal 175393/189861 (executing program) 2025/07/17 12:24:39 fetching corpus: 9500, signal 175608/189861 (executing program) 2025/07/17 12:24:39 fetching corpus: 9550, signal 175862/189861 (executing program) 2025/07/17 12:24:39 fetching corpus: 9600, signal 176062/189861 (executing program) 2025/07/17 12:24:39 fetching corpus: 9650, signal 176400/189861 (executing program) 2025/07/17 12:24:39 fetching corpus: 9700, signal 176664/189861 (executing program) 2025/07/17 12:24:39 fetching corpus: 9750, signal 176909/189861 (executing program) 2025/07/17 12:24:39 fetching corpus: 9800, signal 177118/189861 (executing program) 2025/07/17 12:24:39 fetching corpus: 9850, signal 177324/189861 (executing program) 2025/07/17 12:24:39 fetching corpus: 9900, signal 177505/189861 (executing program) 2025/07/17 12:24:39 fetching corpus: 9950, signal 177676/189861 (executing program) 2025/07/17 12:24:40 fetching corpus: 10000, signal 177871/189861 (executing program) 2025/07/17 12:24:40 fetching corpus: 10050, signal 178057/189861 (executing program) 2025/07/17 12:24:40 fetching corpus: 10100, signal 178340/189861 (executing program) 2025/07/17 12:24:40 fetching corpus: 10150, signal 178468/189861 (executing program) 2025/07/17 12:24:40 fetching corpus: 10200, signal 178646/189861 (executing program) 2025/07/17 12:24:40 fetching corpus: 10250, signal 178860/189861 (executing program) 2025/07/17 12:24:40 fetching corpus: 10300, signal 179513/189861 (executing program) 2025/07/17 12:24:40 fetching corpus: 10350, signal 179683/189861 (executing program) 2025/07/17 12:24:40 fetching corpus: 10400, signal 179860/189861 (executing program) 2025/07/17 12:24:40 fetching corpus: 10450, signal 180044/189861 (executing program) 2025/07/17 12:24:40 fetching corpus: 10500, signal 180289/189861 (executing program) 2025/07/17 12:24:40 fetching corpus: 10550, signal 180603/189861 (executing program) 2025/07/17 12:24:40 fetching corpus: 10600, signal 180897/189861 (executing program) 2025/07/17 12:24:41 fetching corpus: 10650, signal 181115/189861 (executing program) 2025/07/17 12:24:41 fetching corpus: 10700, signal 181451/189861 (executing program) 2025/07/17 12:24:41 fetching corpus: 10750, signal 181642/189861 (executing program) 2025/07/17 12:24:41 fetching corpus: 10800, signal 181786/189861 (executing program) 2025/07/17 12:24:41 fetching corpus: 10850, signal 182119/189861 (executing program) 2025/07/17 12:24:41 fetching corpus: 10900, signal 182374/189861 (executing program) 2025/07/17 12:24:41 fetching corpus: 10950, signal 182751/189861 (executing program) 2025/07/17 12:24:41 fetching corpus: 11000, signal 182959/189861 (executing program) 2025/07/17 12:24:41 fetching corpus: 11050, signal 183178/189861 (executing program) 2025/07/17 12:24:41 fetching corpus: 11100, signal 183342/189861 (executing program) 2025/07/17 12:24:41 fetching corpus: 11150, signal 183526/189861 (executing program) 2025/07/17 12:24:41 fetching corpus: 11200, signal 183802/189861 (executing program) 2025/07/17 12:24:41 fetching corpus: 11250, signal 183968/189861 (executing program) 2025/07/17 12:24:42 fetching corpus: 11300, signal 184122/189861 (executing program) 2025/07/17 12:24:42 fetching corpus: 11350, signal 184292/189861 (executing program) 2025/07/17 12:24:42 fetching corpus: 11400, signal 184489/189861 (executing program) 2025/07/17 12:24:42 fetching corpus: 11450, signal 184605/189861 (executing program) 2025/07/17 12:24:42 fetching corpus: 11500, signal 184805/189861 (executing program) 2025/07/17 12:24:42 fetching corpus: 11550, signal 184974/189861 (executing program) 2025/07/17 12:24:42 fetching corpus: 11600, signal 185227/189861 (executing program) 2025/07/17 12:24:42 fetching corpus: 11650, signal 185372/189861 (executing program) 2025/07/17 12:24:42 fetching corpus: 11700, signal 185507/189861 (executing program) 2025/07/17 12:24:42 fetching corpus: 11750, signal 185739/189861 (executing program) 2025/07/17 12:24:42 fetching corpus: 11800, signal 185927/189861 (executing program) 2025/07/17 12:24:42 fetching corpus: 11850, signal 186098/189861 (executing program) 2025/07/17 12:24:42 fetching corpus: 11900, signal 186233/189861 (executing program) 2025/07/17 12:24:43 fetching corpus: 11950, signal 186392/189861 (executing program) 2025/07/17 12:24:43 fetching corpus: 12000, signal 186592/189861 (executing program) 2025/07/17 12:24:43 fetching corpus: 12050, signal 186803/189861 (executing program) 2025/07/17 12:24:43 fetching corpus: 12088, signal 186895/189861 (executing program) 2025/07/17 12:24:43 fetching corpus: 12088, signal 186895/189861 (executing program) 2025/07/17 12:24:45 starting 8 fuzzer processes 12:24:45 executing program 0: r0 = syz_io_uring_setup(0x3e6f, &(0x7f0000000000)={0x0, 0xabf1, 0x2, 0x4, 0x270}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r3 = syz_io_uring_setup(0x41c7, &(0x7f0000000140)={0x0, 0x9bab, 0x2, 0x2, 0x33f, 0x0, r2}, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = dup(r2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="2616a05910eb"}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xb4}]}, 0x50}, 0x1, 0x0, 0x0, 0xe0c4}, 0x1) r6 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x9) r7 = openat$incfs(r5, &(0x7f00000003c0)='.pending_reads\x00', 0x0, 0xa0) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000400)={{0x1, 0x1, 0x18, r3, {0x8}}, './file0\x00'}) r10 = socket$nl_audit(0x10, 0x3, 0x9) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000440)=[r6, r7, r8, r3, r9, r2, r4, r5, r3, r10], 0xa) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x50, r4, 0x10000000) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x6c, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x24004800) sendmsg$AUDIT_USER_TTY(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x18, 0x464, 0x2, 0x70bd2d, 0x25dfdbfb, "8a53491e0fe7cb", ["", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x40044}, 0x6000000) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000900)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000740)={0x180, r11, 0x300, 0x70bd29, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x1200}, {0xc, 0x90, 0xfff}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0xae4}, {0xc, 0x90, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0xffffffffffffffe7}, {0xc, 0x90, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc}, {0xc, 0x90, 0x80000001}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x7e811ce1}}]}, 0x180}, 0x1, 0x0, 0x0, 0x4000810}, 0x4800) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x68, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffff7f}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffff8001}]}, 0x68}}, 0x2000404d) r12 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x110, r2, 0x8000000) syz_io_uring_submit(r12, r1, &(0x7f0000000a80)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd_index, 0x3, 0x0, 0x3, 0x0, 0x1}, 0x7fffffff) 12:24:45 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x3, 0x440a01) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/raw\x00') sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xe1ff}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000}, 0x20040810) r3 = syz_open_dev$vcsa(&(0x7f0000000280), 0x200, 0x100) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'ip6_vti0\x00', 0x0, 0x2f, 0x83, 0x80, 0x80000000, 0x1, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x7, 0x7, 0xfffffff9}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x64, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x40000) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000004c0), r0) recvmmsg$unix(r3, &(0x7f0000000a00)=[{{&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000580)=""/205, 0xcd}], 0x1, &(0x7f00000006c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}}, {{&(0x7f0000000800)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000880)=""/201, 0xc9}], 0x1, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}], 0x2, 0x2140, &(0x7f0000000a80)={0x77359400}) sendmsg$inet6(r7, &(0x7f0000000f00)={&(0x7f0000000ac0)={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x21}, 0x9d45}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000b00)="170d73445ecad3c793c7d5e11d885dc3477bfe22d26132a0d2adabd5cdf310fa9cdc4163ef629d6bb998b2ed423e881cf087485eaae2b13c6ede0aa2819a8ce720ed6afcbc4d25a029319d1ceffc46482b", 0x51}, {&(0x7f0000000b80)="d23bcf2efc5e9916cab53deba520aed1204a4891c4dcb4fd848dc8541481d9e983b9403ec8ab7c95e8b097ba788aaf642c0184295223ab7dfcaac30e9251b4320716d87d58fadf387fa9126098a5591a100b326b445ae8c0c76651cc911121765978a75e29afd135d9d7358c952ccd8bce3b69183fc0eec45e7217261e820b441a6908bb36b7817613b12464b856e5a1b1779c7990d6219b0cd7f232e70d327f3d6b59b01d99361b947feb77a0cb9228e67ced038ac92ebb15504ea98ddef1fa4c08b498f0b20d3bca96aae33471a0417ae2c9aa4083799e9b790b8d3d", 0xdd}, {&(0x7f0000000c80)="22c4580ec7190bd80c909dfe42d6664186d6679bc1dc155115a5", 0x1a}, {&(0x7f0000000cc0)}, {&(0x7f0000000d00)="9f96a5f749bbce437c78e5b299a253f3358a16bc45917126aacd4c6508ba036769404825ad1157c8c7194592f445105db5177bb8298e817ce980ec637df2ae8a410191ef7c7d29904cb2083775319c7371ebf606afca166911cc906c0ee41bd45eeb7ca191f5219c70beb7f5848b00682534ed6cd1e661f7d9936556", 0x7c}], 0x5, &(0x7f0000000e00)=[@hopopts={{0x68, 0x29, 0x36, {0x5c, 0x9, '\x00', [@generic={0x3, 0x42, "2cdfa0c3a4c48f19d503a0ed0ec3e536b67c753859bd0d7d41019ca69a15a30572e3f22e8f397f763d0a91ecd61bc2c859a4fdc3e6b6c184058e388dde2860a3d2b7"}, @ra={0x5, 0x2, 0x5}, @pad1]}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x73, 0x8, 0x2, 0x6, 0x0, [@empty, @mcast1, @mcast2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x6b8}}, @dstopts={{0x20, 0x29, 0x37, {0x32, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}]}}}], 0xf8}, 0x20048040) pread64(r5, &(0x7f0000000f40)=""/105, 0x69, 0x5) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x24, r9, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000044}, 0x1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x24, r9, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}}, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fremovexattr(r6, &(0x7f0000001200)=@random={'osx.', '[#\\&\xb2-\x00'}) lseek(r8, 0x9, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r10, &(0x7f00000013c0)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x60, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xb4830a15f4d9e95a}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000010}, 0x4) 12:24:45 executing program 2: faccessat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x15, 0x300) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001740)={0x0}, &(0x7f0000001780)=0xc) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005300)=[{{0x0, 0x0, &(0x7f0000004fc0)=[{&(0x7f0000003f80)=""/4096, 0x1000}, {&(0x7f0000004f80)=""/29, 0x1d}], 0x2, &(0x7f0000005000)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000005080), 0x6e, &(0x7f0000005280)=[{&(0x7f0000005100)=""/99, 0x63}, {&(0x7f0000005180)=""/168, 0xa8}, {&(0x7f0000005240)=""/10, 0xa}], 0x3, &(0x7f00000052c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x20}}], 0x2, 0x10141, &(0x7f0000005380)={0x77359400}) sendmsg$netlink(r0, &(0x7f0000008180)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfb, 0x8000000}, 0xc, &(0x7f0000008100)=[{&(0x7f0000000080)={0x1688, 0x1c, 0x200, 0x70bd26, 0x25dfdbfd, "", [@nested={0x121e, 0x31, 0x0, 0x1, [@typed={0x4, 0x77}, @generic="d3c09063058e9b83ca4c54648334565f8d280c6c3752aa04172bf61d6e707223e42368c869cea1eeda2b370711605a0ad5f5df74be05ff8ba0e6ef384443434f340d50c3d1766e3d3e42d3aeb753530f2edbd6d125c0230bad97908b91510d9f50a760ae9b5f96f3804d24f99904bb0a75fb52f0fab41ba7a40d9da50f5d0b92c0db95ff298c4e118d1c87fc1eecb58f94bc35509ca0ef51f4fc7bc84107719f3070595467e928c03fa106d07140", @typed={0x1004, 0x78, 0x0, 0x0, @binary="3b96152ff31986f9ab04fdff755cd019ab25f2c24b7104a5cee085a3ea6fc4c70863dcb40a8648f94599357d0418a3cb34253c64730a8f3728b9d0a3631544804018cd46680d094cf79201fc90e7f229c977973da4da5b7ba3c7c4c0da58bbed7dd4b14df3c6d174fafa1f458bdea8a08e90d68f7a8ac3e77d158f2956a6050091ad94a7aaf316715eedf46939c772f33f5b0037f3457b86aab17a1eeea3c9879cf596ca47aa7c88fecfd66515b0a5b33932add0e8a9eca4c32e75d20ea234453737e95f8b8e535151858ef42b804ab33b1d6226ae72301d4def592530e3c8b47d153c6d2264f850f3ee1835b531cbd59f682ade3783e4e2eb020b2a9b1931eb56647d26ac136764e732abccb892227182485e18040fc6c024edfd3ad51b5ff2f5ac8f12d306644da3b14fe59d5cdbaa67bb4d70dcc1841150a7c2913fdd5ef0c682ccad651fb2eb1295015ac71ee54a145afb8362aae4dd719454786024a6f060e2e9b95d369c6e963a2075fe2f5d49c1b779e12f98184632ff2bbfbe9eb416b45d52c92ab721b778d99c904c690bf0d749c61ce8ba199b3b9ecdec714b99f4abb2f97aa2b1f34f463b157fac8a2794d4f05a1aff9d090ab00a3c0eb8bfb5bcde30501c415accd1c82bf7dea0b0900e716f3efbc0e699284631f94df92b0bea9a2a55a76af1c1652b9eb32a9c9e2107f751c3f4c07573272cc9c03ef5d93d796d2ff4bb30442234894cb0a78a320cb1387a5e172a671ddd603a23a680d339c77f20ed6d7610a1879bbaed26c7232ced0f7da9aefe8895f80ad802eb858caed0a6e3838e774e61b481aafb297b679d9e91cc523eed9183b72abd87d0e8ac4f21e12a8aee9ce9a490e26f94cad4313e511652a4342b61db6b4e1cdd0be5c2f765ac9e6c846878915edf677c30d86269e83cf0c1c5d4baee4a70487d00a591e94b08a5902f29f106102d3c9a5ed36375636b42ef9d54fe2d97160bfcefd86777a469853e4de0d0110405d050c7ec6060434db5bfcba604414ae757554d84a5b021bb0516e8eed658f8153a9b32146c1e4b469b6249ede6786c16a5bca1cd6626bdfc8e1c0b9e3dfe72f6032fd5ee9b8d76ab1b00dc641ce9e563fe1fbe49be7743e822daeaa57db96f62ef2e4f26ca8775e4e1479be0a62eef77f4e01e0a8fd8aa024ceacb13f7d988e7230db71d51624d38d0c1ba125b304db68dd49643ac53f3030ff2fe5155f66bead5893f620a1ed1693f428ffd63a9c97ddfaa69e5342334fea564783a90af7e1c9e027a67c16d5f20f90e4945ec89e205a2f9bb0d3653306b089d27e486a501e072a3451e8bdcfea60328f3da0ece78a582b5fa827a54d54555fc4cd4f16cc3d13781fa1e35b1395ce2676ee6f916440430900e65a07715a19f7eea82c7bcba2484e8a2b78f96876b8221ffa208729396e3260c7eae60c9fd3f1504fbe035bfa82b25692bf4fafaae57a81ba8a847af7d3211e795a3586ca7fc37413731eeb1115adcc06fdacde9b2271d9ad03fa6ffa05b3c287a32b5219f3a89b18da20b598d2a1e7cbc2c97cffcc641ab41861e0652a76103915acad07d2d8cf1ff3490b99a67355fc94f5e8b6e62261d666e3256a50d7b0a139cd19df257adb89f9fea45836a06718d122133b1a7546300d088ba561e89870715911342a4888697a7a00b8c00cb7523abd5e4fdbd478bb9683ed0be67428bf16eadbd2830f2c5dc7e9eb1e8394c892bc1cc6a27ea8928aeb05cbbe0af4367bd159b5dd7c866cfe67758f6ac80606871cf89b305636452a470112c02a1848d34a0db9e2cfcb14bf0a919a0d03041fa70f311cc0ceddd6a0228784bcba41bfed1a3996380eda589ecb9ad4d7fcdfafd48f6e7a52167c7dd46797cd50967a861661ffc88eec90f0c712837bc3a3b8e5094987dfbbc01837697060e22ff4acbece2e3ea935e18d1dfe940f81509817d509e1ed176eb7e0af00ee91af3b8b9267e1e419347ae494ccc9b1fdd9545d35ca2d59b12b67f39f38d5fcd8f613a6388110166bc24809c73675bda5870dd64d6a6d96a63cae4045f9ae2c7f4579961970e22769fd9f4f0bb98e0afd328a548a7a5950f3f17fd6bbff02886471c9092a332be4ff5ca108c62c4b85e2e7859e22aab282a74bc56e611acbb70595d98a53c6e9fc4fff4bca28b49d94a72f19fa6e7a319109f82a255ef8c5abf22be22852bc474c4c85721083ab15b6fec4a834d9e393382ddf545e75b8b8203feb17d10dc5f9ebf0b88449f5149a40233a059f1095ff1fca7680b10c8b215e3bccda060480cfef5617b3bd1067e57ccc6b64e25b3f7e1ddde98eb06347a8831ef75481b6913f3f68a787222bf4122fd9a2b4e95799559eb2a466ecbe31d0b421e7ef181fbd6d48abcb1f008ea812f6b271c8b59e0453d9836b8ebc147b5ee7ae0aa183f676801a33ae1f770f65ece72818fbecec0605e81020d3b1a0d2107130678352152bb4267ad326eaa245f8f13cccb8697033144e083a77264f0639441188597e36a31c0ba3eb761de6ca8535c7ce65e641b5f1974a9fcb2032d44b1171a3059e231d811c6cdc8b2941bcc0bf9700af86f0f5785412ff041ab31e862b72accf9c6b45c4fcfdfb4beacb64202dafaaa32de784d2e287310eca9f2f6bab62f3642dd7f3d00cd9ad464bd5cb95c2e838dfee15bb8ff10c26d68183c08a7cf18915a6923849b7a405e8690902133357e6f434218b109da9bacdf390006ba9ed2a492f6f6dfb45574190f7ed7554542fe58ba7fd2906e518679b3737e81873e8e26665745c329282c94d1bca131f5e78fea2c958f0686d219255f01610547e8663948e44ddfa2f1c8b05687e6a841e4a94c4c92c32756541d2c6b6238842c1e74062f0fa8049701040344e6cc4b3dedb1f6e96e8a439c248422bcc0794f7048b31547f6733ed6b84d9dec6d9b0ef48540c0790088c7e851ddca34728444535215019c9ba1cda77b0b407da370e947903084af2371dd87c48c369bcf5872b25c38934f6e4d18112e1d2fb377f3cb412ca8cedc2981994ea04f3c295349b7787eeda61329a6d07dc867e376a2ca977793199bdef9a3570778708646e11b122431e7fb7f1fa1b7701563e04b3182a508ee3f2c969c56e8db5bbd7f29d831ec3802109eb9028cd185d0ccc14bbaf2d64d4ef5dc4c194f26a008c0179b05362962e45dd80595a883fd114a8c481f438302e214b4cec179a6cacc38377c3aa4f2ea5f639acd476898b213060e3556e468f0533b005f0f55e69dcdb9efc58c9cbac51e98ca3651d68be7d6057b92b21e47c2f1d772e40857d2bfd8c689b7fa8fa222fafd76e2cbbcca2f96834c7559d114571f1e9c989fcce6ad2a237ea56d06042a6016c8671a553297c57ced150878accf2f4397f76bce668cba2acf33e1bca5e35b5d01b00e0292601c6802d1441f54b0e988e51522802c11adb8a88fa78b2c4fa26013619356f226e62d2e32fd231eed1edb19daf86cd0e0e42550893d273d5b3725810a16da56b5762f213d86918d1bbc900e8015bb8ce1483e35d987c299a566df50456f9eeba1e06747a82b266a5fe053a01b1e46b25e99bd29c54825fe22d487a7abc5a12efc3fe547b6548fea34e9b81e1aa0d8d7e9388dba81b4d76ca77e7aa158a4d27e0ec9628aac66bd91a15508c45fc6585c5d01fc657df4b76630282a205631e7f9c488891d109da3d087cb464908a6f3121f4dc2efafaeddfe32cb254dab41a464e7b22e676571b944f2dc570036f15ef1561ce738ad8e57e9f483458a8d6ba9a51fda57173dcef0b02a231cd60239d6ebe33ee69c74568973a7c5ea2580b6f027a71ded364cff91d2bd80261036d370ddb7b21dc8fe8a70d67b26b22b8827107dfefd13d9c77d086869030602ab8bb028f604b35975863d0a0b0862a33727e53854492bb4d7a31f3a2cbf01bd49e8c6a5631267ad28c43e4b9c46dcd3bfbdd6b7c7c179095a48ed2eec61011d4301ad7d89b9bf0f20e741c8ed45887221a7725ea7b6f9d874748a25ba9c5bc6bba7cb7386cfe1fd90e2901f76ff2d0e5a0849556ea78d4584c077ba4944ddf9e2d0d8b2c5fcbf0557b58f8e30eb651491703ea626265bf8459316cd516ecc855d00274132a0a2f3f3012c7e628aa68d520c7c45c85c987aebccd619daccf52993e53d697ee6640e12cc7112ab289afea2be030581678b5cf5466ae092c66183c44d9c9e52ca9b92a35304bc33d3488d2a8c0508a233a032d077363f05bebeaa97568e9d3829cc46bb8422ecc4c604b710ad1d10445f06849e95dbedf494ee78c5b853f6e50df2bb5c62d06edd8dd26350a0dbed8c904199aa4ce32c69785fb6cb2c8db69bed1103478285496612e30b341e5863f3b9dbfc95b2745c857d530887dc3354a6e5ebd260370e2f8b99eca1355a926d54ed168929b74defffca9f482ca1baa7ee2cd1538daabf998ed0ec88be83fed4f1aa43755ae79fc477e90980b5694828deb3e0ddac1cffbe4ccc0f242a307f350a942b4e5ab092ced46b4f0654aa69da47c5c2156ea332064105ec4c5a7ade01f1070374acb59df9ddf271a2a496d0235244563a0ad3449dabb8130dc469b18350803201045d97f6988ad37f7f897d5c248a6b4dc127602bc24b494c1541fcae788f410915ab354c0fe19d06f0e699014e2bfc7bdb270882b3deb96e2eb6dffb13d3433ebaee358dee039d0936c17d929fa9593f241a225e521ca4e8dddcaa8bb3afc6d98050ebef4d6c148e96e4464e68a6125182d3bc8065e8208b306c15889dd29ac3767f723bef8c57368afcfff67fbb9b3e4d6702ea36db9d5f050259816968352c9c7bd8acfb90ee2f8a6c00888eb0ba645d9bb08c09ff5c2a2727c7efded78b54513641b95aa792cbcbf5a30504ec92bb31eacf09cd0179aa0e9effd882d50a47d6e65d7b4b1ffecf1c332da4fdb10d5b2a3c43cee443070313e33cf749ad3c9bcd21a1960b773d710debaae324f374250231dcfa803f18258cfccf46b9bc05571997413af8b774dc3153aa7a94dc9e53d687bde074a9df40c5f4ec1a68d988f2c245079a4815627ebbcb5432c6af66e792beaa69603791c8953cc920c540dc29b75b5a281d11c63b3f6b79e2b580f6815da33cb0b65224243cb4f48bae6f2bb1e65dc1b0155360e5438363fa958f8df72646ed4fc8c2f0a8d665e98c87c155468a30936c629691698b93b8f56e7b6c7caf22c53ebede9b224de2d0f44169ad5016d2f735095d08e3075a7b6dd5caaaec8c5f66cd524748c8255e63f7f31a75bb737ed9cfd36d4aa64bc946ee04542898f19580ec4c37a8bd521a071e4f41276743c901bbb8eec3bc6c5b0b1aaa298be9b8cddfed621b9c67a18c20b5775041ced595ffb065cf456cd0f5d7160b7bd174fa4c9e8340e503cf5710559c8298514b0974819ad3e64c84d696173e5fbe1492c506e3b3535c2226e86d4fa5b3f8b06a4429b542f334b711511398edaa318d9e5117871c73665ddb7c3b19f172f6890c2d93f04b915359150bd5b543b7aaeb06d8efe0748fcfc18f9b237e77ced9ce47e55cd4dc5365cc266954f88936e0007961ad8fe688077e6f45351f6ca43554eccd9a1112abd26c31079431389a54ba3023d3525d1e2ae839501ce2193f6f8d216bfe9a565aaa7dd2c42554e3b28e59c32275680fab70cc50a8a54aaf573a80c514c9427b7c3a67322a53a295cf09a58403f3560bbb1419eae4344aeaf2367edc1ff9863a95f5e6675d459225a10a0c72b8a59ecdb2df79540ad0ce59eb16c2a8"}, @generic="b4200284b4524d8ff37b874c4266dddae95f68138d61ec9c5ae1b4679dee2b90ce2f1292507398271db39b212435820b5a430e215951a9b089a73692527fd4", @typed={0x4e, 0x4e, 0x0, 0x0, @binary="6094ea7464f571941e09f7f01e1d3f9cad4ce08a2989f24d7d5af055442634c060068fc53514e52e62623274bec9130ab7d4bbd6adf74e42bddbbe18d4ec9bb7b28f094bc864cff7a9e6"}, @typed={0x5, 0xf, 0x0, 0x0, @str='\x00'}, @generic="66b367594d63184a525438adb2dba407d5e4f4b6e1cba63cda57e3619ab92ac3b730e7d9070059175db515fa47e4ff7c59bc56fa296068c4f8204560a21fb59c220a3c86c7d981debd0cc6c03c853f17c57ff19275713afd85c51d50bfd2ad14aeb43eda4514224afc063a09a2039474f737448907fb54a09756bb732d388b778512af9355000ac7f770bc3348c8c3d9f6f3489bd18905c8782a39e53865cd7b2484f4d5159264d7b79a9e84c337461e5b53d41584474b42f66ab4213650dd31d162b42f94dd85ac1836ebaa95"]}, @typed={0x84, 0x49, 0x0, 0x0, @binary="75fb201fef57b15bcf5bd749145429bff8f5b08acb76a8e4458055dc1cbde4027f9b3fd78993ccde906e591437720dab4f3b2be55178154c103c35a1c9e571bba83036e8bca5813691839d69d224ac1f8d02cd3fef7fb084cbf9ebb2d2c649644a4633e138baac7c8fa958478a51fd493c2879e28f42bd8e09d7dc2183ffb181"}, @generic="dae8f45aa220e2064d2d6a6800160d2ed9c27d8056c14f8a7d275add9f720c3af8fa2b9b94c20f6e8b7b8b065d206e0a54a50c35ceeaf5f12f55b54f58ead2d04cae99e66884697f1c83fa073e237b90237edcbcbfb8d118f7b91e52d610c73a9ae39f177b622135a15e7d428223ec371386c9511ebf6d53dc2bc83c1e2d305a8a3a27aef154c5c40f05a1cf4dc9cf79fee7ee21dbab3157", @nested={0x1ad, 0xe, 0x0, 0x1, [@generic="b9e44a4eb0dceefa6fba5c16264019bf1a97e30685f0689ca580511912d81cdbd5714a86f747d3ee1ceefffbc65d56f1673094b815e188dea6d7badaa731408d16c25082ca702f606a25dba83e5b3b61131108c69a7db9fd53a023aff6f625e7573af56bd553e92fe5f747f7ea7dce9ed626485dbd5e318f05222bd9c45ec19b8580b0d9ac409221a1c19eef66f64ff554fbfd86088ed1db2e2613bd9115912cd30f4fc9b2fef515f2d49801984f3d410e58a281ee443ad4b9daec382a44625922d1e203ce1f32c3c1566b85be71de", @generic="d003b88c5dd1ab7a0e9a7249c2191e512987", @typed={0x8, 0x6, 0x0, 0x0, @uid}, @typed={0xc0, 0x2, 0x0, 0x0, @binary="04b33f83e8f181ddaae5ea9cf668aa515301308c441a900f30bf978de888f44953f71d8f1fbbdb1231adbc28b81863d7ad8edb167d77bdcf0e3bde56ad222cb1c9b144e9e2d5da7d8e30a230838b77c0e2f2de0e67ccefcb9f41af6e741deca9ba27487ad346cdf42838f29bc44206611cf803dadc91fb1965cdb3ed79200e523b40f86c09dcec335d4412aa8a4829bb8738537623118ad95583fa599ce385f84d9c864f8451caf95510b5557b1f1e6808f4924e7a343010b9e2e931"}]}, @generic="1cafa3d4d0e71b12ecc2e2afe4216c80f5790f623363a57eb99c7a016a223e8f3418632fcce918ef1756f7e809471ab6ba79e7b7fbd7b253d5e7b93e7da17639c0ea5029fdb1ab6972daaf7cbc85587ba210d4b3bbac2536d908c1cdb623662ea298d29253accea06e5246681365716b4a8417305fde17b3f23f11c902539f2582188c1cd80b575594114d8d75e29ccc3bbc88210bcab707bf5a31a52d418eea55c75e86fc58d5ae8edd06419d2dce6a3ce272747a510574e01ddcd3667ffb22b080180865c97a4acf127683d0f80e", @generic="920b171fb9dbcad6407dd7ba1de65371f4fe302b39b4d7449909566320cd3d4e1e9a78bfac4ca00675a3fe5f68a26364160801dad3aeaa1f1abe2b8bf80700acb5c5ffaaac7ad38847635fbeceac13171bd10123c99bcdaff175fff12acc600f468a42897a2d8043290738d2fa18acd06cbc50fd6f019116f512e0fe90bb7494a32b1535dbefcbccfc815ebf5378ad65d12a1f416b971546b0d39db9dcf28c74444da0ee1e1862887198919acb3504a9961c1267046585c83849"]}, 0x1688}, {&(0x7f00000017c0)={0x10d4, 0x26, 0x10, 0x70bd25, 0x25dfdbfc, "", [@typed={0x8, 0x3a, 0x0, 0x0, @u32=0x6}, @generic="fe5f2d4c89464e142031a30a1dd7b8cb6aae7dfd72df7f8f54e6bc769c7781db27c8b9dae3290f48c2ad48a244538ab9", @nested={0x1063, 0x80, 0x0, 0x1, [@generic="a081ffc052d037669a3277568d1384ee5302236ea7d93cfa9d7dc9e3bbee53f4bdfd5a5ab79895d5f33409fad8a934f5a48f0f80b7d6e1df37ec6c9ecc5abfad21c6fd8efc4f757b975964563f98049a4be84c1e9a864d", @typed={0x8, 0x74, 0x0, 0x0, @pid=r1}, @generic="b1ae7be0a3cb4049f2bdc8058dc4bf25338f481af5db48100af0a41036b8dd366f5a707bdfab5185afeb6091f4c4bad94c3f06b5eb37585178bf96ef73e286712ef8ced28625746d9d22cc221a31df9a2973de65553ce928414ef74ccaec2aafb0e93f4463d198970e5e7e73fe4956fc5de982cebe4da2808b6c9c675f3e110badc40e510a648615a0b131548d654f629f842fe674ead077b235a50d8f844c2e34a7c29dee213b73490da7f1a89287650c2fd58aeea2fbed7bb6862fad3538220633802b52c5e72690853f20199185fecbe40de73ad4bd35512ceb9cca050f96f1bad053f11c1cb3cab5f4dd16ece5a5a1c18c4a7e0329b0935fc58a287a30840f5fe825af4790cd5820dd691ebfab1b50f911db9e717853600d8fca2857608dd42505480c20a8a920517ae799b1e55d799861a84ed9c4fd551ba8b18f63c54cef4151e7b47bf2cde61cebab254ed2523d2b7a2d92d99e21d36f4ceb6386c8f5e1d9477b1f322e759d869b973ae9058d372181d1de2f079c40a47a91da03aedcc5953342ed4fdc11ed7e2ed3855e935a5cc3c6db4ad5f2d42e071f3dfd4e8602734eb705a1f9934bdcaa53c397d0e2f00565a622ca3bab82c15d2dd994b2b05f1ed89a8407eb15da6c0a0a6deb23d2afa3e25a48e52da81036d847ec69bcd5d888841769cd5dbf93556263993b6a5db017f17b22242883b7e5410c81f19bda39a8c5303324bafdc72e5d4381787b6eed816ab99fbe441c8402621ab51252b44fab6079c8b28050b040cdac5b24e8048153d2b30197819c3f0285a7ba809e4b3146c6b6fb2f9b080dbbdf6a4f3369540a76e9659f7181285de55090fedc6d178300b90b1df8d22390df9b74dab023abfc8529f43d56674339654196d250181f74e8a89c607c2fb4b688a1366e5595dcfb1bcc4b1e7a46a155d1836da1b50ccfc2522b954c01be4290f6fa2a3a6fdce9af7551b30d418a22d599d4f61eafc27f93d945a909f363d2b9e040d02c22ebaf0d48a0a658d1aa6ba046097169abfc2e8074b13364ad6b4348c2672dd552b91e755db86b8b549dd471c8fa70f21e88989157da8f6a445f9bcdc58d33b5147900e7697e4f1ed61fa7787db48cf0b7b19e742101950c64a66bac094183344698508033b847b49d6fb5a2dc2b6a7661347ef63c2325a51eb43566f5f762bea66643edf2d21134fe584c9c6d816993c964ed63695f0e14e6024f817ec2b9afbe8788677d1294a98e7126839e6e659d3110b080228a71005dff10638adf2930833576990c4951ea3a412d0ad23152c6d21be2cc3d6cb4ff9a6c138771bc2f93f0885e0dedcc5827269fe016ff43e58ec037d1ca89bdccd23f70ffbf5b356b3107b44fb7b55a178738fa00135e5ad2ab2fd1c775a37be393a7aebb581e75dcf6c83e568b443a8d7d3a9f3f7150e1a52a23d8bb91c414be0c84e7e8b11b1cbd07c200789ef6fdfc59a5efe15d2af366c867c5d81ebf03025709ebf9148287217713896141577c4a7b390db6a185512eecf11c71d9044a2214115d030a043fc5a5e0bee496e7b74649cea26c1aa801795359809fecb2220635effc207af9b002e10f37516fce23ffcd59038651e39978cc0173d634c8f6db4629df2166514bc98a8536920352d68c0882fa3e13e83299a9cecf67bc5fc3458086434ee9e93d80862f262659b5a20c2581c2caf8d802bb0c00070c5fc6f8ea51fa4930bfb2741d96b16c3456f37efb233a82aa6501f207bc492728375f51bb93b7edb089b594c928400ccce242ef9a5dda48038cdc8c1692029800a9b7d9878e3c7d2f356b7a1c14070c8831e378210096a7bd8285123b6dc9429351e4a007efbd78a9c29efb1f89b317d321bf655bd401748c401df4f1cc74420ad5f38ae0f7e67c567909b32680a61092ce9270d576b2e6cecc057532e32d794f3c7177218aa9696f31a8dbb68dcc5968086a0240dd5497759d2e85a0b993adac7371642f6473c4b0909366cdbf6452f30aec10ab79b6df81fe92bbc12bbe042cce27777babbdb860340b4bf03f1012bc5a8f71f844d9d2dfbb6a53d04aea1d8a90b8c4b7f327d14449bb91b17994896f89715ba278c220cdcf2e18114fa662ec56e1657f59224be535442b228af2bfc03581b03cf5d5e5f883ba075a9b4323d80a4ff6ee34caeed075490b20071a61a5ed760f01ae2e1c932f785108dd4cd8d712eeaf4b6070966618b7f143432119f948abfb2840eabd8b071c70a64f5a7b8c769da2f90382bdcdaab5faebba0bcace4e1080081a9725eda65baedd4a5961a256e3507c5a5e9a97eae9c27cf5e4a517463a6ed1c7798bc79a240ea41e52a578270b6c594ac84eabf72550fcb343f4ef04efbbdf68712a6535e1c153bedcd62cf8540f25bcd6baea863e5860a2e9a39a14856dc1494d29d30836849f49c0affe6f7d96a6e740f94cd86c6c34df823c8c59b3b79110f6ae2327e2345eb3ed6bbe37804ca2cc58e4871e1af8a2968538663f2c6e6e0253615fce67ded5f159597c20f9c631c33823cee2c03b8e8ac26a7c8ead5c1c70f795e6a9770417210f26c06be66060fbf75fdc45a496e7ba49802fcb90e9d285e31afb680bbead8d6a4a50599a668fe02e9b46409ce698e75c275ece653700d44c854aa937cc8dee520c748528980f4597c75b592177c2e457e29385ce045113011b1c1cfd242f463778f7fce6415d8e3f234d65954498573625c6378d67405bbf548ec9ec171d71f64dcae38fd0b3c5e5c8a36fe90842f9ce6ea5be682a85d7a2a486effb703c8e1b39df0c8ba7f86bb3bd5a7be4ec126ba329b76971be73fb7eb6977b5d0c26c78d2faffdbde21b05d5a73eb68eaff3c205e075ab472bc558abdae21adadc23619bb2068db7a8192bbab3956a1a571ee50316b30c91f10b0a9517df3935918578a74dfa3452645043413bdea23a297eabab7eb032c688d9231cc52e0a5db6e58e1c36d710300f42f4d1c94f40932d499f4d2b80d109d75c64c5261e0148f782dc0b3531aec5546bcbc21cfa93b557d3a74ff7f9ea942a463d622bf6d3ab29540fbd2ef481341a65c1a96834d40d4167516030c1a3f70e82484ccb2a6ad53c94f2d3c29c63da876bc3188dff44c4d7d1283bc49cda6398eb4aebd26ffe1dc6529b5b70c5880fe485e471398f70b278652033337f197a5c6e72f67a577f8a880b64111b50c3d5ca083c492aaebccb5ac069bb7c339eb99c4a8d2f3bdc1f78e16ed09932d8caba6de79c13956021723a7e0c0436c78cfb79f167548dbccbefb9a1df94028530a238d94c04e2ef4ba5697007b434a6adece47546f26463c0d698dc6c1669b6307f69543108a4e44903004d6bc68275037f9e1296563197b71f681ea3f8c94b79983a9b94889409df3cd681444687c3de0ae1c46360a9c57298cd78e2ce1063df4af5263e9c3e709b6a92e39d8fecf9856b07a048dca5d03f93baced29bb0895c0a87efb1e3930cc6506e23f01a3191029adb5bb7496236361051c52334b049c57272dd8312462c9076e0abaa7deef5948d61f787008e568d94e2bf9d992b2f665bd8ebae9544e0edc422e0418ad753dd2a1625c891d8f49ad4e9cbb6b7855fc26e6d622f55d3aac528badb3d3f3ef140f540448a4199845b91aec89945e3425233f3e4a425af08a1b8012444084b6bf7ee163358029b5d4c58cb31fe366332638f08e94bed301bf170ca5be24c8c14fe5b44c1ff0cebbebe252661e81dcd0f2dab98cacc49eb9cb10f3e4d22baacd6dd6ba34530ab68cd3e70c24f299240bc16435a25069e3e4b009b177823617e422a6824194203cb49ce514f2000d467fd2994aefc71112ce6636ddd5a1cfd1c82933466ebb4d7029455bdd34a2e254cdf575706a61dd444f5ec8de4f9151b2e9adeefb8b03fae081ad7b9caef68d872702aaef222a1ef356364cefc331fce5bce2775dd203779bfaeb6295814b304273a2e6595da3e55911cb972a512077b5460c35a5ab84d02c4d2c88c7b5636ad04c701257a24b5c4d00937d4f7cffccdc5fdbcafa166da1f7c2e922ac3663560590f41c1f7537d83b05829a71835ed7b6a02eb00da951986ca4f93d3de9af5142556ce6b43e1d4956c0c31f8a333661ee4590ba69d001e5906b68b6ab01de1243fdd781545ef4a129bb473a8e1ca035d38eea8fbb9a1176b01ff229978838f8c17aec193bc5621e7e8144cce9ebbe7824a6a7cc8a74452a3a9e306cb8b8052e549961bcecffa7349e1e1d12c3f1790b6e92bea381c6907c699b68eb906c6c7257e0ee5d316f74d7d1ea4846a9d687f55d1f7db314e3bff47bf74f61f9ccecfd057b7d8ae648e03ca8686ff244d492fe5962ad509c04d23a08cc72d0a37c947b7c519d33638ddca942f5448a83825d425a39954621d0124441b5d9e1993946927fc2b58959a4ffb1eff6af2b40a05f10db3363a58e7bfe556784a2c1272cfec73db2c7159630aebec3090784eae1bd93305664b0eafcd226e1ac89de0c13d794a60378cfe8a4225cd62a86e8c8ff5262d9036cc8f499ef2e570e80c3fdadf01678f9c7db1e4048f4786f26fedf55acf1ca015090655bc620da6a63a723086d8b49277161593738e3d405bf34418ad3affbc2601bf1400a6dc171f51947b68a9d172ff6f455d220845129a52a53229274567a87609ed59fa18c7edf5d48b9e3de653fb8c8a2dc04c2b2e22e2d379b8cbec52ebec3e991866055fdc44d26e7c6e7bc4ed81dcb0dd216796785511034de47551a3098ce7778bd3af070e1398a1fd4695cd484784bff059a77f2c9a4db262c4f524a035b5d2c9bbcdb5934ac9be0a1848e29bcf322614767331bcd1257a4a41d49f87cb11b10cb0bef81df3a4e4c9defb068cc6326592f378519c95afbe0b3e471de72e646461a2fcf4d232f3c5557f3cd1f8c3e3c721a23e998f2575c75a6b6a7b9c5846fe8b5a971ac54e88ea6ff5726f804de72a52ce19d79fdea696a4bd0e9d1db315b2cd95f3cbc5a462fad27adc353c47af5e1241908ac7325e7fc5e2bf1bfb28e7758d09453433ca28c2b53ff4293b335f0f40e32d13bb938f73208751cfc433cf7f64f60f35ee6d54cb9e15826ebabb390d6247e7300883eaff3258a6af269d46b7a4ba1d24325bd8cb72628436771f8334f5aa773471ac7c18f6cf3d71ff97828307b0ce9e9ec8681d82ba7cced205c4b99d5042cddae093f9a3a1431eeb5c1d55c6a03da03bf49b6c310f5aa7d5bfa8db453c0507a15518780a6d784f69a9c757a9ad50176b302919e5086a9fb3827e6083610ceea9dd38e4d309b6762ae082c81d9aed6aac02f4613b3698dcd4ff6231eabbeb0f68746a611e755bbe7d301b09996c97b7b7611c1fe005f59a9ca7f63b7f2f3d62585599882762b1a8c486e5a14382299ccaa2125fe7547e3ccce02d77bc14fcb5212925f8de5655fe2f90f0c11ce6896786eb1a6828b3fe68e458a65dbca4510279061b8fca5a3b842dcebbdfea796738c584eb94d0a55815f583c04efdb65570ca64840010da0bfb4064787e4dbc976c09fd4bb9ff49cbc9fb2c58cfaf36d2b07217813409d5a5680c6c1d2bbffc2c86a0485c0274688ec4fa9c393ebd5d1993b13f417fe183b36433bc3734aef543141a3af716be9f3ac096ed69b8b0512c7cb2b8e38bdddb2c0ad56954481c5117a039739b43fd1beb52465d06973e90cbaa3cd17c3fa30fd51fa8e5b06fe2a9b408030c593340197ce784b095adfc12be344c671f275d2723dcc9010c57de7b240f954b1bef076434aa6b"]}, @generic="b8c13f696cca52d01a9513deb9d1542ec204a91395ed51c6d64b17ba", @nested={0xc, 0x66, 0x0, 0x1, [@typed={0x8, 0x24, 0x0, 0x0, @pid}]}]}, 0x10d4}, {&(0x7f00000028c0)={0x1664, 0x3d, 0x200, 0x70bd2a, 0x25dfdbfe, "", [@typed={0x8, 0x82, 0x0, 0x0, @fd}, @generic="abbcc5be6bc01ec7e3204a8b445f2445798073a62d350a8b478f5b1b17b4624153ddf8da824bee8a0ab4e166ba2a84b6f12cde2629b4c09753eee6fc103958197170687eefca451bd666455aa9fe109922f1985e1ff180cd6c3ee44039d7ae63b2cd387c31079ed73dad4ffeb7aadf51c1f6abe7b0565e1b8463a0b968e5914c073f5a4d2929647680052fc7c6d65e476190b9eb6aceecce30eef9bedb5e8bee706aa130ecc8bab6a1a5a3632ea41af745c974bc6496366e0b310a49104306662154af27ed758a624b62c4", @generic="c3123589a32f13c86c40642850bc4f54feb17e70514917ced17d82ec05f5cc8d336c53b56254f80cb260eb0591940333d71f60909feae2563e1a01981f3fb9fee8a428686016c1e5c73a56ae7b850f712ee02463f9dadff2baf51f1734b3310c38238f51944e4a4caf738a1b8fec61fa8ffd343ee9769232b20c505338b1c60c66b0e821a63b2f62e2c74fdf3bebc2b66a2dc5e2eec4e5bf3addcfe1a772053474e8a1702a510fe347e0561f310262ea67168570ebeefbcb9055324302db7affd3fa05b89087cadbe247015ee05bd29c3fb38f7ee1d18ba34188112d0ae51021bc9186aefb6cda299a37f544b4", @nested={0x8, 0x31, 0x0, 0x1, [@typed={0x4, 0x4a}]}, @nested={0x13ee, 0x57, 0x0, 0x1, [@generic="3fa91488306c8c8466bbfc4bb9c1f26d01d80e3aea4d3ed50f61a01125250a9017fcb6c5f5d956576a4f4b9261f0c65d142982c1da28cf705ad5f8f2181b19d02d68c1c82761550bfedb4e5aae45defd094b16bea696a7f50670e93171e8937ed7853fd6adc92193338f9a03b696b9b9c993cb227791a45142c3d7126cade011fc4d29c5e89a6b804be7fce4ae38891cfaef4a826c2afcbe276875c8c69a4bac9cfd6d51953885eb2de6a15943649615a3bc62e343183f1315d218456a6d37805210f6b9ad47b8", @generic="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", @generic="4682da0e230f1ac982052a0859c21176040ebe22066f34bab9d0170408e421a301a09d011c7bcb12f8126d471f976008072b1b7d9b4a59113d017668b62411e4409df0c67816f6056716f5d06c0905e3d4505516b47f618a52c7f38f28364172032d65ac75456c56852b7f3c70170a9d61284842ff87535830e963c016d31f2f36d81640ecafc8d357c7d41f5d2cfc9289242e8b5418eff73fdfc38359fec57ddf0d71fc228b6508b7138a229560ae8b22e09a8f0599", @generic="32c680002a14a6a4f21f7d0260130eb2d5b4217637c42a0fc91a21dfbea652895a93482b9fdd42ff6261ca3bc1f0457eef5da6fdebba1e5270801a72f77baa2a2279bbad832ee3a03bfdcfac725f669f96583ef74cc305ffc96f6f8dfe4152d119fa67d99dad25900f8f3393c3614512281cd97ac4f62f6eab3ceaca489fae868391c06c220634aa7215302b2d93a5240e27e5c538b1cb365619adf89c0992da88a640b390af3f6ed9affecdff05edd0a5062ea20866fd5532bb3fee2a03238ed22d1f83d0e9256f101a4db105c27b3550daf2d062a3d970c5b536808936d136dbc8227fe3de6886792a6674b53fbff7c5722091de", @generic="82007873c207e41f12ee198ad1973132bf76b66f938ae528d6c278436d061ffb9c67bb1405316ae598688f44da58910df05f4e5cdfb67287a7df28ccdf4d6ac0e026fd73f8559b74216f9b294254a0b43c72831d19fb5afabf016b106a48f19e76af2f31400a1a4773adf80b0adf3b1f089b01e782181d3ca5149cc8b763ad7f757b586406f6e98206480307a0a114b94fd91ce93358d94546995a175c3af5ff93cac52be0d89706bec3ee8975eff74d11643cbd13668b970491ff03c407b34e2dfcb66d01babebde7aa0e13c3ac689df333d8baba3cfc35fc1a4db6e4d9f1518a8eb6970b16ff7d", @typed={0x8f, 0x2b, 0x0, 0x0, @binary="2e4d778e9ee82cac342c85c7b2b9db90dfe6d53f9287ea549b56d25186194d2e76bde0188d0f9e4e5f30946ff9597a01763ec2ebbace8b97d94b629c3df811dd546adcd88831bab7c5bb416de1b63c7bb4674cd7f5514b2a3926915c2c7731dc4989d9010cafff4405fbd7ce76814fcc771d1e5ff18dc13f01962511ece3bdf4b290454fbcf0fb94232fd0"}]}, @typed={0x8, 0x24, 0x0, 0x0, @u32=0x1cf}, @typed={0x8, 0x61, 0x0, 0x0, @ipv4=@local}, @typed={0xc, 0x95, 0x0, 0x0, @u64=0x4}, @generic="378b47772d5ffcba3b4d7beec1bd80f23bfe6538a4926c6a9db0ea97c3dd608f79ce47cce6dac024d309f31a13daddfe215a68c37fc7bc876fbc18846366bab9e42bb03a0da4907ec9c8ad7c39900e84ca560969268e6d5fc4dbc5358c68d95ddfebc310388e19f7a4bdcfa6b9d48c1da0c103a6603dbd", @typed={0x8, 0x79, 0x0, 0x0, @u32=0x3}]}, 0x1664}, {&(0x7f0000003f40)={0x18, 0x33, 0x13e, 0x70bd27, 0x25dfdbfb, "", [@typed={0x8, 0x18, 0x0, 0x0, @ipv4=@remote}]}, 0x18}, {&(0x7f00000053c0)={0x2e0, 0x32, 0x100, 0x70bd25, 0x25dfdbfe, "", [@typed={0x7, 0x3f, 0x0, 0x0, @str='*-\x00'}, @generic="43627330f6bd87650fbfd942fd2a12b12537de52e02d94b841a58eeada5708c41a889af75dbe6875531ca1ddb92f3522015d6a0d3f35c59570b8cad22fddc7c5741ead69ecf6c6327933ad091821d4e4aab118172e2be69abcc2b6f8d0931af4b8bffb8e9ecdcb9731e2a16eb88e7024cb8f1362891e475f99a981f7e39c2cbb50256d99ecad47d7dc", @nested={0x88, 0x72, 0x0, 0x1, [@generic="982b5fbe91ffbbccc43a944a81d2b46d8edb95d66d3f973b112e09bc704c63cfebc188c5a83a93b90f60c18e68309692ddee6730241ecebe6dfd4963468c627b366d44fdf662d1145f2886e50ad93c1f67a0e3e5904ae1ef0c1d46196b69177e5a19f0d3326b52a7", @typed={0xc, 0x34, 0x0, 0x0, @u64=0x855}, @typed={0x8, 0x39, 0x0, 0x0, @uid}, @typed={0x8, 0x7f, 0x0, 0x0, @ipv4=@multicast1}]}, @generic="d420d97df549f59472cbf96cdb1c646c4b4cf54f1be1e492aa8076cc898368a2e6d338092b10fc306c0b5eff1a2486e2157aa56371e134ef16f58ace676fa781b80e9008cafc698733da222b200f6353f0c3199815a665905bb8087036af6a394776ebcea1409f3c005f02fa30cf8e6f7122510f8a6fcc0d605d43035df8fe0c457b12a6ebdfd66625a871f2e5", @generic="cca949a07488b97221d307047e5e0ee96b1ffb8e2933cb7e0b7c402d641d2496d743e9e8443b176d7b92c864752217dcea67c67e84939fafdbcd42c6e0c35fc5f921498297df012617122fa8c9c9bf650196708afa4bd19b3fd8a8260bb758eedac9387881a84dc89cd5056e5d7bd09b66144e4a80893c52ee1357fc0f3a3ce8f25da734f3f6a63eeb6b8517f5ecd6a7a22a00a5be0ca27adc2556000fecf69899a35b9d19eae93e2d961d0f255202d8c3430e5ea5176f1eca6dfe4fe8f0099ede7676055ce69e4740630f452c7e7a70922689af08ce7038c0", @nested={0x50, 0xd, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @uid=r7}, @generic="f7e331b52712e548d6856ac6fc9cebc42bdbc109d6ff362d272fb1baaa0e2bd272bb3677d3be10f95f5243effda0af181a90093c220b6c971ad425470d356fe47a6128c5"]}]}, 0x2e0}, {&(0x7f00000056c0)={0x2620, 0x10, 0x4, 0x70bd2c, 0x25dfdbfc, "", [@nested={0x11fa, 0x2, 0x0, 0x1, [@generic="9d0558c9cfba95077d0062193784c02d5754d2376d9e1f5601e966a3adf89dc9f5d649f27edebfb7f46c4f", @generic, @generic="eb6191ebc5bd8775a491ed611ab8360509514df742a85e47682d44065ab4b3214e0c2bc5fd1f43007accff3c3cba69c2dfa6639eab9b3b1b10a74155b41f41df39a622c885cc7c83064e9faf65685e2f3671bfdd131ec1e608130b236ecefc9021c5c5e09aaf80122c174651584175b8840ae4551c007d6de87cc12b508332fcbc81dc06f3d9fa5a1f97e444938e3d7b521d1fe3ca713f7e27d47a97250c496a8728902ef1170f3052718751f5f3f029d00d9013a356c8847cc87a7b45f9a1d23935c83f4bdd8d8de45968845f5fe1", @generic="5211765838ab8dda27d6ed3afb51a8bdb0b8aa83cd80ffa9b0e2d359c69bb5d0a2d3d4b26da18272a2f69c0bf5c5041186db703b66ebe762f590667c9851c5d738388df0be2d34b033673d400f3715f548e691e603fc6152178334f1d2c247a10e0488402ea2a6923c1e07a9b8b8abcfb0027d22114178f7468895182f860cb820935aab552c8cd5bed86f9ee82b148bce9303515bdf2fde01b578", @generic="3503ac6a7e37b86cde793d0b304bb8ac74a1fe71002e472745b6fd064a049cc9bb3116e56adecaa3943da1959b528e00d0f7e9c7bae2d812ea0d42e991bbfd40a1f8511d5df4bab8aa96696a83ab1a030f18e4157d6953657041f3553c4fd0a109665cf7f005879cb9b6cc23bad6339f344efaa4556556d95aa6f4b7df2a5d06bd40d784ddf29102efe324110a98b4b114ec8991d6daaaa27b4dddcf54a865662e7d63411e7b88e15245ab4341e2076ae4714cfb00ae844c836f5f95bb68dd148fdec5027b9863045e7a899c44614827957e0ead23df411708494034bcd09e8f029d4e8ec134167e91ca72579bcfe71ae89da3e651e220f9bd7a36d890a6a3f17c6283113c6199c30d73e45c692bb251f061c8a98ac2383339deb57ac5990e9753d83faa0c3c4a58ce860cb2258ce4d66fddf99bb1e762d0f134ec07fdf981c4718fd4fce67cc9e026f531b0b88e4c1e0566d8ecccde07e7d0f0e8c1abf8639e0df36d0016fbd63be1316c44d96f4b8c22e66d4fd0eb60a6339dfb5fb1f85286bd5431c41694e47daed53e19c32994e42f4e6ec99ced22e37476351a05fac185bfa5002de79f5f266af5c823c9f67b9f9bf6bcaf1fac096d3bbbca0ba222065b053783c354395a1126aa454cd0b6ba85d13f967085481863ad0f5c5df50afdfef73752e25f9180c38aab3fdd40b196a3a18879bec92820fde1865ad9d43420acf220d631d70f0f54aaf1e173189fddb8e7c54814f73f5efa1524f7194d3beef9f2ff6551eab864dec675fcbc237e52b96703dabccc1e7dc24f140fa2ca5412f08e8f7154470713eea6b00c5ca5e62595504023d74e415bf8bf27aaa940ba738222b2d15724854ae5600dfb180d64a4d8400c656e2f5d221cf2df38b748763806be39cbd82e9a8ef4e4d53296b23ff8227da61ceca6eea6ce8bf0bfd0d5c16935dc816bcbbe56a6cd79dde1b8c520fdd09da3bb7e963a04cf685d4b057299978506f8eeadb4a748c32407de84e1d6c23baaffdcd829aa13b5b81a6125762dbd78c5a8c47462174b0847d22167f5aabc11ea81c828bd0933fc11687a9486a618c42104ca983a520973438cca9cbbdb9e051e3f1cd7e05b5c93c409869cdcf6b36c97acc7c4ac5b44bd749fc13c7a9662837801ad89312bd06c2807aab98cc20e5456b6919cf1e39c0f8dc26cab71b26ffb8e3276c2376800d068dc899d0349d8a2f8d3515f39e704686ca48414d4f30c64e3eb5c5b1a5db984c31687c1b11bfcf7b17fb671aa7ab6f1a2fe915d432d4ca7e4b8d57dbf906b8029d1dc309033046ab151a3026870ceccc4bca0775e22e06f9cb56d38aac53d76bd619e8db029bf0bc40ba4d1796d76e601d5a12574be26ba6b7448be99154d7b601f67907d345d7f8fdcc4f26c0d28c18bf634254f0a11edc63472606285fac07f7cec2661b72f7bb7ebaeb0c71c309df2da8b448a0145b4baddb4e94444bf442e0d976dbfc237a43ca10270103b6c823d09555753967b85ac2d1d4d0cc5bef1ccd1fcb64777945abbcae30c1ab1ef5b1868e4ea6a2266afdcd0745bc412e17d95e79b40df925e611c64634dd247bdabc24a50a13ce102bf6740e7489f98e11a8d64bdd150c3ecff63493d46147f3c7ff9c0d3ab4003d464fb8c3c838f283c0605b2a15cb1561ddb36550c1c84d27f1130352d8217b5c954aad429f143c3688ef46f66e132d2a402226e0c91bef4aa9e83b97aabf25401ff182979d42f9b8969c5398cea9bacc4e4f3374c76592709325193b619d07556da25abc86be013dbb3b24ac70ae6b840ee6e320031b60852739d6034b2475f88cd1e726945ebcbec98fa3ddffede22874caca88b68908c07e34b0d92794381fde1a4197a2b1a23f0259d9e2fcc84110e412e70a17f6458cd06c4ed39f26003897fdc83f2a1164dae01c392fc6a9083e787b4a768afadce85240a6083571b7e977ca0383b44a82eda81b449e72c98f04d996c2e0493a3e35556ba4ea03767b346650010d26e72e5ec6487a479606e4e582b1a8c282e672c37cac8715d120e2051ab0dad17448484a3e7eeb9d331cbef57c127fb3463d9482cd53278833ad43f3688ed7fca27ee77796eb40b7b2bc7ee4cb27fce9b244ee58c2c685697cf17e753a89cc8b40b06c5a833032ec4464cd5df082cc9ae30dbafe0a07052c2262cc627dca3dc6aaaf6f37e10d53ceee4db066b4cd9c344e2b362b1ee6e9c6253bc04ddf2c0f467247dde086803b29e0fada1018dbd680be63843e57b1cd1c47ed696fed475a0d004055e184c82b0149aa9907e406a8b34b9bd47eaa0db4ed7876cd637a1646890adf46d13b431a1cd43195222d41ea2a84c7f15b0178b0aa03ac21376fac7897b115962d52128b605e8affc0d012fe41dec20624004cc6b8ee483d4fe35fb8fe8ed4048a9cdb164b13da56d826e1070fae98b423065323e5b1012ceafbe020f44d3fbba63b939ef49d3fec13e9ad12ac6dfa62bf7732e87b7bb2f9b52473ebb522b4c8beb92de09b2492635c38afea9e538de86d7d86831b0dcfb16298add56baf2f4443ed40fd634f4f8d1c94a4bb06e289fa19102ca50e8e039dc0583765297737e3ccb7727fa86fe0080e9d0290c6bc14b87105afcb9cc6e84047b273985d3ecfa14f797c5e3dcab3717846c0675d1860c58d2b6adb6625bfa325d9db2d3d02085aae0e5ddba4db5aaf322e44af0d12139fc505fc2c31b10c41734c6ed98cec3706f3a4eb6bad6254bd155a46a6909e06a2768990f61a965eb387bea8521853439ce630497c8d51f676a5cb2dc643f96bbc66cb32d35bbcdbb3dea22a64bb4a21865c3e4ae196bf3015f671cec07a3e7b650111d07da27b18644263faba39938c4928f7e17a8e7260a88c66dd467eab9578355b4043c1bc16a78e1d03716ed6abd816dc5923c627ccb52d8518611ba943a201a704c921109332e59b7c915d75da0180f460d457cafcf858f85511177e5590b6933cdbfca9de654298699de177286f4ba1488c1001943640ca8f0e7b6af9cdab467ea870908725ff428497120c87a8a68a8f29c9b3d61657e3661f6b6838237984e81400e09ba87e5e2d9b2144f004265531260d3c9b2c6a5f12ff97f060655eb56207b39adbb4aa6cb453a6d0e3e8273ea4a23fc52f66a78e575badb437b246e3f536e5041f69f0cc11a6d113303cf7a9e55fa78d520dd1108c54e9834b8c97d4eef4f542e0777592ea66818fc4a8b723ad30cc2d6ad94465624c88fb99b05965ceaa68c6afa08bdc2fcbd542a0101500618b679c12eece6f140320078acede7a004ed4c744a7b11da60cae4b64f9dd9536096660fcb72c82ae18ff47d88988b3ecdc501ab4b21cdce41a43dc371459e483d8008f0d3a9de282f7e17f5f85dcc2345399dfc2f6defeaffabdaaaf4daaec33e1f7c01d93ba93fd8b79abf690c8c32f8db7cd41a67e8f589f86a35c04daec048083f0f8aa3580fef447360d6119c610ddece58cd2eeddf7703e5791bfdedb139fc2670c540b7ad4017c17966113921a1ac7ff68554072bb946da61ee5c0a4cfaa023fa34188357b1ec8f4a30532e3c61700b3ded54a4ffa1941108a3f2173409c674a0ff5c1bc497b0488223b225819b7c72ad0f287fcc78aafdc988ff0a2d24bfc5f4d557bb9a263b5310f06eb57e3cd48434fe180f8c3df5d518de6fd296ba6fe14dd4b298fee104b29b0760bae12e8748ed54f2b273ce7bc8b90f1717a2e6b5eb0b34118fa1352b5d9447c6f9a28458417268b479163e1ce8d57766235f60a7b5694f08bf75fbb93f14ca0e4afb564f28b03033f27254af143bd779529a78748a4b5aaaec3a0700dec34129817c7f13a62563b429f1ee06b6f954912524230df712bcdad6dec72eb38254cf65d739430598cfb968001e61df3c03cfb92cbd3ceae15c038a682270c95c9986aa8c8d09aadd811afb5c09c53b8f8c95a7419d353abd049346d4f9209b185e8e4937af427430eaa52760ff04bf8705979d6fa498cf6918880ef48653ed79eef73f5d9b7501bb93e118d607376f56df6b0c0b78b5aaa4120f20d5dbd52a8de15bbec2e50f9de8c42ee13e66fa00fc26799b8eeef05df5829a48d63c5e3563bfa5730148731fe614f1d48b5e8a555f9698cd1259fe1a6f5e4ea6ba483e9595c35f06274cac1c00e460e21f3fdf708eb2a462aa92bc5ff323f95dd401492c9cd362b71f5f7920d56d27782ede44c44f08df71befd880379ce42dc597005fcaf5721b56b5dc009277facc4d689a1d8a75c0293a3f6b544ded479f840b7b82049488f02b2073a10054844f914618ca58aa94847f394cc183481d92aeaa07c2512a028f6b41f6c8d07ebf172bed7de9ab6154b3f8233d5b33971a1526877c07d26993fb93e1c248f54bd1fb3c83a60b5dbd5f94339febf6f36d41638c9c297829faa0ea86e7c84f397f9b70fc169eddecd7ff890c8895aaf9d45e0f278efaf7d23af4bfb370b609e6d1e0166c0803928bd63c9d398c10e67f43dcf8cfac7b29a45ce4b1609e6dd3318886edbe3b01e56740496f5c1972efaf0b27d5ec423f17a77ef6d859031daa9b4e6d56c2b4fca023cb4eb059ed44a8454e7fcc9ae593cd90b150281f6173efa6c2e48581a7558da73157a801513132a582f3e21c090c9b6a3b5a7fee9f31f667512c6eb4df0ccf4f8c29a2a7a2792856ab0357e01153f4fe6b32bc4c6063bf17be8abcb18f1577679a4c64d19c1177e49e2c2cf39ec8b61ee867a2378c6386e83f2d9a271c957fc81f5536b767b0705eb584888d53804bd4e627f85d142a89df150d072418efd260e34514f45a3b641f72b3f8c08e204053d5cc8303f0afd8a9a426d41f17dae3783bb4cbba0cfdbcab6f52df6ed146eb216b4a2266e0ec2cafad655a5933137087ab0da568fbf91814628a843b6b9daab37d0c358dad03417be1e93bcc5bf24eea1f18bfc74818fcf2c4e2eaba98a842dc1e228ed4d12f4309846bb882739ae9c6fa3e215dbf531ae59bbd402a1580bed9dd21ca2cdc22f130fb9125e609f00586848185190a65213896e6f9bed971d69c75a7aba89f44768f39228635d45da8f58c625e9c14f0ab4c0bdc5043b1ded06ce9a5932aadaca3ffef5a79859dac532bdf01a1e1a2e0a1742fceb1a5a2aeaa04511f80573b08b0c4d2f525cea61de8f6797a9731a9d5bdc1ecb7aba13beb410c7372b056fb130bd2de89dfd64e77cbb1b889c4b6415be37fb3c95d6b9b2fbd4d0c2748bd7c45e3087d6a8f5314dc9498810f8dc252e7df89e110e1e682ab4d6b3895849d313b2297afe376aaca398a82a30608be13580d15c9f100cab753c489dedecc208d51ffdee2db5ee2be2b242918ab5c1ae5b79e96e68d2b64fdad3f46abbbaecfcb8284936c796b8b3bfaf7ff233c8dd39fbbc20c68c17d782521a7748d6cea8836a4f06f95eda9bebb799591db360198fd4789c4fef5bd7bd991ee6a55b471c00004976e20816e07a94f7611c491b6f45be04236f3c176728239068e864ef03113a94802909e8390a261ee263df3b732d0536f6bc83ae53722ab1c542925b7079558fd7c5ca9692ac6b342db48d8545c7872f7aa0efb8d6eaef486a4195ac15119c83412ad5de06a010af7cc9242deb06dec94989cf5f7e2e350b18ab0895c91fcdcb6e496f8450ad6651c30b04d99eec8954a954ba8a404cb1a9d504f3609f96dfbf1b14cae1028959acbf03eaa88c91e39fd6f21b23a3029995c9f734b124cf712674bfc30e66e886e34ea5451249ab8d3a6f71df0b4d71", @typed={0x9, 0x3a, 0x0, 0x0, @str='{##\\\x00'}, @generic="2709842570e55b3c46a0ad2b830411e30b7883106b368e898870231132afa231b70bb8398582953439ebe83175d113dc829b7806297bf9b100b67fa9634d1dee99a4d6d0278fe63ddd9ac467746d2988e5e70b994c"]}, @nested={0x207, 0x49, 0x0, 0x1, [@generic="7203c80ebf302092c72d70478812b1af21065b5bb4c6431cb4c63e16f038308ab1f48ec22aa19b92eb1779db2c49e00cc572af557bb0677aaaea39c32a980e617618fb360a494f1d478292f1b8ee27c86cc45ea13fc4b45416bb57aaa09ab5852d7d8278757f50f01426ad9b1154f1cce31dd9ef10d6534c6ac585cee276919c5d96d7fe8ee55c5eb6b46da94ab7f10a359517af416ed82f40", @typed={0x8, 0x1a, 0x0, 0x0, @u32=0x7fffffff}, @typed={0x8, 0x30, 0x0, 0x0, @ipv4=@multicast1}, @typed={0xc, 0x2c, 0x0, 0x0, @u64=0x7ff}, @typed={0x1b, 0x50, 0x0, 0x0, @binary="25e3ee95989ff4591eca21a1c3cf7fa939eaf96a477bc9"}, @generic="999df62998e011bd19e4bda4a5b7325e66d3857c1d09faed58ab6b4866a8fb8e4ce37e05ee24b5366a87aeb03541180a6a4a5fc500d89ddecf264ffa5f4f6d14d4c93557a6d288a89a272f9e7391d208040bc5f505f6516fb4d056d603438f2ba6807cd1d07f98e7714ac8a2de7033ad5a0ab651613896409136b040ab6402f7a2b0637c5e193a9df50d193f8afce58f256fb92fa41ebbb3340a1f90dce35f689bb09c7b6eb1070a6ff7e99668", @generic="89784fd84d984a5539fc52f04cfe93f3c852e127bdb6200244cdae19cffca1a9ab9816d6bf2f192d37881caa4e403304e55b8d20fa15a9edc575", @generic="e3cf542a55a0c594f669d4f2e8d1f0c50bde0a97a1c2d34d2475bf6f854d5b0074c5bdf3394b22ad9df1f4c99167ce10db46bce6d6f696aeccab2ca46364a4cee83d30c738ccb07ac03892"]}, @nested={0x10e3, 0x5c, 0x0, 0x1, [@typed={0x8, 0x15, 0x0, 0x0, @fd}, @generic="14fc118e8233c8eb2d9c5d70802985791046e7fb83a206707647583966b09c6398ac082efa5c795100768e090ed0fa6e16fed456816fe1cb5d5990b9cc51fe0e4930b3782256f94c4f6e95e5a11f20aa4e09f5775ea22ef253fb5a9fa5f9eb98b5339afc28e6105fd55e3ddcc93d042c6354a2ffda970775797c156b3ed23217d1dcce9d55229fe6b31a7a99bc6e69232af49ffc19feae46abd60a027440ea7fb0ca17960f2d08eb8179e7046cc378f5d565842459db23c3b4ea875f2c7bd91d5e4c1fcb85bab433b2ebab", @typed={0x8, 0x2a, 0x0, 0x0, @uid=0xee01}, @typed={0x4, 0x5c}, @generic="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"]}, @generic="91b710ded03ad75acce751af399f42eaf0637a4af31ea2a944d32053a90f5b17a148816cad2769b1701a97f97550043ee8caa4ab8d82903ec0dd1b548d9af89f60fb07cd8551bdd0a4b5bcfae258bd9b9ba1d83ebb8fdaf43fe75e5ec39371a8a6a5d228ababd358816de5", @generic="4ed02145f8dae9c5894e058367391c353e27e08f0a824a9874dc9a28c47175fd858fda746ba614cc6cdc14d0080a199cdc1ba004cdd044c03af045521506ce06ef7c18d84b21bb7a53531ca1f478b5950af51cc7915c1a7f968cdf1cff74793383fbae97c4eecc041e3fa6b9ceff00160e7e9a8f058785015187b457942b3202f0ae9b5fa5e0f9bea090efa1bea834e38670bbee07211abc2d3d832cac9f5d248a8df81a5c72fe771c416e100ebc081115587a781cbb7701e585d8"]}, 0x2620}, {&(0x7f0000007d00)={0x2e0, 0x23, 0x228, 0x70bd25, 0x25dfdbfb, "", [@typed={0x8, 0x92, 0x0, 0x0, @ipv4=@empty}, @nested={0x221, 0x84, 0x0, 0x1, [@typed={0x7c, 0x22, 0x0, 0x0, @binary="eb8b2d01a176b3e51b6644bffb583edb75f1e395636d53c794fc5c4beb3e21992950287484dd554f0b4090d59d678f5abaa5ce88e1609347d523e5588b5ea3dfd8e633aadc0098ffe5d67884332190de526a6b33e0297c3c200d82619ae290896d5911daea4247497faed31764b30dd2c5dd1c6028c934a5"}, @typed={0x4, 0x2d}, @typed={0x9a, 0x0, 0x0, 0x0, @binary="f25a1ba35cf9d373c3e41fd5dfe42a5c6b2b6c9fca7610e13c60bc105ce1daa44a58e2ef7369f8082dda4ae93af0222a78c4c51d0700a09025f0489d8c4beb76574271b5ad7490f67cf2e71e1f68ae61156ea5f40ea72fe894b7d366776ec29608230a71db51a4b124ff38cb949c50570bc7a2b99ae4263a51a99719340c9aafc9df655535fe3d354c5c7dc33f958f23e5fe91887218"}, @generic="2558f5f9d69a25f4c0fd8bb8f5252bf55b7e0c44703b8786bd82441c1ed04b867db85b5587d3f18053bcc981ee7061009862461da5b3cb41a375bb7ecf21b86afd64942482b623e4a872458c62399cac3949c274f53510b9d3e4da1d3904685992763c517edc51aa8232ef509ee8ef1ce20fa0d21145ad374451718809cdd93b9c704045db01b84bbccaea8915bf5b6aa820cfa7a8699788a84268f81e3b58e4784077a72cca4b7a749b2bd393169fe3fc312ce435f7d261576b1cc5da0263a30d2689c81d43ac2821bb478c0d1f44cc80d3e1c10d24647882e90eadc23957b243b158c758f14d7bdea87226dd95187d4c580276289617e782", @typed={0x8, 0x72, 0x0, 0x0, @fd}]}, @nested={0x4, 0x2}, @typed={0x8, 0x42, 0x0, 0x0, @fd}, @generic="bcd7b47f5ad2096cef57c512b821c0cae552e42ec5b4706d48c79eee61f9a0694b099371e8717ad2c263747d0fac1bbcf3427bc12a23073c0a349f2c7039c018dc4f8c3c523cea7ec22722066511e07c3b5a8816efca4f4d65bbb9a6eb5419923b334c765b828c2580661ed32e9d97e7843886094999db4e6b7358acde9145d8ca025085fe190891fa6863f63324469820626314c71e"]}, 0x2e0}, {&(0x7f0000008000)={0xf0, 0x11, 0x800, 0x70bd26, 0x25dfdbff, "", [@generic="2c19ef14d7e27af13b880d2292a266dbd08b1e0e547b7f3898172532a4c938cf59b8994cc55c1333ba7c16f6f92c0cf5efa9fa62290cec37635514c16d8ea0812e64b2ed69788ee9a6473e9ceaea4b1777f8df9e9d2f8188173b33b0f0e34e2f24b16ec224560248047e3d8e25e87351abb202f6bae04fc7", @generic="627062896abe0ba0c68261ff3505d147b24ec188059a5e8fc3c7b6e4488e0a0c9e5a07e892da10dbff15e4eb885482427cd3bcce33957d1a8f08307524bb76d2fd3897e09bdd39af0928d9636091d63394bd82497e3eceec083e5833ca1796ae31", @typed={0x4, 0x1b}]}, 0xf0}], 0x8, 0x0, 0x0, 0x4000004}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000081c0), &(0x7f0000008200)=0xc) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000008240)) io_destroy(0x0) r8 = openat$random(0xffffffffffffff9c, &(0x7f0000008280), 0x8002, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r8, 0x80189439, &(0x7f00000082c0)) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) ioctl$RNDADDTOENTCNT(r8, 0x40045201, &(0x7f0000008300)=0xffffff92) recvmsg$unix(r6, &(0x7f000000a800)={0x0, 0x0, &(0x7f000000a700)=[{&(0x7f0000008340)=""/60, 0x3c}, {&(0x7f0000008380)=""/4096, 0x1000}, {&(0x7f0000009380)=""/156, 0x9c}, {&(0x7f0000009440)=""/112, 0x70}, {&(0x7f00000094c0)=""/91, 0x5b}, {&(0x7f0000009540)=""/4096, 0x1000}, {&(0x7f000000a540)=""/172, 0xac}, {&(0x7f000000a600)=""/253, 0xfd}], 0x8, &(0x7f000000a780)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}, 0x2) r12 = syz_open_dev$vcsa(&(0x7f000000a840), 0x96, 0x101080) recvmmsg$unix(r12, &(0x7f000000aa40)=[{{&(0x7f000000a880), 0x6e, &(0x7f000000aa00)=[{&(0x7f000000a900)=""/45, 0x2d}, {&(0x7f000000a940)=""/127, 0x7f}, {&(0x7f000000a9c0)=""/29, 0x1d}], 0x3}}], 0x1, 0x100, 0x0) connect$packet(r3, &(0x7f000000aa80)={0x11, 0x15, 0x0, 0x1, 0x6, 0x6, @broadcast}, 0x14) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f000000ab80)={&(0x7f000000aac0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f000000ab40)={&(0x7f000000ab00)={0x34, 0x0, 0xc00, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_I_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x800c848}, 0x4409d) splice(r5, &(0x7f000000abc0)=0x9, r9, &(0x7f000000ac00)=0x5, 0x9, 0x6) ioctl$BTRFS_IOC_SYNC(r10, 0x9408, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r11, 0xc0189377, &(0x7f000000ac40)={{0x1, 0x1, 0x18, r8, {0x7ff, 0x1000}}, './file0\x00'}) 12:24:45 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fchmod(0xffffffffffffffff, 0x10) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x6, 0x1) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x6800) r2 = syz_open_dev$vcsa(&(0x7f0000000080), 0x2, 0x100) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff}}, './file0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'wg0\x00'}) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000180)={0x318, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0xc8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "308e996d5cb9a4e804e2a128f71b9ae61269b02c6559ce8b087d"}}, @TIPC_NLA_NODE_ID={0x25, 0x3, "2d622f19b90a3b57704de8633efac96eeaa2b1a926390ff4c1661e5c379501bf1b"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "2d2b14de1f645c8d8c96065d7231a01af4e4f7353b479aa0d56d2ce5"}}]}, @TIPC_NLA_LINK={0x12c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x98}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x56}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbdb}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe94}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7c3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa1e}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x47e}]}]}, 0x318}, 0x1, 0x0, 0x0, 0x50}, 0x10) statx(0xffffffffffffffff, &(0x7f0000000840)='./file0\x00', 0x4f470ed6d5ca6f59, 0x200, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$nfs4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x4, &(0x7f00000007c0)=[{&(0x7f00000005c0)="7d51f7de3964e62b3882397670bb3430318d4295eacb0be84f9f809c393e578e95e42dd74f403dde8fc3ed720877af62e22b7dec3515823a9d7f9b8db577886b43290a07c4f700b80587f13d3cbb57b41c1000ea14a60faaf54d24acd23bd399f8dc8dafac3982c828acbed3defe6f72ac750d8e2f37bf1b01c1fd12", 0x7c, 0x6}, {&(0x7f0000000640)="ae3e7ab1f6db00da5d07adb48d0f61cd2d7ecba81e4f4e034453391fcb9d4469640b793d3edc09a10ac8fbd80695fdc1afc5716865670197c817ce779d1845ab13d405", 0x43, 0x4}, {&(0x7f00000006c0)="7beef4107381428bf12ba401d55174ee5fa54a1d00af48c8a0c6d835a883ba611b0064e00077e2e00eed308c9ede8e892f", 0x31, 0x5}, {&(0x7f0000000700)="26d06060b307b8d70fc159f3d57468920933233f984582d6e9b899fe56269de2329c49dbb2fadae346d917ea5a761d26fca3944fd807fb789e07343fcceb782b64acd36629f3ac9d74076ff3ed013f4cb4fb525f8adfdb9fb360035beb5592b889eb5791915db391fee5a635ae660a6e3e81721e0062e3aa3fa585205a1a3eded1d659fe9d20672fc52d780d5a0547305f485fb41551784cebde1fee0df9107baa42", 0xa2, 0x6}], 0x1100052, &(0x7f0000000980)={[{'syz1\x00'}, {'syz1\x00'}, {'@'}, {'+^'}, {'wg0\x00'}], [{@fsmagic={'fsmagic', 0x3d, 0x81}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x33, 0x62, 0x34, 0x61, 0x66, 0x32, 0x66], 0x2d, [0x61, 0x61, 0x0, 0x30], 0x2d, [0x65, 0x37, 0x32, 0x39], 0x2d, [0x35, 0x65, 0x33, 0x64], 0x2d, [0x35, 0x32, 0x35, 0x61, 0x33, 0x30, 0x32, 0x30]}}}, {@subj_user={'subj_user', 0x3d, '@[^'}}]}) readv(r4, &(0x7f0000000c40)=[{&(0x7f0000000a40)=""/162, 0xa2}, {&(0x7f0000000b00)=""/158, 0x9e}, {&(0x7f0000000bc0)=""/83, 0x53}], 0x3) r6 = syz_io_uring_setup(0x5ab7, &(0x7f0000000c80)={0x0, 0xa9d, 0x2, 0x0, 0x38e, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000d00), &(0x7f0000000d40)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) syz_mount_image$nfs4(&(0x7f0000000d80), &(0x7f0000000dc0)='./file0\x00', 0xfff00, 0x2, &(0x7f0000000fc0)=[{&(0x7f0000000e00)="242cf884287d89868060e761cb3148480cf79ef6e1f0db832394ef89aaa2ac0d3db2326f6e9853cf27a1495b736cd25e252296e796070289aadaa8f6070cdff40d97ae0da41372d3f68bce11987ba5b5876850b12cee499f024feb4097802b7a42ca78b0174f1e0afc7b2aabf7a2e6992a989c099c86b3ac639fa437e16369fdf7f7b114fbe45b34525e44d8561fcc1a1bd6394f6de2e8b83c6372fa0d4dedf1ec12ddcb0077d60181adb1ee406ce93e08eb08628ee2549c1772b3ff35729dcc46c94ae527245da358af7e3a8376d7c681", 0xd1, 0x1}, {&(0x7f0000000f00)="97a2e1e6c81f8e2496bd0ad795ba75c43b6306783727a40770eef0f5b4138017ffb56bd1a0379879a54f2cdc1ce7720a6cd0bce7961c4a7118d6a4178a8297fc0b29d582180ee49dff8c6dbe952c2b3426fda3ac2cfe583a14dff3a34351767a584ab0a7a4c35f0514ac247d32d29655164fc0fed3033fdd321c355d6754eeaf38b00add434a1a5d7ea24946add2144ebbb1e203b315b2d9327b0625c7fae2ef892e7cbdfff0619b908bc77a1db94ff9", 0xb0, 0x2}], 0x1048, &(0x7f0000001000)={[{'@'}, {}, {'fsmagic'}, {'@'}, {'+^'}, {'].[&]\b^'}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@audit}]}) socketpair(0x1a, 0x80000, 0x3, &(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFADDR(r7, 0x8915, &(0x7f00000010c0)={'geneve1\x00'}) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000001100), &(0x7f0000001140)=0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000001180)={{0x7, 0x5f}, {0x5, 0x4}, 0x80, 0x3, 0x3e}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), r3) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x35b6e50db10902e1}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x28, r8, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4761, 0x4a}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20004004}, 0x40) [ 81.780359] audit: type=1400 audit(1752755085.431:7): avc: denied { execmem } for pid=270 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 12:24:45 executing program 4: mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x840010, &(0x7f00000000c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@rq={'rq', 0x3d, 0x8}}, {@timeout={'timeout', 0x3d, 0xffffffff}}, {@rq={'rq', 0x3d, 0x6}}, {@sq={'sq', 0x3d, 0x3f}}, {@rq={'rq', 0x3d, 0x5b4a}}], [{@seclabel}]}}) mknod(&(0x7f0000000180)='./file0/file0\x00', 0x400, 0x2000000) r0 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/file0/file0\x00'}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='schedstat\x00') ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_mount_image$msdos(&(0x7f0000000280), &(0x7f00000002c0)='./file0/file0\x00', 0x1, 0x4, &(0x7f0000000580)=[{&(0x7f0000000300)="a6da6b897ef2ac38fba3adf0d6bf2f56a9260b", 0x13, 0x4}, {&(0x7f0000000340)="63f5e6c5cf8fcff1db9f91c28f7450c0d55809bd0094313e62087903ed6ab90dbcf33d2be5e42635cfbc01a84e27c5894ea30d0a3b4b6cdbc109124bbf7720e3a43abb4eccdd538192872bb4ee40", 0x4e, 0xfffffffffffffff7}, {&(0x7f00000003c0)="a0172a12cb70fd253306e01490defd09897753fd1787e1d0fb6e1dc6400fa5624c6a6f55e6170dbc9ace9892835012df1123073e078e60bd57e01d45c384e77b49efb77a7bbcfd90385959fd103aab5dc41320b97c52e11a8a2a953a5e2acd227731bc685dd513c7d8b43166c8f4310042626dafd18b86a73fceb8bb427e56eb5e9b8c6667f08ba95cd26625764383ea049c253b92070197dbea47498f1bd0c2234e9abcc59be5971f31858a5f879bd03731a02e81b1decfec568104731de5ee68c3ef4fda122952f5d0b3cd22bc22d3cea6a758529c40996d0a41cc9283b0fbdc9532fbc24fe3be5e9babb22ab9adaa7ce47b2023", 0xf5, 0x1}, {&(0x7f00000004c0)="b1575e490a6f412c5d8564903a5ca7cf08ac1b0a918d7b15574c27b949f3316fc7f675f88ce52a54a8d2a8f99520a62285b400eae49236e30f2fdd2b3c5e9303770b378526f55dd63f6939f2364399ec2fe90255f46b0315bf1127201d59d673de0a44fb564e1fdb7c9e02d5de2809f8af66b689aa8d4b92dced6d1601f463ac66b0842366941359ae5317e45fb22ad6c436f3708a46856572204881e9a5e094921d1fd90d9555f896", 0xa9, 0x2}], 0x8, &(0x7f0000000600)={[{@nodots}, {@nodots}, {@dots}, {@fat=@flush}, {@fat=@debug}], [{@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'seclabel'}}, {@dont_measure}]}) execve(&(0x7f0000000680)='./file0/file0\x00', &(0x7f0000000780)=[&(0x7f00000006c0)='\x00', &(0x7f0000000700)='timeout', &(0x7f0000000740)='seclabel'], &(0x7f0000000840)=[&(0x7f00000007c0)='euid', &(0x7f0000000800)='seclabel']) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sysvipc/sem\x00', 0x0, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000940), 0x380, 0x0) lstat(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000880)='./file0/file0\x00', &(0x7f00000008c0), 0x23411, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_u}, {@loose}, {@cache_fscache}, {@debug={'debug', 0x3d, 0x9}}, {@dfltgid={'dfltgid', 0x3d, r6}}, {@cache_mmap}, {@debug={'debug', 0x3d, 0x7f}}, {@cache_none}], [{@fsmagic={'fsmagic', 0x3d, 0x1}}, {@context={'context', 0x3d, 'root'}}]}}) clock_gettime(0x0, &(0x7f0000000b80)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000bc0)={0x0, 0x0}) utimes(&(0x7f0000000b40)='./file0/file0\x00', &(0x7f0000000c00)={{r7, r8/1000+10000}, {r9, r10/1000+60000}}) symlinkat(&(0x7f0000000c40)='./file0\x00', r1, &(0x7f0000000c80)='./file0/file0/file0\x00') r11 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000cc0), 0x482400) ioctl$BTRFS_IOC_SEND(r11, 0x40489426, &(0x7f0000000d40)={{r2}, 0x6, &(0x7f0000000d00)=[0x4, 0x6d, 0x6, 0x200000000000000, 0x10001, 0x1000000000], 0x8, 0x1, [0xf3e3, 0x2, 0x0, 0x3]}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000dc0)={{0x1, 0x1, 0x18, r3, @out_args}, './file0/file0/file0\x00'}) ioctl$SG_GET_RESERVED_SIZE(r12, 0x2272, &(0x7f0000000e00)) 12:24:45 executing program 5: ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) ioctl$TIOCSIG(r0, 0x40045436, 0x2c) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000ec0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000100)={0xd64, r1, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x3ad}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0x99c, 0x8, 0x0, 0x1, [{0x28c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x62e}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x35a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}}, @WGPEER_A_ALLOWEDIPS={0x258, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0x6}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x25}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}]}]}, {0x688, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2a8e87b97d87a3dc8af6a89dfab5fbb275afc5f7c56aa7d1f88ee7f3165d529b"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e167e9b1deae5b5a6aa1676418a9c4297095c6bb663c974a00f1394d9324e872"}, @WGPEER_A_ALLOWEDIPS={0x5c, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ALLOWEDIPS={0x424, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x24}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x154, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x42}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x9}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_ALLOWEDIPS={0x190, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x38}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}]}]}, {0x34, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1000}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x20, @mcast2, 0x6f}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x44, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @broadcast}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6317b628fb21037232c4b56648b5d89e2d82b9912629c5a8b42aacde9911bf8b"}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_PEERS={0x380, 0x8, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f6914bfd788d1e121c7540d1945662a0f002faa605d854a40555fd40dc9202d7"}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e5fef8a6661af04bc7aed2194ca3aa9dcdefc5d0823eef994b3f6e389d776fae"}]}, {0xc4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfff}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x0, @local, 0x9}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fea8384121ca0bf0e11ff36d6e37b7cbd5956e53fe0377558eb9611a890b7c2a"}]}, {0x11c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x74, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0xffffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @local}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @local}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "50eac9452be077c25d95c3e21f2c2598e5c610182cbb6cfc119c9ffdabf04fb1"}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x7fffffff, @private2}}]}, {0x58, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0xd7f, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1bb}}]}, {0xe4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2b}}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @empty}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b051bf3959331e139cf4687defc9374b77061222c6ec29330023f5232d39c264"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3f88318dbfeb450810a7af698fc37c738da0f915e281339c6749565512b69b31"}]}]}]}, 0xd64}, 0x1, 0x0, 0x0, 0x864}, 0x4008040) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000f00)) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000f40)={0x81, 0x5, 0x400, 0x3, 0x3, "34da6b36cd08e359308ad2512ebb81e03c0816", 0x6, 0x8}) r3 = syz_open_pts(r2, 0x101400) ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f0000000f80)="86409a5d4120f0a261d92f65de8d65850c8493cdfc8d27712871fb79ec9bf5c78c10ac40ec6863627df70c1f17c892d1fcd1dc04889098b95773e009c21beab770914a6e2c75db635ecf3d31669aaafb1e7b7f08aab3a380d506ca115d0fbf047607abb670a5bd9109f68d8b8792ad8e8bc35ed13c358ddd660101b272f32d806b71596c3db53e32a1bdd5cbe4da330a27f5ba537b408e6104c31aa53858b525104df19cae9211639c920644b2057f8dc5df26a745d50e247575b3bcd060986d0b4382cad42b820524eec0a4e82e6ae40a7dd59e09552b14d5a283d33a503207ce81b8ac3fa1") truncate(&(0x7f0000001080)='./file0\x00', 0x3dbcb012) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r3, 0x8008f512, &(0x7f00000010c0)) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) accept$packet(r0, &(0x7f0000001140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001180)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001240)={'ip6gre0\x00', &(0x7f00000011c0)={'syztnl2\x00', 0x0, 0x4, 0x1, 0x72, 0x9, 0x48, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x10, 0xa1b, 0x87}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000001300)={'ip6gre0\x00', &(0x7f0000001280)={'ip6_vti0\x00', 0x0, 0x4, 0x6, 0x7f, 0x20, 0x0, @remote, @rand_addr=' \x01\x00', 0x8, 0x8000, 0x3f66, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000013c0)={'ip6gre0\x00', &(0x7f0000001340)={'syztnl0\x00', 0x0, 0x4, 0x1f, 0xd9, 0x5, 0x40, @rand_addr=' \x01\x00', @private2, 0x0, 0x8, 0x8}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001580)={'syztnl1\x00', &(0x7f00000014c0)={'ip_vti0\x00', 0x0, 0x8, 0x8018, 0x9f7, 0xa70d, {{0x1d, 0x4, 0x2, 0x33, 0x74, 0x65, 0x0, 0x0, 0x4, 0x0, @broadcast, @multicast1, {[@timestamp={0x44, 0xc, 0x3e, 0x0, 0x4, [0x8001, 0xfffffc00]}, @end, @rr={0x7, 0x13, 0x27, [@broadcast, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100]}, @lsrr={0x83, 0x13, 0x7a, [@private=0xa010100, @multicast2, @local, @multicast1]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x28, 0x66, 0x0, 0x1, [0x1f, 0x7, 0x8, 0x20, 0x8, 0x4, 0x6, 0x9, 0x8]}, @noop]}}}}}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000008700)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0xfd045dc9d370f0ca}, 0xc, &(0x7f00000086c0)={&(0x7f0000008040)={0x660, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0x140, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xdc}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x27c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x180}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x78fc}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x8001, 0x1, 0x3}, {0x2, 0x8, 0x80, 0x2}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x660}, 0x1, 0x0, 0x0, 0x10}, 0xc2) 12:24:45 executing program 6: fcntl$getown(0xffffffffffffffff, 0x9) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) readahead(r0, 0x2, 0x8) readahead(r0, 0x6c, 0x6) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x0, 0x0, 0x7f, 0x9f}, {0x1f, 0x6, 0x1a, 0x1}, {0x9, 0x3, 0x5, 0x7}]}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000140)={0x6, 0x0, &(0x7f0000000100)=[r2, 0xffffffffffffffff, r0, r3, r0, r0, 0xffffffffffffffff]}, 0x7) r4 = syz_mount_image$nfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x5be, 0x2, &(0x7f0000000340)=[{&(0x7f0000000200)="1c59bf2618dc9c20d9fd8454196abf31ab480eed4911f4585030ac01b75d9ad34b023bedd071ae99194a2fac57786605673db3fb1a741666959c5d9111b5b8c04a31165707c1467740ca49179f95750be191333a8e9f", 0x56, 0xc77}, {&(0x7f0000000280)="dcfafd2104d40e5bfcf85620af818881768f6fee5c47e761f2b962ed140d72751102a1711029fae024beb1bd1d0b1c9382455782e43d459e281de9cc78b3ce2c05ee00dfba181124e495a5c90054c392871a750ad3273212f2b9a86ec139b1838383ae1a9afe78bf551efee569b9ae80813de6f3b7ff7a28005a96a6cf0536f1aea6b368c57ebfca", 0x88, 0x7ff}], 0x100, &(0x7f0000000380)={[{}, {'.q-#}#'}, {'/dev/vcsa\x00'}, {'/dev/vcsa\x00'}, {']^^%'}], [{@pcr={'pcr', 0x3d, 0x32}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@appraise_type}, {@smackfsroot={'smackfsroot', 0x3d, '!:{$'}}]}) readahead(r4, 0x20, 0x8) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000400)={0x0, 0x3, r4, 0x8, 0x80000}) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='system.posix_acl_access\x00', &(0x7f00000004c0)={{}, {0x1, 0x4}, [{0x2, 0x2, 0xee00}], {}, [], {0x10, 0x7}, {0x20, 0x3}}, 0x2c, 0x2) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0) r5 = open_tree(r4, &(0x7f00000017c0)='.\x00', 0x1) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000001800)={@loopback, @local, 0x1, 0x8, [@multicast1, @local, @multicast2, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0xe}, @rand_addr=0x64010101, @rand_addr=0x64010100, @local]}, 0x30) r6 = syz_open_dev$vcsn(&(0x7f0000001840), 0x6, 0xd46c0) fcntl$setstatus(r6, 0x4, 0x0) mknod(&(0x7f0000001880)='./file0\x00', 0x2, 0x1f) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f00000018c0), 0x30080, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000001940)={0xfffffff7, 0x0, &(0x7f0000001900)=[r5]}, 0x1) 12:24:45 executing program 7: lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)={'U+', 0x8000}, 0x16, 0x6) statx(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x6ee, &(0x7f0000000100)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)=""/78, 0x4e}, {&(0x7f0000000380)=""/163, 0xa3}], 0x2, &(0x7f0000000480)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x38}, 0x123) mount$cgroup2(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x1008080, &(0x7f0000000500)={[{}, {}, {}, {@memory_recursiveprot}, {@memory_localevents}], [{@uid_eq={'uid', 0x3d, r0}}, {@measure}, {@euid_lt={'euid<', r2}}, {@smackfsfloor}]}) getsockname$unix(r1, &(0x7f00000005c0), &(0x7f0000000640)=0x6e) mount$cgroup(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x240084, &(0x7f0000000700)={[{@subsystem='net_cls'}, {@cpuset_v2_mode}, {@noprefix}, {@none}], [{@func={'func', 0x3d, 'CREDS_CHECK'}}, {@subj_user={'subj_user', 0x3d, '/(@\xf4'}}]}) r3 = socket$unix(0x1, 0x5, 0x0) mount$bind(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x72048, 0x0) r4 = accept4$unix(r1, &(0x7f0000001c40)=@abs, &(0x7f0000001cc0)=0x6e, 0x800) recvmmsg$unix(r4, &(0x7f0000007ec0)=[{{&(0x7f0000001d00), 0x6e, &(0x7f0000002e40)=[{&(0x7f0000001d80)=""/41, 0x29}, {&(0x7f0000001dc0)=""/70, 0x46}, {&(0x7f0000001e40)=""/4096, 0x1000}], 0x3, &(0x7f0000002e80)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000002f40), 0x6e, &(0x7f0000007280)=[{&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000003fc0)=""/85, 0x55}, {&(0x7f0000004040)=""/4096, 0x1000}, {&(0x7f0000005040)=""/86, 0x56}, {&(0x7f00000050c0)=""/4096, 0x1000}, {&(0x7f00000060c0)=""/75, 0x4b}, {&(0x7f0000006140)=""/4096, 0x1000}, {&(0x7f0000007140)=""/145, 0x91}, {&(0x7f0000007200)=""/93, 0x5d}], 0x9, &(0x7f0000007340)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}], 0xe0}}, {{&(0x7f0000007440), 0x6e, &(0x7f0000007700)=[{&(0x7f00000074c0)=""/248, 0xf8}, {&(0x7f00000075c0)=""/9, 0x9}, {&(0x7f0000007600)=""/213, 0xd5}], 0x3}}, {{&(0x7f0000007740)=@abs, 0x6e, &(0x7f0000007b40)=[{&(0x7f00000077c0)=""/219, 0xdb}, {&(0x7f00000078c0)=""/52, 0x34}, {&(0x7f0000007900)=""/163, 0xa3}, {&(0x7f00000079c0)=""/159, 0x9f}, {&(0x7f0000007a80)=""/81, 0x51}, {&(0x7f0000007b00)=""/35, 0x23}], 0x6, &(0x7f0000007bc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000007c80), 0x6e, &(0x7f0000007e40)=[{&(0x7f0000007d00)=""/107, 0x6b}, {&(0x7f0000007d80)=""/176, 0xb0}], 0x2, &(0x7f0000007e80)=[@cred={{0x1c}}], 0x20}}], 0x5, 0x121, &(0x7f0000008000)={0x77359400}) connect$unix(r8, &(0x7f0000008040)=@file={0x0, './file0\x00'}, 0x6e) truncate(&(0x7f00000080c0)='./file0\x00', 0xfab2) syz_mount_image$nfs4(&(0x7f0000008100), &(0x7f0000008140)='./file0\x00', 0x2, 0x7, &(0x7f0000009540)=[{&(0x7f0000008180)="e9e96a21d32e08bcf6b6259d3b63d6485ed1a7b285879d207ffab16ebd0ba48da8cac3fc460250385098bf9b2775f9052a4b2150482399ca368febbdbf61842cf7181e20a7435ceabe8e27cc09c8d047e22a4ebb7359f1c786d77a43fe9524f27d26129ef568423dafe80291da850972fa5f35c4f0d0c6f160853b2061f466323444a6fbf0c75ac8273d57a446efa3f5452db88e2ddcde2690", 0x99}, {&(0x7f0000008240)="c8cd906cb876deee48edfd676ad9c054750bb84537edfaf103da45fcdcb1a8271980d0cd5f7f46f738fb17242bfccf6fecb15528e80a4ed1d9d2fe4011c988b093c0d30b33e244fc4fee8cacb0e0e9ebfd94d34d8379c33dc98ef4d4438006e4c40c3a913f208c3962b7b1fa263998a91e6389406260b6e05c649e939fdb2ca47d6a5eb2220eff9264e96eb3096792cd5b689b4b26dffa11a8a13af9ea806fa02598ce5b7695e2c0b531a34346c4bf637b93dba446849338c87ee334305ae97ab33f07938302bb022acbe3c27c412b3c68bc896d8b687a37f5866e5460", 0xdd, 0xffffffff}, {&(0x7f0000008340)="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", 0x1000}, {&(0x7f0000009340)="c4d77560c053d2badfa9cfe74ff455d3952089171847a24282d97e872b1be6537efa3be4a77135c7341589169a54da2baa36b9ff89e036085c89fcae8e8c50fa1029f18ed053e3b1c86ae81cac19f246f5f40a6511b2c7e41f83ddcd411dd8334656aa35a6d35417cba23959c73865eb4a2085f1dbdb56af47ad850e5ae69149868f61425dc883342b119050e236a12f53558b98840d379f5d4b7c88be6a05ca8afc3e2d8ef3ef0a6fa5884511733ad6e7e589fbb235f8ceca29b0f578f3f275119a1d982b213b2d705cd236fab8be6d7636ccbdf2a4ed20bb8a", 0xda, 0x1000}, {&(0x7f0000009440)="36a66f9f0757872bd0abc97efe06e4f7d001765b938373a58b079f169f8aafddd1809f1832e4fa6ea57baff7abb7", 0x2e, 0x8}, {&(0x7f0000009480)="eba85eeb7dc386da6bce71af925ec083fe87578548ca9d003c95465c7496c365159b780d840ea4d0dc341a2f769c0127c83297f7e20c74651e032c", 0x3b, 0x3}, {&(0x7f00000094c0)="6d233d5f03ae34c3705df8e2426a026dce76749ae0576c3bcd7c81aa2229f6c08941e85406e41e215403f62aa79874b7890d53517e964e29e651bb385cb967e2e7e92ac5d03fc69e8bb6c2c8ca30eeb68e", 0x51, 0x92}], 0x2000, &(0x7f0000009600)={[{'cgroup2\x00'}, {'{:'}, {'(-]@%){'}, {'/#'}, {'memory_recursiveprot'}, {'euid<'}, {')'}, {'func'}, {'func'}], [{@fowner_eq={'fowner', 0x3d, r7}}, {@measure}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000009680)='./file0\x00', 0x131d42, 0x100) setxattr$trusted_overlay_opaque(&(0x7f00000096c0)='./file0\x00', &(0x7f0000009700), &(0x7f0000009740), 0x2, 0x1) setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f0000009780)=0x9, 0x4) getsockopt$IP_SET_OP_GET_BYINDEX(r3, 0x1, 0x53, &(0x7f00000097c0)={0x7, 0x7, 0x1}, &(0x7f0000009800)=0x28) chroot(&(0x7f0000009840)='./file0\x00') syz_mount_image$nfs4(&(0x7f0000009880), &(0x7f00000098c0)='./file1\x00', 0x9, 0x4, &(0x7f0000009c40)=[{&(0x7f0000009900)="5bee5f52a82074edb671563e80d72396c380b01ad721dde32d32042271651899a44c8ec040b7b6a59fea25244ffe94031d0bc533d0049d698aace9b4cc83d0e17cbcb1fa046a6bd85208025823e240591a007346a9831fa86648c137d3ee6f6b68717ca655cca88bbde0f5732542f2398ef846bdc2a5eff89cd440948accf967b799efd6dacb72ad07c47a494ab0cc48b6", 0x91, 0x40}, {&(0x7f00000099c0)="7aa4d291178bd64d35b9c6342cc25f6c5335a23a402d93d57771068aadf66e5c6a52594be9ba3ba694246bb924a0f77e52548ba1458ee2e09f5683c1aa108b67cc4cec280b8469f06bfc58ec7efe614cd51f640d358b2c949e5cef08419891a170c43639b6809e6d9e66406d6de7641e234c9b063cc52f5c2bf59805950ab11c87f1b68e5b323a935de53507977ae555fa36b96848240d096b92ecde4b7fe0cd687691733bf306cb3f89a42efd7fabf4ae578342f86bc1d429edc881ec16fa7bfec3e264cb9560fe1e959bac794950ffbd79c1e142c0e9ffc0a58ca787e1e87747d75b0f6db70acebee5497968", 0xed, 0x24f}, {&(0x7f0000009ac0)="5cf4259cdfc963e4bdae02c26c65e170dc3323fb3d235b1e2b3b5bb957693f81ec42bf04896ed88bc1004544a6280920fc0c84ddf1eee1d8b76aae8d55fdb8201542320824d1deaa9a40bd10601d7f38b5c7b765f36ac9c1068967ea840be3a8899907fdf810bce03a1cd966d9e29d8b67ce6b1640897d48589b39b5acee062dbfaa22e570c5e4e2317ef3e65f6a1e5ea1e81c9e33356853896223f59be1ac12880d78e39450b16b0a4a61f1959d310b4646fff6dad0b003fca5b5af4e8bce259e99fd642dd299a470382f4c7dd353592126", 0xd2, 0x3}, {&(0x7f0000009bc0)="ba7e9a06fa8e151119f6b67990a67b54212ededa7ae60d77bf005d424d27cb0d9b97d6ef128ac2d0028feae6e2f364ad818f7af22eed3f8357f99007b71b6be616d1e502c680e1e423dca61be589a3e0", 0x50, 0xec}], 0x2060, &(0x7f0000009ec0)={[{}, {'*@&%\',+@-}'}, {'][\\[^}:$'}, {'memory_recursiveprot'}, {}, {'[*\xf4!])&\x85/!}\'\x1f{+\x85^\xfe!'}, {'\\@]\\%\\^'}, {}], [{@uid_eq={'uid', 0x3d, r6}}, {@uid_lt}, {@smackfsfloor={'smackfsfloor', 0x3d, 'cgroup2\x00'}}, {@audit}, {@fowner_lt}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@smackfshat={'smackfshat', 0x3d, 'cgroup2\x00'}}]}) [ 82.894273] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.896873] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.899907] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.904965] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.910379] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.962779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.967279] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.971749] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.977027] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.981525] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.013757] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.028721] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.031113] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.035702] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.037198] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.044619] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.049914] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.054584] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.073992] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.086236] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.124225] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.128655] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 83.130146] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.131730] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 83.134676] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 83.135863] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 83.137161] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.139027] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 83.144674] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 83.162519] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.164081] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 83.168608] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 83.172237] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.175736] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 83.178088] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 83.182330] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 83.187732] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 83.201623] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 83.230584] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 83.232672] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 84.926043] Bluetooth: hci0: command tx timeout [ 85.053625] Bluetooth: hci1: command tx timeout [ 85.117479] Bluetooth: hci3: command tx timeout [ 85.117995] Bluetooth: hci2: command tx timeout [ 85.245670] Bluetooth: hci6: command tx timeout [ 85.247756] Bluetooth: hci4: command tx timeout [ 85.248765] Bluetooth: hci5: command tx timeout [ 85.309913] Bluetooth: hci7: command tx timeout [ 86.975775] Bluetooth: hci0: command tx timeout [ 87.101446] Bluetooth: hci1: command tx timeout [ 87.166516] Bluetooth: hci2: command tx timeout [ 87.166938] Bluetooth: hci3: command tx timeout [ 87.293734] Bluetooth: hci5: command tx timeout [ 87.294179] Bluetooth: hci6: command tx timeout [ 87.295274] Bluetooth: hci4: command tx timeout [ 87.357459] Bluetooth: hci7: command tx timeout [ 89.022223] Bluetooth: hci0: command tx timeout [ 89.151414] Bluetooth: hci1: command tx timeout [ 89.215435] Bluetooth: hci3: command tx timeout [ 89.215906] Bluetooth: hci2: command tx timeout [ 89.341501] Bluetooth: hci4: command tx timeout [ 89.341984] Bluetooth: hci5: command tx timeout [ 89.342498] Bluetooth: hci6: command tx timeout [ 89.406472] Bluetooth: hci7: command tx timeout [ 91.069542] Bluetooth: hci0: command tx timeout [ 91.199418] Bluetooth: hci1: command tx timeout [ 91.262462] Bluetooth: hci2: command tx timeout [ 91.262911] Bluetooth: hci3: command tx timeout [ 91.389588] Bluetooth: hci4: command tx timeout [ 91.391141] Bluetooth: hci5: command tx timeout [ 91.391925] Bluetooth: hci6: command tx timeout [ 91.454521] Bluetooth: hci7: command tx timeout [ 118.984758] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.985467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.180751] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.181393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.003993] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=3709 comm=syz-executor.2 [ 120.005025] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=38 sclass=netlink_tcpdiag_socket pid=3709 comm=syz-executor.2 [ 120.006025] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=61 sclass=netlink_tcpdiag_socket pid=3709 comm=syz-executor.2 [ 120.006981] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=51 sclass=netlink_tcpdiag_socket pid=3709 comm=syz-executor.2 [ 120.007938] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=50 sclass=netlink_tcpdiag_socket pid=3709 comm=syz-executor.2 [ 120.008908] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3709 comm=syz-executor.2 [ 120.009883] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=35 sclass=netlink_tcpdiag_socket pid=3709 comm=syz-executor.2 [ 120.010845] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=3709 comm=syz-executor.2 [ 120.021272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.021933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:25:23 executing program 2: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000080)=0x10) r1 = getpid() pidfd_open(r1, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x6, 0x80, 0x0, 0x3, 0x0, 0x2de, 0xd2387, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext, 0x41731, 0x1, 0x1000, 0x3, 0x6, 0x80, 0x971, 0x0, 0xffffff5a}, r1, 0x0, 0xffffffffffffffff, 0x6) close_range(r0, r2, 0x0) clone3(&(0x7f00000002c0)={0x2120100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0xffffffffffffffff], 0x1}, 0x58) [ 120.157954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.159173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:25:23 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000500)=@filename='./file0/../file0\x00', &(0x7f0000000540)='./file1\x00', &(0x7f0000000580)='incremental-fs\x00', 0x880010, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000200), &(0x7f0000000240)='./file0/../file0\x00', 0x2, 0x2, &(0x7f0000000440)=[{&(0x7f0000000280)="10823fd38d5417a1d52a3b52c18a34af6feb342369a3e20bc4bff0b67e16fd08f8044577670fd6fd43a377de740e39bdb922edea22d6a63fd0d56b08e420e1878b013333546348c60bac4feb5c2a7af48516c2f34f4cfd151b2fc0e79e6708486b49c00a916709dda14917ecffaba7d011254054ac6bab52983066f513486f30b199e2a60adcc48c6d8a2fb8f682834af875d9c82f41a78d4d294e718f", 0x9d, 0x3}, {&(0x7f0000000340)="d0a6f6de106901a1cc306394dfcba7414a4976409204b2f43a11852c7b9a3910a9eaf8e59f5ea467ae1fe3c77bcd18d7d73fe3a18a213ea71bb877ac69283b9b54cd11209156d3406b4a43606dcaca5a9168309f64169306b2cb97e30c5e5339337012272b038f23557095e7f9a10b7c68f7309df00803299336c43483e8933a8052741481b6cfde8cc88734ec702bd0c3f0b166d5dd178fa292ce3edd5b0a58c283ae9067dc4aff0f517480ee436b20c6ed8c7611804493f645c5bff05452234501d07f6dd10e786b841591e019396bb59a68c7043aca", 0xd7}], 0x2, &(0x7f0000000480)={[{@unhide}, {@check_strict}], [{@permit_directio}, {@obj_user={'obj_user', 0x3d, 'sysfs\x00'}}]}) chroot(&(0x7f0000000040)='./file0\x00') mount(0x0, &(0x7f0000000e00)='./file0/../file0\x00', 0x0, 0x0, 0x0) umount2(&(0x7f00000004c0)='./file0\x00', 0x8) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="2f01010000000000003000"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='reiserfs\x00', 0x1c2000, &(0x7f00000001c0)='sysfs\x00') 12:25:24 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000500)=@filename='./file0/../file0\x00', &(0x7f0000000540)='./file1\x00', &(0x7f0000000580)='incremental-fs\x00', 0x880010, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000200), &(0x7f0000000240)='./file0/../file0\x00', 0x2, 0x2, &(0x7f0000000440)=[{&(0x7f0000000280)="10823fd38d5417a1d52a3b52c18a34af6feb342369a3e20bc4bff0b67e16fd08f8044577670fd6fd43a377de740e39bdb922edea22d6a63fd0d56b08e420e1878b013333546348c60bac4feb5c2a7af48516c2f34f4cfd151b2fc0e79e6708486b49c00a916709dda14917ecffaba7d011254054ac6bab52983066f513486f30b199e2a60adcc48c6d8a2fb8f682834af875d9c82f41a78d4d294e718f", 0x9d, 0x3}, {&(0x7f0000000340)="d0a6f6de106901a1cc306394dfcba7414a4976409204b2f43a11852c7b9a3910a9eaf8e59f5ea467ae1fe3c77bcd18d7d73fe3a18a213ea71bb877ac69283b9b54cd11209156d3406b4a43606dcaca5a9168309f64169306b2cb97e30c5e5339337012272b038f23557095e7f9a10b7c68f7309df00803299336c43483e8933a8052741481b6cfde8cc88734ec702bd0c3f0b166d5dd178fa292ce3edd5b0a58c283ae9067dc4aff0f517480ee436b20c6ed8c7611804493f645c5bff05452234501d07f6dd10e786b841591e019396bb59a68c7043aca", 0xd7}], 0x2, &(0x7f0000000480)={[{@unhide}, {@check_strict}], [{@permit_directio}, {@obj_user={'obj_user', 0x3d, 'sysfs\x00'}}]}) chroot(&(0x7f0000000040)='./file0\x00') mount(0x0, &(0x7f0000000e00)='./file0/../file0\x00', 0x0, 0x0, 0x0) umount2(&(0x7f00000004c0)='./file0\x00', 0x8) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="2f01010000000000003000"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='reiserfs\x00', 0x1c2000, &(0x7f00000001c0)='sysfs\x00') 12:25:24 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000500)=@filename='./file0/../file0\x00', &(0x7f0000000540)='./file1\x00', &(0x7f0000000580)='incremental-fs\x00', 0x880010, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000200), &(0x7f0000000240)='./file0/../file0\x00', 0x2, 0x2, &(0x7f0000000440)=[{&(0x7f0000000280)="10823fd38d5417a1d52a3b52c18a34af6feb342369a3e20bc4bff0b67e16fd08f8044577670fd6fd43a377de740e39bdb922edea22d6a63fd0d56b08e420e1878b013333546348c60bac4feb5c2a7af48516c2f34f4cfd151b2fc0e79e6708486b49c00a916709dda14917ecffaba7d011254054ac6bab52983066f513486f30b199e2a60adcc48c6d8a2fb8f682834af875d9c82f41a78d4d294e718f", 0x9d, 0x3}, {&(0x7f0000000340)="d0a6f6de106901a1cc306394dfcba7414a4976409204b2f43a11852c7b9a3910a9eaf8e59f5ea467ae1fe3c77bcd18d7d73fe3a18a213ea71bb877ac69283b9b54cd11209156d3406b4a43606dcaca5a9168309f64169306b2cb97e30c5e5339337012272b038f23557095e7f9a10b7c68f7309df00803299336c43483e8933a8052741481b6cfde8cc88734ec702bd0c3f0b166d5dd178fa292ce3edd5b0a58c283ae9067dc4aff0f517480ee436b20c6ed8c7611804493f645c5bff05452234501d07f6dd10e786b841591e019396bb59a68c7043aca", 0xd7}], 0x2, &(0x7f0000000480)={[{@unhide}, {@check_strict}], [{@permit_directio}, {@obj_user={'obj_user', 0x3d, 'sysfs\x00'}}]}) chroot(&(0x7f0000000040)='./file0\x00') mount(0x0, &(0x7f0000000e00)='./file0/../file0\x00', 0x0, 0x0, 0x0) umount2(&(0x7f00000004c0)='./file0\x00', 0x8) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="2f01010000000000003000"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='reiserfs\x00', 0x1c2000, &(0x7f00000001c0)='sysfs\x00') 12:25:24 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x61020100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0}, 0x58) [ 120.793484] audit: type=1400 audit(1752755124.442:8): avc: denied { open } for pid=3788 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 120.803471] audit: type=1400 audit(1752755124.443:9): avc: denied { kernel } for pid=3788 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 120.851271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.851905] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:25:24 executing program 2: syz_mount_image$ext4(&(0x7f0000002580)='ext2\x00', &(0x7f00000025c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000032c0)=ANY=[@ANYBLOB="6a7f75726e616c5f706174683d2e0f66696c65312c00"]) [ 120.998897] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.999610] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.026325] ext2: Unknown parameter 'jurnal_path' [ 121.037562] ext2: Unknown parameter 'jurnal_path' 12:25:24 executing program 2: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0x17, 0x5, 0x3, &(0x7f0000000480)}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) 12:25:24 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x3, 0x440a01) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/raw\x00') sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xe1ff}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000}, 0x20040810) r3 = syz_open_dev$vcsa(&(0x7f0000000280), 0x200, 0x100) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'ip6_vti0\x00', 0x0, 0x2f, 0x83, 0x80, 0x80000000, 0x1, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x7, 0x7, 0xfffffff9}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x64, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x40000) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000004c0), r0) recvmmsg$unix(r3, &(0x7f0000000a00)=[{{&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000580)=""/205, 0xcd}], 0x1, &(0x7f00000006c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}}, {{&(0x7f0000000800)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000880)=""/201, 0xc9}], 0x1, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}], 0x2, 0x2140, &(0x7f0000000a80)={0x77359400}) sendmsg$inet6(r7, &(0x7f0000000f00)={&(0x7f0000000ac0)={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x21}, 0x9d45}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000b00)="170d73445ecad3c793c7d5e11d885dc3477bfe22d26132a0d2adabd5cdf310fa9cdc4163ef629d6bb998b2ed423e881cf087485eaae2b13c6ede0aa2819a8ce720ed6afcbc4d25a029319d1ceffc46482b", 0x51}, {&(0x7f0000000b80)="d23bcf2efc5e9916cab53deba520aed1204a4891c4dcb4fd848dc8541481d9e983b9403ec8ab7c95e8b097ba788aaf642c0184295223ab7dfcaac30e9251b4320716d87d58fadf387fa9126098a5591a100b326b445ae8c0c76651cc911121765978a75e29afd135d9d7358c952ccd8bce3b69183fc0eec45e7217261e820b441a6908bb36b7817613b12464b856e5a1b1779c7990d6219b0cd7f232e70d327f3d6b59b01d99361b947feb77a0cb9228e67ced038ac92ebb15504ea98ddef1fa4c08b498f0b20d3bca96aae33471a0417ae2c9aa4083799e9b790b8d3d", 0xdd}, {&(0x7f0000000c80)="22c4580ec7190bd80c909dfe42d6664186d6679bc1dc155115a5", 0x1a}, {&(0x7f0000000cc0)}, {&(0x7f0000000d00)="9f96a5f749bbce437c78e5b299a253f3358a16bc45917126aacd4c6508ba036769404825ad1157c8c7194592f445105db5177bb8298e817ce980ec637df2ae8a410191ef7c7d29904cb2083775319c7371ebf606afca166911cc906c0ee41bd45eeb7ca191f5219c70beb7f5848b00682534ed6cd1e661f7d9936556", 0x7c}], 0x5, &(0x7f0000000e00)=[@hopopts={{0x68, 0x29, 0x36, {0x5c, 0x9, '\x00', [@generic={0x3, 0x42, "2cdfa0c3a4c48f19d503a0ed0ec3e536b67c753859bd0d7d41019ca69a15a30572e3f22e8f397f763d0a91ecd61bc2c859a4fdc3e6b6c184058e388dde2860a3d2b7"}, @ra={0x5, 0x2, 0x5}, @pad1]}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x73, 0x8, 0x2, 0x6, 0x0, [@empty, @mcast1, @mcast2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x6b8}}, @dstopts={{0x20, 0x29, 0x37, {0x32, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}]}}}], 0xf8}, 0x20048040) pread64(r5, &(0x7f0000000f40)=""/105, 0x69, 0x5) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x24, r9, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000044}, 0x1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x24, r9, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}}, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fremovexattr(r6, &(0x7f0000001200)=@random={'osx.', '[#\\&\xb2-\x00'}) lseek(r8, 0x9, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r10, &(0x7f00000013c0)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x60, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xb4830a15f4d9e95a}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000010}, 0x4) [ 121.395238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.395832] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.517593] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.518174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.827635] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.828223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.936144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.936854] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.499465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.500562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.667386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.668904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.792854] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.793537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.873466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.874080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.525980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.526629] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.556509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.557065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.372439] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 124.373121] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 124.380412] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 124.382054] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 124.382616] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 124.385638] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 124.388348] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 124.389176] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 124.392778] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 124.395623] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 124.396126] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 124.399401] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 124.401205] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 124.402450] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 124.404169] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 124.407742] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 124.408247] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 124.410037] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 124.412214] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 124.412840] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 124.422358] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 124.424042] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 124.424608] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 124.426194] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 125.565553] Bluetooth: hci0: command 0x0c1a tx timeout [ 126.397526] Bluetooth: hci3: command 0x0c1a tx timeout [ 126.398806] Bluetooth: hci2: command 0x0c1a tx timeout [ 126.398818] Bluetooth: hci1: command 0x0c1a tx timeout [ 126.461475] Bluetooth: hci7: command 0x0c1a tx timeout [ 126.462702] Bluetooth: hci6: command 0x0c1a tx timeout [ 126.462724] Bluetooth: hci4: command 0x0c1a tx timeout [ 126.462756] Bluetooth: hci5: command 0x0c1a tx timeout [ 127.613476] Bluetooth: hci0: command 0x0c1a tx timeout [ 128.445535] Bluetooth: hci3: command 0x0c1a tx timeout [ 128.445596] Bluetooth: hci2: command 0x0c1a tx timeout [ 128.446634] Bluetooth: hci1: command 0x0c1a tx timeout [ 128.509532] Bluetooth: hci7: command 0x0c1a tx timeout [ 128.510572] Bluetooth: hci6: command 0x0c1a tx timeout [ 128.510630] Bluetooth: hci4: command 0x0c1a tx timeout [ 128.511570] Bluetooth: hci5: command 0x0c1a tx timeout [ 129.661524] Bluetooth: hci0: command 0x0c1a tx timeout [ 130.493532] Bluetooth: hci2: command 0x0c1a tx timeout [ 130.493641] Bluetooth: hci1: command 0x0c1a tx timeout [ 130.494258] Bluetooth: hci3: command 0x0c1a tx timeout [ 130.557498] Bluetooth: hci4: command 0x0c1a tx timeout [ 130.558145] Bluetooth: hci6: command 0x0c1a tx timeout [ 130.558208] Bluetooth: hci5: command 0x0c1a tx timeout [ 130.558763] Bluetooth: hci7: command 0x0c1a tx timeout 12:25:39 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = getpid() pidfd_open(r1, 0x0) sendmmsg$inet(r0, &(0x7f0000005ec0)=[{{&(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000200)="b302", 0x2}], 0x1}}, {{&(0x7f0000000580)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000070030000005c0000070000004404e400440400031c00000000000800000f000008000000", @ANYRES64=r1, @ANYBLOB="00000000ac1414bb0000000010000000000000000000000007000000"], 0x48}}], 0x2, 0x40) 12:25:39 executing program 0: msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYBLOB="0fbd92f0545ce202915ca4337c4fd6061a620bde7fe2614f2186ed74ad7d18ab2486422a2d500b6ee4f9f4ca6d3f5375d9c6c7c20e12a977333806a3885fad908ec9fa43b5ad326bef70f51dafb40efe1863c666a1c41e1120ea90b5859ff670f216d2de590fc945168e45f6c997f53069bab7cf04b27f1cb38192ef768e93f2bb9e5dd661c5138449695635e2156b940fd2de024504325e5e7e4b856b5c120c9daf30"], 0x8e, 0x800) 12:25:39 executing program 7: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x18b) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x80}) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000008c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) 12:25:39 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r4) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r5) 12:25:39 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x40) mount(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000000)='sysfs\x00', 0x0, 0x0) mount(&(0x7f0000000080)=@sr0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='pvfs2\x00', 0x1010041, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x6) 12:25:39 executing program 5: r0 = fork() perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, r0, 0x7, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fork() kcmp(r2, r2, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x2, 0x0, 0xd0, 0x2, 0x0, 0x1ff, 0xc0211, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000040), 0xc}, 0x40104, 0x1f, 0x8, 0x1, 0x4, 0x5a51, 0x101, 0x0, 0x7fffffff, 0x0, 0xad}, r2, 0xf, r1, 0xb) ptrace$peek(0x2, r2, &(0x7f0000000100)) r3 = fork() kcmp(r3, r3, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) kcmp(r2, r3, 0x4, r4, r1) 12:25:39 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2, 0x7ff}], 0x18) r1 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x68, 0xbd, 0x6, 0x7f, 0x0, 0x1, 0x1002, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x8000, 0x101, 0x6, 0x6, 0x81, 0x6, 0x5, 0x0, 0x401, 0x0, 0x3}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x9) r2 = dup(r0) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000240)={0x1, 0x4a, &(0x7f00000001c0)="8cf482b5323b00f7a7db0ebcaf62abda295fd913572ba651fb0f5cd4c46693429a19fc214e671924c7c8ba98b1bb15443c5e15d964624acb88434660387125a65bfabb58c9785946a057"}) r3 = getpid() r4 = pidfd_open(r3, 0x0) process_madvise(r4, 0x0, 0x0, 0x4, 0x0) poll(&(0x7f0000000140)=[{r0, 0x5220}, {r1, 0x40}, {r4, 0x10}], 0x3, 0x2) syz_open_procfs(r3, &(0x7f0000000180)='oom_adj\x00') 12:25:39 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x88001, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x12) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0xff, 0x80, 0x3, 0x81, 0x0, 0x3, 0x20, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000080), 0x9}, 0x0, 0xd41, 0x80, 0x8, 0x0, 0x8, 0x1, 0x0, 0xfffffff9, 0x0, 0x7f}, 0x0, 0x10, r1, 0xb) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000000)=0x100, 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000040)=0xfffffff7, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 12:25:48 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r4) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r5) 12:25:48 executing program 5: r0 = fork() perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, r0, 0x7, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fork() kcmp(r2, r2, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x2, 0x0, 0xd0, 0x2, 0x0, 0x1ff, 0xc0211, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000040), 0xc}, 0x40104, 0x1f, 0x8, 0x1, 0x4, 0x5a51, 0x101, 0x0, 0x7fffffff, 0x0, 0xad}, r2, 0xf, r1, 0xb) ptrace$peek(0x2, r2, &(0x7f0000000100)) r3 = fork() kcmp(r3, r3, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) kcmp(r2, r3, 0x4, r4, r1) 12:25:48 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x40) mount(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000000)='sysfs\x00', 0x0, 0x0) mount(&(0x7f0000000080)=@sr0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='pvfs2\x00', 0x1010041, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x6) 12:25:48 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2, 0x7ff}], 0x18) r1 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x68, 0xbd, 0x6, 0x7f, 0x0, 0x1, 0x1002, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x8000, 0x101, 0x6, 0x6, 0x81, 0x6, 0x5, 0x0, 0x401, 0x0, 0x3}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x9) r2 = dup(r0) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000240)={0x1, 0x4a, &(0x7f00000001c0)="8cf482b5323b00f7a7db0ebcaf62abda295fd913572ba651fb0f5cd4c46693429a19fc214e671924c7c8ba98b1bb15443c5e15d964624acb88434660387125a65bfabb58c9785946a057"}) r3 = getpid() r4 = pidfd_open(r3, 0x0) process_madvise(r4, 0x0, 0x0, 0x4, 0x0) poll(&(0x7f0000000140)=[{r0, 0x5220}, {r1, 0x40}, {r4, 0x10}], 0x3, 0x2) syz_open_procfs(r3, &(0x7f0000000180)='oom_adj\x00') 12:25:48 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x88001, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x12) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0xff, 0x80, 0x3, 0x81, 0x0, 0x3, 0x20, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000080), 0x9}, 0x0, 0xd41, 0x80, 0x8, 0x0, 0x8, 0x1, 0x0, 0xfffffff9, 0x0, 0x7f}, 0x0, 0x10, r1, 0xb) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000000)=0x100, 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000040)=0xfffffff7, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 12:25:48 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x88001, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x12) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0xff, 0x80, 0x3, 0x81, 0x0, 0x3, 0x20, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000080), 0x9}, 0x0, 0xd41, 0x80, 0x8, 0x0, 0x8, 0x1, 0x0, 0xfffffff9, 0x0, 0x7f}, 0x0, 0x10, r1, 0xb) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000000)=0x100, 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000040)=0xfffffff7, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 12:25:48 executing program 7: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x88001, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x12) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0xff, 0x80, 0x3, 0x81, 0x0, 0x3, 0x20, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000080), 0x9}, 0x0, 0xd41, 0x80, 0x8, 0x0, 0x8, 0x1, 0x0, 0xfffffff9, 0x0, 0x7f}, 0x0, 0x10, r1, 0xb) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000000)=0x100, 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000040)=0xfffffff7, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 12:25:48 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r4) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r5) 12:25:48 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2, 0x7ff}], 0x18) r1 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x68, 0xbd, 0x6, 0x7f, 0x0, 0x1, 0x1002, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x8000, 0x101, 0x6, 0x6, 0x81, 0x6, 0x5, 0x0, 0x401, 0x0, 0x3}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x9) r2 = dup(r0) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000240)={0x1, 0x4a, &(0x7f00000001c0)="8cf482b5323b00f7a7db0ebcaf62abda295fd913572ba651fb0f5cd4c46693429a19fc214e671924c7c8ba98b1bb15443c5e15d964624acb88434660387125a65bfabb58c9785946a057"}) r3 = getpid() r4 = pidfd_open(r3, 0x0) process_madvise(r4, 0x0, 0x0, 0x4, 0x0) poll(&(0x7f0000000140)=[{r0, 0x5220}, {r1, 0x40}, {r4, 0x10}], 0x3, 0x2) syz_open_procfs(r3, &(0x7f0000000180)='oom_adj\x00') 12:25:48 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r4) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r5) 12:25:48 executing program 6: munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ff7000/0x2000)=nil) pkey_mprotect(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0, 0xffffffffffffffff) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) pread64(r0, &(0x7f00000191c0)=""/49, 0x31, 0xffffffff) madvise(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x10) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 12:25:48 executing program 0: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x5057}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x6, 0x12, 0xfa, 0x77, 0x0, 0xffff, 0x281e2, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x41f1ce35, 0x0, @perf_config_ext={0x6, 0x1f}, 0x40, 0x5, 0x8001, 0x5, 0x7f, 0x2, 0x40, 0x0, 0x3, 0x0, 0xb5bc}, 0x0, 0x4, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000000)='./file0\x00', 0x6) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x5c, r5, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x40034) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000080)={'wpan0\x00'}) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, r11, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) 12:25:57 executing program 6: munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ff7000/0x2000)=nil) pkey_mprotect(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0, 0xffffffffffffffff) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) pread64(r0, &(0x7f00000191c0)=""/49, 0x31, 0xffffffff) madvise(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x10) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 12:25:57 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2, 0x7ff}], 0x18) r1 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x68, 0xbd, 0x6, 0x7f, 0x0, 0x1, 0x1002, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x8000, 0x101, 0x6, 0x6, 0x81, 0x6, 0x5, 0x0, 0x401, 0x0, 0x3}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x9) r2 = dup(r0) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000240)={0x1, 0x4a, &(0x7f00000001c0)="8cf482b5323b00f7a7db0ebcaf62abda295fd913572ba651fb0f5cd4c46693429a19fc214e671924c7c8ba98b1bb15443c5e15d964624acb88434660387125a65bfabb58c9785946a057"}) r3 = getpid() r4 = pidfd_open(r3, 0x0) process_madvise(r4, 0x0, 0x0, 0x4, 0x0) poll(&(0x7f0000000140)=[{r0, 0x5220}, {r1, 0x40}, {r4, 0x10}], 0x3, 0x2) syz_open_procfs(r3, &(0x7f0000000180)='oom_adj\x00') 12:25:57 executing program 0: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x5057}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x6, 0x12, 0xfa, 0x77, 0x0, 0xffff, 0x281e2, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x41f1ce35, 0x0, @perf_config_ext={0x6, 0x1f}, 0x40, 0x5, 0x8001, 0x5, 0x7f, 0x2, 0x40, 0x0, 0x3, 0x0, 0xb5bc}, 0x0, 0x4, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000000)='./file0\x00', 0x6) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x5c, r5, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x40034) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000080)={'wpan0\x00'}) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, r11, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) 12:25:57 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r4) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r5) 12:25:57 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r4) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r5) 12:25:57 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) 12:25:57 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000080)=""/29, 0x1d}, {&(0x7f0000000100)=""/198, 0xc6}, {&(0x7f0000000200)=""/206, 0xce}, {&(0x7f0000000300)=""/14, 0xe}, {&(0x7f0000000340)=""/172, 0xac}, {&(0x7f0000000400)=""/27, 0x1b}], 0x6, 0x3ff, 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_default\x00') 12:25:57 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x6000) mount$bind(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x10, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c0096e008b7ef00bdd591810bfe20425181a5c6b612e73a7e5cea1fa60251e944fe303eac3898f7303819c7e089aa8f38fe6b73f623927200618c3a5a0b3f982e804780b1ba885037ea2a86ea5ad909895f71d848126940c590b3e3499cac220ca9bd52a0fed49f9484597826979902e18d7535f28e61"]) 12:25:57 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x6000) mount$bind(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x10, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c0096e008b7ef00bdd591810bfe20425181a5c6b612e73a7e5cea1fa60251e944fe303eac3898f7303819c7e089aa8f38fe6b73f623927200618c3a5a0b3f982e804780b1ba885037ea2a86ea5ad909895f71d848126940c590b3e3499cac220ca9bd52a0fed49f9484597826979902e18d7535f28e61"]) 12:25:57 executing program 3: syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[@ANYRES16, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000c79869e02c7f5be1567a01c0f78d3bca0d0a95203796e58ef6c3f0477f1f1e60810bdf2f1503d25c5fc1cf6292c845d955c95d8c44ca0442e084e16dc2ba049a6de279f2d0650b1ff6a7a7fce0cf2fe2c791c5ce69fa52736d3d7d669a00d5218be59e04d38bec4340afebcf79dad0c400e2ca290041eb6e7259b4931bf89d022fb175f545e85bc3bfd9580c1fc3a28a2c00000000000000000000a677f1b1414eeb72855ab495c69bed466f385179cb5375a89666efefd21e16f666571e3eeb28779fad32102cd5b0bfd260b4847d931b2553d7cebb24c14d0c"], 0x0) syz_extract_tcp_res(&(0x7f0000000000), 0x1ff, 0x0) 12:25:57 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2, 0x7ff}], 0x18) r1 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x68, 0xbd, 0x6, 0x7f, 0x0, 0x1, 0x1002, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x8000, 0x101, 0x6, 0x6, 0x81, 0x6, 0x5, 0x0, 0x401, 0x0, 0x3}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x9) r2 = dup(r0) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000240)={0x1, 0x4a, &(0x7f00000001c0)="8cf482b5323b00f7a7db0ebcaf62abda295fd913572ba651fb0f5cd4c46693429a19fc214e671924c7c8ba98b1bb15443c5e15d964624acb88434660387125a65bfabb58c9785946a057"}) r3 = getpid() r4 = pidfd_open(r3, 0x0) process_madvise(r4, 0x0, 0x0, 0x4, 0x0) poll(&(0x7f0000000140)=[{r0, 0x5220}, {r1, 0x40}, {r4, 0x10}], 0x3, 0x2) 12:25:57 executing program 2: io_setup(0x572, &(0x7f0000000140)=0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x636e, &(0x7f0000000040)=0x0) io_submit(r3, 0x2, &(0x7f0000000240)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, 0x101, r2, &(0x7f0000000480)="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", 0x1000, 0x401, 0x0, 0x2, r1}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x9, r1, &(0x7f0000000180)="3c994d26aed0446fcdcece81e011caf809f165b3ae1ddcf9ec47ce9c33149ecc9dd61eba49873ae8be79354419beb0cc1695e816d9e590157796345682d6746ee3512f877e46735b5b8f44f2a8ae199f675b91e85ee2c2d8131809b22915504db4", 0x61, 0x1f, 0x0, 0x1}]) io_submit(r0, 0x1, &(0x7f0000000440)=[&(0x7f0000000100)={0x0, 0x0, 0x8, 0x0, 0x0, r1, &(0x7f0000000000)='x', 0x1}]) io_setup(0x400, &(0x7f0000000140)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) io_submit(r4, 0x1, &(0x7f0000000780)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0}]) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) r7 = syz_open_pts(r1, 0x109200) r8 = openat$sr(0xffffffffffffff9c, &(0x7f0000002500), 0x12002, 0x0) r9 = syz_open_dev$hidraw(&(0x7f0000002600), 0x4, 0x107000) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x88001, 0x0) write$cgroup_pid(r10, &(0x7f0000000000), 0x12) r11 = syz_open_dev$rtc(&(0x7f0000002700), 0xde8, 0x0) io_submit(r4, 0x6, &(0x7f0000002800)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x800, r6, &(0x7f0000001480)="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", 0x1000, 0x3, 0x0, 0x0, r2}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x9, r7, &(0x7f0000000300)="c03471fa156aa53c47b762c18ed4db127e0dd3c35563e01ed127245bf500d58e302ab9e009add74a4208f7c6ff61c68409f03e494e648a003f82b6597cdf3c1d69773bf7f366f83bf819ff65014f3c2cdb3aea08f6a41ba56df87de8b397f6bba7468bdde14e18b1239b2b5cc087c2fc93504ffba4a2cfa625f36ff7eb3c4a45d9f5f6aff0c984ca5c7a6293c53a", 0x8e, 0x101, 0x0, 0x2, r2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7, 0x8, r2, &(0x7f0000002480)="b22153207345337675284bc51dc6be1b12e8e8646163b8dbf9869ee40631f21f5432e94940143e1096b5ab7761578d82152dbfcf5b88d95241df8fc29002a746569491141b096a0ef570d14baa22ed88b946d0dde9373051", 0x58, 0x0, 0x0, 0x2, r2}, &(0x7f00000025c0)={0x0, 0x0, 0x0, 0x3, 0x7ff, r8, &(0x7f0000002540)="b0c9c294da6f1b3d0d1d74b717f91c23b871fca6c36ec6877e1bd8f3eb91f080d9e1cd0e9d28ba3d7a3cbcdb4d05f790b679e53848dd9487c1f71c6b5a4b6f255b2858b90c5820e29f03bb32198751422c428137b7f77461c73f491a2d", 0x5d, 0xd62, 0x0, 0x0, r2}, &(0x7f00000026c0)={0x0, 0x0, 0x0, 0x1, 0x5, r9, &(0x7f0000002640)="3844f4e9ab151b0c08b2211b498df0624c5b57967420b567799fd58197df5514ed956c353225007ea4eec746be0d5dd2b0d5d0b9a98d907048e4d1b3591fec5297fb", 0x42, 0x100000000000, 0x0, 0x2, r10}, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x1, 0x9, r11, &(0x7f0000002740)="c7482485836be7554092a1da8cd1ddb5ef4e3c220a7cbb8632a140ecf747aa294f2207f2ea4431efd3d18efc00615dfdefd4619fb943a3aecfcdc99f0b1a339fa8bf936fcfb997eb5600158f48d40c", 0x4f, 0x5, 0x0, 0x0, r2}]) 12:25:57 executing program 6: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() r0 = fork() process_vm_readv(r0, 0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, 0x0, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x3}, @void}}}, 0x24}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x4, 0x1, 0x1f, 0x0, 0x3, 0x40, 0x5, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_config_ext={0x1, 0x3ff}, 0x2902, 0x7fff, 0x1, 0x2, 0x7fffffff, 0x4, 0x5d, 0x0, 0x5, 0x0, 0x3}, 0x0, 0x5, r1, 0x0) 12:25:57 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x1f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400, 0x8a6}, 0x0, 0x8, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x9e9) clone(0x20004500, 0x0, 0x0, 0x0, 0x0) 12:25:57 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = dup2(r0, r1) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xfff8, 0x2}, 0xe) read(r2, &(0x7f00000003c0)=""/4096, 0x1000) r3 = getpid() r4 = pidfd_open(r3, 0x0) process_madvise(r4, 0x0, 0x0, 0x4, 0x0) close_range(r0, r4, 0x0) 12:25:57 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000003, 0x14389, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb55, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/110, 0x6e, 0x1) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffffffff000) rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0xffffffff}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000008b80)={{{@in=@multicast2, @in6=@empty}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, 0x0) lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:framebuf_device_t:s0\x00', 0x27, 0x2) newfstatat(0xffffffffffffff9c, &(0x7f000000a680)='./file0\x00', &(0x7f000000a6c0), 0x6000) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xffffffff000) r5 = getpgrp(0x0) r6 = getpid() rt_tgsigqueueinfo(r5, r6, 0x0, &(0x7f0000000180)={0x0, 0x0, 0xffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='mpol=interleave=static,gid=', @ANYRESHEX=r7, @ANYBLOB="2c1019e0e948843df2a47ef5af232e87bdfd405edacdd1732005c61ab829311b9ecd86b6ab5e40a7afdf99238dda0b27ac92d4e0817928c6c0f64b7674888253d3a90ec5ad556b878c818fb9d58102b233bc582f8b4e46aa67926a7e2e5c82bf85e316cf41ce"]) 12:25:57 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=@getae={0x390, 0x1f, 0x300, 0x70bd26, 0x25dfdbfd, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x3c}, @in6=@loopback, 0x2, 0x3500}, [@sec_ctx={0xe5, 0x8, {0xe1, 0x8, 0x1, 0x4, 0xd9, "8d8ff4a160e0faf5a53c7e4ce88ca81c1206688679fbfa3e9d9536a72d58ae7f5dcda3010fecc387592435663ff8ee3e22785b19c9c7429632cf3406f787632f7873ef80893a0d47005439f232bf880b6d3eef07e55b35adbda9229966e0dd2126bf13ac3c50ea417f1ebe9d3616c4e346915c8f06b786c3f6140a1bc8711efc7ccea8ce08ba1980eedf1ebb9a88a320270ae8c013c31f2a62d6e700a9146d47f3004c80922db9ca6162d198e8660c46388d0ab81bb63b967b87a69681dd79a711f2dd166c9902d520757a7cdea44e4ee328af790a74b03ec6"}}, @mark={0xc, 0x15, {0x35075d, 0x9}}, @tmpl={0x84, 0x5, [{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d6, 0x33}, 0xa, @in6=@mcast2, 0x3501, 0x2, 0x1, 0x8, 0x2, 0x0, 0x99f4}, {{@in=@broadcast, 0x4d6, 0x3c}, 0x2, @in=@local, 0x3502, 0x3, 0x0, 0xc, 0x100, 0x8000, 0x2}]}, @replay_thresh={0x8, 0xb, 0x1000}, @algo_aead={0xc4, 0x12, {{'echainiv(aegis128-generic)\x00'}, 0x3c0, 0x100, "b3caa80528feb5c978ff4c5fd27ff58c8761e50cc85251e4e25aef4c446d0e041c7b0dba76a71f208883b36612ce1573d37cadd2068cd319a570d2964247020adb81fc6de3051bc7232205c8a46c39c2af4ab6fcce859ae9ecb338c2fd488e635615dfb2fe4cf30f581ef9990c7558b0a92fb4814944fad5"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x1800000}, @tmpl={0x104, 0x5, [{{@in=@empty, 0x4d2, 0x33}, 0x2, @in=@multicast1, 0x3505, 0x4, 0x0, 0x78, 0x5, 0x1}, {{@in=@local, 0x4d5, 0x3c}, 0x2, @in=@loopback, 0x2, 0x3, 0x3, 0xc0, 0x7, 0x6, 0xaa}, {{@in=@local, 0x4d4, 0x2b}, 0xa, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3503, 0x2, 0x1, 0x9b, 0x2, 0x2, 0x4}, {{@in6=@remote, 0x4d4, 0x33}, 0x2, @in=@remote, 0x3506, 0x2, 0x2, 0x1, 0x200, 0x9}]}]}, 0x390}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev}, {@in6=@remote, 0x0, 0x33}, @in=@multicast1, {}, {}, {}, 0x70bd25}}}, 0xf8}}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x88001, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x12) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2f, 0x6, 0x6, 0x3f, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, 0x40, 0x700, 0x3, 0xb227}}) 12:25:57 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x1, 0xe7, 0x7f, 0x6, 0x0, 0x3, 0x400, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x30, 0x1, @perf_bp={&(0x7f0000000180), 0xa}, 0x1a00, 0xffffffffffffffff, 0x2, 0x1, 0x5, 0x1, 0x1000, 0x0, 0x8, 0x0, 0xfffffffffffffff9}, 0x0, 0x9, r0, 0x9) r1 = getpid() pidfd_open(r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x7, 0x80, 0xbc, 0x5, 0x0, 0x74db, 0x30840, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp, 0x1, 0x1be, 0x1f, 0x4, 0x0, 0xfffffffa, 0x6, 0x0, 0x71b, 0x0, 0x7}, r1, 0x9, 0xffffffffffffffff, 0xa) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x4, 0x0, &(0x7f0000000040)) [ 153.912402] audit: type=1400 audit(1752755157.563:10): avc: denied { relabelto } for pid=4116 comm="syz-executor.4" name="file0" dev="sda" ino=15977 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:framebuf_device_t:s0 tclass=file permissive=1 [ 153.916259] audit: type=1400 audit(1752755157.567:11): avc: denied { getattr } for pid=4116 comm="syz-executor.4" path="/syzkaller-testdir872568985/syzkaller.sjbwRT/5/file0" dev="sda" ino=15977 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:framebuf_device_t:s0 tclass=file permissive=1 [ 153.920133] audit: type=1400 audit(1752755157.570:12): avc: denied { read write } for pid=4116 comm="syz-executor.4" name="file0" dev="sda" ino=15977 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:framebuf_device_t:s0 tclass=file permissive=1 [ 153.922196] audit: type=1400 audit(1752755157.570:13): avc: denied { open } for pid=4116 comm="syz-executor.4" path="/syzkaller-testdir872568985/syzkaller.sjbwRT/5/file0" dev="sda" ino=15977 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:framebuf_device_t:s0 tclass=file permissive=1 [ 153.993872] tmpfs: Bad value for 'gid' [ 153.994530] tmpfs: Bad value for 'gid' [ 154.725869] audit: type=1400 audit(1752755158.376:14): avc: denied { relabelfrom } for pid=4116 comm="syz-executor.4" name="file0" dev="sda" ino=15977 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:framebuf_device_t:s0 tclass=file permissive=1 [ 154.779177] tmpfs: Bad value for 'gid' [ 154.780327] tmpfs: Bad value for 'gid' [ 154.790859] syz-executor.4 (4124) used greatest stack depth: 23584 bytes left [ 154.792975] audit: type=1400 audit(1752755158.444:15): avc: denied { unlink } for pid=285 comm="syz-executor.4" name="file0" dev="sda" ino=15977 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:framebuf_device_t:s0 tclass=file permissive=1 12:26:07 executing program 7: r0 = memfd_create(&(0x7f0000000000)=':^/\x00', 0x7) fcntl$addseals(r0, 0x409, 0x2) fstatfs(r0, &(0x7f000000b480)=""/139) 12:26:07 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2, 0x7ff}], 0x18) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x68, 0xbd, 0x6, 0x7f, 0x0, 0x1, 0x1002, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x8000, 0x101, 0x6, 0x6, 0x81, 0x6, 0x5, 0x0, 0x401, 0x0, 0x3}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x9) r1 = dup(r0) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000240)={0x1, 0x4a, &(0x7f00000001c0)="8cf482b5323b00f7a7db0ebcaf62abda295fd913572ba651fb0f5cd4c46693429a19fc214e671924c7c8ba98b1bb15443c5e15d964624acb88434660387125a65bfabb58c9785946a057"}) r2 = getpid() r3 = pidfd_open(r2, 0x0) process_madvise(r3, 0x0, 0x0, 0x4, 0x0) 12:26:07 executing program 6: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() r0 = fork() process_vm_readv(r0, 0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, 0x0, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x3}, @void}}}, 0x24}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x4, 0x1, 0x1f, 0x0, 0x3, 0x40, 0x5, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_config_ext={0x1, 0x3ff}, 0x2902, 0x7fff, 0x1, 0x2, 0x7fffffff, 0x4, 0x5d, 0x0, 0x5, 0x0, 0x3}, 0x0, 0x5, r1, 0x0) 12:26:07 executing program 2: mlockall(0x1) 12:26:07 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) process_madvise(r2, 0x0, 0x0, 0x4, 0x0) pwritev2(r2, &(0x7f00000000c0)=[{&(0x7f00000009c0)="ebc3fecb65e2d49d8d81312769f7699cff3b4640641d6385aa8a3697a87cc49716f21f718e29448988600d02d0145470467895bd73df60361e72d97541a138b8436f74ad3d71f635d075b5ae5619b8a72c6d375482662bd6d903f4bbe0afce8e123d435ef2a77c175d652bbd6f26d40e9f6bd1b766f93f1a008e79c063f2779d8d7163a2fa1794650267121ec5145769a0db19fa15a5df9eacd7e25934481f6caf75971b300df696e15502006db7ee4d293ed62b4348bbed0aa2660dbe7279b81f171db635fde212874389c9d90120ed", 0xd0}, {&(0x7f0000000ac0)="b1b61210d1d8065e2800e1263d0cdd421b1863416f9ff92d2fd6c0a27eb9bbe9f10693cbdbea0c32636e00438db9ee68a258bfabe56f5895dedbfbd13a12f8c19404bcdffa37ffa80d2761c4e43c72ba0bf6cfaf26c7abc8e039c8fe1259a23ef33d8f4f2d45f84217", 0x69}, {&(0x7f0000000b40)="eb88387a14348296b3d74f02e6ba4acee599ccf25d6ac26f71670c9eb6cd808982d60ec3aa4f489af5b0e96267dd966673e0df3c93f63aa84a17391297e3d83b21824657b491ba090d1b8ca34dd547f51c6c7b9d75b5d8670a746cedf73510cff0ab58ec038f74a21a69fcb2ed5ced0d06c8f176c7a8cd45be7c63d059b378916638063ac034fb008abe0a86c454d887a109c8cdf12369059236af52ec47da2f86f73f3f4e01eabfff49769d724b000a12f3656058c714931ae99ba66416b9b50dbe7f56ddc5d450632a1302d34615c5043c0ffaf118e27549507a645b", 0xdd}], 0x3, 0x5e06, 0x2, 0x5) r3 = getpid() pidfd_open(r3, 0x0) process_vm_readv(r3, &(0x7f0000000c40), 0x0, &(0x7f0000002180)=[{&(0x7f0000000c80)=""/212, 0xd4}, {&(0x7f0000000d80)=""/213, 0xd5}, {&(0x7f0000000e80)=""/225, 0xe1}, {&(0x7f0000000f80)=""/56, 0x38}, {&(0x7f0000000fc0)=""/171, 0xab}, {&(0x7f0000001080)=""/37, 0x25}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/183, 0xb7}], 0x8, 0x0) r4 = epoll_create(0x6) r5 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000180)={0x20000011}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x88001, 0x0) recvmmsg$unix(r6, &(0x7f0000000900)=[{{&(0x7f00000001c0), 0x6e, &(0x7f0000000380)=[{&(0x7f00000000c0)}, {&(0x7f0000000240)=""/1, 0x1}, {&(0x7f0000000280)=""/150, 0x96}, {&(0x7f0000000340)}], 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000300000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x98}}, {{&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000500)=""/9, 0x9}, {&(0x7f0000000540)=""/55, 0x37}, {&(0x7f0000000580)=""/18, 0x12}, {&(0x7f00000005c0)=""/97, 0x61}, {&(0x7f0000000640)=""/205, 0xcd}], 0x5, &(0x7f00000007c0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x110}}], 0x2, 0x22, &(0x7f0000000980)={0x77359400}) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x88001, 0x0) write$cgroup_pid(r9, &(0x7f0000000000), 0x12) write$cgroup_pid(r9, &(0x7f0000000080)=r7, 0x12) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r5, &(0x7f0000000340)={0x40002004}) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r0, &(0x7f0000000040)={0x80000001}) r10 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r10, &(0x7f0000000000)={0x4}) 12:26:07 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x80, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x41) fallocate(r0, 0x0, 0x0, 0x81) r1 = syz_open_pts(0xffffffffffffffff, 0x2c0002) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000000)=0xb4a) 12:26:07 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) 12:26:07 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000003, 0x14389, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb55, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/110, 0x6e, 0x1) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffffffff000) rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0xffffffff}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000008b80)={{{@in=@multicast2, @in6=@empty}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, 0x0) lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:framebuf_device_t:s0\x00', 0x27, 0x2) newfstatat(0xffffffffffffff9c, &(0x7f000000a680)='./file0\x00', &(0x7f000000a6c0), 0x6000) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xffffffff000) r5 = getpgrp(0x0) r6 = getpid() rt_tgsigqueueinfo(r5, r6, 0x0, &(0x7f0000000180)={0x0, 0x0, 0xffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='mpol=interleave=static,gid=', @ANYRESHEX=r7, @ANYBLOB="2c1019e0e948843df2a47ef5af232e87bdfd405edacdd1732005c61ab829311b9ecd86b6ab5e40a7afdf99238dda0b27ac92d4e0817928c6c0f64b7674888253d3a90ec5ad556b878c818fb9d58102b233bc582f8b4e46aa67926a7e2e5c82bf85e316cf41ce"]) 12:26:07 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2, 0x7ff}], 0x18) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x68, 0xbd, 0x6, 0x7f, 0x0, 0x1, 0x1002, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x8000, 0x101, 0x6, 0x6, 0x81, 0x6, 0x5, 0x0, 0x401, 0x0, 0x3}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x9) r1 = dup(r0) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000240)={0x1, 0x4a, &(0x7f00000001c0)="8cf482b5323b00f7a7db0ebcaf62abda295fd913572ba651fb0f5cd4c46693429a19fc214e671924c7c8ba98b1bb15443c5e15d964624acb88434660387125a65bfabb58c9785946a057"}) r2 = getpid() pidfd_open(r2, 0x0) [ 164.079571] audit: type=1400 audit(1752755167.730:16): avc: denied { block_suspend } for pid=4152 comm="syz-executor.3" capability=36 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [ 164.134877] tmpfs: Bad value for 'gid' [ 164.135560] tmpfs: Bad value for 'gid' 12:26:07 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000003, 0x14389, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb55, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/110, 0x6e, 0x1) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffffffff000) rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0xffffffff}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000008b80)={{{@in=@multicast2, @in6=@empty}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, 0x0) lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:framebuf_device_t:s0\x00', 0x27, 0x2) newfstatat(0xffffffffffffff9c, &(0x7f000000a680)='./file0\x00', &(0x7f000000a6c0), 0x6000) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xffffffff000) r5 = getpgrp(0x0) r6 = getpid() rt_tgsigqueueinfo(r5, r6, 0x0, &(0x7f0000000180)={0x0, 0x0, 0xffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='mpol=interleave=static,gid=', @ANYRESHEX=r7, @ANYBLOB="2c1019e0e948843df2a47ef5af232e87bdfd405edacdd1732005c61ab829311b9ecd86b6ab5e40a7afdf99238dda0b27ac92d4e0817928c6c0f64b7674888253d3a90ec5ad556b878c818fb9d58102b233bc582f8b4e46aa67926a7e2e5c82bf85e316cf41ce"]) 12:26:07 executing program 7: r0 = memfd_create(&(0x7f0000000000)=':^/\x00', 0x7) fcntl$addseals(r0, 0x409, 0x2) fstatfs(r0, &(0x7f000000b480)=""/139) 12:26:07 executing program 6: r0 = memfd_create(&(0x7f0000000000)=':^/\x00', 0x7) fcntl$addseals(r0, 0x409, 0x2) fstatfs(r0, &(0x7f000000b480)=""/139) 12:26:08 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2, 0x7ff}], 0x18) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x68, 0xbd, 0x6, 0x7f, 0x0, 0x1, 0x1002, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x8000, 0x101, 0x6, 0x6, 0x81, 0x6, 0x5, 0x0, 0x401, 0x0, 0x3}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x9) r1 = dup(r0) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000240)={0x1, 0x4a, &(0x7f00000001c0)="8cf482b5323b00f7a7db0ebcaf62abda295fd913572ba651fb0f5cd4c46693429a19fc214e671924c7c8ba98b1bb15443c5e15d964624acb88434660387125a65bfabb58c9785946a057"}) getpid() 12:26:08 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) process_madvise(r2, 0x0, 0x0, 0x4, 0x0) pwritev2(r2, &(0x7f00000000c0)=[{&(0x7f00000009c0)="ebc3fecb65e2d49d8d81312769f7699cff3b4640641d6385aa8a3697a87cc49716f21f718e29448988600d02d0145470467895bd73df60361e72d97541a138b8436f74ad3d71f635d075b5ae5619b8a72c6d375482662bd6d903f4bbe0afce8e123d435ef2a77c175d652bbd6f26d40e9f6bd1b766f93f1a008e79c063f2779d8d7163a2fa1794650267121ec5145769a0db19fa15a5df9eacd7e25934481f6caf75971b300df696e15502006db7ee4d293ed62b4348bbed0aa2660dbe7279b81f171db635fde212874389c9d90120ed", 0xd0}, {&(0x7f0000000ac0)="b1b61210d1d8065e2800e1263d0cdd421b1863416f9ff92d2fd6c0a27eb9bbe9f10693cbdbea0c32636e00438db9ee68a258bfabe56f5895dedbfbd13a12f8c19404bcdffa37ffa80d2761c4e43c72ba0bf6cfaf26c7abc8e039c8fe1259a23ef33d8f4f2d45f84217", 0x69}, {&(0x7f0000000b40)="eb88387a14348296b3d74f02e6ba4acee599ccf25d6ac26f71670c9eb6cd808982d60ec3aa4f489af5b0e96267dd966673e0df3c93f63aa84a17391297e3d83b21824657b491ba090d1b8ca34dd547f51c6c7b9d75b5d8670a746cedf73510cff0ab58ec038f74a21a69fcb2ed5ced0d06c8f176c7a8cd45be7c63d059b378916638063ac034fb008abe0a86c454d887a109c8cdf12369059236af52ec47da2f86f73f3f4e01eabfff49769d724b000a12f3656058c714931ae99ba66416b9b50dbe7f56ddc5d450632a1302d34615c5043c0ffaf118e27549507a645b", 0xdd}], 0x3, 0x5e06, 0x2, 0x5) r3 = getpid() pidfd_open(r3, 0x0) process_vm_readv(r3, &(0x7f0000000c40), 0x0, &(0x7f0000002180)=[{&(0x7f0000000c80)=""/212, 0xd4}, {&(0x7f0000000d80)=""/213, 0xd5}, {&(0x7f0000000e80)=""/225, 0xe1}, {&(0x7f0000000f80)=""/56, 0x38}, {&(0x7f0000000fc0)=""/171, 0xab}, {&(0x7f0000001080)=""/37, 0x25}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/183, 0xb7}], 0x8, 0x0) r4 = epoll_create(0x6) r5 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000180)={0x20000011}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x88001, 0x0) recvmmsg$unix(r6, &(0x7f0000000900)=[{{&(0x7f00000001c0), 0x6e, &(0x7f0000000380)=[{&(0x7f00000000c0)}, {&(0x7f0000000240)=""/1, 0x1}, {&(0x7f0000000280)=""/150, 0x96}, {&(0x7f0000000340)}], 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000300000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x98}}, {{&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000500)=""/9, 0x9}, {&(0x7f0000000540)=""/55, 0x37}, {&(0x7f0000000580)=""/18, 0x12}, {&(0x7f00000005c0)=""/97, 0x61}, {&(0x7f0000000640)=""/205, 0xcd}], 0x5, &(0x7f00000007c0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x110}}], 0x2, 0x22, &(0x7f0000000980)={0x77359400}) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x88001, 0x0) write$cgroup_pid(r9, &(0x7f0000000000), 0x12) write$cgroup_pid(r9, &(0x7f0000000080)=r7, 0x12) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r5, &(0x7f0000000340)={0x40002004}) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r0, &(0x7f0000000040)={0x80000001}) r10 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r10, &(0x7f0000000000)={0x4}) [ 164.566853] tmpfs: Bad value for 'gid' [ 164.567352] tmpfs: Bad value for 'gid' 12:26:17 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) 12:26:17 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) 12:26:17 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000003, 0x14389, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb55, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/110, 0x6e, 0x1) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffffffff000) rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0xffffffff}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000008b80)={{{@in=@multicast2, @in6=@empty}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, 0x0) lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:framebuf_device_t:s0\x00', 0x27, 0x2) newfstatat(0xffffffffffffff9c, &(0x7f000000a680)='./file0\x00', &(0x7f000000a6c0), 0x6000) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xffffffff000) r5 = getpgrp(0x0) r6 = getpid() rt_tgsigqueueinfo(r5, r6, 0x0, &(0x7f0000000180)={0x0, 0x0, 0xffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='mpol=interleave=static,gid=', @ANYRESHEX=r7, @ANYBLOB="2c1019e0e948843df2a47ef5af232e87bdfd405edacdd1732005c61ab829311b9ecd86b6ab5e40a7afdf99238dda0b27ac92d4e0817928c6c0f64b7674888253d3a90ec5ad556b878c818fb9d58102b233bc582f8b4e46aa67926a7e2e5c82bf85e316cf41ce"]) 12:26:17 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2, 0x7ff}], 0x18) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x68, 0xbd, 0x6, 0x7f, 0x0, 0x1, 0x1002, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x8000, 0x101, 0x6, 0x6, 0x81, 0x6, 0x5, 0x0, 0x401, 0x0, 0x3}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x9) r1 = dup(r0) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000240)={0x1, 0x4a, &(0x7f00000001c0)="8cf482b5323b00f7a7db0ebcaf62abda295fd913572ba651fb0f5cd4c46693429a19fc214e671924c7c8ba98b1bb15443c5e15d964624acb88434660387125a65bfabb58c9785946a057"}) 12:26:17 executing program 6: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) process_madvise(r2, 0x0, 0x0, 0x4, 0x0) pwritev2(r2, &(0x7f00000000c0)=[{&(0x7f00000009c0)="ebc3fecb65e2d49d8d81312769f7699cff3b4640641d6385aa8a3697a87cc49716f21f718e29448988600d02d0145470467895bd73df60361e72d97541a138b8436f74ad3d71f635d075b5ae5619b8a72c6d375482662bd6d903f4bbe0afce8e123d435ef2a77c175d652bbd6f26d40e9f6bd1b766f93f1a008e79c063f2779d8d7163a2fa1794650267121ec5145769a0db19fa15a5df9eacd7e25934481f6caf75971b300df696e15502006db7ee4d293ed62b4348bbed0aa2660dbe7279b81f171db635fde212874389c9d90120ed", 0xd0}, {&(0x7f0000000ac0)="b1b61210d1d8065e2800e1263d0cdd421b1863416f9ff92d2fd6c0a27eb9bbe9f10693cbdbea0c32636e00438db9ee68a258bfabe56f5895dedbfbd13a12f8c19404bcdffa37ffa80d2761c4e43c72ba0bf6cfaf26c7abc8e039c8fe1259a23ef33d8f4f2d45f84217", 0x69}, {&(0x7f0000000b40)="eb88387a14348296b3d74f02e6ba4acee599ccf25d6ac26f71670c9eb6cd808982d60ec3aa4f489af5b0e96267dd966673e0df3c93f63aa84a17391297e3d83b21824657b491ba090d1b8ca34dd547f51c6c7b9d75b5d8670a746cedf73510cff0ab58ec038f74a21a69fcb2ed5ced0d06c8f176c7a8cd45be7c63d059b378916638063ac034fb008abe0a86c454d887a109c8cdf12369059236af52ec47da2f86f73f3f4e01eabfff49769d724b000a12f3656058c714931ae99ba66416b9b50dbe7f56ddc5d450632a1302d34615c5043c0ffaf118e27549507a645b", 0xdd}], 0x3, 0x5e06, 0x2, 0x5) r3 = getpid() pidfd_open(r3, 0x0) process_vm_readv(r3, &(0x7f0000000c40), 0x0, &(0x7f0000002180)=[{&(0x7f0000000c80)=""/212, 0xd4}, {&(0x7f0000000d80)=""/213, 0xd5}, {&(0x7f0000000e80)=""/225, 0xe1}, {&(0x7f0000000f80)=""/56, 0x38}, {&(0x7f0000000fc0)=""/171, 0xab}, {&(0x7f0000001080)=""/37, 0x25}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/183, 0xb7}], 0x8, 0x0) r4 = epoll_create(0x6) r5 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000180)={0x20000011}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x88001, 0x0) recvmmsg$unix(r6, &(0x7f0000000900)=[{{&(0x7f00000001c0), 0x6e, &(0x7f0000000380)=[{&(0x7f00000000c0)}, {&(0x7f0000000240)=""/1, 0x1}, {&(0x7f0000000280)=""/150, 0x96}, {&(0x7f0000000340)}], 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000300000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x98}}, {{&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000500)=""/9, 0x9}, {&(0x7f0000000540)=""/55, 0x37}, {&(0x7f0000000580)=""/18, 0x12}, {&(0x7f00000005c0)=""/97, 0x61}, {&(0x7f0000000640)=""/205, 0xcd}], 0x5, &(0x7f00000007c0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x110}}], 0x2, 0x22, &(0x7f0000000980)={0x77359400}) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x88001, 0x0) write$cgroup_pid(r9, &(0x7f0000000000), 0x12) write$cgroup_pid(r9, &(0x7f0000000080)=r7, 0x12) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r5, &(0x7f0000000340)={0x40002004}) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r0, &(0x7f0000000040)={0x80000001}) r10 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r10, &(0x7f0000000000)={0x4}) 12:26:17 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000003, 0x14389, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb55, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/110, 0x6e, 0x1) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffffffff000) rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0xffffffff}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000008b80)={{{@in=@multicast2, @in6=@empty}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, 0x0) lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:framebuf_device_t:s0\x00', 0x27, 0x2) newfstatat(0xffffffffffffff9c, &(0x7f000000a680)='./file0\x00', &(0x7f000000a6c0), 0x6000) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xffffffff000) r5 = getpgrp(0x0) r6 = getpid() rt_tgsigqueueinfo(r5, r6, 0x0, &(0x7f0000000180)={0x0, 0x0, 0xffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='mpol=interleave=static,gid=', @ANYRESHEX=r7, @ANYBLOB="2c1019e0e948843df2a47ef5af232e87bdfd405edacdd1732005c61ab829311b9ecd86b6ab5e40a7afdf99238dda0b27ac92d4e0817928c6c0f64b7674888253d3a90ec5ad556b878c818fb9d58102b233bc582f8b4e46aa67926a7e2e5c82bf85e316cf41ce"]) 12:26:17 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000003, 0x14389, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb55, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/110, 0x6e, 0x1) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffffffff000) rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0xffffffff}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000008b80)={{{@in=@multicast2, @in6=@empty}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, 0x0) lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:framebuf_device_t:s0\x00', 0x27, 0x2) newfstatat(0xffffffffffffff9c, &(0x7f000000a680)='./file0\x00', &(0x7f000000a6c0), 0x6000) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xffffffff000) r5 = getpgrp(0x0) r6 = getpid() rt_tgsigqueueinfo(r5, r6, 0x0, &(0x7f0000000180)={0x0, 0x0, 0xffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='mpol=interleave=static,gid=', @ANYRESHEX=r7, @ANYBLOB="2c1019e0e948843df2a47ef5af232e87bdfd405edacdd1732005c61ab829311b9ecd86b6ab5e40a7afdf99238dda0b27ac92d4e0817928c6c0f64b7674888253d3a90ec5ad556b878c818fb9d58102b233bc582f8b4e46aa67926a7e2e5c82bf85e316cf41ce"]) 12:26:17 executing program 7: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) preadv2(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/199, 0xc7}, {&(0x7f00000002c0)=""/71, 0x47}, {&(0x7f0000000400)=""/90, 0x5a}], 0x3, 0x3, 0x10000, 0x5) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) r2 = getpid() r3 = pidfd_open(r2, 0x0) process_madvise(r3, 0x0, 0x0, 0x4, 0x0) readv(r3, &(0x7f0000002880)=[{&(0x7f0000000340)=""/52, 0x34}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/172, 0xac}, {&(0x7f0000001540)=""/72, 0x48}, {&(0x7f00000015c0)=""/111, 0x6f}, {&(0x7f0000001640)=""/22, 0x16}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000002680)=""/89, 0x59}, {&(0x7f0000002700)=""/222, 0xde}, {&(0x7f0000002800)=""/100, 0x64}], 0xa) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0), 0x0) setregid(0x0, 0x0) fchown(r1, r4, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 174.209119] tmpfs: Bad value for 'gid' [ 174.209706] tmpfs: Bad value for 'gid' [ 174.275203] tmpfs: Bad value for 'gid' [ 174.275922] tmpfs: Bad value for 'gid' 12:26:17 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = signalfd4(r0, &(0x7f0000000080)={[0x328a5bae]}, 0x8, 0x80800) r2 = getpid() r3 = pidfd_open(r2, 0x0) process_madvise(r3, 0x0, 0x0, 0x4, 0x0) r4 = getpid() r5 = pidfd_open(r4, 0x0) process_madvise(r5, 0x0, 0x0, 0x4, 0x0) copy_file_range(r3, &(0x7f0000000140)=0x7, r5, 0x0, 0x4, 0x0) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x401, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x6, 0x3}, 0xe) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f00000015c0), 0x400a00, 0x0) bind$bt_l2cap(r6, &(0x7f0000001600)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f0000001b00)={0x1f, 0x0, @fixed}, 0xe) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x88001, 0x0) write$cgroup_pid(r7, &(0x7f0000000000), 0x12) bind$bt_l2cap(r7, &(0x7f0000000100)={0x1f, 0x3, @any, 0x8, 0x2}, 0xe) ppoll(&(0x7f0000000000)=[{r0, 0x8}], 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) [ 174.285170] tmpfs: Bad value for 'gid' [ 174.286193] tmpfs: Bad value for 'gid' 12:26:17 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2, 0x7ff}], 0x18) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x68, 0xbd, 0x6, 0x7f, 0x0, 0x1, 0x1002, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x8000, 0x101, 0x6, 0x6, 0x81, 0x6, 0x5, 0x0, 0x401, 0x0, 0x3}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x9) dup(r0) 12:26:18 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = inotify_init1(0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r2 = memfd_secret(0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000180)={0x7ff, {{0xa, 0x4e21, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}}, {{0xa, 0x4e20, 0x400, @mcast2, 0x46}}}, 0x108) pwrite64(r1, &(0x7f0000000040)="c9bc312116219c663c75c12e901ed712c65b7ea0e944764a46c9fdc030812b48c7723ea10229cfdb8815c4ff2f37801e422a2730b71f1650ed317b973033d31b17687f347cfc57b386edae9e22ffe9270a165e4abb0b37844f3808d02bc8d6d284b200886cb2607735b355df1fd202ef131230b55a14be7c03386ece9d96bd9cfa1e6914c3fa9d1d6ea4e50b8936ee6d7828119f8e12cd1991d9f75ec3806d50b220b8d9286f3099daf88793340ca64d0dcbe902f72bbc347434fb740cadcfff4cdfc61341f1cc36fab684ec411899f8a3974a00243299cb45d5a61e412cfef331", 0xe1, 0x0) 12:26:18 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2, 0x7ff}], 0x18) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x68, 0xbd, 0x6, 0x7f, 0x0, 0x1, 0x1002, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x8000, 0x101, 0x6, 0x6, 0x81, 0x6, 0x5, 0x0, 0x401, 0x0, 0x3}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x9) 12:26:18 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x88001, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x12) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) r2 = io_uring_setup(0x3a33, &(0x7f0000000100)={0x0, 0xf487, 0x20, 0x3, 0x8a, 0x0, r1}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000180)=r1, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000001900)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0x42, 0x0, "707a2446ec9f5f7a4ad89dd8f29951689e09285a5263d63570ef234ba34807ff0bb8046618a7e25819448077e47764f4fb5deea7011802d2bb4a9a17caf7fc077226cc6beab5a6c9565e2a99ab5f912d"}, 0xd8) sendto$inet(r0, 0x0, 0x0, 0x24040841, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) 12:26:18 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2, 0x7ff}], 0x18) 12:26:18 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) 12:26:18 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) [ 175.296646] syz-executor.3 (4202) used greatest stack depth: 23520 bytes left 12:26:30 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) 12:26:30 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x88001, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x12) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) r2 = io_uring_setup(0x3a33, &(0x7f0000000100)={0x0, 0xf487, 0x20, 0x3, 0x8a, 0x0, r1}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000180)=r1, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000001900)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0x42, 0x0, "707a2446ec9f5f7a4ad89dd8f29951689e09285a5263d63570ef234ba34807ff0bb8046618a7e25819448077e47764f4fb5deea7011802d2bb4a9a17caf7fc077226cc6beab5a6c9565e2a99ab5f912d"}, 0xd8) sendto$inet(r0, 0x0, 0x0, 0x24040841, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) 12:26:30 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000003, 0x14389, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb55, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/110, 0x6e, 0x1) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffffffff000) rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0xffffffff}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000008b80)={{{@in=@multicast2, @in6=@empty}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, 0x0) lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:framebuf_device_t:s0\x00', 0x27, 0x2) newfstatat(0xffffffffffffff9c, &(0x7f000000a680)='./file0\x00', &(0x7f000000a6c0), 0x6000) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xffffffff000) r5 = getpgrp(0x0) r6 = getpid() rt_tgsigqueueinfo(r5, r6, 0x0, &(0x7f0000000180)={0x0, 0x0, 0xffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='mpol=interleave=static,gid=', @ANYRESHEX=r7, @ANYBLOB="2c1019e0e948843df2a47ef5af232e87bdfd405edacdd1732005c61ab829311b9ecd86b6ab5e40a7afdf99238dda0b27ac92d4e0817928c6c0f64b7674888253d3a90ec5ad556b878c818fb9d58102b233bc582f8b4e46aa67926a7e2e5c82bf85e316cf41ce"]) 12:26:30 executing program 1: write$evdev(0xffffffffffffffff, &(0x7f0000000080)=[{{0x77359400}, 0x2, 0x7ff}], 0x18) 12:26:30 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2, 0x7ff}], 0x18) 12:26:30 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = signalfd4(r0, &(0x7f0000000080)={[0x328a5bae]}, 0x8, 0x80800) r2 = getpid() r3 = pidfd_open(r2, 0x0) process_madvise(r3, 0x0, 0x0, 0x4, 0x0) r4 = getpid() r5 = pidfd_open(r4, 0x0) process_madvise(r5, 0x0, 0x0, 0x4, 0x0) copy_file_range(r3, &(0x7f0000000140)=0x7, r5, 0x0, 0x4, 0x0) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x401, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x6, 0x3}, 0xe) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f00000015c0), 0x400a00, 0x0) bind$bt_l2cap(r6, &(0x7f0000001600)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f0000001b00)={0x1f, 0x0, @fixed}, 0xe) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x88001, 0x0) write$cgroup_pid(r7, &(0x7f0000000000), 0x12) bind$bt_l2cap(r7, &(0x7f0000000100)={0x1f, 0x3, @any, 0x8, 0x2}, 0xe) ppoll(&(0x7f0000000000)=[{r0, 0x8}], 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) 12:26:30 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x88001, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x12) fspick(r0, &(0x7f0000000080)='./file0\x00', 0x1) fcntl$setlease(r0, 0x400, 0x1) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 12:26:30 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) 12:26:30 executing program 1: write$evdev(0xffffffffffffffff, &(0x7f0000000080)=[{{0x77359400}, 0x2, 0x7ff}], 0x18) [ 186.533894] tmpfs: Bad value for 'gid' [ 186.534292] tmpfs: Bad value for 'gid' 12:26:30 executing program 1: write$evdev(0xffffffffffffffff, &(0x7f0000000080)=[{{0x77359400}, 0x2, 0x7ff}], 0x18) 12:26:30 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x80, 0x0, 0xf7b, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xc}, 0x1900, 0x80000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000380)=""/4096, 0x39, 0x300) 12:26:30 executing program 7: munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mlock(&(0x7f0000fed000/0x13000)=nil, 0x13000) mremap(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 12:26:30 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0xc}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x32902, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x3f, 0xb9, 0x1, 0xfa, 0x0, 0x3, 0x140, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000100), 0x8}, 0x484, 0x7, 0x2, 0x5, 0x5, 0xffff760d, 0xa64, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='/dev/vcs\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) process_madvise(r2, 0x0, 0x0, 0x4, 0x0) close_range(0xffffffffffffffff, r2, 0x2) fork() r3 = socket$nl_xfrm(0x10, 0x3, 0x6) fsetxattr$security_selinux(r3, &(0x7f00000001c0), 0x0, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) setpriority(0x1, 0x0, 0xca) 12:26:30 executing program 1: r0 = syz_open_dev$evdev(0x0, 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2, 0x7ff}], 0x18) [ 186.774819] audit: type=1400 audit(1752755190.426:17): avc: denied { write } for pid=4291 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 12:26:30 executing program 1: r0 = syz_open_dev$evdev(0x0, 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2, 0x7ff}], 0x18) 12:26:30 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) 12:26:30 executing program 7: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, 0x0, 0x0, 0x0) 12:26:30 executing program 1: r0 = syz_open_dev$evdev(0x0, 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2, 0x7ff}], 0x18) 12:26:41 executing program 6: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffff, 0x726, &(0x7f0000000180)) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000080)=""/242) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x640, &(0x7f00000001c0)) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f0000000080)={0x2, 0x5}) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @void}}}]}) 12:26:41 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000003, 0x14389, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb55, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/110, 0x6e, 0x1) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffffffff000) rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0xffffffff}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000008b80)={{{@in=@multicast2, @in6=@empty}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, 0x0) lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:framebuf_device_t:s0\x00', 0x27, 0x2) newfstatat(0xffffffffffffff9c, &(0x7f000000a680)='./file0\x00', &(0x7f000000a6c0), 0x6000) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xffffffff000) r5 = getpgrp(0x0) r6 = getpid() rt_tgsigqueueinfo(r5, r6, 0x0, &(0x7f0000000180)={0x0, 0x0, 0xffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='mpol=interleave=static,gid=', @ANYRESHEX=r7, @ANYBLOB="2c1019e0e948843df2a47ef5af232e87bdfd405edacdd1732005c61ab829311b9ecd86b6ab5e40a7afdf99238dda0b27ac92d4e0817928c6c0f64b7674888253d3a90ec5ad556b878c818fb9d58102b233bc582f8b4e46aa67926a7e2e5c82bf85e316cf41ce"]) 12:26:41 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2, 0x7ff}], 0x18) 12:26:41 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000140)=[@timestamp={0x3}, @timestamp, @mss, @sack_perm, @sack_perm, @mss={0x2, 0xfffffffd}, @sack_perm, @sack_perm, @sack_perm], 0x9) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f00000000c0), 0x4) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000001c0)={0x3, {{0xa, 0x4e20, 0xff, @loopback, 0x2}}, 0x1, 0x8, [{{0xa, 0x4e22, 0x2, @local, 0x29fe}}, {{0xa, 0x4e24, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}}, {{0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x27}, 0x146}}, {{0xa, 0x4e20, 0x3, @private2, 0x8}}, {{0xa, 0x4e23, 0x5, @local, 0x3}}, {{0xa, 0x4e24, 0x4, @empty, 0x7ff}}, {{0xa, 0x4e20, 0x2, @remote, 0x7fffffff}}, {{0xa, 0x4e20, 0x7, @empty, 0x7fffffff}}]}, 0x490) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000680)={{0xa, 0x4e21, 0x9, @mcast1, 0x10001}, {0xa, 0x4e23, 0xfff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x9, [0xa9bbea1, 0x1, 0x5, 0x2, 0x57, 0x7ff, 0x401, 0x1]}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) 12:26:41 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) 12:26:41 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x88001, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x12) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x88001, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x12) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x448640, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, &(0x7f0000000140)={{r3}, "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"}) r4 = syz_open_dev$hidraw(&(0x7f0000000000), 0x2, 0x408000) ioctl$FIOCLEX(r4, 0x5451) 12:26:41 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000002800010000000000000000000000000a140000101100011f2e552fba372240084f38000a2d9c3b0603a5271027f1383a2a6965b4c04d1fb1b78afb48adc88ff4e1ffc095396c18e6446d4a581d1a7ebb7db86921805d6cbea13e224722839f35124fd2"], 0x28}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x3, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}}, 0x24000804) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r1, 0x10, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x12}}}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xdb}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000100)={'syz1', "8bce0407026424dad5314bb5dfd6a93f2946ba34dedd3ddd527eb47e06fa2fd1dbba36e337adafbd05d0a9dfa8569ab4036cdd41b1eac33a0c10e50b8c968ae1b305613742a212f50c5ad1fee9136987af089bf989f53996a3b56a1b7217c82fa4e8d94f20aa56219ae32b02c471116ad513de35eae336ac5183"}, 0x7e) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={0x0, @can={0x1d, 0x0}, @llc={0x1a, 0x201, 0x0, 0x4, 0x9, 0x1f, @remote}, @qipcrtr={0x2a, 0x4, 0x1}, 0x3f, 0x0, 0x0, 0x0, 0x7ff, &(0x7f0000000280)='veth0_macvtap\x00', 0x9, 0x9, 0x5189}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x110, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x44000012}, 0xc001) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000300)={@rand_addr, @local, 0x0}, &(0x7f0000000340)=0xc) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x808}, 0x4000030) 12:26:41 executing program 3: r0 = fork() perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f00000011c0)={0x60, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PID={0x8, 0x1c, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4814}, 0x48004) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x9) fork() pidfd_open(r0, 0x0) tkill(r0, 0x3) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x2000009, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r4, 0x0, 0x4, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0x21, 0x80000, 0x1) r6 = getpid() r7 = pidfd_open(r6, 0x0) process_madvise(r7, 0x0, 0x0, 0x4, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r5, 0x5000940f, &(0x7f00000001c0)={{r7}, "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"}) kcmp(r0, r0, 0x0, r3, 0xffffffffffffffff) [ 197.563551] tmpfs: Bad value for 'mpol' [ 197.571259] tmpfs: Bad value for 'mpol' 12:26:41 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="2f6465762f6c6f6f70300006dfb8dccd1264cacaa1f7c6787fb855f7eded31cf7df54f42997efa7d76ef2c97fc66303d9fdc8ffddb36d4fbd040"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='nfs\x00', 0x40000, &(0x7f00000001c0)='&\x00') 12:26:41 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000000c0), 0x0) [ 197.714419] tmpfs: Bad value for 'gid' [ 197.714822] tmpfs: Bad value for 'gid' 12:26:41 executing program 7: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) syz_open_procfs(r0, &(0x7f0000000040)='net/nf_conntrack_expect\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x88001, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x12) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f00000001c0)={0x3, 0x7, 0x9}) r2 = getpid() pidfd_open(r2, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x7, 0x2, 0xfb, 0x4, 0x0, 0x4f, 0x41000, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000100), 0xc}, 0x4000, 0x6, 0x0, 0x9, 0x80, 0x19, 0x6, 0x0, 0x9, 0x0, 0x6}, r2, 0x7, 0xffffffffffffffff, 0xb) 12:26:41 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2, 0x7ff}], 0x18) 12:26:41 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000000c0), 0x0) 12:26:41 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x6aff, &(0x7f0000000140)={0x0, 0x2}) io_uring_enter(r0, 0x31bf, 0x0, 0x2, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 12:26:41 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2, 0x7ff}], 0x18) [ 198.076834] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 198.082594] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 198.097861] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 198.112843] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 198.121711] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 198.122491] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 198.123152] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 198.131225] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 198.183059] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 198.200856] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 198.214199] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 198.219612] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 198.221158] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 198.224201] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 198.226956] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 198.229790] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 200.189502] Bluetooth: hci0: command 0x0c1a tx timeout [ 200.253597] Bluetooth: hci7: command 0x0c1a tx timeout [ 200.253865] Bluetooth: hci6: command 0x0c1a tx timeout [ 200.254520] Bluetooth: hci4: command 0x0c1a tx timeout [ 200.255347] Bluetooth: hci5: command 0x0c1a tx timeout [ 200.256218] Bluetooth: hci3: command 0x0c1a tx timeout [ 200.256993] Bluetooth: hci2: command 0x0c1a tx timeout [ 200.257895] Bluetooth: hci1: command 0x0c1a tx timeout 12:26:53 executing program 1: syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(0xffffffffffffffff, &(0x7f0000000080)=[{{0x77359400}, 0x2, 0x7ff}], 0x18) 12:26:53 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) 12:26:53 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x99800000, 0x6, &(0x7f0000000540)=[{&(0x7f00000000c0)="2e7f387293b891b13292ccad3919ca2d3a472463ba072e2568b55c4d6dad0199f7dffdb4723b090b082fa68ce75954d1271afced4991e0", 0x37, 0x4}, {&(0x7f00000001c0)="f9712993b00eb898b4ead5fa5301eab6570fda63526b37e920f172f90f247a10e009f2a60249a166e4fb2dc1b0f3c4803f11ee17b1a9d095312b77d32bdc430e453336", 0x43, 0x101}, {&(0x7f0000000240)="1f8e9f9388067822e3716c70f96a756dbe95229c0ed2d7f6fd642bb5a4a3b265de365f18f4f159fc0fbbd6fe8c08bfbf297f67777c9c78ee180aab54dacfa02bf5f32d05fc9b468c03a275075af7afcc256c4f25412c393f52bc945acf6dc18000a6097415e2288c249e971e6a9baec19833021f4c73b9f8ff13cd364c9ffb219f79697a1155527b044bb6d2fc733088edcebeba681dfcc7c26d4f93d6948b6755eab8f56908804c02245d48ce8c497877af6c934f0af764981d71f9932b4b6eeaea00c06f016f2e0046e95f2ce1e2aa884eec995ac5d7b4a3ad120b99ccd9b4ab5678ca653c2c5433ae91", 0xeb, 0x3}, {&(0x7f0000000340)="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", 0xfd, 0x4}, {&(0x7f0000000440)="1b2908a6ea9a1e84c4f3d44b5632bc7920df8910caa5199163d188fce2bfc3954c7b7cdcc1dcfe406362b03937f7fc9b37b34ef8313005e61cb72cc9ef07d35c616989002745c29802e71e212db2c21bf207859b9c419761da505740d2", 0x5d, 0x7}, {&(0x7f00000004c0)="6ecce65104fc23e5311f79f58ed289bec9aabffd653197f86964ecc94cfd84b211a040e4fe30148b75d88f80b19692f56f6d8cb0f20f23cdfc4374961e2de271aa5a6c1e1535051a2f6303901e10bf8e6a8fa3bb", 0x54, 0x81}], 0x0, &(0x7f0000000600)={[{@grpjquota}, {@barrier_val={'barrier', 0x3d, 0xc5}}, {@grpid}], [{@smackfsroot={'smackfsroot', 0x3d, 'sysfs\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x61, 0x34, 0x31, 0x65, 0x63, 0x35, 0x61], 0x2d, [0x64, 0x34, 0x38, 0x35], 0x2d, [0x61, 0x35, 0x36, 0x37], 0x2d, [0x65, 0x64, 0x39, 0x66], 0x2d, [0x31, 0x53, 0x61, 0xf36cbc0e894feec1, 0x66, 0x61, 0x66, 0x63]}}}, {@fowner_lt={'fowner<', r1}}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xfffffffffffffe4e, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x822, 0x0) 12:26:53 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) 12:26:53 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080), 0x6) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x88001, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x12) ioctl$sock_bt_hci(r1, 0x800448d4, &(0x7f0000000100)="4b75cdf8801d5bbe0d2858921938b453466ab26e29c503000000000000d41f") 12:26:53 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) 12:26:53 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x6aff, &(0x7f0000000140)={0x0, 0x2}) io_uring_enter(r0, 0x31bf, 0x0, 0x2, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 12:26:53 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="ed6214e7dd6a0e9d1a2a0c7b1e2ad426d69b005d", 0x14}], 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x88001, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x12) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) 12:26:53 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x0, 0x100000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000080)) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000000)=0x10000, 0x8, 0x2) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 12:26:53 executing program 1: syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(0xffffffffffffffff, &(0x7f0000000080)=[{{0x77359400}, 0x2, 0x7ff}], 0x18) [ 209.593889] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 209.603008] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 209.604830] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 209.611846] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 209.619854] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 209.624052] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 209.629826] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 209.639313] Bluetooth: hci7: Opcode 0x0c1a failed: -4 12:26:53 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x19) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x13, r1, 0x0) syz_io_uring_submit(r2, 0x0, 0x0, 0x0) r3 = getpid() r4 = pidfd_open(r3, 0x0) process_madvise(r4, 0x0, 0x0, 0x4, 0x0) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r5 = getpid() r6 = pidfd_open(r5, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) process_madvise(r6, 0x0, 0x0, 0x4, 0x0) r7 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x206900, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000040)=[r4, r0, r6, r7], 0x4) 12:26:53 executing program 6: io_setup(0x8, &(0x7f0000000040)=0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x54b041, 0x0) io_submit(r0, 0x3, &(0x7f0000001e00)=[&(0x7f0000001c00)={0x0, 0x0, 0x8, 0x0, 0x0, r1, &(0x7f0000001b80)='r', 0x7fffffffffffffff}]) [ 209.730171] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 209.731656] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 209.732710] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 209.733701] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 209.734845] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 17 prio class 0 [ 209.736663] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 209.737254] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 209.738227] Buffer I/O error on dev sr0, logical block 0, async page read [ 209.742146] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 209.742802] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 209.743491] Buffer I/O error on dev sr0, logical block 1, async page read [ 209.750799] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 209.751286] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 209.751996] Buffer I/O error on dev sr0, logical block 2, async page read [ 209.758700] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 209.759156] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 209.760008] Buffer I/O error on dev sr0, logical block 3, async page read [ 209.775010] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 209.775528] I/O error, dev sr0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 209.776169] Buffer I/O error on dev sr0, logical block 8, async page read 12:26:53 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x6aff, &(0x7f0000000140)={0x0, 0x2}) io_uring_enter(r0, 0x31bf, 0x0, 0x2, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 209.783046] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 209.783535] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 209.784193] Buffer I/O error on dev sr0, logical block 4, async page read [ 209.796283] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 209.796785] I/O error, dev sr0, sector 9 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 209.797461] Buffer I/O error on dev sr0, logical block 9, async page read [ 209.802593] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 209.803055] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 209.803956] Buffer I/O error on dev sr0, logical block 5, async page read [ 209.809866] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 209.810323] I/O error, dev sr0, sector 10 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 209.811028] Buffer I/O error on dev sr0, logical block 10, async page read [ 209.820907] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 209.821366] Buffer I/O error on dev sr0, logical block 6, async page read [ 209.832235] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 209.836593] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 209.837532] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 209.841544] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 209.843542] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 209.844158] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 209.847562] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 209.848148] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 209.850595] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 209.851253] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 209.854602] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 209.858785] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 209.859399] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 209.863522] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 209.875222] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 209.883657] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 209.884945] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 209.887093] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 209.888953] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 209.890236] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 209.891957] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 209.894882] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 209.897625] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 209.898855] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 209.900212] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 209.901740] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 209.902958] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 209.904549] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 209.906225] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 209.907898] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 209.909130] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 209.910758] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 209.911994] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 209.913692] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 209.915225] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 209.918606] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 209.919786] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 209.921309] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 209.940912] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 209.942884] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 209.951216] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 209.959444] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 209.965846] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 209.982292] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 209.988148] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 209.989338] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 210.008608] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.016676] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.018265] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.023571] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.035600] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.043587] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.048049] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.052971] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.054167] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.073314] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.090579] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.098604] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.099731] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.108612] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.115827] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.119783] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.120493] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.121101] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.123514] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.124150] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.125362] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.126006] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.126704] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.127347] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.128169] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.128975] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.129821] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.130667] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.132001] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.132609] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.133259] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.133958] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.134912] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.138125] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.140545] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.142835] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.143527] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.145016] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.146548] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.147730] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.149669] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.151038] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.152729] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.154145] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.155504] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.157429] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.158011] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.159528] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.160172] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.162149] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.162855] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.165546] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.166145] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.166837] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.167891] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.170008] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.175456] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.176052] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.176875] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.177643] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.178295] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.180516] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.181113] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.182814] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.183423] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.185162] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.185787] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.187503] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.188096] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.190532] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.191749] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.192931] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.194622] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.195211] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.197130] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.197925] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.199498] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.201262] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.203613] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.204259] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.206775] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.207587] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.209550] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.210197] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.211151] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.212552] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.213448] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.215539] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.216127] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.217355] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.218134] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.219899] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.220607] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.222664] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.223246] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.225222] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.226106] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.228953] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.230103] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.287012] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.288770] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.289998] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.291586] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.292982] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.294353] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.295597] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.296940] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.298312] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.299529] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.300729] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.302758] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.304248] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.305703] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.306938] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.310613] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.312213] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.313460] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.314715] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.316016] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.317953] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.319543] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.320747] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.321999] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.323688] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.324869] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.326083] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.327321] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.328846] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.330647] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.332095] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.335599] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.336990] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.339423] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.340670] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.344621] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.349680] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.350953] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.354601] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.355848] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.359133] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.362582] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.365593] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.366839] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.370969] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.373228] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.375566] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.389799] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.392666] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.393305] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.395497] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.396083] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.397337] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.425015] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.427275] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.427984] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.487785] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.489121] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.490954] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.492208] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.493764] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.495278] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.496675] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.498013] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.499705] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.500862] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.502307] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.503757] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.505137] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.506297] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.507613] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.508981] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.510129] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.511763] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.512879] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.514161] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.515681] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.517081] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.518584] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.520130] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.521591] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.523221] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.528585] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.529720] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.531061] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.533103] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.534369] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.535895] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.537238] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.538771] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.540057] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.541193] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.542688] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.544232] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.545571] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.547061] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.548328] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.549615] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.550874] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.552264] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.553673] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.554875] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.555998] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.557273] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.558695] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.559868] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.560994] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.562682] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.564102] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.565355] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.566902] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.568156] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.569288] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.570702] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.572095] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.573605] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.575612] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.576836] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.578652] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.586310] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.588082] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.589205] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.590597] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.591627] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.592824] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.593986] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.595106] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.596768] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.597855] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.599274] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.600601] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.602002] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.603350] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.604753] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.606005] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.607229] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.608704] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.609793] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.611111] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.612325] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.613668] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.614820] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.615901] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.617121] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.618588] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.619667] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.620826] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.622750] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.623938] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.625358] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.626673] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.627976] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.629051] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.630362] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.631897] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.633097] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.634611] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.635675] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.638876] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.640259] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.689729] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.691340] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.692654] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.693981] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.695225] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.696635] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.697696] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.698880] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.700116] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.701336] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.702909] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.704163] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.705628] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.706688] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.708018] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.709187] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.710560] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.711637] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.712927] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.713995] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.715053] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.716296] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.717635] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.718879] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.720059] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.721029] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.722042] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.723019] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.724128] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.725078] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.726027] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.726990] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.728087] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.729180] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.730293] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.731414] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.732369] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.733463] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.734534] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.735510] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.736647] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.737605] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.739050] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.758630] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.759855] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 210.760854] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 211.901466] Bluetooth: hci0: command 0x0c1a tx timeout [ 211.965491] Bluetooth: hci3: command 0x0c1a tx timeout [ 211.965989] Bluetooth: hci2: command 0x0c1a tx timeout [ 211.966451] Bluetooth: hci1: command 0x0c1a tx timeout [ 212.029482] Bluetooth: hci7: command 0x0c1a tx timeout [ 212.029943] Bluetooth: hci6: command 0x0c1a tx timeout [ 212.030431] Bluetooth: hci4: command 0x0c1a tx timeout [ 212.030874] Bluetooth: hci5: command 0x0c1a tx timeout 12:27:04 executing program 3: r0 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) syz_io_uring_setup(0x2d9f, &(0x7f0000000000)={0x0, 0x599c, 0x10, 0x1, 0x17}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) r2 = mmap$IORING_OFF_SQES(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000000, 0x2010, r0, 0x10000000) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003940)=[{{&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/250, 0xfa}], 0x3, &(0x7f0000002440)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}, {{&(0x7f0000002500)=@abs, 0x6e, &(0x7f00000038c0)=[{&(0x7f0000002580)=""/46, 0x2e}, {&(0x7f00000025c0)=""/209, 0xd1}, {&(0x7f00000026c0)=""/251, 0xfb}, {&(0x7f00000027c0)=""/172, 0xac}, {&(0x7f0000002880)=""/4, 0x4}, {&(0x7f00000028c0)=""/4096, 0x1000}], 0x6}}], 0x2, 0x2, &(0x7f00000039c0)={0x0, 0x989680}) r7 = getpid() r8 = pidfd_open(r7, 0x0) process_madvise(r8, 0x0, 0x0, 0x4, 0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000003a80)=[0xffffffffffffffff, r3, r4, r8, r6], 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x73e514ae239ef9aa, 0x6000, @fd_index=0x8, 0x5, &(0x7f0000000140), 0x0, 0x5}, 0x5) syz_io_uring_setup(0x3a43, &(0x7f00000001c0)={0x0, 0x0, 0x36, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 12:27:04 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x19) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x13, r1, 0x0) syz_io_uring_submit(r2, 0x0, 0x0, 0x0) r3 = getpid() r4 = pidfd_open(r3, 0x0) process_madvise(r4, 0x0, 0x0, 0x4, 0x0) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r5 = getpid() r6 = pidfd_open(r5, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) process_madvise(r6, 0x0, 0x0, 0x4, 0x0) r7 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x206900, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000040)=[r4, r0, r6, r7], 0x4) 12:27:04 executing program 1: syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(0xffffffffffffffff, &(0x7f0000000080)=[{{0x77359400}, 0x2, 0x7ff}], 0x18) 12:27:04 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) 12:27:04 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) 12:27:04 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x6aff, &(0x7f0000000140)={0x0, 0x2}) io_uring_enter(r0, 0x31bf, 0x0, 0x2, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 12:27:04 executing program 4: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x60, 0x0}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f00000001c0)={r3, 0x3, r0, 0x6, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000040)={0x0, 0x0, r0, 0x80000000}) 12:27:04 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x19) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x13, r1, 0x0) syz_io_uring_submit(r2, 0x0, 0x0, 0x0) r3 = getpid() r4 = pidfd_open(r3, 0x0) process_madvise(r4, 0x0, 0x0, 0x4, 0x0) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r5 = getpid() r6 = pidfd_open(r5, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) process_madvise(r6, 0x0, 0x0, 0x4, 0x0) r7 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x206900, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000040)=[r4, r0, r6, r7], 0x4) [ 220.695676] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 220.697235] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 220.698405] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 220.699504] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 220.700678] blk_print_req_error: 344 callbacks suppressed [ 220.700697] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 220.712746] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 220.713674] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 220.714979] buffer_io_error: 350 callbacks suppressed [ 220.714995] Buffer I/O error on dev sr0, logical block 0, async page read [ 220.733455] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 220.734615] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 220.735842] Buffer I/O error on dev sr0, logical block 1, async page read 12:27:04 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, 0x0, 0x0) [ 220.765500] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 220.766627] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 6 prio class 0 [ 220.767882] Buffer I/O error on dev sr0, logical block 2, async page read [ 220.769038] Buffer I/O error on dev sr0, logical block 3, async page read [ 220.770146] Buffer I/O error on dev sr0, logical block 4, async page read [ 220.771278] Buffer I/O error on dev sr0, logical block 5, async page read [ 220.772371] Buffer I/O error on dev sr0, logical block 6, async page read [ 220.773504] Buffer I/O error on dev sr0, logical block 7, async page read [ 220.775728] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 220.776640] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 220.777866] Buffer I/O error on dev sr0, logical block 0, async page read [ 220.799677] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 220.800811] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 220.802197] Buffer I/O error on dev sr0, logical block 1, async page read [ 220.828590] Bluetooth: hci0: Opcode 0x0c1a failed: -4 12:27:04 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x19) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x13, r1, 0x0) syz_io_uring_submit(r2, 0x0, 0x0, 0x0) r3 = getpid() r4 = pidfd_open(r3, 0x0) process_madvise(r4, 0x0, 0x0, 0x4, 0x0) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r5 = getpid() r6 = pidfd_open(r5, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) process_madvise(r6, 0x0, 0x0, 0x4, 0x0) r7 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x206900, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000040)=[r4, r0, r6, r7], 0x4) [ 220.831555] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 220.836664] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 220.837908] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 220.843358] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 220.844059] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 220.844891] I/O error, dev sr0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 220.854684] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 220.855815] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 220.856755] I/O error, dev sr0, sector 9 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 220.858914] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 220.859889] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 220.863015] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 220.868868] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 220.870367] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 220.873586] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 220.878104] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 220.880052] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 220.882941] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 220.885720] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 220.891870] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 220.897268] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 220.898656] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 220.903544] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 220.904786] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 220.908931] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 220.911468] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 220.916886] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 220.918998] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 220.927967] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 220.938353] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 220.949722] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 220.957092] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 220.958570] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 220.959872] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 12:27:04 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, 0x0, 0x0) 12:27:04 executing program 3: r0 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) syz_io_uring_setup(0x2d9f, &(0x7f0000000000)={0x0, 0x599c, 0x10, 0x1, 0x17}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) r2 = mmap$IORING_OFF_SQES(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000000, 0x2010, r0, 0x10000000) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003940)=[{{&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/250, 0xfa}], 0x3, &(0x7f0000002440)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}, {{&(0x7f0000002500)=@abs, 0x6e, &(0x7f00000038c0)=[{&(0x7f0000002580)=""/46, 0x2e}, {&(0x7f00000025c0)=""/209, 0xd1}, {&(0x7f00000026c0)=""/251, 0xfb}, {&(0x7f00000027c0)=""/172, 0xac}, {&(0x7f0000002880)=""/4, 0x4}, {&(0x7f00000028c0)=""/4096, 0x1000}], 0x6}}], 0x2, 0x2, &(0x7f00000039c0)={0x0, 0x989680}) r7 = getpid() r8 = pidfd_open(r7, 0x0) process_madvise(r8, 0x0, 0x0, 0x4, 0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000003a80)=[0xffffffffffffffff, r3, r4, r8, r6], 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x73e514ae239ef9aa, 0x6000, @fd_index=0x8, 0x5, &(0x7f0000000140), 0x0, 0x5}, 0x5) syz_io_uring_setup(0x3a43, &(0x7f00000001c0)={0x0, 0x0, 0x36, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) [ 220.963643] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 220.966136] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 220.974079] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 220.976238] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 220.982105] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 220.988004] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 220.990120] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 220.991350] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.004267] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 221.005643] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 221.006638] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 221.007596] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 221.009599] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.010698] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.015328] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.016650] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 12:27:04 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) [ 221.018680] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.023288] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.030190] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.033675] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.037299] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.040867] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.043828] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.048356] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.051254] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.055779] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.069284] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.070360] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.074836] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.079263] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.080586] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.081963] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.084634] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.090679] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.093519] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.099042] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.100263] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 12:27:04 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, 0x0, 0x0) [ 221.101586] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.106627] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.107917] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.110736] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.113196] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.114789] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.116239] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.118330] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.119872] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.121892] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.124233] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.126230] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.132887] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.137224] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.138988] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.140854] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.142654] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.144435] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.146135] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.150098] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.151322] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.155159] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.158349] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.159964] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.165069] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.167589] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.170448] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.173364] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.174615] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.182643] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.192336] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.194142] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 12:27:04 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) [ 221.224293] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.237901] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.248068] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.263855] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.268166] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.272364] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 12:27:04 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) [ 221.278715] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.279868] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.284367] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.285206] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 12:27:04 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080), 0x0) [ 221.304263] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.308767] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.316576] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.317367] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.327557] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.328648] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.329475] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.330686] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.331630] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.332439] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.342234] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.345367] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.346225] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.347244] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.348629] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.353742] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.359076] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.363555] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.372149] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.377838] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.382670] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.383857] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.384825] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.390038] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.391510] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.396108] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.402658] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.404038] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.407973] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.410009] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.412817] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.414762] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.424608] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.432009] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.440903] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.446801] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.448163] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.450078] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.451661] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.453003] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.455024] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.456341] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.459609] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.461634] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.463797] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.465585] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.466360] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.467103] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.475235] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.485111] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.487871] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.491422] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.501637] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.504908] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.506798] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.512173] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.516728] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.520201] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.530589] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.542476] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.543310] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.544691] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.545357] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.549507] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.550177] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.564823] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.572010] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.581873] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.588150] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.588865] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.591230] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.593896] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.598576] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.605119] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.607640] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.624407] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.625231] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.626450] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.627746] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.631141] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.634904] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.636702] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.653364] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.654612] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.681797] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 221.682620] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 221.683176] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 221.683740] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 02 00 00 02 00 [ 221.686128] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 12:27:05 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080), 0x0) 12:27:05 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, 0x0, 0x0) 12:27:05 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = signalfd4(r0, &(0x7f0000000000)={[0x7]}, 0x8, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f0000000e00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000300)={0xaa0, r4, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x29, 0x2a, [@peer_mgmt={0x75, 0x16, {0x0, 0x0, @val=0xc4, @void, @val="d697b47fd29fdbadb3a21217fe74502d"}}, @channel_switch={0x25, 0x3, {0x0, 0xa1, 0x55}}, @channel_switch={0x25, 0x3, {0x0, 0x84, 0x80}}, @challenge={0x10, 0x1, 0x1f}]}, @NL80211_ATTR_IE_PROBE_RESP={0x17b, 0x7f, [@sec_chan_ofs={0x3e, 0x1, 0x3}, @peer_mgmt={0x75, 0x14, {0x0, 0x3, @void, @void, @val="befa6f7aec18d80fb38da660d0ba02b2"}}, @mic={0x8c, 0x10, {0x8c0, "264fcd629bcc", @short="0cf77ac89ed40f5c"}}, @random={0x6, 0x52, "8e49b74389997d854bbff00d2abcee4fb8275597e596a9a40876dce16acbf806423fcd25926b3a5edd9cf34e8ada5689ac30ff1b7216f6564ff94d6a3c27e2110f0761ebb4f38c17b814d08eb922eeb82676"}, @mesh_chsw={0x76, 0x6, {0x20, 0x81, 0x25, 0x13}}, @ibss={0x6, 0x2, 0x800}, @random_vendor={0xdd, 0xea, "78452d1b3ce11f2ff3a259c0f4cfa563c3d791cf32896e98cbf41b57f4add2a6bb1a0b17d823e2945da3253f788461cdd5c88bfbc8f6f568aa27f7ad72a55e543e4b615509226ae79099bf6f621126e73f1491954c4cf535cbaaa69e1b8a112dad0ded74644c13a82091ba809a7fd24f1a15c58718f6ad50779563ed9ef9784e030b73a25f165d1eee30d9f7c2f04af24b68c2c176b90eeb34d07e7b3db2e4d3e4f5ee6c44f7724fc15cd7f2847d043e2be46f1b6c93aa344d79c91c1762d3a3c3804405c9bc37e1381838a58c16ddfdeef39735916308f54150591fc169323f3b068ae24f68fd960481"}]}, @NL80211_ATTR_BEACON_HEAD={0x245, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x7}, @device_a, @device_a, @random="6da9724477a1", {0x5, 0xd1}}, @ver_80211n={0x0, 0x81, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, 0x8, @random=0x4, 0xe88, @void, @void, @val={0x3, 0x1, 0x3}, @void, @val={0x6, 0x2, 0xfe01}, @val={0x5, 0xa8, {0x14, 0x5f, 0x6, "f1a49af1922669844143b85460560463bf9d7fb823e0edb9b4577510535231738a7d7202f1e1caae74af01370aaa9efc9f72cd113d9f9ee34348b4e715f9f290e3dfd17f7b9db64510b26e2aebed5ae59e43f7cbe2396ccf9a11624a02afc486c57bf07a25ebe6bca924f1758cc772d799276e376b149bc94fd6f89eabfabf8972a701387c822d359c3373d160d24d0166f7dd809f839c2381fe1a1b035ad04cfdcc4dc682"}}, @val={0x25, 0x3, {0x1, 0x28, 0x9}}, @val={0x2a, 0x1, {0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0xfe, 0x0, 0x2}}, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x9, 0x1, 0x3e, 0xb3}}, [{0xdd, 0x13, "9797b99561af5c64f4013e052197c6f6daaafa"}, {0xdd, 0xb7, "23c029f4a455de3c9f6b96f80ce974edef8a9458cfe1873e005f1fe8eeca86ab1273842f0f2fd38725c06483b7687b62b53402d1e1412c351805663343f62e9e6ace8f3dd3a3b91c36551ca715fd06b61609ea4bd7c3471ee7a4b3f30a7262cae648beaf2da1f5b3b8ace2f205ba196bb88d65e56738cb416e7b048e3b63381ab59b65db294a51cf4ec6e536f75ae576e0d4f64242684d5b3f615a2f4d354a5d87469c104c55bb11e5cd512b3487f5094e762f3944e942"}, {0xdd, 0x7a, "263a3b64e574ec57bd51fcf04436ec67faa83f12fcfec1e0d75d4fa0ac9816defe886fdc5f0a74cfc0f41ea7d548b70732b200278ffc04a7065347621c21e2487afba17a10c6ee9e406b8050862d9fa65453fe78399cad4a5b382ec3860a7233b5958058a788f70be4a30002b83222432ffd2dcded5865c0bed2"}]}}, @NL80211_ATTR_PROBE_RESP={0x551, 0x91, "03eefe1bb85e0901629424c9d8ae6ef60ace34885508ee0fd3f527030f219915b926cd21e6a4d0be41c1e817994f5a2f31650c64449495bd6eb165aba052b44b54c016f8b90a9cd1ad9a4e4ec533ff5ee360bbdfd6d0faab184953353e293465292ec33d1ee2b06e07a48d6bfc1fc527d51fc75a364444efc001c1e28284bc6679996bf209a518c60631e3943c16f80fcd3b74e167a221f4f1c4ce501784eecdf285c0b1809ae461d6776aa4076863dbcad6355f23d72a8c1f9262bd804f54701a8c74eff5226adfb0d53c26e39369d43db673ddfb4fe83ae6d3c08a807ed5a2efae70269fd6db33ec170e467c0d3b96311e753c31911c7e345f7bda4bf8129dd8ff54406ecd45ae82a5fde29aab2a596a9850ae781c530a3f67b5bc90cf8818f1d0d30dab1631e3b328d463a37bb79221a39abb107138298e23482718f96e431dfbecb876b718c4cc9e85ecd161b63702bd3b79aded0c6eb3efc78367ca9a32a1d98f594aa460387fbb02706c9345db7a26357a5428cdfb45cbecab52a1d3b931488191417e02f31d61f7759a2f66af6b33b3d7ab970afd2d3efc2403b71b864a31748e970207fc1d3b159d9fdd6a24c54d6a3792549026a43ec4c5e368c39229002192e66a743bd9754d74a34da180a5a1827d3e6c52a3249917939580b9a310a29be7c9520c3936d718f777e7797de201aa6fe77fad38828cc4a65d5a0bc4050e7d80b10051119cdb35c392532bc49d008e504415d399f5e5c21ec5e22626fbe5a8169c165dbe8a90ede35c3724db16690a6fbbf6726a1177afded6d7304d137a4b22b31c56db2990dc7b495b286c70ebe9441e3776eb29de18e0809213b92601d8f3d8b6ef6e03d7b99f31d5c1a400d662e56239b4332da7bf129206a8ff0248471c1e24e60ebd2ee285faadd1041e3eadc525d63b70a4820d98c74e7aba6f822c6ce24868b8977b8dc2580316fee705114a5e92ae1f46717154c6d4429353888a891942c298cb31a9c1e5a98f99b1f05a58d62a59343c9a57d0f85fb41b1911948c23563358d5082e53a98d8f87de8484038aeb46fdfe04282f7b65b56b03a3b32a09cce184b0ed31cb0fc036d69b3b6da157dc8c70a3fe99b513e7c4465011f08473aff5836e320ba6b22eb763dd6ec2a365845143914a1a6e6132d9148a8790a94597295e8220be2beb126d626c88b77cb3cf9a8a3ba46b28745bf9016bc42b581163e5f89127c1b38babec7d5276af51102bc12ed6b994496fbaeeb275d3e40efb931c685c010b638d4a99caa29c03588d574e74320555fa7f69f0ee000bf6247d3e9a080e296fdef97d867d78aafbda5aefb71ba75efff58df335b8d8775f5befbeca2edb49e2dde70cafbdb98902dfb1e73e0863b7dcfc63b962c0e133829bd7d81e7695340ff1ff5e0f204fcde93f232d546197d22d320bc413dab953121b0691e8633914a2c70ce58a7bb86dda457e9af385c275b31534d2535fd6bccd540bcc1765e5f1723c02b56769e7d38f2ff0c5531a1d85c5a0266bd1c70579568cf671be881baa419255dab0bc1634f67729f3d0acea46c71c86f7d77371ea08687c05e137667068fd7ca01f9602fa14706ee5fcdbde54468696b1d2e762fa8d4b676de94cbec49cf0809496051c7f439f046efe2ddf0be0e23abe98ac44eebfb674e43278050e819e56a7d660daea4f145bf42ac4e62709ef710c36ad7e519ed391495ebaf361fe31ca4e97368e3b5cc194a3f2f7d59b5b74e38f0bb20500a5210398f5fb37463dd7a934be81ff8ff9a7711349c2f9a2ccd7407a197ea27b39cb888ce5ecdd2494863522c3fbe0ca9d70adb5b12ed5aa68689c4f78de0443f6f4884133beb66c3699bec36b04503114a47f650054003dc26b9cb7d0817a7c5fb286241e28224bd96e2d"}, @NL80211_ATTR_BEACON_TAIL={0xb9, 0xf, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x20, 0xb1, 0x9}}, @measure_req={0x26, 0x73, {0x81, 0xc8, 0x5, "a8f27e881f64696a0deafaf8b44d14af55259ef2cfb9b17b96d932fd225aa8208dac2989372ecc804d9e37ccf5a7200435fc6a73860f6e6e1c7037f6fa4fa941240642617841edbceba7da949a5d8a88242da2aeff5278347487aa6eebb9000c0a72495855b10b4ef9e0fee9bf7d5aae"}}, @chsw_timing={0x68, 0x4, {0x20, 0xf266}}, @prep={0x83, 0x25, @ext={{}, 0x9, 0x81, @broadcast, 0x9, @device_b, 0x4, 0x20, @device_b}}, @channel_switch={0x25, 0x3, {0x1, 0xb4, 0xe4}}, @cf={0x4, 0x6, {0x5, 0x3, 0x9, 0xffc1}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x8c, 0x7f, [@prep={0x83, 0x1f, @not_ext={{}, 0x20, 0x7, @device_a, 0x5, "", 0x11, 0x2, @device_b, 0x8ccf}}, @mesh_chsw={0x76, 0x6, {0x20, 0x4, 0x3e}}, @gcr_ga={0xbd, 0x6, @broadcast}, @ssid={0x0, 0x6, @default_ibss_ssid}, @measure_req={0x26, 0x44, {0x1, 0x2, 0x70, "cc25d86c88d8d216bf558424537d07dbb7c615babdc3cc1b92ee3d65e7796846d4df856db39719e5ab3c3976b046751dcb10322e71466d44ed83b1790a1be89e37"}}, @channel_switch={0x25, 0x3, {0x1, 0x9, 0x80}}, @ibss={0x6, 0x2, 0x6}]}]}, 0xaa0}, 0x1, 0x0, 0x0, 0x20008040}, 0x40000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x1, {{}, {@val={0x3, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}]}, 0x5c}}, 0x0) 12:27:05 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x88001, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x12) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x79}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "e032ffe68ec84ca509445af8b117269f"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="c7f5d52ef1fd"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "123845933c2f0475eb270563b3907fe7"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x12}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xfff}, @NL80211_ATTR_SSID={0x1c, 0x34, @random="86b16efe115c1a9fe8a20dfa3af30a4a5c7fac9e06c93ab7"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="1f6903e4ee61"}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000) r3 = getpid() r4 = pidfd_open(r3, 0x0) process_madvise(r4, 0x0, 0x0, 0x4, 0x0) fsetxattr$security_selinux(r4, &(0x7f0000000440), &(0x7f0000000000)='system_u:object_r:setrans_exec_t:s0\x00', 0x24, 0x0) [ 221.698559] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.703629] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.710716] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.718642] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.720966] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.727699] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 12:27:05 executing program 5: clone3(&(0x7f0000005880)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = clone3(&(0x7f0000005880)={0x80001800, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(r0, &(0x7f0000000000)='attr/keycreate\x00') mkdirat$cgroup(r1, &(0x7f0000000040)='syz0\x00', 0x1ff) [ 221.739713] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.742050] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 12:27:05 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080), 0x0) [ 221.761589] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.762205] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.767704] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.777491] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.778172] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.791809] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.7'. [ 221.801743] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.802347] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.807560] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.809323] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.815578] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.816153] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.821509] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.826496] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.828670] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.832605] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.833260] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.841498] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.842083] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.855491] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.856073] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.897682] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.900441] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.903348] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.910522] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.912551] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.917295] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.920845] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.925678] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.930311] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.937562] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 221.941630] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 222.003814] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.7'. [ 222.782441] Bluetooth: hci0: command 0x0c1a tx timeout [ 222.845425] Bluetooth: hci1: command 0x0c1a tx timeout [ 222.909486] Bluetooth: hci7: command 0x0c1a tx timeout [ 222.910123] Bluetooth: hci6: command 0x0c1a tx timeout [ 222.910722] Bluetooth: hci4: command 0x0c1a tx timeout [ 222.911292] Bluetooth: hci5: command 0x0c1a tx timeout [ 222.911900] Bluetooth: hci3: command 0x0c1a tx timeout [ 222.912357] Bluetooth: hci2: command 0x0c1a tx timeout 12:27:14 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) 12:27:14 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = signalfd4(r0, &(0x7f0000000000)={[0x7]}, 0x8, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f0000000e00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000300)={0xaa0, r4, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x29, 0x2a, [@peer_mgmt={0x75, 0x16, {0x0, 0x0, @val=0xc4, @void, @val="d697b47fd29fdbadb3a21217fe74502d"}}, @channel_switch={0x25, 0x3, {0x0, 0xa1, 0x55}}, @channel_switch={0x25, 0x3, {0x0, 0x84, 0x80}}, @challenge={0x10, 0x1, 0x1f}]}, @NL80211_ATTR_IE_PROBE_RESP={0x17b, 0x7f, [@sec_chan_ofs={0x3e, 0x1, 0x3}, @peer_mgmt={0x75, 0x14, {0x0, 0x3, @void, @void, @val="befa6f7aec18d80fb38da660d0ba02b2"}}, @mic={0x8c, 0x10, {0x8c0, "264fcd629bcc", @short="0cf77ac89ed40f5c"}}, @random={0x6, 0x52, "8e49b74389997d854bbff00d2abcee4fb8275597e596a9a40876dce16acbf806423fcd25926b3a5edd9cf34e8ada5689ac30ff1b7216f6564ff94d6a3c27e2110f0761ebb4f38c17b814d08eb922eeb82676"}, @mesh_chsw={0x76, 0x6, {0x20, 0x81, 0x25, 0x13}}, @ibss={0x6, 0x2, 0x800}, @random_vendor={0xdd, 0xea, "78452d1b3ce11f2ff3a259c0f4cfa563c3d791cf32896e98cbf41b57f4add2a6bb1a0b17d823e2945da3253f788461cdd5c88bfbc8f6f568aa27f7ad72a55e543e4b615509226ae79099bf6f621126e73f1491954c4cf535cbaaa69e1b8a112dad0ded74644c13a82091ba809a7fd24f1a15c58718f6ad50779563ed9ef9784e030b73a25f165d1eee30d9f7c2f04af24b68c2c176b90eeb34d07e7b3db2e4d3e4f5ee6c44f7724fc15cd7f2847d043e2be46f1b6c93aa344d79c91c1762d3a3c3804405c9bc37e1381838a58c16ddfdeef39735916308f54150591fc169323f3b068ae24f68fd960481"}]}, @NL80211_ATTR_BEACON_HEAD={0x245, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x7}, @device_a, @device_a, @random="6da9724477a1", {0x5, 0xd1}}, @ver_80211n={0x0, 0x81, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, 0x8, @random=0x4, 0xe88, @void, @void, @val={0x3, 0x1, 0x3}, @void, @val={0x6, 0x2, 0xfe01}, @val={0x5, 0xa8, {0x14, 0x5f, 0x6, "f1a49af1922669844143b85460560463bf9d7fb823e0edb9b4577510535231738a7d7202f1e1caae74af01370aaa9efc9f72cd113d9f9ee34348b4e715f9f290e3dfd17f7b9db64510b26e2aebed5ae59e43f7cbe2396ccf9a11624a02afc486c57bf07a25ebe6bca924f1758cc772d799276e376b149bc94fd6f89eabfabf8972a701387c822d359c3373d160d24d0166f7dd809f839c2381fe1a1b035ad04cfdcc4dc682"}}, @val={0x25, 0x3, {0x1, 0x28, 0x9}}, @val={0x2a, 0x1, {0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0xfe, 0x0, 0x2}}, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x9, 0x1, 0x3e, 0xb3}}, [{0xdd, 0x13, "9797b99561af5c64f4013e052197c6f6daaafa"}, {0xdd, 0xb7, "23c029f4a455de3c9f6b96f80ce974edef8a9458cfe1873e005f1fe8eeca86ab1273842f0f2fd38725c06483b7687b62b53402d1e1412c351805663343f62e9e6ace8f3dd3a3b91c36551ca715fd06b61609ea4bd7c3471ee7a4b3f30a7262cae648beaf2da1f5b3b8ace2f205ba196bb88d65e56738cb416e7b048e3b63381ab59b65db294a51cf4ec6e536f75ae576e0d4f64242684d5b3f615a2f4d354a5d87469c104c55bb11e5cd512b3487f5094e762f3944e942"}, {0xdd, 0x7a, "263a3b64e574ec57bd51fcf04436ec67faa83f12fcfec1e0d75d4fa0ac9816defe886fdc5f0a74cfc0f41ea7d548b70732b200278ffc04a7065347621c21e2487afba17a10c6ee9e406b8050862d9fa65453fe78399cad4a5b382ec3860a7233b5958058a788f70be4a30002b83222432ffd2dcded5865c0bed2"}]}}, @NL80211_ATTR_PROBE_RESP={0x551, 0x91, "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"}, @NL80211_ATTR_BEACON_TAIL={0xb9, 0xf, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x20, 0xb1, 0x9}}, @measure_req={0x26, 0x73, {0x81, 0xc8, 0x5, "a8f27e881f64696a0deafaf8b44d14af55259ef2cfb9b17b96d932fd225aa8208dac2989372ecc804d9e37ccf5a7200435fc6a73860f6e6e1c7037f6fa4fa941240642617841edbceba7da949a5d8a88242da2aeff5278347487aa6eebb9000c0a72495855b10b4ef9e0fee9bf7d5aae"}}, @chsw_timing={0x68, 0x4, {0x20, 0xf266}}, @prep={0x83, 0x25, @ext={{}, 0x9, 0x81, @broadcast, 0x9, @device_b, 0x4, 0x20, @device_b}}, @channel_switch={0x25, 0x3, {0x1, 0xb4, 0xe4}}, @cf={0x4, 0x6, {0x5, 0x3, 0x9, 0xffc1}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x8c, 0x7f, [@prep={0x83, 0x1f, @not_ext={{}, 0x20, 0x7, @device_a, 0x5, "", 0x11, 0x2, @device_b, 0x8ccf}}, @mesh_chsw={0x76, 0x6, {0x20, 0x4, 0x3e}}, @gcr_ga={0xbd, 0x6, @broadcast}, @ssid={0x0, 0x6, @default_ibss_ssid}, @measure_req={0x26, 0x44, {0x1, 0x2, 0x70, "cc25d86c88d8d216bf558424537d07dbb7c615babdc3cc1b92ee3d65e7796846d4df856db39719e5ab3c3976b046751dcb10322e71466d44ed83b1790a1be89e37"}}, @channel_switch={0x25, 0x3, {0x1, 0x9, 0x80}}, @ibss={0x6, 0x2, 0x6}]}]}, 0xaa0}, 0x1, 0x0, 0x0, 0x20008040}, 0x40000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x1, {{}, {@val={0x3, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}]}, 0x5c}}, 0x0) 12:27:14 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)=',/\x00', 0x0) fsetxattr(r0, &(0x7f0000000080)=@known='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000180)=""/151) 12:27:14 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000040)={0x405, 0x4, 0x3}) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0xe) 12:27:14 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x0, 0x7ff}], 0x18) 12:27:14 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x4, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x2) readahead(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x20, 0x3, 0x81, 0x0, 0x0, 0x1, 0x240, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x1ff, 0x10001}, 0x402, 0xf20, 0x10001, 0x9, 0x947b, 0x8, 0x200, 0x0, 0x40, 0x0, 0xffffffff}, r1, 0xa, r0, 0x1) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = dup(r3) r5 = dup(r2) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000080)={'gretap0\x00'}) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}}, 0x0) 12:27:14 executing program 6: syz_emit_ethernet(0x6e, &(0x7f0000000040)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "2c7af9", 0x0, 0x2b, 0x0, @loopback, @ipv4={'\x00', '\xff\xff', @broadcast}, [@fragment]}}}}}}}, 0x0) syz_emit_ethernet(0x12a, &(0x7f00000000c0)={@remote, @empty, @void, {@mpls_uc={0x8847, {[{0x9}, {0xff, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x1}], @ipv4=@tcp={{0x28, 0x4, 0x2, 0xe, 0x100, 0x67, 0x0, 0x5, 0x6, 0x0, @remote, @loopback, {[@lsrr={0x83, 0x13, 0x64, [@dev={0xac, 0x14, 0x14, 0x18}, @local, @multicast2, @loopback]}, @timestamp_addr={0x44, 0x2c, 0xa6, 0x1, 0x5, [{@multicast1, 0x7}, {@empty, 0x14}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@broadcast}, {@broadcast, 0x9}]}, @generic={0x94, 0x10, "0951cac6ab854b81c85d5db0be7c"}, @timestamp={0x44, 0xc, 0xc7, 0x0, 0x4, [0x7, 0x7]}, @end, @ssrr={0x89, 0xf, 0xdc, [@rand_addr=0x64010100, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x1c, 0xb1, 0x1, 0x2, [{@remote, 0x5c}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xd6c80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xd5f5}]}, @noop]}}, {{0x4e21, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x59122518e9fed027, 0x7, 0x0, 0x4, {[@mss={0x2, 0x4, 0x9}, @window={0x3, 0x3, 0x1}]}}, {"08f7aead97b08191e04cb063b2fc056f7197927254938db2cc6780188edfbd6976ac12aeb8b7e0963292c9efd21b7821338c9aad76bfe4e3214eb5341246ca81c81f433a"}}}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x5bd, 0x6c0, 0x9ef, 0xba2]}) 12:27:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}, {@gid={'gid', 0x3d, r1}}]}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r3) r4 = dup(r0) r5 = getpid() r6 = pidfd_open(r5, 0x0) process_madvise(r6, 0x0, 0x0, 0x4, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x4000) r8 = getpid() r9 = pidfd_open(r8, 0x0) process_madvise(r9, 0x0, 0x0, 0x4, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r11) sendmsg$netlink(r0, &(0x7f0000000240)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)=[{&(0x7f0000000580)={0x434, 0x26, 0x800, 0x70bd2b, 0x25dfdbfb, "", [@typed={0x8, 0x7f, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="d0503a87d11cab8bebabc968dec86605f687323552f5ad3d653ffe96e036b6b43a6cee06c742602faf6dc6519d8abd5c6cd30d3a11b054f04d05bd46c2003677704aca139b5f72becaa7bb98b89ef3d4b2126128e6f11a7963748e4e0d3cc68359fd264b0ba40fdf2ad619f1ab56a24276421f0ad3e070c831ac80731e97df00c7011f329331b341fb22a1c5a4b78631f2df932576e8fbba583afdefbbb527abaaf2357ae5", @generic="6d6077aa1bb0b215da36e3e9591810e263c68f54ae487c2aef3a699c9d2026e03ce4835a02d34e6ce87cda434f8331ee8c13bb9fdec9c5fe6388f3c455e7c95061af1dc2b992032547eac0b6aefe2306185ed84fa57cdc7e41991edf3d3f50a3b9d6d5b3d3c390ff560985f213fe4093f2ff090b89367a55af252ede6d2cbadd5daa8a16750b9c3dcf91b2dd96c78d447fba2e1d9d3f70fab3dd6a927f1a88e4f6b23080f3d489c20112bbbf490a18d0e1c4e2680014e5f9a4fa65dc6e6f2f18e01976bb3e0359acbefe4a9f5c7564eef1c45f8d0aa7de", @typed={0x6, 0x0, 0x0, 0x0, @str=']\x00'}, @nested={0x22, 0x66, 0x0, 0x1, [@generic="4551b2d0b1a47e3183af0f1ba8f3eb525282", @typed={0xb, 0x5d, 0x0, 0x0, @str='++#.#\\\x00'}]}, @nested={0x274, 0x8, 0x0, 0x1, [@typed={0x14, 0x82, 0x0, 0x0, @ipv6=@local}, @generic="394149f38d5813e9c1bbf00e584a8b7a2e1b917186aa5463baa9baa299d2a4e72895f1df3024cbdfe5b949a98aa17ab431188263606eb40a7a033f7d17b2df85ca4568a8115ddb772d2c6391e3e84866819c50bdeb2d60f28902ffb4bd55b4748d121d7a3832b70b057b9bf940d89b07cb937a59133c9a", @generic="95037baa2cc0306719db80d72fb8d21cac9557deaf56f1f5b89418ac0511e2bca4135cb815fd18c7044b092653de8d207d0c0063ee7e90bdde6b2b14c16d634e39ea180ab904a6061903c532d98b704cfd1284a9f7012819d6dbde01bd05ba43a2f27d5529d56f44249f74ed3b02b14753193a582726c1b3a98df33a4d6596b50f5ae75f9186171707c1fe40d1ae547d84974eff50762c60ecf4e6c3d3f8e355935e6fd0f4a72be1306ca76993ae7bca8b1e682926522fa4c0e01a99c168000b9a858d0efc7c8880856ae03bb1048dabf2cc90d352be4e9043cb310522315ff67cc54100ab01f885c197a8ace30ef0ad08181395", @generic="6a905e135712f44a551e54d0168b6fca5b93d063982fae8a1c87870385b6b6f6aabcc801afb59de48cf9093fe1f425628d328725ca8a9cd96f0023cd8ad5b33d88c2b82873b9d3f8150574be30e4e1531a7fe07ee6d40a777b1e1aaffa73ba188bffbefd2a0e48fa9f64dd2bfa64350481c694da29a11a7a1e3293b6dde2337d4d7a3cb741c9068f6f42f9c1f5e8ad8dbc93f33bc63e2ae0b6265f7b3367a4cb68cad873a3bf0332048da03f42eba3c9af41c766dfd806bbabfbcf969ae997885413fe9dd63a6a38635863d17053f9fbf596dafcecffc4365ed057516f6e8d52579f321618a833cfccbff42c4c4a8bff98"]}]}, 0x434}, {&(0x7f0000000040)={0x10, 0x19, 0x0, 0x70bd2d, 0x25dfdbfc}, 0x10}, {&(0x7f00000009c0)={0x550, 0x2d, 0x200, 0x70bd2d, 0x25dfdbfb, "", [@typed={0x8, 0x86, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="86bd139ed924be7882ff62c55a02faeadf7fbe4e940e454c5a38af75cd73921c1972b0ff0c7f99c5dbbba321326780952de2e064a635bcbcdb51562bbc15de41df3b83d61e318e4bccdbfafb819984630b2057260d7c425daf74796b6c28bf08fc33a27819a03e6a35380daae56b8f0a4d2e2f5030161149364314bda08b20c824e5924a5d9d7924bf7058dcacf488ecd9d9ebb28c7d92bbf89714aca4838a144a51957a46b8b8b6e2f585a55a189d72e7c7fdb0", @generic="f47cc376ecec8c6994f73dd13880", @generic="0373a7bb4df79eb2d5ab8b6943cab7cc100aad70afc3645a44473602481a8db8f2c6523c0cb79f2ff01c3055a4962a728ca159113f2a84d2480d86d9450d5fdd9d8a40fb834af3cb9894aec0a7f237531ddcf1cd56b91651fdd4c9146ce9df5bd7c9020a089ed62b4cc7fdcc8694821f7b91b14eddfa69304acac76d5eb0759eb101b4e45e443ba9cb7b14f3d742fe19217f1883bd39c1f71cde186c2c813b734291c793ea", @generic="dc07aa1e97345039ddef5199aaa369b9189529cfb40e420cae6c489683346549693e5fb07cf0545607f3eda656e9acc9b6df685bf4863e88a3a625d04098be505274324ca0a534ec1d86c1ed6f328c4032ebf9013df4a351df1f8d252eb3f3496dfef87c344f450f8f9afcfcce4c9574ec40e4efc1a69b281f0a05a3078ac05059087e95d39f6bfc268019a9dc3ecdb7d724ebfd1598c377bd18a1f194114fc8c02bfad6de", @typed={0x8, 0x36, 0x0, 0x0, @fd}, @nested={0xd8, 0x8d, 0x0, 0x1, [@typed={0xc, 0x74, 0x0, 0x0, @u64=0x6}, @generic="6626cf6529fc8d10a1aa2046572d93108b3ba2fde627c266307df9c167df1aee1796bb811884457285b824a176db2cad7b71cd95abf10695067d69bf188c06b79d30f92bf4811083012b38979cf9fad00471ca1e5e059805ab62764585ed157ee20a3c203101ef6f40da4cb7e90d0675d736e4eefc1c1191f8ffa0ba83f4ec4beddf1069242b31a659fe3cd96f613b2a174f3dda95f4dc2db14f7c172eff48551aae73057fe876a9f056386e4dd8f2706c546194bf33b7aa26919e0aa2ef82c54d8c564ef1ab2573"]}, @nested={0x242, 0x8b, 0x0, 0x1, [@generic="7efda5470592647a8553c020a00032f4c3907d609c67a09024c716edf97e5b7c987a71813dbef7c979a1ced2f079d15d07692cce0aff4b1d5e90995b06830dcd3b257d6853de07d91eeb193f87272346b024499256159fc2e04ee9d85d09519b2c9c09217540ef99965acda55faefc0e34dda9b58716598c4c1f4f74bda6cfee7d6a5b836164665980790f7b1f", @generic="4ae70c42c099e0edc0e1235ea04984ada901d26896027932f712aa267fc4affcde9fa57dc12e1283803d19ed5976c4dc4ac2b8556f9830f0385a5bec47dd8a60621699e6568db0c5466e047af96d8fcd929c20ee4db634e6f6abdc053be404f743e4e1f17ed43b236b827874d5b29995a64eb9e3a178d6123305746c5fc85a334171461245fe0e99caca6250bb9dfd014058046aa180576236c0ef36f7fe21620658cbcb89bb54cb69e59ef5530a23ad9cd42004f3f5fc60b522075674a875a1de8aee3e944eb4e5f43b1773b72ef215113c1524c9a36faf0dbc3ebac22ade68b268919116f79f03af7684f43ab0fdc60b12cc77ab00", @generic="1b8579704bb671999eb0b3b1f575f1942377f5a3e2781a7443a97321db88f7837b623ce2e5bc0a65cda34943c2aff5a4c5a85617855ab67a475fbd09c8e6b0b47a690d6e69f9c5078359554e696835610378b9f2e0e336c2d85b1ed36c0b92cf838f367ce8dccfa8de5309fb542c0b1ddb99d9214c76fdf6e49e65e66b2028037beb9da00759f293e3282945dda3ee6271e009603cf50b83bd8974128e5429473ecfe2383246ed5778c6524293f0c4b69854ae", @generic, @typed={0x8, 0x2c, 0x0, 0x0, @u32=0x80000000}]}, @typed={0x8, 0x52, 0x0, 0x0, @pid}]}, 0x550}], 0x3, &(0x7f0000000140)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r1}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r3, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r0, r4, r0, r0, r0, r6]}}, @rights={{0x28, 0x1, 0x1, [r0, r7, r0, r9, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r11, 0xee00}}}], 0xd0, 0x40000}, 0xf4bfb31da64edc) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="28000000220001c2"], 0x28}], 0x1}, 0x0) close(0xffffffffffffffff) 12:27:14 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) [ 231.078804] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.7'. 12:27:14 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = signalfd4(r0, &(0x7f0000000000)={[0x7]}, 0x8, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f0000000e00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000300)={0xaa0, r4, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x29, 0x2a, [@peer_mgmt={0x75, 0x16, {0x0, 0x0, @val=0xc4, @void, @val="d697b47fd29fdbadb3a21217fe74502d"}}, @channel_switch={0x25, 0x3, {0x0, 0xa1, 0x55}}, @channel_switch={0x25, 0x3, {0x0, 0x84, 0x80}}, @challenge={0x10, 0x1, 0x1f}]}, @NL80211_ATTR_IE_PROBE_RESP={0x17b, 0x7f, [@sec_chan_ofs={0x3e, 0x1, 0x3}, @peer_mgmt={0x75, 0x14, {0x0, 0x3, @void, @void, @val="befa6f7aec18d80fb38da660d0ba02b2"}}, @mic={0x8c, 0x10, {0x8c0, "264fcd629bcc", @short="0cf77ac89ed40f5c"}}, @random={0x6, 0x52, "8e49b74389997d854bbff00d2abcee4fb8275597e596a9a40876dce16acbf806423fcd25926b3a5edd9cf34e8ada5689ac30ff1b7216f6564ff94d6a3c27e2110f0761ebb4f38c17b814d08eb922eeb82676"}, @mesh_chsw={0x76, 0x6, {0x20, 0x81, 0x25, 0x13}}, @ibss={0x6, 0x2, 0x800}, @random_vendor={0xdd, 0xea, "78452d1b3ce11f2ff3a259c0f4cfa563c3d791cf32896e98cbf41b57f4add2a6bb1a0b17d823e2945da3253f788461cdd5c88bfbc8f6f568aa27f7ad72a55e543e4b615509226ae79099bf6f621126e73f1491954c4cf535cbaaa69e1b8a112dad0ded74644c13a82091ba809a7fd24f1a15c58718f6ad50779563ed9ef9784e030b73a25f165d1eee30d9f7c2f04af24b68c2c176b90eeb34d07e7b3db2e4d3e4f5ee6c44f7724fc15cd7f2847d043e2be46f1b6c93aa344d79c91c1762d3a3c3804405c9bc37e1381838a58c16ddfdeef39735916308f54150591fc169323f3b068ae24f68fd960481"}]}, @NL80211_ATTR_BEACON_HEAD={0x245, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x7}, @device_a, @device_a, @random="6da9724477a1", {0x5, 0xd1}}, @ver_80211n={0x0, 0x81, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, 0x8, @random=0x4, 0xe88, @void, @void, @val={0x3, 0x1, 0x3}, @void, @val={0x6, 0x2, 0xfe01}, @val={0x5, 0xa8, {0x14, 0x5f, 0x6, "f1a49af1922669844143b85460560463bf9d7fb823e0edb9b4577510535231738a7d7202f1e1caae74af01370aaa9efc9f72cd113d9f9ee34348b4e715f9f290e3dfd17f7b9db64510b26e2aebed5ae59e43f7cbe2396ccf9a11624a02afc486c57bf07a25ebe6bca924f1758cc772d799276e376b149bc94fd6f89eabfabf8972a701387c822d359c3373d160d24d0166f7dd809f839c2381fe1a1b035ad04cfdcc4dc682"}}, @val={0x25, 0x3, {0x1, 0x28, 0x9}}, @val={0x2a, 0x1, {0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0xfe, 0x0, 0x2}}, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x9, 0x1, 0x3e, 0xb3}}, [{0xdd, 0x13, "9797b99561af5c64f4013e052197c6f6daaafa"}, {0xdd, 0xb7, "23c029f4a455de3c9f6b96f80ce974edef8a9458cfe1873e005f1fe8eeca86ab1273842f0f2fd38725c06483b7687b62b53402d1e1412c351805663343f62e9e6ace8f3dd3a3b91c36551ca715fd06b61609ea4bd7c3471ee7a4b3f30a7262cae648beaf2da1f5b3b8ace2f205ba196bb88d65e56738cb416e7b048e3b63381ab59b65db294a51cf4ec6e536f75ae576e0d4f64242684d5b3f615a2f4d354a5d87469c104c55bb11e5cd512b3487f5094e762f3944e942"}, {0xdd, 0x7a, "263a3b64e574ec57bd51fcf04436ec67faa83f12fcfec1e0d75d4fa0ac9816defe886fdc5f0a74cfc0f41ea7d548b70732b200278ffc04a7065347621c21e2487afba17a10c6ee9e406b8050862d9fa65453fe78399cad4a5b382ec3860a7233b5958058a788f70be4a30002b83222432ffd2dcded5865c0bed2"}]}}, @NL80211_ATTR_PROBE_RESP={0x551, 0x91, "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"}, @NL80211_ATTR_BEACON_TAIL={0xb9, 0xf, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x20, 0xb1, 0x9}}, @measure_req={0x26, 0x73, {0x81, 0xc8, 0x5, "a8f27e881f64696a0deafaf8b44d14af55259ef2cfb9b17b96d932fd225aa8208dac2989372ecc804d9e37ccf5a7200435fc6a73860f6e6e1c7037f6fa4fa941240642617841edbceba7da949a5d8a88242da2aeff5278347487aa6eebb9000c0a72495855b10b4ef9e0fee9bf7d5aae"}}, @chsw_timing={0x68, 0x4, {0x20, 0xf266}}, @prep={0x83, 0x25, @ext={{}, 0x9, 0x81, @broadcast, 0x9, @device_b, 0x4, 0x20, @device_b}}, @channel_switch={0x25, 0x3, {0x1, 0xb4, 0xe4}}, @cf={0x4, 0x6, {0x5, 0x3, 0x9, 0xffc1}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x8c, 0x7f, [@prep={0x83, 0x1f, @not_ext={{}, 0x20, 0x7, @device_a, 0x5, "", 0x11, 0x2, @device_b, 0x8ccf}}, @mesh_chsw={0x76, 0x6, {0x20, 0x4, 0x3e}}, @gcr_ga={0xbd, 0x6, @broadcast}, @ssid={0x0, 0x6, @default_ibss_ssid}, @measure_req={0x26, 0x44, {0x1, 0x2, 0x70, "cc25d86c88d8d216bf558424537d07dbb7c615babdc3cc1b92ee3d65e7796846d4df856db39719e5ab3c3976b046751dcb10322e71466d44ed83b1790a1be89e37"}}, @channel_switch={0x25, 0x3, {0x1, 0x9, 0x80}}, @ibss={0x6, 0x2, 0x6}]}]}, 0xaa0}, 0x1, 0x0, 0x0, 0x20008040}, 0x40000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x1, {{}, {@val={0x3, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}]}, 0x5c}}, 0x0) [ 231.238834] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.7'. 12:27:23 executing program 3: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100000001, 0x0, &(0x7f0000000040)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x88001, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x12) bind$unix(r0, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) io_setup(0x2, &(0x7f0000000080)=0x0) io_setup(0xcf, &(0x7f0000000000)=0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x88001, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0x12) rseq(&(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0xcc, 0x8, 0xfffffffeffffffff}, 0x2}, 0x20, 0x1, 0x0) io_submit(r2, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x5, 0xffffffffffffffff, &(0x7f00000000c0)="42975d274e3703dd56976eeedefd5c463db2a8d5ce7c2f6846b66c71671b4366c107d704b33b79a7dc4466e82e7380ffd77cc435b10add06bf8e", 0x3a, 0x800, 0x0, 0x1, r3}]) io_submit(r1, 0x0, 0x0) 12:27:23 executing program 4: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) sigaltstack(&(0x7f0000ffb000/0x3000)=nil, 0x0) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/114) 12:27:23 executing program 6: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {r0}}, './file0/../file0\x00'}) r2 = getpid() pidfd_open(r2, 0x0) sendmsg$unix(r1, &(0x7f0000000680)={&(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000400)="15ba3392ee7628cf58bee44e98df7df1873bc3a698d998560461a776ed6e2ef045dadda7fdf1648edea5566c43a1a51d5c7fd48ae4438913ff2757f90b5a53d34cdb1f15bb37c1be1e7458d6f23f072cd8cc147ee3386469acf8de03f7529fe7d8783d72e1a6b408a4c360bcd9fd65f9dcf6fb0ad201cb0d28b96484ea6a20bb21f59115f4c120deab208abe2ae3e39443889f92d87ffbe6155a9f6238534f60c90969081c42e8747ba718b429813754e65c025b1a794fbad0e145d5c5e1b50ac7bcfe7317e16b1386dbeccfbfd489ccc0", 0xd1}, {&(0x7f0000000500)="e9fe04d3faa4ae8078f07405ad92a3d07e7f2decec375790d15fbfa0589ba6211d92069cc768741fa59ed5b375195cb034df6a381d41591f98a42a1ce08e0d8ec563856cd8506c91e548600fd1d4ec265994df07c89cf419cb81fbe0bdad5af636ddafce048bb70424fb813c4fef48c45d00bbaa468cc2046fca3f37f49b", 0x7e}, {&(0x7f0000000580)="010242863db8938a51f3d60eafd20a8caef723e708451e5aeea1fac699999c252e90afebf6e2f6", 0x27}], 0x3, &(0x7f0000000600)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xffffffffffffffff, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x50}, 0x40) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x14, 0x0, 0x2, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000011}, 0x20004800) open(&(0x7f00000001c0)='./file0\x00', 0x440800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xffffffff000) 12:27:23 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = signalfd4(r0, &(0x7f0000000000)={[0x7]}, 0x8, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f0000000e00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000300)={0xaa0, r4, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x29, 0x2a, [@peer_mgmt={0x75, 0x16, {0x0, 0x0, @val=0xc4, @void, @val="d697b47fd29fdbadb3a21217fe74502d"}}, @channel_switch={0x25, 0x3, {0x0, 0xa1, 0x55}}, @channel_switch={0x25, 0x3, {0x0, 0x84, 0x80}}, @challenge={0x10, 0x1, 0x1f}]}, @NL80211_ATTR_IE_PROBE_RESP={0x17b, 0x7f, [@sec_chan_ofs={0x3e, 0x1, 0x3}, @peer_mgmt={0x75, 0x14, {0x0, 0x3, @void, @void, @val="befa6f7aec18d80fb38da660d0ba02b2"}}, @mic={0x8c, 0x10, {0x8c0, "264fcd629bcc", @short="0cf77ac89ed40f5c"}}, @random={0x6, 0x52, "8e49b74389997d854bbff00d2abcee4fb8275597e596a9a40876dce16acbf806423fcd25926b3a5edd9cf34e8ada5689ac30ff1b7216f6564ff94d6a3c27e2110f0761ebb4f38c17b814d08eb922eeb82676"}, @mesh_chsw={0x76, 0x6, {0x20, 0x81, 0x25, 0x13}}, @ibss={0x6, 0x2, 0x800}, @random_vendor={0xdd, 0xea, "78452d1b3ce11f2ff3a259c0f4cfa563c3d791cf32896e98cbf41b57f4add2a6bb1a0b17d823e2945da3253f788461cdd5c88bfbc8f6f568aa27f7ad72a55e543e4b615509226ae79099bf6f621126e73f1491954c4cf535cbaaa69e1b8a112dad0ded74644c13a82091ba809a7fd24f1a15c58718f6ad50779563ed9ef9784e030b73a25f165d1eee30d9f7c2f04af24b68c2c176b90eeb34d07e7b3db2e4d3e4f5ee6c44f7724fc15cd7f2847d043e2be46f1b6c93aa344d79c91c1762d3a3c3804405c9bc37e1381838a58c16ddfdeef39735916308f54150591fc169323f3b068ae24f68fd960481"}]}, @NL80211_ATTR_BEACON_HEAD={0x245, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x7}, @device_a, @device_a, @random="6da9724477a1", {0x5, 0xd1}}, @ver_80211n={0x0, 0x81, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, 0x8, @random=0x4, 0xe88, @void, @void, @val={0x3, 0x1, 0x3}, @void, @val={0x6, 0x2, 0xfe01}, @val={0x5, 0xa8, {0x14, 0x5f, 0x6, "f1a49af1922669844143b85460560463bf9d7fb823e0edb9b4577510535231738a7d7202f1e1caae74af01370aaa9efc9f72cd113d9f9ee34348b4e715f9f290e3dfd17f7b9db64510b26e2aebed5ae59e43f7cbe2396ccf9a11624a02afc486c57bf07a25ebe6bca924f1758cc772d799276e376b149bc94fd6f89eabfabf8972a701387c822d359c3373d160d24d0166f7dd809f839c2381fe1a1b035ad04cfdcc4dc682"}}, @val={0x25, 0x3, {0x1, 0x28, 0x9}}, @val={0x2a, 0x1, {0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0xfe, 0x0, 0x2}}, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x9, 0x1, 0x3e, 0xb3}}, [{0xdd, 0x13, "9797b99561af5c64f4013e052197c6f6daaafa"}, {0xdd, 0xb7, "23c029f4a455de3c9f6b96f80ce974edef8a9458cfe1873e005f1fe8eeca86ab1273842f0f2fd38725c06483b7687b62b53402d1e1412c351805663343f62e9e6ace8f3dd3a3b91c36551ca715fd06b61609ea4bd7c3471ee7a4b3f30a7262cae648beaf2da1f5b3b8ace2f205ba196bb88d65e56738cb416e7b048e3b63381ab59b65db294a51cf4ec6e536f75ae576e0d4f64242684d5b3f615a2f4d354a5d87469c104c55bb11e5cd512b3487f5094e762f3944e942"}, {0xdd, 0x7a, "263a3b64e574ec57bd51fcf04436ec67faa83f12fcfec1e0d75d4fa0ac9816defe886fdc5f0a74cfc0f41ea7d548b70732b200278ffc04a7065347621c21e2487afba17a10c6ee9e406b8050862d9fa65453fe78399cad4a5b382ec3860a7233b5958058a788f70be4a30002b83222432ffd2dcded5865c0bed2"}]}}, @NL80211_ATTR_PROBE_RESP={0x551, 0x91, "03eefe1bb85e0901629424c9d8ae6ef60ace34885508ee0fd3f527030f219915b926cd21e6a4d0be41c1e817994f5a2f31650c64449495bd6eb165aba052b44b54c016f8b90a9cd1ad9a4e4ec533ff5ee360bbdfd6d0faab184953353e293465292ec33d1ee2b06e07a48d6bfc1fc527d51fc75a364444efc001c1e28284bc6679996bf209a518c60631e3943c16f80fcd3b74e167a221f4f1c4ce501784eecdf285c0b1809ae461d6776aa4076863dbcad6355f23d72a8c1f9262bd804f54701a8c74eff5226adfb0d53c26e39369d43db673ddfb4fe83ae6d3c08a807ed5a2efae70269fd6db33ec170e467c0d3b96311e753c31911c7e345f7bda4bf8129dd8ff54406ecd45ae82a5fde29aab2a596a9850ae781c530a3f67b5bc90cf8818f1d0d30dab1631e3b328d463a37bb79221a39abb107138298e23482718f96e431dfbecb876b718c4cc9e85ecd161b63702bd3b79aded0c6eb3efc78367ca9a32a1d98f594aa460387fbb02706c9345db7a26357a5428cdfb45cbecab52a1d3b931488191417e02f31d61f7759a2f66af6b33b3d7ab970afd2d3efc2403b71b864a31748e970207fc1d3b159d9fdd6a24c54d6a3792549026a43ec4c5e368c39229002192e66a743bd9754d74a34da180a5a1827d3e6c52a3249917939580b9a310a29be7c9520c3936d718f777e7797de201aa6fe77fad38828cc4a65d5a0bc4050e7d80b10051119cdb35c392532bc49d008e504415d399f5e5c21ec5e22626fbe5a8169c165dbe8a90ede35c3724db16690a6fbbf6726a1177afded6d7304d137a4b22b31c56db2990dc7b495b286c70ebe9441e3776eb29de18e0809213b92601d8f3d8b6ef6e03d7b99f31d5c1a400d662e56239b4332da7bf129206a8ff0248471c1e24e60ebd2ee285faadd1041e3eadc525d63b70a4820d98c74e7aba6f822c6ce24868b8977b8dc2580316fee705114a5e92ae1f46717154c6d4429353888a891942c298cb31a9c1e5a98f99b1f05a58d62a59343c9a57d0f85fb41b1911948c23563358d5082e53a98d8f87de8484038aeb46fdfe04282f7b65b56b03a3b32a09cce184b0ed31cb0fc036d69b3b6da157dc8c70a3fe99b513e7c4465011f08473aff5836e320ba6b22eb763dd6ec2a365845143914a1a6e6132d9148a8790a94597295e8220be2beb126d626c88b77cb3cf9a8a3ba46b28745bf9016bc42b581163e5f89127c1b38babec7d5276af51102bc12ed6b994496fbaeeb275d3e40efb931c685c010b638d4a99caa29c03588d574e74320555fa7f69f0ee000bf6247d3e9a080e296fdef97d867d78aafbda5aefb71ba75efff58df335b8d8775f5befbeca2edb49e2dde70cafbdb98902dfb1e73e0863b7dcfc63b962c0e133829bd7d81e7695340ff1ff5e0f204fcde93f232d546197d22d320bc413dab953121b0691e8633914a2c70ce58a7bb86dda457e9af385c275b31534d2535fd6bccd540bcc1765e5f1723c02b56769e7d38f2ff0c5531a1d85c5a0266bd1c70579568cf671be881baa419255dab0bc1634f67729f3d0acea46c71c86f7d77371ea08687c05e137667068fd7ca01f9602fa14706ee5fcdbde54468696b1d2e762fa8d4b676de94cbec49cf0809496051c7f439f046efe2ddf0be0e23abe98ac44eebfb674e43278050e819e56a7d660daea4f145bf42ac4e62709ef710c36ad7e519ed391495ebaf361fe31ca4e97368e3b5cc194a3f2f7d59b5b74e38f0bb20500a5210398f5fb37463dd7a934be81ff8ff9a7711349c2f9a2ccd7407a197ea27b39cb888ce5ecdd2494863522c3fbe0ca9d70adb5b12ed5aa68689c4f78de0443f6f4884133beb66c3699bec36b04503114a47f650054003dc26b9cb7d0817a7c5fb286241e28224bd96e2d"}, @NL80211_ATTR_BEACON_TAIL={0xb9, 0xf, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x20, 0xb1, 0x9}}, @measure_req={0x26, 0x73, {0x81, 0xc8, 0x5, "a8f27e881f64696a0deafaf8b44d14af55259ef2cfb9b17b96d932fd225aa8208dac2989372ecc804d9e37ccf5a7200435fc6a73860f6e6e1c7037f6fa4fa941240642617841edbceba7da949a5d8a88242da2aeff5278347487aa6eebb9000c0a72495855b10b4ef9e0fee9bf7d5aae"}}, @chsw_timing={0x68, 0x4, {0x20, 0xf266}}, @prep={0x83, 0x25, @ext={{}, 0x9, 0x81, @broadcast, 0x9, @device_b, 0x4, 0x20, @device_b}}, @channel_switch={0x25, 0x3, {0x1, 0xb4, 0xe4}}, @cf={0x4, 0x6, {0x5, 0x3, 0x9, 0xffc1}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x8c, 0x7f, [@prep={0x83, 0x1f, @not_ext={{}, 0x20, 0x7, @device_a, 0x5, "", 0x11, 0x2, @device_b, 0x8ccf}}, @mesh_chsw={0x76, 0x6, {0x20, 0x4, 0x3e}}, @gcr_ga={0xbd, 0x6, @broadcast}, @ssid={0x0, 0x6, @default_ibss_ssid}, @measure_req={0x26, 0x44, {0x1, 0x2, 0x70, "cc25d86c88d8d216bf558424537d07dbb7c615babdc3cc1b92ee3d65e7796846d4df856db39719e5ab3c3976b046751dcb10322e71466d44ed83b1790a1be89e37"}}, @channel_switch={0x25, 0x3, {0x1, 0x9, 0x80}}, @ibss={0x6, 0x2, 0x6}]}]}, 0xaa0}, 0x1, 0x0, 0x0, 0x20008040}, 0x40000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x1, {{}, {@val={0x3, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}]}, 0x5c}}, 0x0) 12:27:23 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0), 0x1) 12:27:23 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) 12:27:23 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000040)={0x405, 0x4, 0x3}) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0xe) 12:27:23 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x0, 0x7ff}], 0x18) 12:27:23 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x0, 0x7ff}], 0x18) [ 239.797608] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.7'. 12:27:23 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@caif=@rfm={0x25, 0x1, "9f3f952710bf57983b69a979e373131f"}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000080)="30a26aa0f33dc3cc3952c16405fd", 0x1000e}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2ff64e0000ad59b1ea93e65d000000000000"], 0xd8}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[], 0x0) recvmmsg(r0, &(0x7f00000083c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x60, 0x0) 12:27:23 executing program 5: r0 = creat(&(0x7f0000000000)='./cgroup/pids.max\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x6) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) 12:27:23 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) 12:27:23 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = signalfd4(r0, &(0x7f0000000000)={[0x7]}, 0x8, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f0000000e00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000300)={0xaa0, r4, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x29, 0x2a, [@peer_mgmt={0x75, 0x16, {0x0, 0x0, @val=0xc4, @void, @val="d697b47fd29fdbadb3a21217fe74502d"}}, @channel_switch={0x25, 0x3, {0x0, 0xa1, 0x55}}, @channel_switch={0x25, 0x3, {0x0, 0x84, 0x80}}, @challenge={0x10, 0x1, 0x1f}]}, @NL80211_ATTR_IE_PROBE_RESP={0x17b, 0x7f, [@sec_chan_ofs={0x3e, 0x1, 0x3}, @peer_mgmt={0x75, 0x14, {0x0, 0x3, @void, @void, @val="befa6f7aec18d80fb38da660d0ba02b2"}}, @mic={0x8c, 0x10, {0x8c0, "264fcd629bcc", @short="0cf77ac89ed40f5c"}}, @random={0x6, 0x52, "8e49b74389997d854bbff00d2abcee4fb8275597e596a9a40876dce16acbf806423fcd25926b3a5edd9cf34e8ada5689ac30ff1b7216f6564ff94d6a3c27e2110f0761ebb4f38c17b814d08eb922eeb82676"}, @mesh_chsw={0x76, 0x6, {0x20, 0x81, 0x25, 0x13}}, @ibss={0x6, 0x2, 0x800}, @random_vendor={0xdd, 0xea, "78452d1b3ce11f2ff3a259c0f4cfa563c3d791cf32896e98cbf41b57f4add2a6bb1a0b17d823e2945da3253f788461cdd5c88bfbc8f6f568aa27f7ad72a55e543e4b615509226ae79099bf6f621126e73f1491954c4cf535cbaaa69e1b8a112dad0ded74644c13a82091ba809a7fd24f1a15c58718f6ad50779563ed9ef9784e030b73a25f165d1eee30d9f7c2f04af24b68c2c176b90eeb34d07e7b3db2e4d3e4f5ee6c44f7724fc15cd7f2847d043e2be46f1b6c93aa344d79c91c1762d3a3c3804405c9bc37e1381838a58c16ddfdeef39735916308f54150591fc169323f3b068ae24f68fd960481"}]}, @NL80211_ATTR_BEACON_HEAD={0x245, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x7}, @device_a, @device_a, @random="6da9724477a1", {0x5, 0xd1}}, @ver_80211n={0x0, 0x81, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, 0x8, @random=0x4, 0xe88, @void, @void, @val={0x3, 0x1, 0x3}, @void, @val={0x6, 0x2, 0xfe01}, @val={0x5, 0xa8, {0x14, 0x5f, 0x6, "f1a49af1922669844143b85460560463bf9d7fb823e0edb9b4577510535231738a7d7202f1e1caae74af01370aaa9efc9f72cd113d9f9ee34348b4e715f9f290e3dfd17f7b9db64510b26e2aebed5ae59e43f7cbe2396ccf9a11624a02afc486c57bf07a25ebe6bca924f1758cc772d799276e376b149bc94fd6f89eabfabf8972a701387c822d359c3373d160d24d0166f7dd809f839c2381fe1a1b035ad04cfdcc4dc682"}}, @val={0x25, 0x3, {0x1, 0x28, 0x9}}, @val={0x2a, 0x1, {0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0xfe, 0x0, 0x2}}, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x9, 0x1, 0x3e, 0xb3}}, [{0xdd, 0x13, "9797b99561af5c64f4013e052197c6f6daaafa"}, {0xdd, 0xb7, "23c029f4a455de3c9f6b96f80ce974edef8a9458cfe1873e005f1fe8eeca86ab1273842f0f2fd38725c06483b7687b62b53402d1e1412c351805663343f62e9e6ace8f3dd3a3b91c36551ca715fd06b61609ea4bd7c3471ee7a4b3f30a7262cae648beaf2da1f5b3b8ace2f205ba196bb88d65e56738cb416e7b048e3b63381ab59b65db294a51cf4ec6e536f75ae576e0d4f64242684d5b3f615a2f4d354a5d87469c104c55bb11e5cd512b3487f5094e762f3944e942"}, {0xdd, 0x7a, "263a3b64e574ec57bd51fcf04436ec67faa83f12fcfec1e0d75d4fa0ac9816defe886fdc5f0a74cfc0f41ea7d548b70732b200278ffc04a7065347621c21e2487afba17a10c6ee9e406b8050862d9fa65453fe78399cad4a5b382ec3860a7233b5958058a788f70be4a30002b83222432ffd2dcded5865c0bed2"}]}}, @NL80211_ATTR_PROBE_RESP={0x551, 0x91, "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"}, @NL80211_ATTR_BEACON_TAIL={0xb9, 0xf, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x20, 0xb1, 0x9}}, @measure_req={0x26, 0x73, {0x81, 0xc8, 0x5, "a8f27e881f64696a0deafaf8b44d14af55259ef2cfb9b17b96d932fd225aa8208dac2989372ecc804d9e37ccf5a7200435fc6a73860f6e6e1c7037f6fa4fa941240642617841edbceba7da949a5d8a88242da2aeff5278347487aa6eebb9000c0a72495855b10b4ef9e0fee9bf7d5aae"}}, @chsw_timing={0x68, 0x4, {0x20, 0xf266}}, @prep={0x83, 0x25, @ext={{}, 0x9, 0x81, @broadcast, 0x9, @device_b, 0x4, 0x20, @device_b}}, @channel_switch={0x25, 0x3, {0x1, 0xb4, 0xe4}}, @cf={0x4, 0x6, {0x5, 0x3, 0x9, 0xffc1}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x8c, 0x7f, [@prep={0x83, 0x1f, @not_ext={{}, 0x20, 0x7, @device_a, 0x5, "", 0x11, 0x2, @device_b, 0x8ccf}}, @mesh_chsw={0x76, 0x6, {0x20, 0x4, 0x3e}}, @gcr_ga={0xbd, 0x6, @broadcast}, @ssid={0x0, 0x6, @default_ibss_ssid}, @measure_req={0x26, 0x44, {0x1, 0x2, 0x70, "cc25d86c88d8d216bf558424537d07dbb7c615babdc3cc1b92ee3d65e7796846d4df856db39719e5ab3c3976b046751dcb10322e71466d44ed83b1790a1be89e37"}}, @channel_switch={0x25, 0x3, {0x1, 0x9, 0x80}}, @ibss={0x6, 0x2, 0x6}]}]}, 0xaa0}, 0x1, 0x0, 0x0, 0x20008040}, 0x40000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}]}, 0x5c}}, 0x0) 12:27:23 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) r1 = socket(0xb, 0x1, 0x1000) connect$unix(r1, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) 12:27:23 executing program 4: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) sigaltstack(&(0x7f0000ffb000/0x3000)=nil, 0x0) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/114) [ 240.065580] cgroup: fork rejected by pids controller in /syz5 12:27:23 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) (fail_nth: 1) [ 240.165299] FAULT_INJECTION: forcing a failure. [ 240.165299] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 240.166437] CPU: 0 UID: 0 PID: 4640 Comm: syz-executor.1 Not tainted 6.16.0-rc6-next-20250717 #1 PREEMPT(voluntary) [ 240.166457] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 240.166468] Call Trace: [ 240.166473] [ 240.166478] dump_stack_lvl+0xfa/0x120 [ 240.166502] should_fail_ex+0x4d7/0x5e0 [ 240.166527] _copy_from_user+0x30/0xd0 [ 240.166541] input_event_from_user+0x1df/0x290 [ 240.166560] ? __pfx_input_event_from_user+0x10/0x10 [ 240.166576] ? lock_acquire+0x15e/0x2f0 [ 240.166592] ? perf_trace_lock+0xb5/0x5d0 [ 240.166606] ? find_held_lock+0x2b/0x80 [ 240.166627] evdev_write+0x264/0x420 [ 240.166643] ? __pfx_evdev_write+0x10/0x10 [ 240.166659] ? security_file_permission+0x22/0x90 [ 240.166682] vfs_write+0x2b7/0x10c0 [ 240.166694] ? __pfx_evdev_write+0x10/0x10 [ 240.166707] ? lock_acquire+0x15e/0x2f0 [ 240.166721] ? __fget_files+0x34/0x3b0 [ 240.166740] ? __pfx_vfs_write+0x10/0x10 [ 240.166765] ? __fget_files+0x203/0x3b0 [ 240.166786] ? lock_release+0xc8/0x290 [ 240.166803] ? __fget_files+0x20d/0x3b0 [ 240.166830] ksys_write+0x1ef/0x240 [ 240.166841] ? __pfx_ksys_write+0x10/0x10 [ 240.166860] do_syscall_64+0xbf/0x360 [ 240.166879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.166893] RIP: 0033:0x7f2ca1febb19 [ 240.166903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 240.166915] RSP: 002b:00007f2c9f561188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 240.166928] RAX: ffffffffffffffda RBX: 00007f2ca20fef60 RCX: 00007f2ca1febb19 [ 240.166936] RDX: 0000000000000018 RSI: 0000000020000080 RDI: 0000000000000003 [ 240.166944] RBP: 00007f2c9f5611d0 R08: 0000000000000000 R09: 0000000000000000 [ 240.166952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.166960] R13: 00007ffd773941af R14: 00007f2c9f561300 R15: 0000000000022000 [ 240.166984] 12:27:23 executing program 4: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) sigaltstack(&(0x7f0000ffb000/0x3000)=nil, 0x0) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/114) 12:27:23 executing program 2: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x104, &(0x7f0000000000)=0x3, 0x0, 0x4) r1 = dup(r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x22, &(0x7f0000001680)=[{&(0x7f0000000580)=""/199, 0xc7}], 0x1) 12:27:35 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) (fail_nth: 2) 12:27:35 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = signalfd4(r0, &(0x7f0000000000)={[0x7]}, 0x8, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f0000000e00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000300)={0xaa0, r4, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x29, 0x2a, [@peer_mgmt={0x75, 0x16, {0x0, 0x0, @val=0xc4, @void, @val="d697b47fd29fdbadb3a21217fe74502d"}}, @channel_switch={0x25, 0x3, {0x0, 0xa1, 0x55}}, @channel_switch={0x25, 0x3, {0x0, 0x84, 0x80}}, @challenge={0x10, 0x1, 0x1f}]}, @NL80211_ATTR_IE_PROBE_RESP={0x17b, 0x7f, [@sec_chan_ofs={0x3e, 0x1, 0x3}, @peer_mgmt={0x75, 0x14, {0x0, 0x3, @void, @void, @val="befa6f7aec18d80fb38da660d0ba02b2"}}, @mic={0x8c, 0x10, {0x8c0, "264fcd629bcc", @short="0cf77ac89ed40f5c"}}, @random={0x6, 0x52, "8e49b74389997d854bbff00d2abcee4fb8275597e596a9a40876dce16acbf806423fcd25926b3a5edd9cf34e8ada5689ac30ff1b7216f6564ff94d6a3c27e2110f0761ebb4f38c17b814d08eb922eeb82676"}, @mesh_chsw={0x76, 0x6, {0x20, 0x81, 0x25, 0x13}}, @ibss={0x6, 0x2, 0x800}, @random_vendor={0xdd, 0xea, "78452d1b3ce11f2ff3a259c0f4cfa563c3d791cf32896e98cbf41b57f4add2a6bb1a0b17d823e2945da3253f788461cdd5c88bfbc8f6f568aa27f7ad72a55e543e4b615509226ae79099bf6f621126e73f1491954c4cf535cbaaa69e1b8a112dad0ded74644c13a82091ba809a7fd24f1a15c58718f6ad50779563ed9ef9784e030b73a25f165d1eee30d9f7c2f04af24b68c2c176b90eeb34d07e7b3db2e4d3e4f5ee6c44f7724fc15cd7f2847d043e2be46f1b6c93aa344d79c91c1762d3a3c3804405c9bc37e1381838a58c16ddfdeef39735916308f54150591fc169323f3b068ae24f68fd960481"}]}, @NL80211_ATTR_BEACON_HEAD={0x245, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x7}, @device_a, @device_a, @random="6da9724477a1", {0x5, 0xd1}}, @ver_80211n={0x0, 0x81, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, 0x8, @random=0x4, 0xe88, @void, @void, @val={0x3, 0x1, 0x3}, @void, @val={0x6, 0x2, 0xfe01}, @val={0x5, 0xa8, {0x14, 0x5f, 0x6, "f1a49af1922669844143b85460560463bf9d7fb823e0edb9b4577510535231738a7d7202f1e1caae74af01370aaa9efc9f72cd113d9f9ee34348b4e715f9f290e3dfd17f7b9db64510b26e2aebed5ae59e43f7cbe2396ccf9a11624a02afc486c57bf07a25ebe6bca924f1758cc772d799276e376b149bc94fd6f89eabfabf8972a701387c822d359c3373d160d24d0166f7dd809f839c2381fe1a1b035ad04cfdcc4dc682"}}, @val={0x25, 0x3, {0x1, 0x28, 0x9}}, @val={0x2a, 0x1, {0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0xfe, 0x0, 0x2}}, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x9, 0x1, 0x3e, 0xb3}}, [{0xdd, 0x13, "9797b99561af5c64f4013e052197c6f6daaafa"}, {0xdd, 0xb7, "23c029f4a455de3c9f6b96f80ce974edef8a9458cfe1873e005f1fe8eeca86ab1273842f0f2fd38725c06483b7687b62b53402d1e1412c351805663343f62e9e6ace8f3dd3a3b91c36551ca715fd06b61609ea4bd7c3471ee7a4b3f30a7262cae648beaf2da1f5b3b8ace2f205ba196bb88d65e56738cb416e7b048e3b63381ab59b65db294a51cf4ec6e536f75ae576e0d4f64242684d5b3f615a2f4d354a5d87469c104c55bb11e5cd512b3487f5094e762f3944e942"}, {0xdd, 0x7a, "263a3b64e574ec57bd51fcf04436ec67faa83f12fcfec1e0d75d4fa0ac9816defe886fdc5f0a74cfc0f41ea7d548b70732b200278ffc04a7065347621c21e2487afba17a10c6ee9e406b8050862d9fa65453fe78399cad4a5b382ec3860a7233b5958058a788f70be4a30002b83222432ffd2dcded5865c0bed2"}]}}, @NL80211_ATTR_PROBE_RESP={0x551, 0x91, "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"}, @NL80211_ATTR_BEACON_TAIL={0xb9, 0xf, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x20, 0xb1, 0x9}}, @measure_req={0x26, 0x73, {0x81, 0xc8, 0x5, "a8f27e881f64696a0deafaf8b44d14af55259ef2cfb9b17b96d932fd225aa8208dac2989372ecc804d9e37ccf5a7200435fc6a73860f6e6e1c7037f6fa4fa941240642617841edbceba7da949a5d8a88242da2aeff5278347487aa6eebb9000c0a72495855b10b4ef9e0fee9bf7d5aae"}}, @chsw_timing={0x68, 0x4, {0x20, 0xf266}}, @prep={0x83, 0x25, @ext={{}, 0x9, 0x81, @broadcast, 0x9, @device_b, 0x4, 0x20, @device_b}}, @channel_switch={0x25, 0x3, {0x1, 0xb4, 0xe4}}, @cf={0x4, 0x6, {0x5, 0x3, 0x9, 0xffc1}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x8c, 0x7f, [@prep={0x83, 0x1f, @not_ext={{}, 0x20, 0x7, @device_a, 0x5, "", 0x11, 0x2, @device_b, 0x8ccf}}, @mesh_chsw={0x76, 0x6, {0x20, 0x4, 0x3e}}, @gcr_ga={0xbd, 0x6, @broadcast}, @ssid={0x0, 0x6, @default_ibss_ssid}, @measure_req={0x26, 0x44, {0x1, 0x2, 0x70, "cc25d86c88d8d216bf558424537d07dbb7c615babdc3cc1b92ee3d65e7796846d4df856db39719e5ab3c3976b046751dcb10322e71466d44ed83b1790a1be89e37"}}, @channel_switch={0x25, 0x3, {0x1, 0x9, 0x80}}, @ibss={0x6, 0x2, 0x6}]}]}, 0xaa0}, 0x1, 0x0, 0x0, 0x20008040}, 0x40000) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}]}, 0x5c}}, 0x0) 12:27:35 executing program 4: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) sigaltstack(&(0x7f0000ffb000/0x3000)=nil, 0x0) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/114) 12:27:35 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x88001, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x12) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x1, 0xfe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x13, 0x80004001}, 0x2008, 0x80, 0x0, 0x0, 0x10000, 0x0, 0x4, 0x0, 0x400}, 0x0, 0x0, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0x4) sendmmsg$unix(r2, &(0x7f0000005340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close_range(r3, r4, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 12:27:35 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0), 0x1) 12:27:35 executing program 3: pause() mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) pause() pause() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 12:27:35 executing program 6: r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0) link(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='./file1\x00') ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x4, 0x81}) setxattr$security_capability(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=@v1={0x1000000, [{0x5, 0x7fff}]}, 0xc, 0x2) mount(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x90c004, 0x0) 12:27:35 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xff, 0x0, 0xf0, 0x1f, 0x0, 0x76, 0x30002, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7b0a, 0x4, @perf_config_ext={0x6, 0x8}, 0x200, 0x3f, 0x5, 0x8, 0x9, 0x2000, 0xfffa, 0x0, 0x6}, 0xffffffffffffffff, 0x0, r1, 0xa) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xffffffff000) [ 251.661734] FAULT_INJECTION: forcing a failure. [ 251.661734] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.663057] CPU: 0 UID: 0 PID: 4729 Comm: syz-executor.1 Not tainted 6.16.0-rc6-next-20250717 #1 PREEMPT(voluntary) [ 251.663076] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 251.663084] Call Trace: [ 251.663089] [ 251.663095] dump_stack_lvl+0xfa/0x120 [ 251.663122] should_fail_ex+0x4d7/0x5e0 [ 251.663149] _copy_to_user+0x32/0xd0 [ 251.663166] simple_read_from_buffer+0xe0/0x180 [ 251.663189] proc_fail_nth_read+0x189/0x270 [ 251.663214] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 251.663238] ? security_file_permission+0x22/0x90 [ 251.663260] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 251.663282] vfs_read+0x1eb/0xbe0 [ 251.663310] ? __pfx_vfs_read+0x10/0x10 [ 251.663333] ? lock_release+0xc8/0x290 [ 251.663353] ? __fget_files+0x20d/0x3b0 [ 251.663388] ksys_read+0x121/0x240 [ 251.663400] ? __pfx_ksys_read+0x10/0x10 [ 251.663422] do_syscall_64+0xbf/0x360 [ 251.663443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.663458] RIP: 0033:0x7f2ca1f9e69c [ 251.663469] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 251.663482] RSP: 002b:00007f2c9f561170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 251.663495] RAX: ffffffffffffffda RBX: 0000000000000018 RCX: 00007f2ca1f9e69c [ 251.663505] RDX: 000000000000000f RSI: 00007f2c9f5611e0 RDI: 0000000000000004 [ 251.663513] RBP: 00007f2c9f5611d0 R08: 0000000000000000 R09: 0000000000000000 [ 251.663521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.663530] R13: 00007ffd773941af R14: 00007f2c9f561300 R15: 0000000000022000 [ 251.663552] 12:27:35 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) 12:27:35 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x88001, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x12) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x1, 0xfe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x13, 0x80004001}, 0x2008, 0x80, 0x0, 0x0, 0x10000, 0x0, 0x4, 0x0, 0x400}, 0x0, 0x0, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0x4) sendmmsg$unix(r2, &(0x7f0000005340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close_range(r3, r4, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 12:27:35 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) signalfd4(r0, &(0x7f0000000000)={[0x7]}, 0x8, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}]}, 0x5c}}, 0x0) 12:27:35 executing program 4: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) sigaltstack(&(0x7f0000ffb000/0x3000)=nil, 0x0) 12:27:35 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)={'syz1', "8bce0407026424dad5314bb5dfd6a93f2946ba34dedd3ddd527eb47e06fa2fd1dbba36e337adafbd05d0a9dfa8569ab4036cdd41b1eac33a0c10e50b8c968ae1b305613742a212f50c5ad1fee9136987af089bf989f53996a3b56a1b7217c82fa4e8d94f20aa56219ae32b02c471116ad513de35eae336ac5183"}, 0x7e) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={0x0, @can={0x1d, 0x0}, @llc={0x1a, 0x201, 0x0, 0x4, 0x9, 0x1f, @remote}, @qipcrtr={0x2a, 0x4, 0x1}, 0x3f, 0x0, 0x0, 0x0, 0x7ff, &(0x7f0000000280)='veth0_macvtap\x00', 0x9, 0x9, 0x5189}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x110, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x44000012}, 0xc001) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r7) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x41}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e22, 0x9, 0x4e22, 0x1, 0xa, 0x100, 0x20, 0x3d, r4, r7}, {0x5, 0x7496af05, 0x2, 0x400, 0x5, 0xad12, 0x9, 0x6}, {0x5, 0x5, 0x400, 0x956226a}, 0x80008000, 0x6e6bb1, 0x2, 0x1, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d3, 0x6c}, 0xa, @in=@multicast1, 0x3505, 0x0, 0x0, 0x1, 0xfff, 0x5, 0x10000}}, 0xe8) r8 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000040)='\x00') r10 = dup2(r9, r9) connect$bt_sco(r10, &(0x7f0000000000), 0x8) 12:27:35 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x30) 12:27:35 executing program 2: dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f0000000040)) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x434240, 0x50) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'rf\x1d\xfbj'}}]}}) [ 254.670760] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 254.673170] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 254.676319] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 254.680677] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 254.683414] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 256.701534] Bluetooth: hci7: command tx timeout [ 258.749503] Bluetooth: hci7: command tx timeout [ 260.798492] Bluetooth: hci7: command tx timeout [ 262.845886] Bluetooth: hci7: command tx timeout [ 272.206897] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.208418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.287490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.288854] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:28:06 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2, 0x0, 0x9}], 0x18) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000000)={0x57, 0xfff8, 0x9, {0x3, 0x1bc}, {0x1, 0x6}, @const={0xda0, {0x4, 0x8, 0x4, 0xa8af}}}) 12:28:06 executing program 4: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) 12:28:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x8}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xc9}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}]}]}, 0x38}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004881}, 0x4040804) 12:28:06 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) r1 = fork() fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x2, 0x2, 0x0, 0x9, r1}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0) 12:28:06 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0), 0x1) 12:28:06 executing program 2: dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f0000000040)) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x434240, 0x50) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'rf\x1d\xfbj'}}]}}) 12:28:06 executing program 6: dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f0000000040)) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x434240, 0x50) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'rf\x1d\xfbj'}}]}}) 12:28:06 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) signalfd4(r0, &(0x7f0000000000)={[0x7]}, 0x8, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}]}, 0x5c}}, 0x0) 12:28:06 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}]}, 0x5c}}, 0x0) 12:28:07 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 12:28:07 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x0, 0xea60}, 0x2}], 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$notify(r1, 0x402, 0x12) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f00000000c0)={{r1}, "ef5b5aafbe6432699570ae38edc720fb75203bd71f585ebccc4e3c9e474b8780fd943734ef9e66f3ffaccf4880331a93af93c35b333772418a36912a93fc4c14fdbd812b9404d31d753a64dc2a23e52eb3caba23a3c26db032cfd85a59fe9434e5c524da7758df298fe51ac619ee36ad7bf58decfdd130c3b98c7e1a339e4c65d0343f599f510a6fe73c1e9b12d4ad7aa6c6907f3af5cae15d4e993d9a9ea5282b4bad75892ae19d7d671eb84a5f8ea8e277475e0e774c982382d1efa2f508be3b79f81d0e201a2af4569f24a09e81f9216cf4bce613a22c67b0926f49e7b18d31e16018217eda731a98282284ba42d893ea4375e738531ee0acd0016da571f59b75856a430f329827f6abb92228a1f9913a36f03616bc1bc48c412d5d9397f5bb91b9d7897cbf494525ec58937c617a4db7da9355a964e654adf0360a1052141f42a3ebe6e9d45fa45aeeb9d60324e87bbe1d4221fc86aeaa86106967c04f4d0b0ffde46d9d215445bfb2df086d492129687a5616784f86059da1c929c5c8600c5509e518a3232cd215614280c7e0e77fcc568ec0b876d238a1d5d0562819e9d8bc9ff4e185c05324a4afd2aec0450123e7a376eee27081f46b0d42befca4f532b5ec88d798ac29b3f21937749f6f449358b468b9198213d74826e0fc548e6e72f956f6efb14a3b7d81c38a8a05338a84acc9b421f8e9970bd91419b5b066cbde82cb73ab0a8ba61034bfd961e5a68371a85583e2b3701d8eb2ae61d72c64713d09684e3e0bbd71519c170a7fe39f956d2bd201824fbe35556fbc1cac4b065ce8db44e147a3f8d5524c93cf421637cbd2b2078b6f17b69af6ccb2757053ee1343d66edba654661b1e58bffd3188bbc46e46e71c3ccc5aeea2815ef92b8fee46b6609d6af57c6b4e32d5e622fc445978f3d0b13c1d8ae4ad626440f43ecddbdda500f7ea9293d6eb0d9c7d00f33c56ccb493df43b74e36f322fcff08d043f42bc647c11bcecd0c00660e322630f5aa20ebc0a2ea5a085c66b5310c4cd6c1053f79d3b153bac389694ff6e339b4aace3435027890ebb992a88916be5d292f2d5ed5312252df029566ff29925f794359494326e0d9eaf7a3af28e12362ce69a3e1fd69c663a3fcde64742dd64e00592686de31c54f62e0372422e30b61f13171d176ce44f3805cc2d9ce7d9140d7ee2399472c512b1a9ac1d981234d0175b30bd241581d4a9aa2afdd91a286d59d124d7f4d7ac7a5f162702aa760861c91c97e7655271e7098fc15a0138fdaf1768d0a3bfe91f4f2135962c0fc230bf0324e5978ba96bb9825f1e98907511d17f862b5579cc24319e7184280721d06e5c0428962dbb1774de1d9a37bb2d5dc07761a641e93419dd8931e54119d08d85becf955b776f4a6ba8d7d342e7b16738d13b6a8850ccf61710c3096c10a25c63a62cd93a7f1d4f75916ac0cb64d38e86d1e6e30504579a7103550838ad20c6c515c1d398cff30aeb872972056a1411997023dae3739b1d27f7d2610b5ad9a0ed3a28ec7997f3427b500ac1cb4a5e56e956624bbf57e408365ec6af4ceb3e39746f13dba021b139ffd36a540d20d41fcaee71c377d7b96dc00fe0abf3d8f3f045e0102838a89b6c805b0afd4c1c7bf6a0600315feba22829a0c057316a0fcfab863c7ce9f31742723b960c2eb50c90f24e06691a2b2bc2212bafdc8ce056bac68e6be676f82d0b9dea6d4d3460d9321b376e7c06f7a9c2cdb41a3bc745fc10ce089764601b7f30ab9255ff6d87e7832ad4a0457249872731c344712a9793bc0bb25aef944d8604baf405e21ca35e8825ba76b899473ad118afa84c9f2fb34c41b9b0129af797079476dd4150ea9905339d46063d244ca11a09c0cefdd688ad8ef058077d270aea058c43069060ac91d4c27d71c3fd9cf7c4136e9254a6cb644397c594829126a093626782d1f3f84542118a4a87fd28fbed8af4d95469b430a4ca188afd34e741f97ffddc6f336b668e05b7288861bc4e062ae6e7d3f7a5d2205b377202d5b9e61ca9fc8230ffe8a00f82756016311f686e8dd558e6b0d85a916801123c5b84490dbccd5fb91d83dc8f64a0b866c472f4b08f4ddd78dbc1604fad01ecf25c1ec73366b02fdcdad4d6024595a1a05fac7323bfecb8c069aaf3745d23f9bd2de043bf56b52efa32e8b0d304150f463110c91da10c47638ec1646ee6fd001b75f8b11ef9884bc752059053b7d315312d3835df27953253edf271611f969cbdb318f25ca786f5fd79edfc3ba2a6008d89f76c5c11bcd9c89a8572cb36901118b5d29451dbc07b49a1deb4d16106f6e5c70aceb1c8b2eb0da40064969e2ec3d7862dd7b45f221530f6abcec7a708c6c137e6b9c076a60d921cce793931947fc10795e40306d6029c79dc1368877ff36780163c4c0813f151e3e280e701c02f623144bf66a432162bf3f2d4087884388fb7f160490cc68d9d495d873a91662343ef7b3bfa603e219e3f9b2b664fde60d895844767f3bde19aebaa7f5d3fc27e95b7a21faeb9cb1b6dcdf99d417bc63d25e9ef026f6f32410e50edaf3f3eea8b08743caeb38aee41a83dc0dd9cdd6204f7c438c66638345091c463d398ea1c3430b05ee4c8352702b93b711c46016509e645db4ab6a019b18d9036f8ae95913b4e138db16061f4d87d2623aa2d42ef29585286ea43fa2760abfded206d8174a0ed7cce9f458f0a02d5a6a93401dda56ce8232747e1742e20ecb8a339be20af86eecc21eb45047d366d3eada33cb7a2577c5dff5af772992ba867dd20aa2d1b01858e21a99fb48ae4e549282591714c472d8b2d31495b7e877fdf24979f2103826d76f9ebe046e835c109afec8cf2baee85003e8165e04812184312bb869ec1e036927ca0f16476eee1838cba02d29fd8b0b52010ac8412b1cc45278b05428d0398a932fdbe3dcfec5f922d7d13dff751507a69ed3e0067671c699d0f8a9ec95560168c6b2c1668102b669b65192d8cbc94dc2482a3b4ede76b632ee57969fa2236c6899ba06bcf14e475410afcc3a5d86d5fdcab526da857673e8b92912a420a9f5104a4e3cc46efb2b08d41d84197a5ce26b2aec7dac15ef0c7180b5498796320011683ef676a2b9ad9b4dfdc65213c10e5397efd02dd45d1f2b179d9ccc8bb0c4ef15135b7eee2cd871bae81b02300c9905cd272519f9789e5adbfc4c03523cd5a63e1916c70ae7d2baeec3ea8e7c5b95330ba6286547b519082e91d20717bf61ae442873ce3e48cf5567a42059229614ccec8a80455c7d2c40473bbc202020af47486b5de9b3da5be1a30048a7b1dbb8a097b0985cb6c35bd19680f7a033b41cbb5634d7d2206a6b794045f69fea2eae45ef45feaf803fcd6e6f8a4dbac217436fcd33c6fcf5ab565006f6040a61f0c25c9f80bd3adde65d1248048e74fad4ca90d903541af5195281c276ff32e3acfd7176add181dd7b31584262bf575c7552c0a7ae4eedd7a9961e45f0cb9a160a8fc4bcc240819f7bcd0d262746da16f4f9e979adff1db5b6bf49ddebbc9f5210e9338354b5d1799dfbaa88930f651117d982fa2617c54743e3219af9c692d1e46f5a24456bf8c5d6721646d0ced2ed691db3f76bedfbcc1b9ff33bfa1c078edd9f675dcb520678c4c691501a75e0718b782f66e7d33e93a10fbea96e507092f8d3726bee134661a1dc955b951070ce993b476e9c2f2ba8c76e4a9a55ac969883b7f4c1b44968f3a4ab8731aa32149353466844f58d5d9da878890e8cb44b35cd69447a8574e219ba0dcf006b2ee443fc93e238835dac00d70924f386040389f28b5964b909da8cbba3338a6c639488f505c4344814629483e4e7b9d53b7b20aa479aeae2fd1d649dec7475ec807dcd8273297ec38f31cfd6dfedace2619460ece2c49ea088849439af6872e09fdd4957312381c02914cca496dfc80cbc79b1f372f47f67d23da453c573d6e4816cc4d1f5d7992acc1eb26371b0040d32d293ebbcb593c789b258eb46a780d8b697b853ccb47aa94a3033513681897b1cb5fd1a8145468bf1ccb7220bebaae561b2bd78af119b82a52e3e345cbb5936239ccc63dc46fd870166d0c1df9cec7c6cc455fa320c2d457277a1b30a132b620364bab82032f2d54ae9cab9f8bfb4cabcd46bd514a1bfd87f28bc75aba0cf4902d0b00cad2b92c0d0047f5ca89fb5eb3637c796ade19e4c8b2a34f834f37980fc5db3273af50a22f7a49251e2447207900d82640a04cea1efe2c8baede36a89f6f27e8fdf02aa3c0e6d281cf917e23b676c792b8dcbc7e2bb7dade6cb61ef6213837a46c8b7d15341f69ffe0ce932775418ff14c42aa2be55a9d74a621b64a27e976754a6b2a9e9ac5b8a8f6097e75ae759d78dd5365392e54f79083514933d7818b8a1874019207ac3ce3f0bbf2498d03dcdc69d8b7b6e514910aa53a6e5617833971cd2c357077b7af4a05aa39c281900f5ea17c3a2db82cd7260b51b86f873eb91e5518fc77f5bfb3c78545a2da15284e022d7971ad603ee9ada68921e154b4fcd4f57809fc31ed0da890b0745efc9d179fb540bc7c1ec78dbdda742f55281cebb8f9b7f95d7a58edee08f76adbba59fa1099f8fea8770954d0aeaf0d12642d5cafba8748a4393f9acc689fe5e996e3aff0262178607d80f442141ecade64ef16ef484e274d1bd4839412a45de4306ac78800afd0ff5c5e68a84e5b6ce7df274b346bfbf1d9fcbba47c3bed7f7f5103c19da7e1576392b7c325a6d1d8a58ef4836ca5263d6dc2779891870a805231ab16fe9c5090032454768651ec3cbd102822140cb1ce34d9bf59ce61e3a8b66de3d159cf46bfe13163dee76505eb0cefaacfcb29fab9b2c8ddbb8c91835f43d903c4f5ea9dc2901af8f5c72f9edd54a574f9f71782e131c92cb1096c603778fc7f8c86c60f30334f14d153744643d697c963546324182c928bd4abb6a83bf6226d7c8ed8bb8b5184f5741d8f3bae8a1105047d13c925535714b4f35caafbb8e0abebaef9d584d097c406f48675947617a2e37ac3e04d8561c575becb0f7c7d42e06880ce6133f000bf2407e3493c6daa0c9c3a375051ff79a58487cc967be5e7b84d8bd4b8e50fd82847535a72961fef79ecbf8ed2841749643992b725f48e1b56873b4861a468249c560447a601a28a694f82891a66c5238e535654e413b1fea01a6e57b6dcb38f773300ef182dcfa0e3591bc4f9e55aa7ea0cd5f0e47a9a828d23ac1e8f34e707bf6e3ededbb736c4648ddc6aeb30ca3c57dce58321e76a57825063cfce39c6465b365743dab74efb36f15ab3fb7fa8ebfe5ed6fead09c567a72705d19d51d0596ab2e0fc6e17c234db8cd2a6d432801138bcfa633215c3b35f0832f68576869240c25b7c7e8b506ddc80e02602d2b6bda56d97a4fbd390132e4299ba7f5c6c4def824f33fb65a49a2e986237c7bfad48edae2cfe4d25f7c6a41c363236f9c909ce763236daa9e012446708131d5d1f4e72f5aff2405b2d029e6a12e1063202973ea64eb08204587e3146d08a70aec03da83068a8a48b320c51f14f32591ac2238c36a2b1c1cbf3d849d485694890d96f34f36fee6f987fd3628100fd1b5c77116a10b2a6c989098e05f9c8d35bfcf65e9f51f6485e2ee9e2da632a2dfbef541eb3de2dd1bfdff8937a965d149e0313869f29973aec912532cc8fc0a172ddb10bc9e6c4dbe9baf86f367251008a501aae14f644645bb2f1c6f9d1766f69654d7806ffec984187bb37ac571fb4d7b640b2434a2ebcb3"}) 12:28:07 executing program 4: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) [ 283.476788] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list 12:28:07 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) fcntl$getown(r0, 0x9) 12:28:07 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}]}, 0x5c}}, 0x0) 12:28:07 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 12:28:07 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="0c00e854ce7afeff0180ffffffffffffba"], 0x30}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), r2) syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r0) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000400), r0) 12:28:07 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x3, 0x0, 0x0, 0x7fff0000}]}) getresgid(&(0x7f0000000000), &(0x7f00000190c0), &(0x7f0000019100)) 12:28:07 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}, {@gid={'gid', 0x3d, r3}}]}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x800000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}, {@version_L}, {@dfltgid={'dfltgid', 0x3d, r3}}], [{@measure}, {@hash}]}}) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f00000001c0)=0x7) 12:28:07 executing program 5: r0 = semget$private(0x0, 0x2, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfffd, 0x1800}], 0x1, 0x0) semtimedop(0xffffffffffffffff, &(0x7f00000000c0)=[{0x3}], 0x1, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000000c0)) 12:28:07 executing program 4: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) [ 283.729192] tmpfs: Invalid gid '0x00000000ffffffff' [ 283.741890] tmpfs: Invalid gid '0x00000000ffffffff' 12:28:07 executing program 6: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x88001, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x12) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x681}}, '\x00'}) r1 = syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x7003, 0x0) ioctl$RTC_UIE_OFF(r1, 0x7001) 12:28:07 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_open_dev$mouse(&(0x7f0000000180), 0x4, 0x200000) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000000c0)={0x4, {{0x2, 0x4e22, @multicast2}}}, 0x88) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) accept$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @private}, &(0x7f0000000200)=0x10) write$evdev(r1, &(0x7f0000000080)=[{{0x77359400}, 0x17}], 0x18) poll(&(0x7f0000000000)=[{r1, 0x80}, {r1, 0x408}, {r1, 0x8482}, {r1, 0x8000}], 0x4, 0x1) 12:28:07 executing program 5: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) membarrier(0x8, 0x0) r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) getpeername(r0, &(0x7f0000000140)=@ll, &(0x7f0000000080)=0x80) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') name_to_handle_at(0xffffffffffffff9c, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x400) readlink(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=""/95, 0x5f) 12:28:07 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}]}, 0x5c}}, 0x0) 12:28:07 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syzkaller1\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="30000000018023000400000005000900ff491ffdaa2000008100000000000800040000001f00090000000000"]}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) fsetxattr$security_selinux(r1, &(0x7f00000001c0), 0x0, 0x0, 0x2) getsockname(r1, &(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x80) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000240)) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pwritev(r3, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000100)="a67b5f9ab4093ee8225ca4f5bb9e0eec95b9857201fc83c3d52ac1c342330ce4d4a8f599e52a71a9774aacc726654dacff000000bd0c5d0af4c5ff55cdf90ea251a57bc49cbbe1f00c2f9e470836b9a02a110ff409", 0x55}], 0x2, 0x0, 0x0) 12:28:07 executing program 4: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) 12:28:07 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r5, 0x1) 12:28:16 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f00000012c0)=""/190) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000000c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000002c0)={r2, 0x0, "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", "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"}) 12:28:16 executing program 3: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) 12:28:16 executing program 4: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) 12:28:16 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}]}, 0x5c}}, 0x0) 12:28:16 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202e2f66696c6030207766646991236a51e26a687b913521be53e24c"], 0x1e) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 12:28:16 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r5, 0x1) 12:28:16 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000000040)={0x0, 0x0, 0x3f}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000005540)={{{@in6=@initdev, @in=@local}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f0000005640)=0xe8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000008600)) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x88001, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0x12) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r4, 0x40505330, &(0x7f00000000c0)={{0x8, 0x9}, {0x7, 0xc6}, 0x4a, 0x3, 0x4}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setregid(r6, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) clone3(&(0x7f0000005880)={0x61020100, &(0x7f00000056c0), &(0x7f0000005700), &(0x7f0000005740), {0x34}, &(0x7f0000005780)=""/85, 0x55, &(0x7f0000005800)=""/32, &(0x7f0000005840)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8, {r1}}, 0x58) 12:28:16 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) fcntl$getown(r0, 0x9) 12:28:27 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202e2f66696c6030207766646991236a51e26a687b913521be53e24c"], 0x1e) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 12:28:27 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000000040)={0x0, 0x0, 0x3f}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000005540)={{{@in6=@initdev, @in=@local}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f0000005640)=0xe8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000008600)) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x88001, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0x12) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r4, 0x40505330, &(0x7f00000000c0)={{0x8, 0x9}, {0x7, 0xc6}, 0x4a, 0x3, 0x4}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setregid(r6, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) clone3(&(0x7f0000005880)={0x61020100, &(0x7f00000056c0), &(0x7f0000005700), &(0x7f0000005740), {0x34}, &(0x7f0000005780)=""/85, 0x55, &(0x7f0000005800)=""/32, &(0x7f0000005840)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8, {r1}}, 0x58) 12:28:27 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000000040)={0x0, 0x0, 0x3f}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000005540)={{{@in6=@initdev, @in=@local}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f0000005640)=0xe8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000008600)) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x88001, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0x12) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r4, 0x40505330, &(0x7f00000000c0)={{0x8, 0x9}, {0x7, 0xc6}, 0x4a, 0x3, 0x4}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setregid(r6, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) clone3(&(0x7f0000005880)={0x61020100, &(0x7f00000056c0), &(0x7f0000005700), &(0x7f0000005740), {0x34}, &(0x7f0000005780)=""/85, 0x55, &(0x7f0000005800)=""/32, &(0x7f0000005840)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8, {r1}}, 0x58) 12:28:27 executing program 4: mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) 12:28:27 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x5c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}]}, 0x5c}}, 0x0) 12:28:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x400100, 0x48, 0x1}, 0x18) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000100)=""/2) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) 12:28:27 executing program 2: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x240280, 0x2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0xf84e7f3, 0xfcb5}) sendfile(r1, r2, 0x0, 0xa0103) 12:28:27 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r5, 0x1) 12:28:27 executing program 4: mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) 12:28:27 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x5c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}]}, 0x5c}}, 0x0) 12:28:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/13) 12:28:27 executing program 2: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x240280, 0x2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0xf84e7f3, 0xfcb5}) sendfile(r1, r2, 0x0, 0xa0103) 12:28:27 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000000040)={0x0, 0x0, 0x3f}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000005540)={{{@in6=@initdev, @in=@local}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f0000005640)=0xe8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000008600)) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x88001, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0x12) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r4, 0x40505330, &(0x7f00000000c0)={{0x8, 0x9}, {0x7, 0xc6}, 0x4a, 0x3, 0x4}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setregid(r6, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) clone3(&(0x7f0000005880)={0x61020100, &(0x7f00000056c0), &(0x7f0000005700), &(0x7f0000005740), {0x34}, &(0x7f0000005780)=""/85, 0x55, &(0x7f0000005800)=""/32, &(0x7f0000005840)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8, {r1}}, 0x58) 12:28:27 executing program 4: mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) 12:28:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x88001, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0x12) getsockopt$inet6_buf(r2, 0x29, 0x32, &(0x7f00000000c0)=""/219, &(0x7f00000001c0)=0xdb) poll(&(0x7f0000000000)=[{r1, 0xe3b4}], 0x1, 0x7ffffffc) 12:28:38 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x5c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}]}, 0x5c}}, 0x0) 12:28:38 executing program 6: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r5, 0x1) 12:28:38 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x88001, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0x12) getsockopt$inet6_buf(r2, 0x29, 0x32, &(0x7f00000000c0)=""/219, &(0x7f00000001c0)=0xdb) poll(&(0x7f0000000000)=[{r1, 0xe3b4}], 0x1, 0x7ffffffc) 12:28:38 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000000040)={0x0, 0x0, 0x3f}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000005540)={{{@in6=@initdev, @in=@local}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f0000005640)=0xe8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000008600)) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x88001, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0x12) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r4, 0x40505330, &(0x7f00000000c0)={{0x8, 0x9}, {0x7, 0xc6}, 0x4a, 0x3, 0x4}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setregid(r6, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) clone3(&(0x7f0000005880)={0x61020100, &(0x7f00000056c0), &(0x7f0000005700), &(0x7f0000005740), {0x34}, &(0x7f0000005780)=""/85, 0x55, &(0x7f0000005800)=""/32, &(0x7f0000005840)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8, {r1}}, 0x58) 12:28:38 executing program 1: ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) 12:28:38 executing program 4: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) 12:28:38 executing program 2: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x240280, 0x2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0xf84e7f3, 0xfcb5}) sendfile(r1, r2, 0x0, 0xa0103) 12:28:38 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, 0x0) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r5, 0x1) 12:28:38 executing program 7: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x5c, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}]}, 0x5c}}, 0x0) 12:28:38 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r5, 0x1) 12:28:38 executing program 4: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) 12:28:38 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000140)={0x5, 0x47, &(0x7f00000000c0)="495a6adc89e8a5dd705d5a48252d0dc06cc6a3b42ff22808fdef7af3bc28442afc90fe5fb14dfe4954099aa7f11abddf893420aed5852449e0992b4955102b9dd669cf7c454333"}) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) 12:28:38 executing program 2: ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) 12:28:48 executing program 6: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, 0x0) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r5, 0x1) 12:28:48 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r5, 0x1) 12:28:48 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/13) 12:28:48 executing program 7: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x5c, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}]}, 0x5c}}, 0x0) 12:28:48 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x77359400}, 0x3, 0x4, 0x2}, {{r1, r2/1000+10000}, 0x3, 0x8, 0x1ff}, {{0x77359400}, 0x2, 0x1302, 0xb3}, {{r3, r4/1000+60000}, 0x1f, 0xf75, 0x2}], 0x60) clock_gettime(0x7, &(0x7f0000000180)) 12:28:48 executing program 3: mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) 12:28:48 executing program 4: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) 12:28:48 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, 0x0) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r5, 0x1) 12:28:48 executing program 2: mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) 12:28:48 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x80084504, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000000)={0x7f, 0xf, 0x95bc, 0x0, "2b5c4ff2a997e425189bcc61c61dcb3f05bdbd872a2286df44066ccbe81aeadb"}) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2, 0x1}], 0x18) 12:28:48 executing program 4: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) 12:28:48 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x240280, 0x2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0xf84e7f3, 0xfcb5}) sendfile(r1, r2, 0x0, 0xa0103) 12:28:48 executing program 7: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x5c, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}]}, 0x5c}}, 0x0) 12:28:48 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) clock_gettime(0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) write$evdev(r0, &(0x7f00000000c0)=[{{r1, r2/1000+10000}, 0x5, 0x4, 0x4}, {{0x0, 0x2710}, 0x1f, 0x80, 0x7}, {{0x77359400}, 0x16, 0xfffb, 0x80000000}, {{0x0, 0x2710}, 0x11, 0x3, 0xb0}, {{}, 0x16, 0x9, 0x7fff}], 0x78) 12:28:48 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000000040)={0x0, 0x0, 0x3f}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000005540)={{{@in6=@initdev, @in=@local}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f0000005640)=0xe8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000008600)) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x88001, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0x12) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r4, 0x40505330, &(0x7f00000000c0)={{0x8, 0x9}, {0x7, 0xc6}, 0x4a, 0x3, 0x4}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setregid(r6, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) clone3(&(0x7f0000005880)={0x61020100, &(0x7f00000056c0), &(0x7f0000005700), &(0x7f0000005740), {0x34}, &(0x7f0000005780)=""/85, 0x55, &(0x7f0000005800)=""/32, &(0x7f0000005840)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8, {r1}}, 0x58) 12:28:48 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}]}, 0x5c}}, 0x0) 12:28:59 executing program 1: write$P9_RWALK(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="160000004d0300000044000000000000005bed403a09b0264df756354b792b049ab932eb2592dce6e103af28c0b24662c0e523f043e6a2dfa2142a768b2afd1e6728cd4367d515f87e2d51e1327333da43d13a289a4efc50ee24d63a3421efe836a3cc"], 0x16) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) 12:28:59 executing program 4: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) 12:28:59 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, 0x0) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r5, 0x1) 12:28:59 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, 0x0) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r5, 0x1) 12:28:59 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}]}, 0x5c}}, 0x0) 12:28:59 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r5, 0x1) 12:28:59 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r5, 0x1) 12:28:59 executing program 6: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000000040)={0x0, 0x0, 0x3f}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000005540)={{{@in6=@initdev, @in=@local}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f0000005640)=0xe8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000008600)) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x88001, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0x12) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r4, 0x40505330, &(0x7f00000000c0)={{0x8, 0x9}, {0x7, 0xc6}, 0x4a, 0x3, 0x4}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setregid(r6, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) clone3(&(0x7f0000005880)={0x61020100, &(0x7f00000056c0), &(0x7f0000005700), &(0x7f0000005740), {0x34}, &(0x7f0000005780)=""/85, 0x55, &(0x7f0000005800)=""/32, &(0x7f0000005840)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8, {r1}}, 0x58) 12:28:59 executing program 4: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) 12:28:59 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r5, 0x1) 12:28:59 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}]}, 0x5c}}, 0x0) 12:28:59 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x20081) pread64(r0, &(0x7f00000000c0)=""/206, 0xce, 0x1) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) 12:28:59 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r5, 0x1) 12:29:00 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}]}, 0x5c}}, 0x0) 12:29:00 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r3 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) r4 = getpid() r5 = pidfd_open(r4, 0x0) process_madvise(r5, 0x0, 0x0, 0x4, 0x0) write$evdev(r0, &(0x7f00000002c0)=[{{}, 0x1f, 0x810, 0x7}, {{0x0, 0xea60}, 0x12, 0x7b, 0xdc3f}, {{0x77359400}, 0x5, 0x1f, 0x101}], 0x48) ppoll(&(0x7f0000000200)=[{r0, 0x8}, {r3, 0x3004}, {r5}], 0x3, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)={[0xa70]}, 0x8) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000100)=[{{r1, r2/1000+10000}, 0x0, 0x5, 0x3}, {{0x0, 0x2710}, 0x11, 0x1000, 0x1}, {{}, 0x2, 0x7, 0xffff0001}, {{0x77359400}, 0x14, 0x7, 0x54}, {{}, 0x0, 0x8, 0x8001}, {{r6, r7/1000+10000}, 0x3, 0x1, 0xffffffff}], 0x90) 12:29:00 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, 0x0) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r5, 0x1) 12:29:11 executing program 5: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080200000001080211000011000000000000000000006400010002020202020201f2510861a38b960c1218240000000000"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) 12:29:11 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x4d4080) clock_gettime(0x0, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xffffbe9e}}, './file0\x00'}) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000140)=""/168) syz_io_uring_complete(0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$evdev(r0, &(0x7f00000000c0)=[{{r2, r3/1000+10000}, 0x14, 0x7ffe, 0x49c}, {{0x77359400}, 0x3, 0x3e3c, 0x3}], 0x30) 12:29:11 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}]}, 0x5c}}, 0x0) 12:29:11 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xc, 0x0, r4) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f00000003c0)=r5, 0x1) 12:29:11 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, 0x0) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r5, 0x1) 12:29:11 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) (fail_nth: 1) 12:29:11 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x4000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x88001, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x12) r2 = openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x2a) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000240)) 12:29:11 executing program 4: r0 = creat(0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="fbffffff00000000001501"], 0x3c}}, 0x0) r3 = accept4$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xe, 0x0) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) [ 347.535745] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.537830] FAULT_INJECTION: forcing a failure. [ 347.537830] name failslab, interval 1, probability 0, space 0, times 1 [ 347.540291] CPU: 0 UID: 0 PID: 5573 Comm: syz-executor.6 Not tainted 6.16.0-rc6-next-20250717 #1 PREEMPT(voluntary) [ 347.540323] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 347.540335] Call Trace: [ 347.540342] [ 347.540350] dump_stack_lvl+0xfa/0x120 [ 347.540392] should_fail_ex+0x4d7/0x5e0 [ 347.540430] ? mas_alloc_nodes+0x432/0x8f0 [ 347.540454] should_failslab+0xc2/0x120 [ 347.540482] kmem_cache_alloc_noprof+0x5f/0x3d0 [ 347.540516] ? lock_is_held_type+0x9e/0x120 [ 347.540548] mas_alloc_nodes+0x432/0x8f0 [ 347.540582] mas_node_count_gfp+0x106/0x140 [ 347.540611] mas_preallocate+0x2af/0x690 [ 347.540646] ? __pfx_mas_preallocate+0x10/0x10 [ 347.540677] ? __lock_acquire+0xc65/0x1b70 [ 347.540712] ? __asan_memset+0x24/0x50 [ 347.540734] ? init_multi_vma_prep+0x30a/0x650 [ 347.540768] commit_merge+0x258/0xe60 [ 347.540806] ? __pfx_commit_merge+0x10/0x10 [ 347.540846] ? lock_release+0xc8/0x290 [ 347.540872] ? dup_anon_vma+0x77/0x330 [ 347.540900] ? lock_is_held_type+0x9e/0x120 [ 347.540929] vma_modify+0xe44/0x2030 [ 347.540971] ? __pfx_vma_modify+0x10/0x10 [ 347.541013] vma_modify_flags+0x1b0/0x250 [ 347.541047] ? __pfx_vma_modify_flags+0x10/0x10 [ 347.541105] mlock_fixup+0x1b5/0xda0 [ 347.541136] apply_vma_lock_flags+0x252/0x380 [ 347.541164] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 347.541199] ? __pfx_down_write_killable+0x10/0x10 [ 347.541231] ? __mutex_unlock_slowpath+0x157/0x650 [ 347.541256] ? kernel_write+0x623/0x660 [ 347.541299] do_mlock+0x2ac/0x800 [ 347.541321] ? __fget_files+0x20d/0x3b0 [ 347.541357] ? __pfx_do_mlock+0x10/0x10 [ 347.541382] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 347.541418] ? fput+0x6a/0x100 [ 347.541445] ? ksys_write+0x1a3/0x240 [ 347.541466] ? __pfx_ksys_write+0x10/0x10 [ 347.541494] __x64_sys_mlock+0x59/0x80 [ 347.541517] do_syscall_64+0xbf/0x360 [ 347.541548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.541570] RIP: 0033:0x7f31b06d8b19 [ 347.541587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 347.541608] RSP: 002b:00007f31adc4e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 347.541630] RAX: ffffffffffffffda RBX: 00007f31b07ebf60 RCX: 00007f31b06d8b19 [ 347.541644] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ded000 [ 347.541657] RBP: 00007f31adc4e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 347.541670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.541683] R13: 00007ffee645bf1f R14: 00007f31adc4e300 R15: 0000000000022000 [ 347.541715] [ 347.582515] hpet: Lost 1 RTC interrupts 12:29:11 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f00000000c0)=""/195) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) 12:29:11 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}]}, 0x5c}}, 0x0) [ 347.632851] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 347.654491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:29:11 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) (fail_nth: 2) 12:29:11 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x76, 0x1, 0x5, 0x66, 0x0, 0x0, 0x4010, 0xf, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x4, 0x4}, 0x42, 0x3, 0x2, 0x0, 0x9, 0x7, 0x8, 0x0, 0x1, 0x0, 0x8}, 0x0, 0x6, r1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000000c0)) [ 347.790206] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 12:29:11 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x0, 0xea60}, 0x12, 0x8001, 0x3}], 0x18) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x24100, 0x0) fcntl$setflags(r1, 0x2, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x2, 0x8b, &(0x7f00000000c0)="d46d97be91e0cde00500422db00d88000f88ef60748220e249cf3aaa6b4056086b20e85db126dcf911bc86e7fe9ac6f745e23c4535a702a0273d0810424de662cec3332c9a54a4746c1ef12dd56305d951fc1aa720c391d9f9121386b18711311cc7d9f5ea861c85b0796b11e4e501ec533531af5d2c5f0f3d4b80ef5966d4f522f523455809c357177893"}) 12:29:11 executing program 4: r0 = creat(0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="fbffffff00000000001501"], 0x3c}}, 0x0) r3 = accept4$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xe, 0x0) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 12:29:11 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) (fail_nth: 3) 12:29:11 executing program 2: syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="01070087cb86bb00000035b4780a010100ac141400ac02000000b92b00000000000000000000000000001f8c579bb590713d0bcde203", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) [ 347.968271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.019663] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 12:29:11 executing program 5: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080200000001080211000011000000000000000000006400010002020202020201f2510861a38b960c1218240000000000"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) 12:29:11 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}]}, 0x5c}}, 0x0) 12:29:11 executing program 1: sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x3e9, 0x800, 0x70bd28, 0x25dfdbfd, {0x14, 0x1, 0x2, 0xffffffffffffffff, 0xfffffffb, 0x0, 0x8, 0x9, 0x0, 0x8}, ["", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x44000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="14002c"], 0x30}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x92f9, 0x23}}}}, [@NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0xb1, 0x5}, {0x5, 0x2}, {0x5}, {0x1, 0x7}, {0x0, 0x6}, {0xfa, 0x4}, {0x0, 0x7}, {0x1, 0x4}, {0x4}, {0x3f, 0x3}, {0x7, 0x4}], "c86512e38224e753"}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r3, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) [ 348.212918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.230200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:29:20 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) (fail_nth: 4) 12:29:20 executing program 2: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080200000001080211000011000000000000000000006400010002020202020201f2510861a38b960c1218240000000000"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) 12:29:20 executing program 5: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080200000001080211000011000000000000000000006400010002020202020201f2510861a38b960c1218240000000000"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) 12:29:20 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f00000000c0)=[0x6, 0x4]) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2, 0x0, 0x80000}], 0x18) 12:29:20 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xc, 0x0, r4) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f00000003c0)=r5, 0x1) 12:29:20 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}]}, 0x5c}}, 0x0) 12:29:20 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xc, 0x0, r4) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f00000003c0)=r5, 0x1) 12:29:20 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xc, 0x0, r4) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f00000003c0)=r5, 0x1) [ 357.388598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.400871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.427935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.466882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:29:21 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}]}, 0x5c}}, 0x0) 12:29:21 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) (fail_nth: 5) 12:29:21 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) r1 = syz_open_dev$evdev(&(0x7f00000001c0), 0xba80dc0000000000, 0x201) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000200)=0x2) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000100)=[{{0x77359400}, 0x1f, 0x80, 0x2}, {{}, 0x2, 0x3, 0x8}, {{r2, r3/1000+60000}, 0x5, 0x9b, 0x1}, {{0x77359400}, 0x3, 0x5, 0x6}, {{}, 0x4, 0x8, 0x7fffffff}, {{0x0, 0x2710}, 0x1, 0x1, 0x9}, {{r4, r5/1000+60000}, 0x14, 0x2, 0xfff}, {{}, 0x12, 0x1355, 0x104}], 0xc0) [ 357.598253] FAULT_INJECTION: forcing a failure. [ 357.598253] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 357.600418] CPU: 1 UID: 0 PID: 5656 Comm: syz-executor.6 Not tainted 6.16.0-rc6-next-20250717 #1 PREEMPT(voluntary) [ 357.600449] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 357.600463] Call Trace: [ 357.600471] [ 357.600480] dump_stack_lvl+0xfa/0x120 [ 357.600517] should_fail_ex+0x4d7/0x5e0 [ 357.600558] should_fail_alloc_page+0xe0/0x110 [ 357.600587] prepare_alloc_pages+0x1af/0x500 [ 357.600613] ? do_syscall_64+0xbf/0x360 [ 357.600642] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.600673] __alloc_frozen_pages_noprof+0x17f/0x1f10 [ 357.600714] ? __pfx_perf_trace_lock+0x10/0x10 [ 357.600749] ? lock_acquire+0x15e/0x2f0 [ 357.600774] ? __virt_addr_valid+0x1c6/0x5d0 [ 357.600809] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 357.600843] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 357.600883] ? __virt_addr_valid+0x2e8/0x5d0 [ 357.600917] ? lock_release+0xc8/0x290 [ 357.600949] ? mark_held_locks+0x49/0x80 [ 357.600979] ? __call_rcu_common.constprop.0+0x4c1/0x960 [ 357.601006] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 357.601037] ? policy_nodemask+0xeb/0x4e0 [ 357.601073] alloc_pages_mpol+0xed/0x340 [ 357.601105] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 357.601142] ? mtree_range_walk+0x74a/0xb90 [ 357.601174] alloc_pages_noprof+0xa1/0x380 [ 357.601209] __pmd_alloc+0x3b/0x980 [ 357.601247] __handle_mm_fault+0xcae/0x30f0 [ 357.601283] ? __pfx_mt_find+0x10/0x10 [ 357.601315] ? __pfx___handle_mm_fault+0x10/0x10 [ 357.601377] ? find_vma+0xbf/0x140 [ 357.601404] ? __pfx_find_vma+0x10/0x10 [ 357.601438] handle_mm_fault+0x2c3/0x900 [ 357.601480] __get_user_pages+0x58a/0x2f10 [ 357.601541] ? __pfx___get_user_pages+0x10/0x10 [ 357.601582] ? lock_is_held_type+0x9e/0x120 [ 357.601614] populate_vma_page_range+0x282/0x410 [ 357.601640] ? __pfx_populate_vma_page_range+0x10/0x10 [ 357.601662] ? __pfx_find_vma_intersection+0x10/0x10 [ 357.601694] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 357.601725] __mm_populate+0x100/0x3a0 [ 357.601750] ? __pfx___mm_populate+0x10/0x10 [ 357.601776] ? up_write+0x195/0x520 [ 357.601802] ? lock_is_held_type+0x9e/0x120 [ 357.601833] do_mlock+0x445/0x800 [ 357.601856] ? __fget_files+0x20d/0x3b0 [ 357.601895] ? __pfx_do_mlock+0x10/0x10 [ 357.601921] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 357.601958] ? fput+0x6a/0x100 [ 357.601985] ? ksys_write+0x1a3/0x240 [ 357.602006] ? __pfx_ksys_write+0x10/0x10 [ 357.602036] __x64_sys_mlock+0x59/0x80 [ 357.602061] do_syscall_64+0xbf/0x360 [ 357.602093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.602116] RIP: 0033:0x7f31b06d8b19 12:29:21 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xc, 0x0, r4) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f00000003c0)=r5, 0x1) [ 357.602134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 357.602156] RSP: 002b:00007f31adc4e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 357.602178] RAX: ffffffffffffffda RBX: 00007f31b07ebf60 RCX: 00007f31b06d8b19 [ 357.602194] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ded000 [ 357.602208] RBP: 00007f31adc4e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 357.602222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.602236] R13: 00007ffee645bf1f R14: 00007f31adc4e300 R15: 0000000000022000 [ 357.602270] 12:29:21 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xc, 0x0, r4) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f00000003c0)=r5, 0x1) 12:29:32 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) 12:29:32 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xc, 0x0, r4) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f00000003c0)=r5, 0x1) 12:29:32 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x80084504, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000080)=""/4096) write$evdev(r0, &(0x7f0000000080), 0x63) 12:29:32 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}]}, 0x5c}}, 0x0) 12:29:32 executing program 5: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080200000001080211000011000000000000000000006400010002020202020201f2510861a38b960c1218240000000000"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) 12:29:32 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) (fail_nth: 6) 12:29:32 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xc, 0x0, r4) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f00000003c0)=r5, 0x1) 12:29:32 executing program 2: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080200000001080211000011000000000000000000006400010002020202020201f2510861a38b960c1218240000000000"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) [ 368.540905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 368.547103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 368.555036] FAULT_INJECTION: forcing a failure. [ 368.555036] name failslab, interval 1, probability 0, space 0, times 0 [ 368.557044] CPU: 1 UID: 0 PID: 5692 Comm: syz-executor.6 Not tainted 6.16.0-rc6-next-20250717 #1 PREEMPT(voluntary) [ 368.557075] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 368.557088] Call Trace: [ 368.557095] [ 368.557103] dump_stack_lvl+0xfa/0x120 [ 368.557139] should_fail_ex+0x4d7/0x5e0 [ 368.557178] ? __pmd_alloc+0x98/0x980 [ 368.557208] should_failslab+0xc2/0x120 [ 368.557232] kmem_cache_alloc_noprof+0x5f/0x3d0 [ 368.557275] __pmd_alloc+0x98/0x980 [ 368.557309] __handle_mm_fault+0xcae/0x30f0 [ 368.557344] ? __pfx_mt_find+0x10/0x10 [ 368.557381] ? __pfx___handle_mm_fault+0x10/0x10 [ 368.557430] ? find_vma+0xbf/0x140 [ 368.557455] ? __pfx_find_vma+0x10/0x10 [ 368.557486] handle_mm_fault+0x2c3/0x900 [ 368.557525] __get_user_pages+0x58a/0x2f10 [ 368.557581] ? __pfx___get_user_pages+0x10/0x10 [ 368.557620] ? lock_is_held_type+0x9e/0x120 [ 368.557650] populate_vma_page_range+0x282/0x410 [ 368.557674] ? __pfx_populate_vma_page_range+0x10/0x10 [ 368.557694] ? __pfx_find_vma_intersection+0x10/0x10 [ 368.557724] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 368.557753] __mm_populate+0x100/0x3a0 [ 368.557776] ? __pfx___mm_populate+0x10/0x10 [ 368.557800] ? up_write+0x195/0x520 [ 368.557826] ? lock_is_held_type+0x9e/0x120 [ 368.557854] do_mlock+0x445/0x800 [ 368.557876] ? __fget_files+0x20d/0x3b0 [ 368.557911] ? __pfx_do_mlock+0x10/0x10 [ 368.557936] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 368.557971] ? fput+0x6a/0x100 [ 368.557996] ? ksys_write+0x1a3/0x240 [ 368.558015] ? __pfx_ksys_write+0x10/0x10 [ 368.558043] __x64_sys_mlock+0x59/0x80 [ 368.558066] do_syscall_64+0xbf/0x360 [ 368.558097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.558119] RIP: 0033:0x7f31b06d8b19 [ 368.558137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 368.558157] RSP: 002b:00007f31adc4e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 368.558178] RAX: ffffffffffffffda RBX: 00007f31b07ebf60 RCX: 00007f31b06d8b19 [ 368.558193] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ded000 [ 368.558206] RBP: 00007f31adc4e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 368.558219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.558232] R13: 00007ffee645bf1f R14: 00007f31adc4e300 R15: 0000000000022000 [ 368.558264] [ 368.561581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 368.568413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:29:32 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}]}, 0x5c}}, 0x0) 12:29:32 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) (fail_nth: 7) 12:29:32 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffa, 0xae840) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) write$evdev(r0, &(0x7f0000000000)=[{{}, 0x12, 0x400, 0x8000}, {{0x77359400}, 0x15, 0x9, 0x5}], 0x30) write$evdev(r0, &(0x7f00000000c0), 0x0) 12:29:32 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}]}, 0x5c}}, 0x0) 12:29:32 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) (fail_nth: 8) 12:29:32 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) r1 = getpid() r2 = pidfd_open(r1, 0x0) r3 = syz_open_dev$mouse(&(0x7f00000000c0), 0x4, 0x30802) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000100)=0x3) process_madvise(r2, 0x0, 0x0, 0x4, 0x0) r4 = getpid() r5 = pidfd_open(r4, 0x0) process_madvise(r5, 0x0, 0x0, 0x4, 0x0) poll(&(0x7f0000000000)=[{r2, 0x4500}, {r5, 0x200}, {r0, 0x1000}, {r0, 0x100}], 0x4, 0x2) [ 368.962339] FAULT_INJECTION: forcing a failure. [ 368.962339] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 368.964445] CPU: 1 UID: 0 PID: 5715 Comm: syz-executor.6 Not tainted 6.16.0-rc6-next-20250717 #1 PREEMPT(voluntary) 12:29:32 executing program 5: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080200000001080211000011000000000000000000006400010002020202020201f2510861a38b960c1218240000000000"], 0x36) [ 368.964475] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 368.964488] Call Trace: [ 368.964495] [ 368.964503] dump_stack_lvl+0xfa/0x120 [ 368.964538] should_fail_ex+0x4d7/0x5e0 [ 368.964577] should_fail_alloc_page+0xe0/0x110 [ 368.964604] prepare_alloc_pages+0x1af/0x500 [ 368.964629] ? find_held_lock+0x2b/0x80 [ 368.964666] __alloc_frozen_pages_noprof+0x17f/0x1f10 [ 368.964708] ? kernel_text_address+0x5b/0xc0 [ 368.964733] ? __kernel_text_address+0xd/0x40 [ 368.964756] ? unwind_get_return_address+0x59/0xa0 [ 368.964788] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 368.964817] ? arch_stack_walk+0x9c/0xf0 [ 368.964838] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 368.964885] ? perf_trace_lock+0xb5/0x5d0 [ 368.964914] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 368.964944] ? policy_nodemask+0xeb/0x4e0 [ 368.964978] alloc_pages_mpol+0xed/0x340 [ 368.965008] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 368.965039] ? __pfx_perf_trace_lock+0x10/0x10 12:29:32 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x0) [ 368.965071] alloc_pages_noprof+0xa1/0x380 [ 368.965103] pte_alloc_one+0x1e/0x360 [ 368.965133] __pte_alloc+0x6c/0x360 [ 368.965161] ? __pfx___pte_alloc+0x10/0x10 [ 368.965190] ? _raw_spin_unlock+0x1e/0x40 [ 368.965211] ? __pmd_alloc+0x3f9/0x980 [ 368.965245] __handle_mm_fault+0x24bf/0x30f0 [ 368.965286] ? __pfx_mt_find+0x10/0x10 [ 368.965316] ? __pfx___handle_mm_fault+0x10/0x10 [ 368.965365] ? find_vma+0xbf/0x140 [ 368.965395] ? __pfx_find_vma+0x10/0x10 [ 368.965427] handle_mm_fault+0x2c3/0x900 [ 368.965466] __get_user_pages+0x58a/0x2f10 [ 368.965522] ? __pfx___get_user_pages+0x10/0x10 [ 368.965560] ? lock_is_held_type+0x9e/0x120 [ 368.965590] populate_vma_page_range+0x282/0x410 [ 368.965614] ? __pfx_populate_vma_page_range+0x10/0x10 [ 368.965634] ? __pfx_find_vma_intersection+0x10/0x10 [ 368.965664] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 368.965693] __mm_populate+0x100/0x3a0 [ 368.965716] ? __pfx___mm_populate+0x10/0x10 [ 368.965740] ? up_write+0x195/0x520 [ 368.965764] ? lock_is_held_type+0x9e/0x120 [ 368.965793] do_mlock+0x445/0x800 [ 368.965815] ? __fget_files+0x20d/0x3b0 [ 368.965850] ? __pfx_do_mlock+0x10/0x10 [ 368.965875] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 368.965910] ? fput+0x6a/0x100 [ 368.965935] ? ksys_write+0x1a3/0x240 [ 368.965954] ? __pfx_ksys_write+0x10/0x10 [ 368.965983] __x64_sys_mlock+0x59/0x80 [ 368.966005] do_syscall_64+0xbf/0x360 [ 368.966036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.966059] RIP: 0033:0x7f31b06d8b19 [ 368.966076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 368.966096] RSP: 002b:00007f31adc4e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 368.966117] RAX: ffffffffffffffda RBX: 00007f31b07ebf60 RCX: 00007f31b06d8b19 [ 368.966132] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ded000 [ 368.966145] RBP: 00007f31adc4e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 368.966158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.966171] R13: 00007ffee645bf1f R14: 00007f31adc4e300 R15: 0000000000022000 [ 368.966203] [ 369.065482] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:29:40 executing program 5: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080200000001080211000011000000000000000000006400010002020202020201f2510861a38b960c1218240000000000"], 0x36) 12:29:40 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xc, 0x0, r4) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f00000003c0)=r5, 0x1) 12:29:40 executing program 1: write$evdev(0xffffffffffffffff, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) 12:29:40 executing program 2: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080200000001080211000011000000000000000000006400010002020202020201f2510861a38b960c1218240000000000"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) 12:29:40 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x0) 12:29:40 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) (fail_nth: 9) 12:29:40 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) 12:29:40 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x80084504, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000080)=""/4096) write$evdev(r0, &(0x7f0000000080), 0x63) [ 377.334313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 377.342892] FAULT_INJECTION: forcing a failure. [ 377.342892] name failslab, interval 1, probability 0, space 0, times 0 [ 377.343900] CPU: 0 UID: 0 PID: 5738 Comm: syz-executor.6 Not tainted 6.16.0-rc6-next-20250717 #1 PREEMPT(voluntary) [ 377.343916] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 377.343924] Call Trace: [ 377.343928] [ 377.343933] dump_stack_lvl+0xfa/0x120 [ 377.343966] should_fail_ex+0x4d7/0x5e0 [ 377.343996] ? ptlock_alloc+0x21/0x70 [ 377.344011] should_failslab+0xc2/0x120 [ 377.344028] kmem_cache_alloc_noprof+0x5f/0x3d0 [ 377.344050] ? __pfx_perf_trace_lock+0x10/0x10 [ 377.344070] ptlock_alloc+0x21/0x70 [ 377.344081] pte_alloc_one+0x86/0x360 [ 377.344099] __pte_alloc+0x6c/0x360 [ 377.344114] ? __pfx___pte_alloc+0x10/0x10 [ 377.344129] ? _raw_spin_unlock+0x1e/0x40 [ 377.344141] ? __pmd_alloc+0x3f9/0x980 [ 377.344160] __handle_mm_fault+0x24bf/0x30f0 [ 377.344179] ? __pfx_mt_find+0x10/0x10 [ 377.344195] ? __pfx___handle_mm_fault+0x10/0x10 [ 377.344222] ? find_vma+0xbf/0x140 [ 377.344236] ? __pfx_find_vma+0x10/0x10 [ 377.344253] handle_mm_fault+0x2c3/0x900 [ 377.344274] __get_user_pages+0x58a/0x2f10 [ 377.344305] ? __pfx___get_user_pages+0x10/0x10 [ 377.344326] ? lock_is_held_type+0x9e/0x120 [ 377.344342] populate_vma_page_range+0x282/0x410 [ 377.344355] ? __pfx_populate_vma_page_range+0x10/0x10 [ 377.344370] ? __pfx_find_vma_intersection+0x10/0x10 [ 377.344386] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 377.344402] __mm_populate+0x100/0x3a0 [ 377.344414] ? __pfx___mm_populate+0x10/0x10 [ 377.344427] ? up_write+0x195/0x520 [ 377.344440] ? lock_is_held_type+0x9e/0x120 [ 377.344456] do_mlock+0x445/0x800 [ 377.344467] ? __fget_files+0x20d/0x3b0 [ 377.344487] ? __pfx_do_mlock+0x10/0x10 [ 377.344501] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 377.344521] ? fput+0x6a/0x100 [ 377.344535] ? ksys_write+0x1a3/0x240 [ 377.344546] ? __pfx_ksys_write+0x10/0x10 [ 377.344561] __x64_sys_mlock+0x59/0x80 [ 377.344573] do_syscall_64+0xbf/0x360 [ 377.344590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.344603] RIP: 0033:0x7f31b06d8b19 [ 377.344612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 377.344624] RSP: 002b:00007f31adc4e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 377.344635] RAX: ffffffffffffffda RBX: 00007f31b07ebf60 RCX: 00007f31b06d8b19 [ 377.344643] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ded000 [ 377.344651] RBP: 00007f31adc4e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 377.344658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.344665] R13: 00007ffee645bf1f R14: 00007f31adc4e300 R15: 0000000000022000 [ 377.344682] 12:29:41 executing program 4: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080200000001080211000011000000000000000000006400010002020202020201f2510861a38b960c1218240000000000"], 0x36) [ 377.423571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:29:41 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) (fail_nth: 10) [ 377.440463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 377.451825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:29:41 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x4000000000000000, 0x408181) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f00000000c0)=""/91) 12:29:41 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x0) 12:29:41 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) (fail_nth: 11) [ 377.557061] FAULT_INJECTION: forcing a failure. [ 377.557061] name failslab, interval 1, probability 0, space 0, times 0 [ 377.558098] CPU: 0 UID: 0 PID: 5760 Comm: syz-executor.6 Not tainted 6.16.0-rc6-next-20250717 #1 PREEMPT(voluntary) [ 377.558114] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 377.558121] Call Trace: [ 377.558125] [ 377.558130] dump_stack_lvl+0xfa/0x120 [ 377.558150] should_fail_ex+0x4d7/0x5e0 [ 377.558172] ? __anon_vma_prepare+0xae/0x590 [ 377.558190] should_failslab+0xc2/0x120 [ 377.558204] kmem_cache_alloc_noprof+0x5f/0x3d0 [ 377.558228] __anon_vma_prepare+0xae/0x590 [ 377.558247] __vmf_anon_prepare+0x11f/0x250 [ 377.558266] __handle_mm_fault+0x13ad/0x30f0 [ 377.558284] ? __pfx_mt_find+0x10/0x10 [ 377.558301] ? __pfx___handle_mm_fault+0x10/0x10 [ 377.558327] ? find_vma+0xbf/0x140 [ 377.558341] ? __pfx_find_vma+0x10/0x10 [ 377.558359] handle_mm_fault+0x2c3/0x900 [ 377.558384] __get_user_pages+0x58a/0x2f10 [ 377.558417] ? __pfx___get_user_pages+0x10/0x10 [ 377.558438] ? lock_is_held_type+0x9e/0x120 [ 377.558455] populate_vma_page_range+0x282/0x410 [ 377.558468] ? __pfx_populate_vma_page_range+0x10/0x10 [ 377.558479] ? __pfx_find_vma_intersection+0x10/0x10 [ 377.558495] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 377.558512] __mm_populate+0x100/0x3a0 [ 377.558524] ? __pfx___mm_populate+0x10/0x10 [ 377.558537] ? up_write+0x195/0x520 [ 377.558552] ? lock_is_held_type+0x9e/0x120 [ 377.558567] do_mlock+0x445/0x800 [ 377.558579] ? __fget_files+0x20d/0x3b0 [ 377.558599] ? __pfx_do_mlock+0x10/0x10 [ 377.558612] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 377.558632] ? fput+0x6a/0x100 [ 377.558646] ? ksys_write+0x1a3/0x240 [ 377.558657] ? __pfx_ksys_write+0x10/0x10 [ 377.558673] __x64_sys_mlock+0x59/0x80 [ 377.558685] do_syscall_64+0xbf/0x360 [ 377.558703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.558715] RIP: 0033:0x7f31b06d8b19 [ 377.558724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 377.558736] RSP: 002b:00007f31adc4e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 377.558747] RAX: ffffffffffffffda RBX: 00007f31b07ebf60 RCX: 00007f31b06d8b19 [ 377.558755] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ded000 [ 377.558762] RBP: 00007f31adc4e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 377.558770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 377.558776] R13: 00007ffee645bf1f R14: 00007f31adc4e300 R15: 0000000000022000 [ 377.558794] 12:29:41 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 12:29:41 executing program 1: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)) ioctl$TCXONC(r0, 0x540a, 0x1) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r1, &(0x7f0000000080)=[{{}, 0x11, 0x0, 0x4}], 0x18) [ 380.288034] Bluetooth: hci7: command 0x0406 tx timeout 12:29:50 executing program 5: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080200000001080211000011000000000000000000006400010002020202020201f2510861a38b960c1218240000000000"], 0x36) 12:29:50 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) (fail_nth: 12) 12:29:50 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 12:29:50 executing program 2: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080200000001080211000011000000000000000000006400010002020202020201f2510861a38b960c1218240000000000"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) 12:29:50 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) 12:29:50 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xc, 0x0, r4) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f00000003c0)=r5, 0x1) 12:29:50 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000840)=ANY=[@ANYBLOB="0100000001bc0010180300b1012be800", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000100)=""/22) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000000)=[0x7, 0x1]) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSREP(r2, 0x80084504, 0x0) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) write$evdev(r2, &(0x7f0000000780)=[{{0x77359400}, 0x11, 0x0, 0x2c8dc7f6}, {{}, 0x1, 0x9, 0x8}, {{0x77359400}, 0x2, 0x3, 0x9}, {{0x77359400}, 0x3, 0x1, 0x8001}, {{0x77359400}, 0x0, 0x0, 0x400}, {{r3, r4/1000+60000}, 0x1f, 0x3, 0x1b1}], 0x90) acct(&(0x7f00000001c0)='./file0\x00') r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x88001, 0x0) write$cgroup_pid(r5, &(0x7f0000000000), 0x12) r6 = openat2(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x41, 0x1}, 0x18) preadv(r6, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/74, 0x4a}, {&(0x7f0000000400)=""/99, 0x63}, {&(0x7f0000000480)=""/235, 0xeb}, {&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f0000000680)=""/3, 0x3}], 0x5, 0x1, 0x9) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x3a000, 0x0) write$evdev(r7, &(0x7f00000002c0)=[{{}, 0x15, 0x8, 0x9}], 0x18) memfd_secret(0x0) readlinkat(r5, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=""/55, 0x37) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000180)) openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0) 12:29:50 executing program 4: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080200000001080211000011000000000000000000006400010002020202020201f2510861a38b960c1218240000000000"], 0x36) [ 386.639752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.655885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.668988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.680831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:29:50 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 12:29:50 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) (fail_nth: 13) 12:29:50 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x80084504, 0x0) clock_gettime(0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000140)=[{{r4, r5/1000+60000}, 0x17, 0x1, 0x2}, {{0x0, 0xea60}, 0x5, 0x5, 0x54}, {{0x77359400}, 0x4, 0x8000, 0x6}, {{0x77359400}, 0x5, 0x8000, 0x7}, {{}, 0x12, 0x81, 0x8001}, {{r2, r3/1000+60000}, 0x17, 0xf19, 0x9}], 0x90) 12:29:50 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) [ 386.886313] Zero length message leads to an empty skb [ 386.896820] FAULT_INJECTION: forcing a failure. [ 386.896820] name failslab, interval 1, probability 0, space 0, times 0 [ 386.898679] CPU: 0 UID: 0 PID: 5803 Comm: syz-executor.6 Not tainted 6.16.0-rc6-next-20250717 #1 PREEMPT(voluntary) [ 386.898709] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 386.898721] Call Trace: [ 386.898728] [ 386.898736] dump_stack_lvl+0xfa/0x120 [ 386.898772] should_fail_ex+0x4d7/0x5e0 [ 386.898811] ? __anon_vma_prepare+0x2ee/0x590 [ 386.898843] should_failslab+0xc2/0x120 [ 386.898866] kmem_cache_alloc_noprof+0x5f/0x3d0 [ 386.898910] __anon_vma_prepare+0x2ee/0x590 [ 386.898946] __vmf_anon_prepare+0x11f/0x250 [ 386.898979] __handle_mm_fault+0x13ad/0x30f0 [ 386.899014] ? __pfx_mt_find+0x10/0x10 [ 386.899044] ? __pfx___handle_mm_fault+0x10/0x10 [ 386.899093] ? find_vma+0xbf/0x140 [ 386.899118] ? __pfx_find_vma+0x10/0x10 [ 386.899150] handle_mm_fault+0x2c3/0x900 [ 386.899189] __get_user_pages+0x58a/0x2f10 [ 386.899245] ? __pfx___get_user_pages+0x10/0x10 [ 386.899283] ? lock_is_held_type+0x9e/0x120 [ 386.899313] populate_vma_page_range+0x282/0x410 [ 386.899337] ? __pfx_populate_vma_page_range+0x10/0x10 [ 386.899370] ? __pfx_find_vma_intersection+0x10/0x10 [ 386.899400] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 386.899429] __mm_populate+0x100/0x3a0 [ 386.899452] ? __pfx___mm_populate+0x10/0x10 [ 386.899476] ? up_write+0x195/0x520 [ 386.899502] ? lock_is_held_type+0x9e/0x120 [ 386.899530] do_mlock+0x445/0x800 [ 386.899552] ? __fget_files+0x20d/0x3b0 [ 386.899587] ? __pfx_do_mlock+0x10/0x10 [ 386.899612] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 386.899647] ? fput+0x6a/0x100 [ 386.899672] ? ksys_write+0x1a3/0x240 [ 386.899692] ? __pfx_ksys_write+0x10/0x10 [ 386.899720] __x64_sys_mlock+0x59/0x80 [ 386.899743] do_syscall_64+0xbf/0x360 [ 386.899774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.899796] RIP: 0033:0x7f31b06d8b19 [ 386.899813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 386.899834] RSP: 002b:00007f31adc4e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 386.899855] RAX: ffffffffffffffda RBX: 00007f31b07ebf60 RCX: 00007f31b06d8b19 [ 386.899870] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ded000 [ 386.899883] RBP: 00007f31adc4e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 386.899896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 386.899908] R13: 00007ffee645bf1f R14: 00007f31adc4e300 R15: 0000000000022000 [ 386.899940] [ 386.933322] hpet: Lost 2 RTC interrupts 12:29:50 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x0, 0xea60}, 0x2}], 0x18) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000000)=""/11) 12:29:50 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 12:29:50 executing program 4: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080200000001080211000011000000000000000000006400010002020202020201f2510861a38b960c1218240000000000"], 0x36) 12:29:50 executing program 2: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080200000001080211000011000000000000000000006400010002020202020201f2510861a38b960c1218240000000000"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) 12:29:50 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) 12:29:50 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) (fail_nth: 14) [ 387.151610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 387.173131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:29:50 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xc, 0x0, r4) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f00000003c0)=r5, 0x1) 12:29:50 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) [ 387.197909] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:29:50 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x4, 0x81) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x80084504, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f00000000c0)=[0x7fffffff, 0x56]) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSREP(r2, 0x80084504, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSREP(r3, 0x80084504, 0x0) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f00000001c0)={0x2, 0x11, &(0x7f0000000180)="804a44387778f576c180e825fd9645c6cc"}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) write$evdev(r2, &(0x7f0000000100)=[{{0x77359400}, 0x5, 0x1, 0x2}, {{r4, r5/1000+10000}, 0x17, 0xff, 0x50bf}, {{0x77359400}, 0x4, 0x20}, {{0x0, 0x2710}, 0x5, 0x626, 0xafd}], 0x60) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) [ 387.245459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:29:50 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) 12:29:50 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) (fail_nth: 15) [ 387.447926] FAULT_INJECTION: forcing a failure. [ 387.447926] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 387.449698] CPU: 0 UID: 0 PID: 5832 Comm: syz-executor.6 Not tainted 6.16.0-rc6-next-20250717 #1 PREEMPT(voluntary) [ 387.449727] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 387.449740] Call Trace: [ 387.449748] [ 387.449756] dump_stack_lvl+0xfa/0x120 [ 387.449792] should_fail_ex+0x4d7/0x5e0 [ 387.449831] should_fail_alloc_page+0xe0/0x110 [ 387.449858] prepare_alloc_pages+0x1af/0x500 [ 387.449884] ? __is_insn_slot_addr+0x140/0x290 [ 387.449922] __alloc_frozen_pages_noprof+0x17f/0x1f10 [ 387.449955] ? unwind_get_return_address+0x59/0xa0 [ 387.449995] ? perf_trace_lock+0xb5/0x5d0 [ 387.450029] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 387.450075] ? perf_trace_lock+0xb5/0x5d0 [ 387.450104] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 387.450132] ? policy_nodemask+0xeb/0x4e0 [ 387.450166] alloc_pages_mpol+0xed/0x340 [ 387.450196] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 387.450226] ? lock_release+0xc8/0x290 [ 387.450248] ? find_held_lock+0x2b/0x80 [ 387.450280] ? get_vma_policy+0x23b/0x350 [ 387.450315] vma_alloc_folio_noprof+0xe9/0x440 [ 387.450348] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 387.450400] __handle_mm_fault+0x142c/0x30f0 [ 387.450435] ? __pfx_mt_find+0x10/0x10 [ 387.450466] ? __pfx___handle_mm_fault+0x10/0x10 [ 387.450514] ? find_vma+0xbf/0x140 [ 387.450539] ? __pfx_find_vma+0x10/0x10 [ 387.450571] handle_mm_fault+0x2c3/0x900 [ 387.450610] __get_user_pages+0x58a/0x2f10 [ 387.450666] ? __pfx___get_user_pages+0x10/0x10 [ 387.450705] ? lock_is_held_type+0x9e/0x120 [ 387.450735] populate_vma_page_range+0x282/0x410 [ 387.450759] ? __pfx_populate_vma_page_range+0x10/0x10 [ 387.450780] ? __pfx_find_vma_intersection+0x10/0x10 [ 387.450809] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 387.450838] __mm_populate+0x100/0x3a0 [ 387.450862] ? __pfx___mm_populate+0x10/0x10 [ 387.450886] ? up_write+0x195/0x520 [ 387.450910] ? lock_is_held_type+0x9e/0x120 [ 387.450939] do_mlock+0x445/0x800 [ 387.450960] ? __fget_files+0x20d/0x3b0 [ 387.450996] ? __pfx_do_mlock+0x10/0x10 [ 387.451021] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 387.451056] ? fput+0x6a/0x100 12:29:51 executing program 1: syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x80084504, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000080)=[{{r1, r2/1000+60000}, 0x11, 0xe4}], 0x18) [ 387.451081] ? ksys_write+0x1a3/0x240 [ 387.451100] ? __pfx_ksys_write+0x10/0x10 [ 387.451129] __x64_sys_mlock+0x59/0x80 [ 387.451152] do_syscall_64+0xbf/0x360 [ 387.451183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.451205] RIP: 0033:0x7f31b06d8b19 [ 387.451222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 387.451243] RSP: 002b:00007f31adc4e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 387.451264] RAX: ffffffffffffffda RBX: 00007f31b07ebf60 RCX: 00007f31b06d8b19 [ 387.451279] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ded000 [ 387.451292] RBP: 00007f31adc4e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 387.451305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 387.451318] R13: 00007ffee645bf1f R14: 00007f31adc4e300 R15: 0000000000022000 [ 387.451350] [ 387.492671] hpet: Lost 1 RTC interrupts 12:29:51 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x5c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}]}, 0x5c}}, 0x0) [ 390.288735] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 390.291072] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 390.301755] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 390.308232] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 390.311007] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 392.381502] Bluetooth: hci7: command tx timeout [ 394.430512] Bluetooth: hci7: command tx timeout [ 396.477472] Bluetooth: hci7: command tx timeout [ 398.525500] Bluetooth: hci7: command tx timeout [ 408.750768] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.751925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.812921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.814043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.161144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:30:22 executing program 4: syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) 12:30:22 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) 12:30:22 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) 12:30:22 executing program 2: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080200000001080211000011000000000000000000006400010002020202020201f2510861a38b960c1218240000000000"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) 12:30:22 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x5c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}]}, 0x5c}}, 0x0) 12:30:22 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f00000000c0)=[0x0, 0x1]) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) 12:30:22 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) (fail_nth: 16) 12:30:22 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) [ 419.075617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 419.083955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 419.130088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 419.141509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 419.143329] FAULT_INJECTION: forcing a failure. [ 419.143329] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 419.145136] CPU: 0 UID: 0 PID: 6323 Comm: syz-executor.6 Not tainted 6.16.0-rc6-next-20250717 #1 PREEMPT(voluntary) [ 419.145166] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 419.145180] Call Trace: [ 419.145188] [ 419.145197] dump_stack_lvl+0xfa/0x120 [ 419.145232] should_fail_ex+0x4d7/0x5e0 [ 419.145272] should_fail_alloc_page+0xe0/0x110 [ 419.145300] prepare_alloc_pages+0x1af/0x500 [ 419.145326] ? __is_insn_slot_addr+0x140/0x290 [ 419.145372] __alloc_frozen_pages_noprof+0x17f/0x1f10 [ 419.145406] ? unwind_get_return_address+0x59/0xa0 [ 419.145446] ? perf_trace_lock+0xb5/0x5d0 [ 419.145477] ? look_up_lock_class+0x56/0x150 [ 419.145504] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 419.145553] ? __lock_acquire+0xc65/0x1b70 [ 419.145585] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 419.145614] ? policy_nodemask+0xeb/0x4e0 [ 419.145648] alloc_pages_mpol+0xed/0x340 [ 419.145679] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 419.145712] ? __pfx_perf_trace_lock+0x10/0x10 [ 419.145736] ? get_vma_policy+0x23b/0x350 [ 419.145772] vma_alloc_folio_noprof+0xe9/0x440 [ 419.145806] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 419.145838] ? find_held_lock+0x2b/0x80 [ 419.145869] ? __handle_mm_fault+0x7ed/0x30f0 [ 419.145902] ? lock_release+0xc8/0x290 [ 419.145931] __handle_mm_fault+0x142c/0x30f0 [ 419.145967] ? __pfx_perf_trace_lock+0x10/0x10 [ 419.145993] ? __pfx___handle_mm_fault+0x10/0x10 [ 419.146025] ? __pte_offset_map_lock+0x190/0x330 [ 419.146064] ? no_page_table+0xc7/0x220 [ 419.146096] ? follow_page_pte.constprop.0+0x4f9/0x1170 [ 419.146138] handle_mm_fault+0x2c3/0x900 [ 419.146178] __get_user_pages+0x58a/0x2f10 [ 419.146234] ? __pfx___get_user_pages+0x10/0x10 [ 419.146273] ? lock_is_held_type+0x9e/0x120 [ 419.146302] populate_vma_page_range+0x282/0x410 [ 419.146327] ? __pfx_populate_vma_page_range+0x10/0x10 [ 419.146348] ? __pfx_find_vma_intersection+0x10/0x10 [ 419.146378] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 419.146408] __mm_populate+0x100/0x3a0 [ 419.146431] ? __pfx___mm_populate+0x10/0x10 [ 419.146456] ? up_write+0x195/0x520 [ 419.146481] ? lock_is_held_type+0x9e/0x120 [ 419.146510] do_mlock+0x445/0x800 [ 419.146532] ? __fget_files+0x20d/0x3b0 [ 419.146568] ? __pfx_do_mlock+0x10/0x10 [ 419.146592] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 419.146628] ? fput+0x6a/0x100 [ 419.146654] ? ksys_write+0x1a3/0x240 [ 419.146673] ? __pfx_ksys_write+0x10/0x10 [ 419.146702] __x64_sys_mlock+0x59/0x80 [ 419.146725] do_syscall_64+0xbf/0x360 [ 419.146757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.146779] RIP: 0033:0x7f31b06d8b19 [ 419.146797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 419.146817] RSP: 002b:00007f31adc4e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 419.146839] RAX: ffffffffffffffda RBX: 00007f31b07ebf60 RCX: 00007f31b06d8b19 [ 419.146854] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ded000 [ 419.146867] RBP: 00007f31adc4e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 419.146880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 419.146893] R13: 00007ffee645bf1f R14: 00007f31adc4e300 R15: 0000000000022000 [ 419.146926] [ 419.191815] hpet: Lost 2 RTC interrupts 12:30:31 executing program 4: syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) 12:30:31 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) 12:30:31 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) 12:30:31 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x5c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}]}, 0x5c}}, 0x0) 12:30:31 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) (fail_nth: 17) 12:30:31 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) 12:30:31 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x0, 0xea60}, 0x12, 0x8001, 0x3}], 0x18) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x24100, 0x0) fcntl$setflags(r1, 0x2, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x2, 0x8b, &(0x7f00000000c0)="d46d97be91e0cde00500422db00d88000f88ef60748220e249cf3aaa6b4056086b20e85db126dcf911bc86e7fe9ac6f745e23c4535a702a0273d0810424de662cec3332c9a54a4746c1ef12dd56305d951fc1aa720c391d9f9121386b18711311cc7d9f5ea861c85b0796b11e4e501ec533531af5d2c5f0f3d4b80ef5966d4f522f523455809c357177893"}) 12:30:31 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x80084504, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) write$evdev(r1, &(0x7f00000000c0)=[{{0x0, 0xea60}, 0x15, 0x719, 0x1}, {{r2, r3/1000+60000}, 0x1, 0x1, 0x20}, {{0x77359400}, 0x16, 0x6, 0x100}, {{0x77359400}, 0x15, 0x5, 0x358}], 0x60) [ 428.256535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.266004] FAULT_INJECTION: forcing a failure. [ 428.266004] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 428.267999] CPU: 0 UID: 0 PID: 6344 Comm: syz-executor.6 Not tainted 6.16.0-rc6-next-20250717 #1 PREEMPT(voluntary) [ 428.268029] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 428.268042] Call Trace: [ 428.268049] [ 428.268057] dump_stack_lvl+0xfa/0x120 [ 428.268093] should_fail_ex+0x4d7/0x5e0 [ 428.268132] should_fail_alloc_page+0xe0/0x110 [ 428.268159] prepare_alloc_pages+0x1af/0x500 [ 428.268184] ? __is_insn_slot_addr+0x140/0x290 [ 428.268223] __alloc_frozen_pages_noprof+0x17f/0x1f10 [ 428.268256] ? unwind_get_return_address+0x59/0xa0 [ 428.268295] ? perf_trace_lock+0xb5/0x5d0 [ 428.268329] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 428.268380] ? __lock_acquire+0xc65/0x1b70 [ 428.268412] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 428.268453] ? policy_nodemask+0xeb/0x4e0 [ 428.268487] alloc_pages_mpol+0xed/0x340 [ 428.268517] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 428.268553] ? __pfx_perf_trace_lock+0x10/0x10 [ 428.268577] ? get_vma_policy+0x23b/0x350 [ 428.268613] vma_alloc_folio_noprof+0xe9/0x440 [ 428.268646] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 428.268677] ? find_held_lock+0x2b/0x80 [ 428.268708] ? __handle_mm_fault+0x7ed/0x30f0 [ 428.268740] ? lock_release+0xc8/0x290 [ 428.268768] __handle_mm_fault+0x142c/0x30f0 [ 428.268804] ? __pfx_perf_trace_lock+0x10/0x10 [ 428.268829] ? __pfx___handle_mm_fault+0x10/0x10 [ 428.268861] ? __pte_offset_map_lock+0x190/0x330 [ 428.268900] ? no_page_table+0xc7/0x220 [ 428.268931] ? follow_page_pte.constprop.0+0x4f9/0x1170 [ 428.268973] handle_mm_fault+0x2c3/0x900 [ 428.269012] __get_user_pages+0x58a/0x2f10 [ 428.269067] ? __pfx___get_user_pages+0x10/0x10 [ 428.269106] ? lock_is_held_type+0x9e/0x120 [ 428.269136] populate_vma_page_range+0x282/0x410 [ 428.269160] ? __pfx_populate_vma_page_range+0x10/0x10 [ 428.269180] ? __pfx_find_vma_intersection+0x10/0x10 [ 428.269210] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 428.269239] __mm_populate+0x100/0x3a0 [ 428.269263] ? __pfx___mm_populate+0x10/0x10 12:30:31 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x5c, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}]}, 0x5c}}, 0x0) [ 428.269287] ? up_write+0x195/0x520 [ 428.269311] ? lock_is_held_type+0x9e/0x120 [ 428.269340] do_mlock+0x445/0x800 [ 428.269361] ? __fget_files+0x20d/0x3b0 [ 428.269397] ? __pfx_do_mlock+0x10/0x10 [ 428.269421] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 428.269456] ? fput+0x6a/0x100 [ 428.269481] ? ksys_write+0x1a3/0x240 [ 428.269500] ? __pfx_ksys_write+0x10/0x10 [ 428.269529] __x64_sys_mlock+0x59/0x80 [ 428.269551] do_syscall_64+0xbf/0x360 [ 428.269583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.269605] RIP: 0033:0x7f31b06d8b19 [ 428.269621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 428.269642] RSP: 002b:00007f31adc4e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 428.269663] RAX: ffffffffffffffda RBX: 00007f31b07ebf60 RCX: 00007f31b06d8b19 [ 428.269677] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ded000 [ 428.269691] RBP: 00007f31adc4e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 428.269704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 428.269716] R13: 00007ffee645bf1f R14: 00007f31adc4e300 R15: 0000000000022000 [ 428.269748] [ 428.293493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.293844] hpet: Lost 1 RTC interrupts 12:30:32 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) (fail_nth: 18) 12:30:32 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e6661740002017e000470008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="890816a457411811e4b25b501a830eff56fec551be69ad5d12c8f79c053f81a5da6268e7d9a1c454c1d9b4b0c6890d3993dd2c3039ce0f5e24bf65cc2e59345bc1d7a40644d22fa2d79e3cfae89c21bddc813062dc00"/105]) syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x5, 0x4, &(0x7f0000001480)=[{&(0x7f0000000280)="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", 0x1000, 0xfffffffffffffc00}, {&(0x7f0000001280)="5b2a19fe9c4ef7600c48d9ef16ff85ca2234029747d9e62dbe63", 0x1a, 0x8}, {&(0x7f00000012c0)="ab5492b7662a6338c94cd7cbec86f826f4fd32c0cce1a411d650d4c555d2392ede9ebd57ff7454605c29aad94287ccc2ed2b1e810bbf1092741674fd9f2c4579ab1edb06572d562f0e64303fed1bbcb4286cd5cc38a626cd6a6eec6841f7ec1f6826ed6bb1928c1514f488ecf41cafdf2a6602a545dd33b31d187a61797d79f91b5fe6391e31de607457c71ddfc367295d0c3968ac37cdea929927a10cb51f3cd180715e54d4ebd20be35b2f44f4579a033e6f6d6e9efdb40dec7093a2069de4f8489ab9fe53e8c8d383c7b13c32253855c91f6c786f820c8e41aa5dceab976e90ec105f86620a0b28c1e335b6f8", 0xee, 0x4}, {&(0x7f00000013c0)="2a9e443c3fe0a90152394e5b24e7b16991679677a2fd3bead07d3bf6257d0ba7ae4c9626c075c3f239b3fba05d009d40e09c287ca601db654f0de960bf56b822061376268d57bc4defb0afc309409ce040f2653fbdce18006e677464e59f141d6c1116911cec1bcca26c49af408059c9ed7e7105ef5bf44fde5bf520d431c479ae01fb158c8aa78c716e9ab823fb85c19c2dc12a3e5cd757a711be3d2a0bafae99806f95059ba5db8ec3637480427897466184970691e2ff976d89db", 0xbc, 0x2}], 0x102000, &(0x7f0000001500)=ANY=[@ANYBLOB="2e080000ae8131e636000000", @ANYRESHEX=0xee00, @ANYBLOB=',nr_blocks=x8pt,permit_directio,\x00']) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x3004845, 0x0) mkdirat(r0, &(0x7f0000000140)='./file0\x00', 0x0) [ 428.481205] FAULT_INJECTION: forcing a failure. [ 428.481205] name failslab, interval 1, probability 0, space 0, times 0 [ 428.483175] CPU: 0 UID: 0 PID: 6356 Comm: syz-executor.6 Not tainted 6.16.0-rc6-next-20250717 #1 PREEMPT(voluntary) [ 428.483208] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 428.483221] Call Trace: [ 428.483229] [ 428.483238] dump_stack_lvl+0xfa/0x120 [ 428.483274] should_fail_ex+0x4d7/0x5e0 [ 428.483315] ? __anon_vma_prepare+0xae/0x590 [ 428.483348] should_failslab+0xc2/0x120 [ 428.483382] kmem_cache_alloc_noprof+0x5f/0x3d0 [ 428.483428] __anon_vma_prepare+0xae/0x590 [ 428.483467] __vmf_anon_prepare+0x11f/0x250 [ 428.483503] __handle_mm_fault+0x13ad/0x30f0 [ 428.483542] ? __pfx_perf_trace_lock+0x10/0x10 [ 428.483570] ? __pfx___handle_mm_fault+0x10/0x10 [ 428.483604] ? __pte_offset_map_lock+0x190/0x330 [ 428.483646] ? no_page_table+0xc7/0x220 [ 428.483680] ? follow_page_pte.constprop.0+0x4f9/0x1170 [ 428.483725] handle_mm_fault+0x2c3/0x900 [ 428.483767] __get_user_pages+0x58a/0x2f10 [ 428.483826] ? __pfx___get_user_pages+0x10/0x10 [ 428.483881] ? lock_is_held_type+0x9e/0x120 [ 428.483932] populate_vma_page_range+0x282/0x410 [ 428.483967] ? __pfx_populate_vma_page_range+0x10/0x10 [ 428.483990] ? __pfx_find_vma_intersection+0x10/0x10 [ 428.484022] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 428.484053] __mm_populate+0x100/0x3a0 [ 428.484078] ? __pfx___mm_populate+0x10/0x10 [ 428.484104] ? up_write+0x195/0x520 [ 428.484131] ? lock_is_held_type+0x9e/0x120 [ 428.484162] do_mlock+0x445/0x800 [ 428.484185] ? __fget_files+0x20d/0x3b0 [ 428.484222] ? __pfx_do_mlock+0x10/0x10 [ 428.484249] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 428.484288] ? fput+0x6a/0x100 [ 428.484314] ? ksys_write+0x1a3/0x240 [ 428.484335] ? __pfx_ksys_write+0x10/0x10 [ 428.484365] __x64_sys_mlock+0x59/0x80 [ 428.484390] do_syscall_64+0xbf/0x360 [ 428.484440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.484465] RIP: 0033:0x7f31b06d8b19 [ 428.484483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 428.484505] RSP: 002b:00007f31adc4e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 428.484527] RAX: ffffffffffffffda RBX: 00007f31b07ebf60 RCX: 00007f31b06d8b19 [ 428.484543] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ded000 [ 428.484557] RBP: 00007f31adc4e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 428.484571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 428.484585] R13: 00007ffee645bf1f R14: 00007f31adc4e300 R15: 0000000000022000 [ 428.484620] [ 428.522080] hpet: Lost 1 RTC interrupts 12:30:32 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x5c, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}]}, 0x5c}}, 0x0) 12:30:32 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x18, 0x21, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast2}]}, 0x18}], 0x1, 0x0, 0x0, 0x8001}, 0x0) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSREP(r2, 0x80084504, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={0x0, @can={0x1d, 0x0}, @llc={0x1a, 0x201, 0x0, 0x4, 0x9, 0x1f, @remote}, @qipcrtr={0x2a, 0x4, 0x1}, 0x3f, 0x0, 0x0, 0x0, 0x7ff, &(0x7f0000000280)='veth0_macvtap\x00', 0x9, 0x9, 0x5189}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x110, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x44000012}, 0xc001) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000e90000000016000000080003407fd3974a4aa1be2cb964603c33dbf1fe4cbc5daeb6783cfe5ed8eff3bfc99f8f2c9d6c6994dd2d9d4ee9df5c47441c68aea5bfc9ce7b7e8ece38cc", @ANYRES32=r8, @ANYBLOB="0a001a00ffffffffffff00000a0006000802110000010000"], 0x34}}, 0x0) write$binfmt_misc(r6, &(0x7f0000000100)={'syz1', "8bce0407026424dad5314bb5dfd6a93f2946ba34dedd3ddd527eb47e06fa2fd1dbba36e337adafbd05d0a9dfa8569ab4036cdd41b1eac33a0c10e50b8c968ae1b305613742a212f50c5ad1fee9136987af089bf989f53996a3b56a1b7217c82fa4e8d94f20aa56219ae32b02c471116ad513de35eae336ac5183"}, 0x7e) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f0000000380)={0x0, @can={0x1d, 0x0}, @llc={0x1a, 0x201, 0x0, 0x4, 0x9, 0x1f, @remote}, @qipcrtr={0x2a, 0x4, 0x1}, 0x3f, 0x0, 0x0, 0x0, 0x7ff, &(0x7f0000000280)='veth0_macvtap\x00', 0x9, 0x9, 0x5189}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r6, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x110, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x44000012}, 0xc001) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000300)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x2f, 0x2, 0x92, 0x3ff, 0x56, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x700, 0x7, 0xd049, 0x5}}) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000100}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)=ANY=[@ANYBLOB="a0010000", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fcdbdf25170000006000018014000200767863616e3100000000000000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f62617461647600080003000100000014000200697036746e6c300000000000000000008800018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020069703665727370616e300000000000001400020076657468305f746f5f68737200000000140002007465616d5f736c6176655f310000000014000200766c616e3000000000000000000000001400020069705f767469300000000000000000000800030002000000040001803000018008000100", @ANYRES32=0x0, @ANYBLOB="1400020065727370616e3000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="40000180080003000200000014000200766c616e300000000000000000000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="080003000300000008000100", @ANYRES32=r9, @ANYBLOB="30000180080003000200000008000100", @ANYRES32=r11, @ANYBLOB="08000300020000001400020076657468305f746f5f7465616d000000"], 0x1a0}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) write$evdev(r2, &(0x7f00000000c0)=[{{r3, r4/1000+60000}, 0x1f, 0x3, 0x2}, {{0x77359400}, 0x1f, 0x4, 0x4}], 0x30) 12:30:32 executing program 5: syz_80211_inject_frame(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080200000001080211000011000000000000000000006400010002020202020201f2510861a38b960c1218240000000000"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) 12:30:32 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x5c, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}]}, 0x5c}}, 0x0) [ 428.706839] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 12:30:32 executing program 4: syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) [ 428.776929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:30:32 executing program 2: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$null(r0, &(0x7f0000000080)='./file0\x00', 0x4, 0x103) creat(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x9, 0x80, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/fscreate\x00') 12:30:32 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) (fail_nth: 19) 12:30:32 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) [ 428.847521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:30:32 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='status\x00') mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000006, 0x4000010, r0, 0x30f61000) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) pread64(r0, 0x0, 0x7ffffffff000, 0x0) 12:30:32 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}]}, 0x5c}}, 0x0) 12:30:32 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) (fail_nth: 20) [ 429.010169] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 429.084253] audit: type=1400 audit(1752755432.731:18): avc: denied { map } for pid=6388 comm="syz-executor.3" path="/proc/6388/status" dev="proc" ino=12213 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=file permissive=1 [ 429.108570] audit: type=1400 audit(1752755432.732:19): avc: denied { execute } for pid=6388 comm="syz-executor.3" path="/proc/6388/status" dev="proc" ino=12213 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=file permissive=1 12:30:32 executing program 2: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$null(r0, &(0x7f0000000080)='./file0\x00', 0x4, 0x103) creat(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x9, 0x80, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/fscreate\x00') [ 429.142572] FAULT_INJECTION: forcing a failure. [ 429.142572] name failslab, interval 1, probability 0, space 0, times 0 12:30:32 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000000c0)={0x14, 0x29, &(0x7f0000000000)="f1bdfc733d07179e3a8a86152aae9de357e9d0c7fd6ad60e44c7f4d1b607fedb3d80f6fdff0f977637"}) [ 429.144700] CPU: 0 UID: 0 PID: 6396 Comm: syz-executor.6 Not tainted 6.16.0-rc6-next-20250717 #1 PREEMPT(voluntary) [ 429.144732] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 429.144745] Call Trace: [ 429.144753] [ 429.144762] dump_stack_lvl+0xfa/0x120 [ 429.144798] should_fail_ex+0x4d7/0x5e0 [ 429.144839] ? __anon_vma_prepare+0x2ee/0x590 [ 429.144888] should_failslab+0xc2/0x120 [ 429.144922] kmem_cache_alloc_noprof+0x5f/0x3d0 [ 429.144968] __anon_vma_prepare+0x2ee/0x590 [ 429.145007] __vmf_anon_prepare+0x11f/0x250 [ 429.145043] __handle_mm_fault+0x13ad/0x30f0 [ 429.145082] ? __pfx_perf_trace_lock+0x10/0x10 [ 429.145110] ? __pfx___handle_mm_fault+0x10/0x10 [ 429.145144] ? __pte_offset_map_lock+0x190/0x330 [ 429.145186] ? no_page_table+0xc7/0x220 [ 429.145220] ? follow_page_pte.constprop.0+0x4f9/0x1170 [ 429.145265] handle_mm_fault+0x2c3/0x900 [ 429.145314] __get_user_pages+0x58a/0x2f10 [ 429.145380] ? __pfx___get_user_pages+0x10/0x10 [ 429.145422] ? lock_is_held_type+0x9e/0x120 [ 429.145454] populate_vma_page_range+0x282/0x410 [ 429.145479] ? __pfx_populate_vma_page_range+0x10/0x10 [ 429.145502] ? __pfx_find_vma_intersection+0x10/0x10 [ 429.145534] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 429.145565] __mm_populate+0x100/0x3a0 [ 429.145590] ? __pfx___mm_populate+0x10/0x10 [ 429.145616] ? up_write+0x195/0x520 [ 429.145644] ? lock_is_held_type+0x9e/0x120 [ 429.145675] do_mlock+0x445/0x800 [ 429.145698] ? __fget_files+0x20d/0x3b0 [ 429.145736] ? __pfx_do_mlock+0x10/0x10 [ 429.145762] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 429.145801] ? fput+0x6a/0x100 [ 429.145827] ? ksys_write+0x1a3/0x240 [ 429.145851] ? __pfx_ksys_write+0x10/0x10 [ 429.145899] __x64_sys_mlock+0x59/0x80 [ 429.145937] do_syscall_64+0xbf/0x360 [ 429.145979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.146003] RIP: 0033:0x7f31b06d8b19 [ 429.146021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 429.146043] RSP: 002b:00007f31adc4e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 429.146066] RAX: ffffffffffffffda RBX: 00007f31b07ebf60 RCX: 00007f31b06d8b19 [ 429.146082] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ded000 [ 429.146096] RBP: 00007f31adc4e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 429.146110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 429.146124] R13: 00007ffee645bf1f R14: 00007f31adc4e300 R15: 0000000000022000 [ 429.146158] [ 429.185003] hpet: Lost 2 RTC interrupts 12:30:43 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x5, [{0x1}, {0x7, 0x2}, {0x8, 0x7}, {0x400, 0x80000000}, {0x85, 0x3}]}}) 12:30:43 executing program 5: syz_80211_inject_frame(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080200000001080211000011000000000000000000006400010002020202020201f2510861a38b960c1218240000000000"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) 12:30:43 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) 12:30:43 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}]}, 0x5c}}, 0x0) 12:30:43 executing program 4: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) tkill(r0, 0x27) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000000)={'ip6tnl0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = dup3(r1, r2, 0x80000) perf_event_open(&(0x7f00000005c0)={0x4, 0x80, 0x40, 0x4, 0x83, 0x4, 0x0, 0x0, 0x2080, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0xd650, 0x101}, 0x4805, 0x4, 0x2, 0x3, 0x400, 0x3f, 0x3, 0x0, 0x400, 0x0, 0xffffffffffffff81}, 0x0, 0xf, r3, 0x2) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1800000001020500000000000000000000000000040001801cfd2622224203d4a5e62e12b190c679f05e5d070849cbb84d57368fc3fb87b5530688c938f9c83f9bf16b740d2d9b053b02849ffd52e436c27612c66f4ae89bbb0cbf2686"], 0x18}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {r2}}, './file0\x00'}) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000003c0), 0x4) r6 = fsmount(r4, 0x1, 0x78) perf_event_open(&(0x7f0000000540)={0x5, 0x80, 0xc7, 0xfc, 0x81, 0x5c, 0x0, 0xffffffffffffff7f, 0x81, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x5, 0x6}, 0x0, 0xb, 0xffff, 0x7, 0x80000001, 0xa2c, 0x2, 0x0, 0x5, 0x0, 0x401}, r0, 0xf, r6, 0xe) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8040}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x40000) execve(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000003c0), &(0x7f0000000500)=[&(0x7f0000000400)='\x00', &(0x7f0000000440)='^\x00', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='\xad![.,#.\x00']) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000180)) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x2, 0x5b, 0x1f, 0x7, 0x0, 0x8, 0x2000, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1f, 0x2, @perf_config_ext={0x10000, 0x9}, 0x2000, 0x9, 0xfff, 0x2, 0x9, 0xffffffff, 0x91, 0x0, 0x7ff, 0x0, 0x6}, r0, 0x1, 0xffffffffffffffff, 0x1) 12:30:43 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) (fail_nth: 21) 12:30:43 executing program 1: ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000140)) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000000)) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f00000000c0)=""/78) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r1, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) 12:30:43 executing program 2: ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000180)=""/16) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x453, 0x2, 0x70bd2c, 0x25dfdbfb, "e49feb4d32fb609d6b47a0c1bbd48718fae99f5540626087aa6c18cf4ec74f9b30bfa5aa7b666c09990cbaaceaa476f9fc003c8ee6e95338460343b38b18cb9bd8", ["", "", "", "", "", ""]}, 0x54}, 0x1, 0x0, 0x0, 0x8840}, 0x40480c1) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227b, &(0x7f0000000000)) [ 439.820147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:30:43 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)={0xffff, 0x0, 0x0, 0xfffffffffffffffe, 0x2}) 12:30:43 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) syz_open_procfs$namespace(r1, &(0x7f00000000c0)='ns/mnt\x00') r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x88001, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0x12) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000001c0)={0x22, {{0xa, 0x4e21, 0x80000001, @rand_addr=' \x01\x00', 0x2}}, 0x1, 0x1, [{{0xa, 0x4e22, 0xd80, @private1, 0x58a}}]}, 0x110) r3 = getpgid(r1) syz_open_procfs$namespace(r3, &(0x7f0000000080)='ns/time\x00') clone3(&(0x7f0000005880)={0x61020100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0}, 0x58) [ 440.027167] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 65535 (only 16 groups) 12:30:55 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) (fail_nth: 22) 12:30:55 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) syz_open_procfs$namespace(r1, &(0x7f00000000c0)='ns/mnt\x00') r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x88001, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0x12) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000001c0)={0x22, {{0xa, 0x4e21, 0x80000001, @rand_addr=' \x01\x00', 0x2}}, 0x1, 0x1, [{{0xa, 0x4e22, 0xd80, @private1, 0x58a}}]}, 0x110) r3 = getpgid(r1) syz_open_procfs$namespace(r3, &(0x7f0000000080)='ns/time\x00') clone3(&(0x7f0000005880)={0x61020100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0}, 0x58) 12:30:55 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) 12:30:55 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}]}, 0x5c}}, 0x0) 12:30:55 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() r2 = fcntl$getown(r0, 0x9) tgkill(r2, r1, 0x2d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 12:30:55 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x400, 0xff01f17c9d85d0b5) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000001000000de14c35d", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00000000c0)=0x9) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2, 0x0, 0x2}], 0x18) r2 = signalfd(r0, &(0x7f0000000100)={[0x5]}, 0x8) write$evdev(r2, &(0x7f0000000140)=[{{0x77359400}, 0x0, 0x6, 0x9}, {{0x0, 0xea60}, 0x17, 0x914c, 0x6}], 0x30) 12:30:55 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)={0xffff, 0x0, 0x0, 0xfffffffffffffffe, 0x2}) 12:30:55 executing program 5: syz_80211_inject_frame(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080200000001080211000011000000000000000000006400010002020202020201f2510861a38b960c1218240000000000"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) [ 451.934178] FAULT_INJECTION: forcing a failure. [ 451.934178] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 451.935516] CPU: 1 UID: 0 PID: 6457 Comm: syz-executor.6 Not tainted 6.16.0-rc6-next-20250717 #1 PREEMPT(voluntary) [ 451.935536] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 451.935545] Call Trace: [ 451.935550] [ 451.935556] dump_stack_lvl+0xfa/0x120 [ 451.935583] should_fail_ex+0x4d7/0x5e0 [ 451.935611] should_fail_alloc_page+0xe0/0x110 [ 451.935630] prepare_alloc_pages+0x1af/0x500 [ 451.935648] ? __pfx_perf_trace_lock+0x10/0x10 [ 451.935671] __alloc_frozen_pages_noprof+0x17f/0x1f10 [ 451.935698] ? __pfx_perf_trace_lock+0x10/0x10 [ 451.935721] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 451.935742] ? __print_lock_name+0x52/0x100 [ 451.935772] ? perf_trace_lock+0xb5/0x5d0 [ 451.935792] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 451.935812] ? policy_nodemask+0xeb/0x4e0 [ 451.935836] alloc_pages_mpol+0xed/0x340 [ 451.935856] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 451.935876] ? lock_release+0xc8/0x290 [ 451.935890] ? find_held_lock+0x2b/0x80 [ 451.935912] ? get_vma_policy+0x23b/0x350 [ 451.935936] vma_alloc_folio_noprof+0xe9/0x440 [ 451.935958] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 451.935988] __handle_mm_fault+0x142c/0x30f0 [ 451.936013] ? __pfx_perf_trace_lock+0x10/0x10 [ 451.936031] ? __pfx___handle_mm_fault+0x10/0x10 [ 451.936052] ? __pte_offset_map_lock+0x190/0x330 [ 451.936079] ? no_page_table+0xc7/0x220 [ 451.936101] ? follow_page_pte.constprop.0+0x4f9/0x1170 [ 451.936129] handle_mm_fault+0x2c3/0x900 [ 451.936155] __get_user_pages+0x58a/0x2f10 [ 451.936193] ? __pfx___get_user_pages+0x10/0x10 [ 451.936219] ? lock_is_held_type+0x9e/0x120 [ 451.936240] populate_vma_page_range+0x282/0x410 [ 451.936256] ? __pfx_populate_vma_page_range+0x10/0x10 [ 451.936270] ? __pfx_find_vma_intersection+0x10/0x10 [ 451.936290] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 451.936310] __mm_populate+0x100/0x3a0 [ 451.936326] ? __pfx___mm_populate+0x10/0x10 [ 451.936342] ? up_write+0x195/0x520 [ 451.936364] ? lock_is_held_type+0x9e/0x120 [ 451.936384] do_mlock+0x445/0x800 [ 451.936398] ? __fget_files+0x20d/0x3b0 [ 451.936423] ? __pfx_do_mlock+0x10/0x10 [ 451.936439] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 451.936464] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 451.936489] ? ksys_write+0x1a3/0x240 [ 451.936504] ? __pfx_ksys_write+0x10/0x10 [ 451.936523] __x64_sys_mlock+0x59/0x80 [ 451.936539] do_syscall_64+0xbf/0x360 [ 451.936560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.936576] RIP: 0033:0x7f31b06d8b19 [ 451.936587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 451.936601] RSP: 002b:00007f31adc4e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 451.936616] RAX: ffffffffffffffda RBX: 00007f31b07ebf60 RCX: 00007f31b06d8b19 [ 451.936626] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ded000 [ 451.936635] RBP: 00007f31adc4e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 451.936663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 451.936672] R13: 00007ffee645bf1f R14: 00007f31adc4e300 R15: 0000000000022000 [ 451.936694] [ 451.944631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.947848] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 65535 (only 16 groups) 12:30:55 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000140)=""/251) fallocate(r0, 0x60, 0xffffffffffff4b37, 0x9) sendfile(r0, r0, &(0x7f0000000000)=0x3, 0xf9a) write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x1f, 0x13, 0x27}, {{0x77359400}, 0x4, 0x3, 0x7fff}, {{0x0, 0xea60}, 0x11, 0x7fff, 0x69c}, {{}, 0x1f, 0x6, 0x3f}, {{0x0, 0xea60}, 0x13, 0x1000, 0x3d}], 0x78) 12:30:55 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) 12:30:55 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) 12:30:55 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) (fail_nth: 23) 12:30:55 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x54}}, 0x0) 12:30:55 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000000)=0xc, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @remote, 0x6}, 0x1c) sendmmsg$inet(r0, &(0x7f0000003080)=[{{&(0x7f0000000080)={0x2, 0x4e20, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4, 0x76, 0x1, 0xf}]}}}], 0x18}}], 0x1, 0x0) [ 452.117312] FAULT_INJECTION: forcing a failure. [ 452.117312] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 452.118422] CPU: 0 UID: 0 PID: 6474 Comm: syz-executor.6 Not tainted 6.16.0-rc6-next-20250717 #1 PREEMPT(voluntary) [ 452.118439] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 452.118447] Call Trace: [ 452.118452] [ 452.118457] dump_stack_lvl+0xfa/0x120 [ 452.118483] should_fail_ex+0x4d7/0x5e0 [ 452.118506] _copy_to_user+0x32/0xd0 [ 452.118521] simple_read_from_buffer+0xe0/0x180 [ 452.118541] proc_fail_nth_read+0x189/0x270 [ 452.118563] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 452.118583] ? security_file_permission+0x22/0x90 [ 452.118602] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 452.118622] vfs_read+0x1eb/0xbe0 [ 452.118645] ? __pfx_vfs_read+0x10/0x10 [ 452.118664] ? lock_release+0xc8/0x290 [ 452.118682] ? __fget_files+0x20d/0x3b0 [ 452.118711] ksys_read+0x121/0x240 [ 452.118721] ? __pfx_ksys_read+0x10/0x10 [ 452.118738] do_syscall_64+0xbf/0x360 [ 452.118756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.118769] RIP: 0033:0x7f31b068b69c [ 452.118778] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 452.118790] RSP: 002b:00007f31adc4e170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 452.118802] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f31b068b69c [ 452.118810] RDX: 000000000000000f RSI: 00007f31adc4e1e0 RDI: 0000000000000003 [ 452.118817] RBP: 00007f31adc4e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 452.118824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 452.118831] R13: 00007ffee645bf1f R14: 00007f31adc4e300 R15: 0000000000022000 [ 452.118849] 12:31:05 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) 12:31:05 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) 12:31:05 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) 12:31:05 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x80084504, 0x0) write$evdev(r1, &(0x7f00000001c0)=[{{0x77359400}, 0x0, 0x8, 0xda8}, {{0x0, 0x2710}, 0x2, 0x7f, 0x6}, {{0x77359400}, 0x5, 0xdf7}], 0x48) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x40, 0xfffffffffffffc00, 0x2}) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000180)={0x16, 0xbd, &(0x7f00000000c0)="d4f868049c1f5a1320e01637b73af18273d808be10211d7d3bd73de5a13d53f19ac200f6288f0966ba2bcc4e0ed6c3c64b206584e19156034f18a662153e0c2018acd5e852fe7b85dda35cb4438750ce7a36127be6ce996d22bd578f4daf7d363abad5303bba69b4efeae9e0dd21d12b9a1aa63abe8d8e4e9aea52765291eb4cee6f828124ee61bad487117d17e705f5db13c8776bb02a679765e8a8c6a6efcf31fbe0b8b42e4d36c8ea59b2764d9ca57f7e77dc48e3d178b0fe6c272b"}) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) 12:31:05 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) lseek(r0, 0x3, 0x0) write$char_usb(r0, &(0x7f0000000080)="1c17dbfec8189bb9e70eb0dd08210d8f64a00a65f5b1fe6e4853a1d51055676f3df017f0238183ad8d9a741c94ac0803c14207c65b69d112ecbee399cc851c084a8b96f21fd3", 0x46) 12:31:05 executing program 2: io_setup(0x2, &(0x7f0000000680)=0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000080)=""/105, 0x69}, {&(0x7f00000001c0)=""/125, 0x7d}, {&(0x7f0000000240)=""/80, 0x50}], 0x3, &(0x7f00000002c0)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x148}, 0x20) r2 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0xf0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0x6}, 0x10000, 0x0, 0x81}, r1, 0x8, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x8) io_destroy(r0) 12:31:05 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}]}, 0x4c}}, 0x0) 12:31:05 executing program 5: syz_80211_inject_frame(&(0x7f00000000c0), 0x0, 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) [ 461.698238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:31:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x54}}, 0x0) 12:31:05 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4002) 12:31:05 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x10c, 0x0) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f00000000c0)=""/26) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) 12:31:05 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x44}}, 0x0) 12:31:05 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) 12:31:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x54}}, 0x0) 12:31:05 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4003) 12:31:05 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) lseek(r0, 0x3, 0x0) write$char_usb(r0, &(0x7f0000000080)="1c17dbfec8189bb9e70eb0dd08210d8f64a00a65f5b1fe6e4853a1d51055676f3df017f0238183ad8d9a741c94ac0803c14207c65b69d112ecbee399cc851c084a8b96f21fd3", 0x46) 12:31:05 executing program 5: syz_80211_inject_frame(&(0x7f00000000c0), 0x0, 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) [ 462.089100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:31:16 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x48}, {0x6, 0x0, 0xfe, 0x3}]}, 0x10) 12:31:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x54}}, 0x0) 12:31:16 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x80084504, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000000)={0x6, 0x7, 0x0, 0x3ff, "603ab7ffb504a2eff3c415ac8f6dfc6831b846a0435c8b9512860ed2f4e113d8"}) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) 12:31:16 executing program 5: syz_80211_inject_frame(&(0x7f00000000c0), 0x0, 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) 12:31:16 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x3c}}, 0x0) 12:31:16 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4004) 12:31:16 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) 12:31:16 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) [ 472.728124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:31:16 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f0000000000)=@random={'btrfs.', 'trusted.overlay.opaq\x04e\x00'}) 12:31:16 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x9bdb, 0x7bd883) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) 12:31:16 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}]]}, 0x34}}, 0x0) 12:31:16 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4005) 12:31:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x54}}, 0x0) 12:31:16 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xedbb, 0x448300) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) close(r1) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) 12:31:16 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000001}) unlink(&(0x7f00000005c0)='./file0\x00') r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, 0x0) fcntl$setstatus(r1, 0x4, 0x0) 12:31:16 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}]]}, 0x2c}}, 0x0) 12:31:16 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r1 = getpgrp(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) kcmp(r2, r1, 0x6, r0, 0xffffffffffffffff) fcntl$lock(r0, 0x24, &(0x7f0000000040)={0x2, 0x3, 0x10000, 0x6, r1}) 12:31:27 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4006) 12:31:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x54}}, 0x0) 12:31:27 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) 12:31:27 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) 12:31:27 executing program 5: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) 12:31:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = getpid() r3 = pidfd_open(r2, 0x0) process_madvise(r3, 0x0, 0x0, 0x4, 0x0) r4 = dup(r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3, {0x40}}, './file0/file0\x00'}) pread64(r5, &(0x7f0000000200)=""/207, 0xcf, 0xff) tkill(r2, 0x41) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) ioctl$EVIOCGABS20(r6, 0x80184560, &(0x7f00000000c0)=""/206) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) 12:31:27 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xedbb, 0x448300) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) close(r1) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) 12:31:27 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 484.423267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 484.444039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:31:28 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xedbb, 0x448300) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) close(r1) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) 12:31:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x54}}, 0x0) 12:31:28 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4007) 12:31:28 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 1) [ 484.649608] FAULT_INJECTION: forcing a failure. [ 484.649608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 484.651467] CPU: 0 UID: 0 PID: 6627 Comm: syz-executor.7 Not tainted 6.16.0-rc6-next-20250717 #1 PREEMPT(voluntary) [ 484.651497] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 484.651510] Call Trace: [ 484.651518] [ 484.651527] dump_stack_lvl+0xfa/0x120 [ 484.651564] should_fail_ex+0x4d7/0x5e0 [ 484.651604] _copy_from_user+0x30/0xd0 [ 484.651629] copy_msghdr_from_user+0x88/0x150 [ 484.651652] ? __pfx_copy_msghdr_from_user+0x10/0x10 12:31:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000140)=[{{0x77359400}, 0x16, 0x7, 0x1}, {{r1, r2/1000+60000}, 0x12, 0x8, 0x3ff}, {{0x77359400}, 0x12, 0x3f}], 0x48) [ 484.651677] ? __pfx_perf_trace_lock+0x10/0x10 [ 484.651709] ? lock_acquire+0x15e/0x2f0 [ 484.651738] ___sys_sendmsg+0xdc/0x1b0 [ 484.651760] ? __pfx____sys_sendmsg+0x10/0x10 [ 484.651778] ? perf_trace_lock+0xb5/0x5d0 [ 484.651808] ? __pfx_perf_trace_lock+0x10/0x10 [ 484.651831] ? proc_fail_nth_write+0x98/0x250 [ 484.651858] ? lock_acquire+0x15e/0x2f0 [ 484.651881] ? __fget_files+0x34/0x3b0 [ 484.651914] ? find_held_lock+0x2b/0x80 [ 484.651945] ? __fget_files+0x203/0x3b0 [ 484.651978] ? lock_release+0xc8/0x290 [ 484.652006] ? __fget_files+0x20d/0x3b0 [ 484.652049] __sys_sendmsg+0x150/0x200 [ 484.652070] ? __pfx___sys_sendmsg+0x10/0x10 [ 484.652095] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 484.652131] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 484.652168] ? ksys_write+0x1a3/0x240 12:31:28 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x40f5) [ 484.652189] ? __pfx_ksys_write+0x10/0x10 [ 484.652219] do_syscall_64+0xbf/0x360 [ 484.652251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.652273] RIP: 0033:0x7fbfbdc08b19 [ 484.652291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 484.652311] RSP: 002b:00007fbfbb17e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 484.652340] RAX: ffffffffffffffda RBX: 00007fbfbdd1bf60 RCX: 00007fbfbdc08b19 [ 484.652355] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 484.652368] RBP: 00007fbfbb17e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 484.652382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.652395] R13: 00007ffca268c8bf R14: 00007fbfbb17e300 R15: 0000000000022000 [ 484.652426] 12:31:39 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 2) 12:31:39 executing program 5: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) 12:31:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x54, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x54}}, 0x0) 12:31:39 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200, 0x80, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x91}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r5, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r6, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005540)={{{@in6=@initdev, @in=@local}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setregid(r10, r8) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000010000001800000047bf38671fd0f29c96e3395274825c0523", @ANYRES32=r0, @ANYBLOB="ffffff7f000000002e2f66696c653000"]) r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r11, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) 12:31:39 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x80084504, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000100)=[{{r2, r3/1000+60000}, 0x15, 0x97, 0x9}, {{}, 0x2, 0x3, 0x4}, {{r4, r5/1000+60000}, 0x14, 0x6, 0xe1}], 0x48) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) 12:31:39 executing program 4: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) 12:31:39 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x10) mlock2(&(0x7f0000dee000/0x2000)=nil, 0x2000, 0x1) pkey_mprotect(&(0x7f0000dee000/0x1000)=nil, 0x1000, 0x2, 0xffffffffffffffff) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ded000/0x2000)=nil, 0x2000) 12:31:39 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) [ 495.447627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.453201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.506292] FAULT_INJECTION: forcing a failure. [ 495.506292] name failslab, interval 1, probability 0, space 0, times 0 [ 495.507423] CPU: 1 UID: 0 PID: 6652 Comm: syz-executor.7 Not tainted 6.16.0-rc6-next-20250717 #1 PREEMPT(voluntary) [ 495.507440] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 495.507447] Call Trace: [ 495.507451] [ 495.507456] dump_stack_lvl+0xfa/0x120 [ 495.507477] should_fail_ex+0x4d7/0x5e0 [ 495.507499] should_failslab+0xc2/0x120 [ 495.507513] kmem_cache_alloc_node_noprof+0x71/0x3e0 [ 495.507532] ? __alloc_skb+0x2ab/0x370 [ 495.507555] __alloc_skb+0x2ab/0x370 [ 495.507573] ? __pfx___alloc_skb+0x10/0x10 [ 495.507593] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 495.507616] netlink_alloc_large_skb+0x69/0x150 [ 495.507629] netlink_sendmsg+0x676/0xd80 [ 495.507643] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.507662] ____sys_sendmsg+0xa67/0xc20 [ 495.507678] ? copy_msghdr_from_user+0xfb/0x150 [ 495.507690] ? __pfx_____sys_sendmsg+0x10/0x10 [ 495.507710] ? lock_acquire+0x15e/0x2f0 [ 495.507727] ___sys_sendmsg+0x10f/0x1b0 [ 495.507738] ? __pfx____sys_sendmsg+0x10/0x10 [ 495.507748] ? perf_trace_lock+0xb5/0x5d0 [ 495.507765] ? __pfx_perf_trace_lock+0x10/0x10 [ 495.507778] ? proc_fail_nth_write+0x98/0x250 [ 495.507792] ? lock_acquire+0x15e/0x2f0 [ 495.507805] ? __fget_files+0x34/0x3b0 [ 495.507824] ? find_held_lock+0x2b/0x80 [ 495.507840] ? __fget_files+0x203/0x3b0 [ 495.507857] ? lock_release+0xc8/0x290 [ 495.507873] ? __fget_files+0x20d/0x3b0 [ 495.507896] __sys_sendmsg+0x150/0x200 [ 495.507907] ? __pfx___sys_sendmsg+0x10/0x10 [ 495.507924] ? __pfx_ksys_write+0x10/0x10 [ 495.507941] do_syscall_64+0xbf/0x360 [ 495.507958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.507971] RIP: 0033:0x7fbfbdc08b19 [ 495.507980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 495.507992] RSP: 002b:00007fbfbb17e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 495.508004] RAX: ffffffffffffffda RBX: 00007fbfbdd1bf60 RCX: 00007fbfbdc08b19 [ 495.508012] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 495.508019] RBP: 00007fbfbb17e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 495.508026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.508033] R13: 00007ffca268c8bf R14: 00007fbfbb17e300 R15: 0000000000022000 [ 495.508050] [ 495.534323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.547336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:31:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x54, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x54}}, 0x0) 12:31:39 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 3) 12:31:39 executing program 6: r0 = getpgid(0x0) ptrace$getsig(0x4202, r0, 0x3, &(0x7f0000000000)) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x9) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ded000/0x3000)=nil, 0x3000) munlock(&(0x7f0000dee000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) 12:31:39 executing program 1: syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000300)={0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="002185000000850d3c1cbbd9d8f35668572cb44f19bd3f66650ac682308c3af8d47976ef97fc6c4b0a5877e8dfb2ea64c2ca2e2ba3973937af75458278fd3a683a69ccd723182abf1feaaa409cd33fff8810e07d1e54b8cb30820ea033ba78b8183cbbf76bf9b6cd35f0ec1e9a336f49a8603f09404da8e43dfdc3a69d70ecb7e7fc3b2e4dcb336f16362a0e28b4253b6f62d1c4056b42aeab2c149c72afd2ae73826dff9a2b1b3b960123069d30a200009d8732b24c5b24c6c33adffe3cb4e4aed9affe72bed5687eae360b1e82a78fcfcab984eafa1b09000000023f6efd82f33ab7fbd2c1782e58234a"], &(0x7f0000000540)=ANY=[@ANYBLOB="00030400000004030e04a86bac0fa74b7da9da7287c826bac892cd91e0dcd8573c5dbe5e8b89f6aaaa5f9c4c1f72b0b1c42ee5bd0b8b843801886fde89eeb5e5d910815480faeb45e3b70048f2752d6a032c2301c06beef828ced131e0c3d5650ee89e1c85b4a4ba0e215af66c0a70cbef796fed500ece29d6acc5c70dd4715a734262cd62794aa99349535b50c9255d0c615d8b288d773df748c1d0e9f3"], &(0x7f0000000280)={0x0, 0x22, 0x14, {[@global=@item_012={0x1, 0x1, 0x6, 'K'}, @global=@item_4={0x3, 0x1, 0x6, "3ed5fffc"}, @main=@item_012={0x2, 0x0, 0x9, "54cd"}, @local=@item_4={0x3, 0x2, 0x0, "83f90a37"}, @local=@item_012={0x1, 0x2, 0x4, "a7"}, @local=@item_012={0x2, 0x2, 0x3, "cea7"}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x5, 0x1, {0x22, 0x157}}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000340)={0x20, 0xe, 0x87, "27d718be7e2d54eeffc456f38c96598ad44e849d8b768a0fa01b658f3cb707bd74aad4b650124811e116e07f4a198e4153fa87e42349b973b3060da6bfff7e0a563617c50df38eafe89b2a00eeb468a30def9aeca4b874a6521adde79ab5d26f6eadee0041b5f29aaa79a831d4ef8647e866c636cb97cd096cfaf8ba77e1aed72b3d73b3315c6c"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x3f}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x3f}, &(0x7f0000000480)={0x20, 0x1, 0x13, "bb4982bfb249bf196dd77f4e13d7b39de4bbd3"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x7f}}) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000000)={0x1f, 0x8d, &(0x7f00000000c0)="85bb0bc02ea5c6848a0a909146992819054edba342e7f3c4a1d62ff4e650d6dc868475384d2cf50b8a0a69e279611b0a6e6c568a669162486d5f4246a115aa50161eb9124cbf399d5b2ed476456cf5258cba325a311516e43596ef9a9ecb7143b34b9d24aca74534a26b84ee228ec3f9964b377245704adb447e200991a0a954f33dd50ec9dc4c0a26aa257223"}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000002500010000000000000000000c00000001"], 0x34}], 0x1}, 0x0) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) 12:31:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x54, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x54}}, 0x0) 12:31:39 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 4) 12:31:39 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200, 0x80, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x91}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r5, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r6, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005540)={{{@in6=@initdev, @in=@local}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setregid(r10, r8) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000010000001800000047bf38671fd0f29c96e3395274825c0523", @ANYRES32=r0, @ANYBLOB="ffffff7f000000002e2f66696c653000"]) r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r11, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) 12:31:39 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)) madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) [ 495.794311] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 12:31:39 executing program 4: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) [ 495.903104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.924130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 496.309556] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 12:31:49 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 5) 12:31:49 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0), 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xc, 0x0, r4) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f00000003c0)=r5, 0x1) 12:31:49 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x54, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x54}}, 0x0) 12:31:49 executing program 5: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) 12:31:49 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) munmap(&(0x7f0000df0000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) r0 = getpid() pidfd_open(r0, 0x0) move_pages(r0, 0x3, &(0x7f0000000000)=[&(0x7f0000deb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000df1000/0x2000)=nil], &(0x7f0000000040)=[0x7], &(0x7f0000000080)=[0x0, 0x0], 0x4) 12:31:49 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200, 0x80, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x91}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r5, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r6, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005540)={{{@in6=@initdev, @in=@local}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setregid(r10, r8) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000010000001800000047bf38671fd0f29c96e3395274825c0523", @ANYRES32=r0, @ANYBLOB="ffffff7f000000002e2f66696c653000"]) r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r11, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) 12:31:49 executing program 4: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) 12:31:49 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f00000010c0)={0x4, 0x1000, &(0x7f00000000c0)="681ca11fcba449a29f0bcfa0d6ca6c400329aa9af47876058b08e685adf6a29225dafef9290f28b31958d8e27cf86fbcc7342395028be161660abe7167a318f94d6041ae3af1ea1f75aa67414e6e10176d0b1e290a978cfbdb694b08f4d3dd4dff4987d865b49e3d81b55ed424f6da07bd9ad3b584b3c3c656d4f10e7c0d29b6597fe265afbbc1b4c55402b718286c6f351ee6464f57a3559b994346323156b25add8848d28cec9d7fd9da9db3da61e258199bdac39229faa9acb2543abd698ac2843dc6b73108a8fb9c6c8bea590860941e5a161f3644c4739448dac512fe0f44e8c80585c2c311a3fb3afd0b63d744361884e038b91346289a7fcceb1f18c65bcafbff590b851ddb755e1c634902ca0237baacf4359fa44a0ab7de482248151a76b173c0af4108d31ce9c25e05330051846587f0d3b9875065774a922ebc9da18540ae193a8c6ad14493ad274c7d287ba2e03c9a80d5e220bd9cdd6eb9723c196ecc8a1802bf5acd0c490fde5ae1c6eb1cce3c7d20c3bf9777216944efe65377abeae284ae89708b1ee1c680d6806b1926e25caf584f0a0720a4ccdc7535cdccc14673bd8c4eec166b83360f585a867bb415e7f711494a07c76778ede64978188327c38ee8cd985c7b70b8bf7c6b15b6d721b0768ae07c2a699c06b706949f62b724f746c1cbd061fac6fb262036c5d27ec8c64239a672ea53faacbbe0cb55f36c23a363e049e211e21e6ac70735af02e1cc3a6d578e7857927131dddc775bee4cbe22e74bad3b32adee1b062c29be2aee9f0671d6562835d41d1247989c799e5e8bd64de4400a845d9e4ea4401baf1952cb7480993147f5b4408fd4ed59e5451dc2ace1e42275edef5e73a7daf97566c308c0038e084a63b392f60580ec07a0e916f74ba5d4dc1770599e61b4acae889a40ed6e650ff07a4a90496a98d0cecc5bd41c4d9a78c4b46e61f33aec8da3d9eaea500a4a882a5562737809eda55acf038d7b9c954ecaff659b8b6fc7ee0712ec38ac7752af246c4e8aecc6e833c595993dd06b373ea5d02d20b42f2375cabd48fd744eea16666aa540f82d7cd291a35ac79b532ed7254bc5f1ad871dc3246f8e47e7358cdaf38ec33658273191f83440a7846b76ff8a15c31e5b8be63c0c794862dd592b1021cf7b87b32e053c6da7f2f424c935e7f92470d228751eddd392233ec48f602a69a5042a896ebd0677791451248005b70cbd54d0a4d8d7b75b1cffc9b6e180886d7fa5cda696f0f014ec1737c9704497db664c76f0fb38813e8b067107ca052c24428fbbeccc1e524e33c8485927fad0e0350ef7b796e7c04c71ad986e9d237c9882514bd0acac29a611a5750253c9a555379f7152d2ebb491769d3f0a9b5f55e64120cee07b561b65b3fdcebd5a00c23a434e140ac347544ceb78f5ec29ba4246c575f9fd2a65f1428b04bbbb019dd72dd1eedb505187034e46b842beac9c78deedb23dde94d196dba79652d5d00324376eff7cf5d5934747d055f01e0e4cf22af3b1cad56120869ec39e40a99f24fc711b9577aed365cb0eec6fb9365e6fa7d24d1e1c8e084174d040b6c6a1a5d8423b4cc46ff290a36c0958454fbf7c0f7e0e9f2e85ae805032a6a7db22b1028fbbba1b6ec0d4d3bfae1a038b1ea8a0c66dccb0845fbe8898b21f9c16dcbeeb0b10b181e0dd5f2ce7cd6ba0fe3dc8f35942c595769dcca4efcd066933597953c0986a87e0c5f3aba6228f6a1a6678915c130809c99576d2bff2547b8c958baf703c6d579abe2f942704a300f3ea3c236af13d84d3977fa3931520a8bf954387a17ff6b4276833eab708cb2c7655c6068ac72d8f4566e53ef6e1d251d334de54fb667843893eada683d9a8c7df43c9277f279185f9ec42de0858dce00d265b564cf1c3571366faf9d7ea43e7c1138e94b58a66165c8ea42aa6f66e69b30a0d643595f3983ecba4accc65e35e879dfc2e7fccd1ff821d9623219ca04900caba357c9993d2bd8a1095bd5cacef0ab97bdc12b08b36a321efda0f2c550df7b0e7dd88c0923c82acd4dc656c4543dadb6c1f1675b5b5ac6a4b1d335f4780f123beceaa66ff19651a76a45c4aea0533ea3bf9db2d180f55865be49bbb0fa6a1e4d6bc28387a5580b990af54fd7e5bec946090dc947efc12868b4ee675376b494d1237f34a274b7c8b2d6764e087ce402e32660339014700f815e0135e1a70a279a88fabe0fecc009739d0f288587091ded03eaae1a7991269b903c1e98ca6969d9dcaeaba6bdf9a04af8932554354d6f94f169893b73951109060ea197647a37d152b6be35c55f2acdf2b2df43d26ac72b7a9dd1382a6d51d607542a70c7ab05d6eff52b73bd07c78f22a6a696cf6391ed80628a68c459d93eb311b5b204b2fb4589fd984cc21ad51f455a51e19c5c72d0e56855a0db05910b5165136acfb097c80456152c179249efaef8a3cb78dcfb09fcd4cb9052d9f149bc7d603f2c527e4edcab5964986d0295a1a93b6be9ac44a849d2af4e8feb43e42296273999537ab7f6ba08d165ed972b3731b521535a811416c79b9e09de949301c346a49ba28b981f2fe6ec0e10df4a3bc03a3c834d71a0a05a3b3eac761776af8c34604e5051c8e407a1739425842fee10764e97f91d2c008bb273e3e7619a7439f53fd03e91980f0958f47dea284fa4868b546ec9c6983a0f39872a2bcd8ead60d0045105b8bc7b21055570be483c3e34eea6fecbe7a85ee27e43c34bcbf56fa834749791c957425f8ebfe9fab988cc31b5e43e15fbe480e2a3f9b29b0527c9b4b1387cdd0d59243eb79f34b7cfebc817b3594349906aa001132524496bbc11c8b2b85b7578ae61b66e08cc3b7b0a9582383f2fc7ea2c1ff7b40cceda7bf046947e8c4b54aab270c5dbc316bab891ba895a7b77470a4ca96e15643c2c8258fe6d263d3075966e0ebd279d345b85fed8d661e6f7da563b35d20167d166868d83e77124a6a19aed6323d1e096b81f227bef541a1f07965ac6ad4f8134cc9e390e4563ed032cda40ab352e273bbcaa4810b2326213d321b7f842a96d648d7b7650ea68226e86545f82e80f164733af5a9dd5f6571d6ef2bc97194b8ee6a759e8685ccda9105895b446fa892c3d6396c49884fc69b1f736bab0db8af244fb03bf877dd91a6e65e75e9b3f187958ed6907daa8f883a343f877f70576d1fc868dc73fe2988af45920705fdb74c03cebc89e62c85f821bfd630910ec2f2252956a3e1c4b444ce21b1d6429a8448627a3f9c14a98760ae8be35802ad676b6c8b7c609f6cdf42a3c0f0f0e92ce8a3d06861c315192289f0a2b8f8342ca4d8a6725a5326c49059e49662922e68f3699c4d40c2826bf435ad0fb49d4b0027261dbda9c41b8a328fd6d99cf8d14df8eb57edbe7c56ac376c7479440e11846c32805c04fbc0b6766de149f6b30d7ef2eb78e43d7a7468b26fb7fe026f4b9ce26bb9c6eba4ed6c24634a76f37d6b4488cdfa47ac737f8deab65a23d849630097e7d13af0e0afe8db4cca8539f45c409c008ec6d4ab84602c247e434fe215dd4c63295166c1678baad59995bf07398fc5af79044c2cc0c1e998756dbf17f62de1f381bf8d12846973cf713d544a5589fac191d1c2e267fd23f7252edff9e56dda1f7112ccbb3760bd0f2e7e60759ced265ab6e98939e21ba174773cc69bf0fa5f3ae8672423dfa144a840482d9e149a0c319b5e2303ac4a47825562392392aaa9bf57440d442cca54b8ebf7badca9a9bc5892c846c56db132e904477d668fb3a43bae1f134e62280f0a74cde024f9e3fd3f7838bcf18827d5e5eb87ada9102d957001e04c15b9eb7bfcdad0acd9a289baebd63bb91263e3aec554c4dca0e8403d9c19c32a3c58d6ccbae828c7e3fdb6e30ba29cdf71ecd30ffc8afca1b87987d77349657e39ba2ae3530de389471196ceb1d763460f9ec6f11bac89c18979cd48b419eea3d2b28d9c7b9efec904879fc0a5caba2bd79bd3300fefe5a900580e381f10420dba59448fcadd84a3c9add6f46fad47a24a66c7e9f8436e05dfe5f45b46231fc6fd380ba351b90943cc99a8476209a4f00a4f659966681678beadd68c325bf20205c8608e16a407397cbe16f20c3996e022eeb32b0244ce50bc89111429e40f29e6314cf3d5aaf4376792775774a30fe2286885b100ac2cc614509ebba4b2d38ce3b61880b97c4d19db12049732be41a3cf81ae21280b8e6ef7dac9afd7a98000d59d9673859ff0bdaeede02c9489d84080e98f4340342d36d8676ae96367a7979f276240f14680b0af376c724f5786e0f2a26c9a9b511053d5e3f3018878c208347cc22a3c929f062dcd029a42fbc56223609c43f79e76482d041f8692e0ba9bdbbf7720fa9528d90641f40fc6e6e5ed911b86690d0e2d67b8a6f9391ec1140809d5109c838e02753f6faba3d44a6f4c87bf22a318bf79213afa7a9bc82297b77473c3350ba4bd61ce48a8971e031dd46902ec58b44483001eea9936641e06521883acc35981a544edaab06cca126e480b01d3c06b1171902862f2b23fdbc833c2caad2ef248dacbdaae5dd05703d6d6382dfd9bd61cb671ab85bcc3ee76cb86cf99d6670c20c66b18a0972142a0f0456d86cf7f77cc1d574c62911bdab39d26a3a9f99ab80e145130bc64a9629b24991fc7fd482b78f32ac1ddcddc7430a39c99de1e68746cfee9f55e9edfd7c331d46b182b887f006f3fee6d0a9eb4062602baf92c572c1f665946e4e72a292ebf2c87aecf73abf737e1528d1867582c651fa7bcffda76f19874784e75ab11810723a7d0c62c490c4f8cef0cb760bdc3ee42fe145b9d4217897ea8d9ba2066824d6e5348a3d324f04dbdbadc81c7a86010d72eae91b63639e84caef4df08e3acc050b8e06da406c786852ae105f68fead96b8016a5247a74553e29d1a954bce4cbd2832863139609c09879b13b8f2b4905db9f99bb143fdd56332fc278c8fd8557ee7482c4d9abdb7083f529b4c00651c9d676b97aa42a6c0484eac3ba06bfea96c68f295bf946e4d429a2cf78095c3528074f3848b6c57992cf3cc575ff9ab6d3721e47ff477303daf5c4be0e758857c30672018bb12770bd1e2dce9a9e288c46a6ec4a3d6d8b5a563fc1b0ce4b92d1c65f54eaefc1ba2ba7e618be0068bfdf0c58c213569a2c86446d586c50fd23d38a3ca069fa02bfe9137c59f1a7fa5c832511a29b58533cb960b682c8604d00201e292eca699e694cc954feaeeb48ae8d4ea1f3b5179ec563a0a0f3a82efdc9f7b5ca25c97cf032093dc6f5d685d941ff37602aa3babee4f4958f38a46d7276539c4046475d6eb8536b8ee121485992481e6fdd8bf17058c3de741dc8f8dde603d7707120451e5a511f5e2da5957fd37499d5d74a7ae5b59cfc2de7dc76f9e1871d59903c574d4221b0aed7ff9fd00c320c60344dd41fd27bea3d54f9896476663ca20cf5af0c673a6ef2965be05016789c318d4181037d45c70980bfea7452c5b2ea4fe5e4f57ba0ab86fc255a30e7b66ae52651321b3aad5669c4e59b7498627ca636e07ccb072a6f3acbf74b27c154a8f655ccf179022e2901ea648f5b008285e00bcff28572a313a69a6af28a7bbf4ca5d8fe3e1495a02d1ce21716447413acf55df2908d8f5dd818ef68533f7fd11b5c9aecf5c6fd81952cd2ac36439d304136748640fcd56d723e69f3c4d3f5c4c2ef88e91a815f0611256b62e9f1b9a2204d1d6f4227a941108c69fcd1db8aa7538f50dfc54ce6e1d74a40329c256aade01aeb7c6ff45a0b"}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001100), 0x10100, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r4) fchown(r1, r4, 0x0) r5 = dup2(0xffffffffffffffff, r1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001140)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) [ 505.943720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 505.945590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 505.950471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 505.951667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:31:49 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x80084504, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f00000000c0)=""/4096) 12:31:49 executing program 6: r0 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80100) ioctl$sock_bt_hci(r0, 0x400448e4, &(0x7f0000000040)='F') madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000dee000/0x4000)=nil, 0x4000, 0x16) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) munmap(&(0x7f0000dee000/0x3000)=nil, 0x3000) 12:31:49 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x54, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x54}}, 0x0) 12:31:49 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 6) 12:31:49 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x54, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x54}}, 0x0) 12:31:49 executing program 1: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f00000000c0)=0x10, 0x800) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000100)=0xad2c) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r1, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000000, 0x10, r1, 0x72088000) 12:31:49 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x80084504, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f00000000c0)=""/4096) 12:31:49 executing program 6: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x88001, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x12) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x98, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1000}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x11}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x33}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4001}, 0x4040) madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) [ 506.166109] FAULT_INJECTION: forcing a failure. [ 506.166109] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 506.168074] CPU: 1 UID: 0 PID: 6725 Comm: syz-executor.7 Not tainted 6.16.0-rc6-next-20250717 #1 PREEMPT(voluntary) [ 506.168104] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 506.168116] Call Trace: [ 506.168123] [ 506.168131] dump_stack_lvl+0xfa/0x120 [ 506.168166] should_fail_ex+0x4d7/0x5e0 [ 506.168205] _copy_from_iter+0x1dc/0x15b0 [ 506.168227] ? lock_acquire+0x15e/0x2f0 [ 506.168251] ? __virt_addr_valid+0x1c6/0x5d0 [ 506.168285] ? find_held_lock+0x2b/0x80 [ 506.168318] ? __pfx__copy_from_iter+0x10/0x10 [ 506.168336] ? lock_release+0xc8/0x290 [ 506.168372] ? __virt_addr_valid+0x100/0x5d0 [ 506.168405] ? __check_object_size+0x57b/0x880 [ 506.168442] netlink_sendmsg+0x809/0xd80 [ 506.168472] ? __pfx_netlink_sendmsg+0x10/0x10 [ 506.168506] ____sys_sendmsg+0xa67/0xc20 [ 506.168536] ? copy_msghdr_from_user+0xfb/0x150 [ 506.168557] ? __pfx_____sys_sendmsg+0x10/0x10 [ 506.168595] ? lock_acquire+0x15e/0x2f0 [ 506.168623] ___sys_sendmsg+0x10f/0x1b0 [ 506.168644] ? __pfx____sys_sendmsg+0x10/0x10 [ 506.168663] ? perf_trace_lock+0xb5/0x5d0 [ 506.168693] ? __pfx_perf_trace_lock+0x10/0x10 [ 506.168716] ? proc_fail_nth_write+0x98/0x250 [ 506.168742] ? lock_acquire+0x15e/0x2f0 [ 506.168765] ? __fget_files+0x34/0x3b0 [ 506.168798] ? find_held_lock+0x2b/0x80 [ 506.168829] ? __fget_files+0x203/0x3b0 [ 506.168861] ? lock_release+0xc8/0x290 [ 506.168889] ? __fget_files+0x20d/0x3b0 [ 506.168932] __sys_sendmsg+0x150/0x200 [ 506.168952] ? __pfx___sys_sendmsg+0x10/0x10 [ 506.168984] ? __pfx_ksys_write+0x10/0x10 [ 506.169015] do_syscall_64+0xbf/0x360 [ 506.169046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.169068] RIP: 0033:0x7fbfbdc08b19 [ 506.169085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 506.169105] RSP: 002b:00007fbfbb17e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 506.169127] RAX: ffffffffffffffda RBX: 00007fbfbdd1bf60 RCX: 00007fbfbdc08b19 [ 506.169141] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 506.169169] RBP: 00007fbfbb17e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 506.169182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.169195] R13: 00007ffca268c8bf R14: 00007fbfbb17e300 R15: 0000000000022000 [ 506.169226] [ 515.454310] Bluetooth: hci7: command 0x0406 tx timeout 12:31:59 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x80084504, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f00000000c0)=""/4096) 12:31:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x54}}, 0x0) 12:31:59 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0), 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xc, 0x0, r4) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f00000003c0)=r5, 0x1) 12:31:59 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) clock_gettime(0x0, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000240)=[{{r1, r2/1000+60000}, 0x16, 0x3, 0xd311}, {{0x77359400}, 0x0, 0x0, 0x65e}], 0x30) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) ioctl$EVIOCSREP(r3, 0x80084504, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSREP(r4, 0x80084504, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x208000, 0x0) r6 = getpid() r7 = pidfd_open(r6, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {r4}}, './file0\x00'}) ioctl$EVIOCGBITSW(r8, 0x80404525, &(0x7f00000001c0)=""/45) process_madvise(r7, 0x0, 0x0, 0x4, 0x0) poll(&(0x7f0000000140)=[{r5, 0xfb5cb81490653487}, {r0, 0x1060}, {r7, 0x2}], 0x3, 0x7f) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f00000000c0)=""/47) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000000)=""/43) 12:31:59 executing program 4: r0 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80100) ioctl$sock_bt_hci(r0, 0x400448e4, &(0x7f0000000040)='F') madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000dee000/0x4000)=nil, 0x4000, 0x16) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) munmap(&(0x7f0000dee000/0x3000)=nil, 0x3000) 12:31:59 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 7) 12:31:59 executing program 5: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) 12:31:59 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x1000)=nil, 0x1000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) madvise(&(0x7f0000dec000/0x3000)=nil, 0x3000, 0xe) [ 516.393265] FAULT_INJECTION: forcing a failure. [ 516.393265] name failslab, interval 1, probability 0, space 0, times 0 [ 516.394875] CPU: 0 UID: 0 PID: 6746 Comm: syz-executor.7 Not tainted 6.16.0-rc6-next-20250717 #1 PREEMPT(voluntary) [ 516.394903] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 516.394915] Call Trace: [ 516.394922] [ 516.394930] dump_stack_lvl+0xfa/0x120 [ 516.394964] should_fail_ex+0x4d7/0x5e0 [ 516.395001] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 516.395028] should_failslab+0xc2/0x120 [ 516.395052] __kmalloc_noprof+0xb4/0x4b0 [ 516.395084] ? avc_has_perm_noaudit+0x150/0x3d0 [ 516.395120] genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 516.395152] genl_family_rcv_msg_doit+0xab/0x2f0 [ 516.395177] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 516.395207] ? cap_capable+0xdb/0x3b0 [ 516.395236] ? security_capable+0x2f/0x90 [ 516.395260] ? ns_capable+0xe2/0x120 [ 516.395291] genl_rcv_msg+0x532/0x7e0 [ 516.395319] ? __pfx_genl_rcv_msg+0x10/0x10 [ 516.395342] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 516.395375] ? __pfx_nl80211_start_ap+0x10/0x10 [ 516.395397] ? __pfx_nl80211_post_doit+0x10/0x10 [ 516.395439] netlink_rcv_skb+0x147/0x430 [ 516.395460] ? __pfx_genl_rcv_msg+0x10/0x10 [ 516.395485] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 516.395520] ? netlink_deliver_tap+0x1ae/0xce0 [ 516.395551] ? is_vmalloc_addr+0x86/0xa0 [ 516.395587] genl_rcv+0x28/0x40 [ 516.395606] netlink_unicast+0x58d/0x850 [ 516.395631] ? __pfx_netlink_unicast+0x10/0x10 [ 516.395662] netlink_sendmsg+0x8ac/0xd80 [ 516.395688] ? __pfx_netlink_sendmsg+0x10/0x10 [ 516.395721] ____sys_sendmsg+0xa67/0xc20 [ 516.395749] ? copy_msghdr_from_user+0xfb/0x150 [ 516.395769] ? __pfx_____sys_sendmsg+0x10/0x10 [ 516.395805] ? lock_acquire+0x15e/0x2f0 [ 516.395832] ___sys_sendmsg+0x10f/0x1b0 [ 516.395853] ? __pfx____sys_sendmsg+0x10/0x10 [ 516.395871] ? perf_trace_lock+0xb5/0x5d0 [ 516.395899] ? __pfx_perf_trace_lock+0x10/0x10 [ 516.395921] ? proc_fail_nth_write+0x98/0x250 [ 516.395946] ? lock_acquire+0x15e/0x2f0 [ 516.395968] ? __fget_files+0x34/0x3b0 [ 516.395999] ? find_held_lock+0x2b/0x80 [ 516.396028] ? __fget_files+0x203/0x3b0 [ 516.396059] ? lock_release+0xc8/0x290 [ 516.396086] ? __fget_files+0x20d/0x3b0 [ 516.396128] __sys_sendmsg+0x150/0x200 [ 516.396147] ? __pfx___sys_sendmsg+0x10/0x10 [ 516.396177] ? __pfx_ksys_write+0x10/0x10 [ 516.396208] do_syscall_64+0xbf/0x360 [ 516.396238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.396259] RIP: 0033:0x7fbfbdc08b19 [ 516.396275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 516.396294] RSP: 002b:00007fbfbb17e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 516.396314] RAX: ffffffffffffffda RBX: 00007fbfbdd1bf60 RCX: 00007fbfbdc08b19 [ 516.396328] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 516.396340] RBP: 00007fbfbb17e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 516.396352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.396364] R13: 00007ffca268c8bf R14: 00007fbfbb17e300 R15: 0000000000022000 [ 516.396395] [ 516.424204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 516.424506] hpet: Lost 1 RTC interrupts [ 516.444155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:32:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x54}}, 0x0) 12:32:00 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200, 0x80, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x91}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r5, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r6, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005540)={{{@in6=@initdev, @in=@local}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setregid(r10, r8) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000010000001800000047bf38671fd0f29c96e3395274825c0523", @ANYRES32=r0, @ANYBLOB="ffffff7f000000002e2f66696c653000"]) r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r11, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) 12:32:00 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) mmap$binder(&(0x7f0000dee000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 12:32:00 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 8) 12:32:00 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x80084504, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f00000000c0)=""/4096) 12:32:00 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) r1 = dup2(r0, r0) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)=0xffffedd5) 12:32:00 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0), 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xc, 0x0, r4) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f00000003c0)=r5, 0x1) 12:32:00 executing program 6: madvise(&(0x7f0000df0000/0x1000)=nil, 0x1000, 0x14) munmap(&(0x7f0000dec000/0x4000)=nil, 0x4000) sigaltstack(&(0x7f0000dee000/0x1000)=nil, &(0x7f0000000040)) mlock2(&(0x7f0000dee000/0x2000)=nil, 0x2000, 0x1) mbind(&(0x7f0000df2000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000080)=0x18, 0xff, 0x0) madvise(&(0x7f0000df0000/0x3000)=nil, 0x3000, 0x14) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) mincore(&(0x7f0000df3000/0x4000)=nil, 0x4000, &(0x7f00000000c0)=""/175) 12:32:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x54}}, 0x0) 12:32:00 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) r1 = getpid() r2 = pidfd_open(r1, 0x0) process_madvise(r2, 0x0, 0x0, 0x4, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) 12:32:10 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f00000000c0)=""/4096) 12:32:10 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r2}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r2, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xc, 0x0, r4) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f00000003c0)=r5, 0x1) 12:32:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x54}}, 0x0) 12:32:10 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 9) 12:32:10 executing program 5: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) 12:32:10 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200, 0x80, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x91}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r5, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r6, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005540)={{{@in6=@initdev, @in=@local}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setregid(r10, r8) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000010000001800000047bf38671fd0f29c96e3395274825c0523", @ANYRES32=r0, @ANYBLOB="ffffff7f000000002e2f66696c653000"]) r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r11, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) 12:32:10 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000def000/0x1000)=nil, 0x1000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) 12:32:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x54}}, 0x0) [ 526.904740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 526.904898] FAULT_INJECTION: forcing a failure. [ 526.904898] name failslab, interval 1, probability 0, space 0, times 0 [ 526.906766] CPU: 1 UID: 0 PID: 6807 Comm: syz-executor.7 Not tainted 6.16.0-rc6-next-20250717 #1 PREEMPT(voluntary) [ 526.906783] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 526.906791] Call Trace: [ 526.906796] [ 526.906801] dump_stack_lvl+0xfa/0x120 [ 526.906823] should_fail_ex+0x4d7/0x5e0 [ 526.906845] should_failslab+0xc2/0x120 [ 526.906860] kmem_cache_alloc_node_noprof+0x71/0x3e0 [ 526.906879] ? __alloc_skb+0x2ab/0x370 [ 526.906902] __alloc_skb+0x2ab/0x370 [ 526.906920] ? __pfx___alloc_skb+0x10/0x10 [ 526.906938] ? genl_rcv_msg+0x532/0x7e0 [ 526.906958] netlink_ack+0x167/0xbf0 [ 526.906976] netlink_rcv_skb+0x344/0x430 [ 526.906987] ? __pfx_genl_rcv_msg+0x10/0x10 [ 526.907001] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 526.907021] ? netlink_deliver_tap+0x1ae/0xce0 [ 526.907039] ? is_vmalloc_addr+0x86/0xa0 [ 526.907060] genl_rcv+0x28/0x40 [ 526.907071] netlink_unicast+0x58d/0x850 [ 526.907085] ? __pfx_netlink_unicast+0x10/0x10 [ 526.907103] netlink_sendmsg+0x8ac/0xd80 [ 526.907117] ? __pfx_netlink_sendmsg+0x10/0x10 [ 526.907136] ____sys_sendmsg+0xa67/0xc20 [ 526.907152] ? copy_msghdr_from_user+0xfb/0x150 [ 526.907164] ? __pfx_____sys_sendmsg+0x10/0x10 [ 526.907184] ? lock_acquire+0x15e/0x2f0 [ 526.907201] ___sys_sendmsg+0x10f/0x1b0 [ 526.907213] ? __pfx____sys_sendmsg+0x10/0x10 [ 526.907223] ? perf_trace_lock+0xb5/0x5d0 [ 526.907240] ? __pfx_perf_trace_lock+0x10/0x10 [ 526.907252] ? proc_fail_nth_write+0x98/0x250 [ 526.907267] ? lock_acquire+0x15e/0x2f0 [ 526.907280] ? __fget_files+0x34/0x3b0 [ 526.907298] ? find_held_lock+0x2b/0x80 [ 526.907315] ? __fget_files+0x203/0x3b0 [ 526.907332] ? lock_release+0xc8/0x290 [ 526.907348] ? __fget_files+0x20d/0x3b0 [ 526.907376] __sys_sendmsg+0x150/0x200 [ 526.907387] ? __pfx___sys_sendmsg+0x10/0x10 [ 526.907404] ? __pfx_ksys_write+0x10/0x10 [ 526.907422] do_syscall_64+0xbf/0x360 [ 526.907440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.907452] RIP: 0033:0x7fbfbdc08b19 12:32:10 executing program 6: mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x2000)=nil, 0x2000) [ 526.907463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 526.907476] RSP: 002b:00007fbfbb17e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 526.907490] RAX: ffffffffffffffda RBX: 00007fbfbdd1bf60 RCX: 00007fbfbdc08b19 [ 526.907498] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 526.907505] RBP: 00007fbfbb17e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 526.907512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 526.907519] R13: 00007ffca268c8bf R14: 00007fbfbb17e300 R15: 0000000000022000 [ 526.907536] [ 526.913566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:32:10 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 10) 12:32:10 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000000c0)=""/4096) 12:32:10 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0), 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xc, 0x0, r4) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f00000003c0)=r5, 0x1) 12:32:10 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0xa) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) mbind(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x8000, &(0x7f0000000000)=0x3c, 0x9, 0x6) 12:32:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x54}}, 0x0) 12:32:19 executing program 5: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) 12:32:19 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000000c0)=""/4096) 12:32:19 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 11) 12:32:19 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0), 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xc, 0x0, r4) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f00000003c0)=r5, 0x1) 12:32:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x54}}, 0x0) 12:32:19 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) madvise(&(0x7f0000dee000/0x1000)=nil, 0x1000, 0xc) mlock2(&(0x7f0000dee000/0x2000)=nil, 0x2000, 0x0) 12:32:19 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r2}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r2, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xc, 0x0, r4) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f00000003c0)=r5, 0x1) 12:32:19 executing program 1: ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000605c0)={0x0, 0x0, "af1e51c5314662b1c6947f2dccc47e9086e22641032cf6e6426c6bae00fc267baa05998efac71b59d03d0e7d4139d3ccc24d24a381b4b03bed1f39ff4bb8c953f806b6d5eb5a220b850b613fe55f47ea55dfd7dad14510f1177b8fe15f54014b694a236a2359d66a587aeabd861bdf99ba6701bc5248b436ebb0fb372a6a46c3d6f4ca73252a7731f12dfc0b9b0e3ca842b90b23938390a78ab7f1df121aa63bc783cf7296214ebbdcdd811d5ec2dbb9e93e6f81c0901948abb7cf70f5ab69f4c46d63331c68c25f7ff53cca5d4129848066790a681d3c96d8f48d3ecf5869623c3ea6b92673e7ba1aea29a5d4304611c1ee3b886b23a7c06e43a8b017dd2d1a", "ae82f560504c4e5287cb959c5da271b2e897e6584c6a9dc0b33096aece38e583e83df699e0001e4e457512113b30a7f041ed9ed28292fe248720f6e75330d30d7d0037786c03a2f563650c35f3a3a7d7b9aea64cc4be1228b661cd6aa2451321501efa388f94ffedd1f63a2088bf03f5246eab9dd8a998634085cb2e1828709c0978c2a30f86a5d0b61de151e58976d9b49dc28d99f933ca08998ee311ed90e5235960bacc2f1fe61e2779679b4d71ed08ca398ce47708ad98d5e0ed7393dc469b0a7c78a0d56e1f19eb90f67ff2a1d3d4cfbddcd3d8c83a5a73aaf90369ebc49518b8754c8b33519cb021489676750c2a3dfff5018dc5d3ff5af253aefc0c4f22ac56035fc6f70d25644243e58b2ee81ec66a21b0de0601f8f4a07970a1fb83bb80b40528e083eb17b0827cfc495cf41c7b567085b433327174aebd322ee3d7774fe343a7949dc07cbfe28457574625400492668960514510df6f9be512f46d0900115712593e40f57adf5df0846b54257d14e07afc00aeeecd1db6ca8d5892efeb8a046e16b815a47a5998f1654d141ebd29fe902fbfa41b6ee7354aec3f4cc40ec0ce12a55a73af68e07939f0c46ab6686952d248be01467229c4d1e571dc1162a0a3e55e61c634b3b479a7da949898e4bfb26351d1a549843253cc73bd15f8fe47efce00d5d4d668b0533cbd750e5719a85f00047d1263b7565c0f1a46e8a24c8bbbd1df0fe232c136ac3cec6c8d10b3c59faf16956703d0ce360852ef61048788caa1a61bd05e391d24f9d61a06ecd9bd4bde1d6dc2ba6f1ae5b93af0161b8f62118a6fded807a2babf7f206a6b439af6a3b1ea3c4dd759ecfdd6ba3cf5a73664e2b3d7b2d910a67ccd3e57c5dd04ef595dc2b019f1718b29ad96d60753921c17f4e0994a452300de58e7727e9a808ebe0c966c3b3f369a62acc8c473ca14563695013324220a28a4dad9f2c3f9fb6a5b848c25cd11d47cd282be4c111588b0a0f9e7d23690f88193b284d5da954bbcff794d7dc1a14bffe1cca217779d115b87ce38092188c32bd617dc434c71b2bb8ce0e801cadd6d644bc140cca29868b8d4758e1feb9b3adc1ef1aa81074fb2dcd86f32da8ca7b713aea93f193307988c2b66751d36af5393c64d28aa25c330c2645ba269e075440932218ee49bb01ea44f0ad6116e0a72dbb7b05b2f471b531a85649e4f43de32faf569bc8b708c17999d5669a9f861b2199dd28904a25bbb125815c1b9d9aacdb01fec6e3ada805eb9f5813d459b30a2f30825f7f3cb24cee88c9da913cbbcbad2bd1187ca49f6ea63d165a1342db7fe181fb9040feab3cea6bcbff55378350279c489eccd5fccf90cc16eddcb65c38bb3dac30729a137939c911bf5e780245d15385e40dd67ca81d5c16e900593661ca497d332ef2c965b3a5a18fef7ad3df7aa6020041c8f108072899f8543747a464ede85b105365901d20aa6be4d20310e64a1f0d71b5d18b15280bdce93a0c05a6c8d5683d3b2cbec573f8fb746c37f3386e793c0e5bf1dc277b1325c773db7ddf45c6ede04f2f2cac7044f0e5324d1c1c938c7caa217ea67dfd65643ad32769f68a6315528198140dd394d6dff11fb328050a5247866a7e243dcf9bbdc8937e4ebd518c38941c75a1c05d39eab07569fbcd8c260e709e6b331f9170d87ecd35e75923c32f2358d90e0078350dd810411eb16f573400491ea33897097a82c88db7e4702e0b1ab64bc526a841ef6bcd74fb561719a0f7d3353ab9171b4402da4253c6d1fd0be78e8583fe258dacb45c9007e515f98a6ba41ec91d05c4b221ab7659b853913c8168a7bdbf716c4535448f618d19cd1c31bbe09a2cbf178f5dd18b3a11626c6b2b1a8d5b1cccd3b9035ecc03c392f6dfb71c32774267898d9ce86aa0a9ec3d70d5672d84e589a342655ab1b29b59d3a819d5baa9e3d936efaef5faee0bbe248d1f2cac6404f0830cf54ea8a4e11e54b8830b10d6b43ae6aa3ae658ff9cd784f4a3c9669469f7e629c52ce41170d64fc5e395f6ca926dbe50cb57a32576c34f1a8025d013895986750651fcd53de4ec8a37f4d272e37712c493f331eafbd9ffa169bbfa442494a297152f939fa6bb53cbb32091db1d4a8c9ba265eca57db586465334b1bdf483a8580fce876e34ef5e91ab5624c2aa4838c088344e21f37566e825a88e7a951c6afc3581c312a25710773950f973d4ad4e12a17e0fcd1dcd9c672faae5a9bbdc1d9f8193b2eeb0057032e7c327d96205cd3cff6519057106b1f9a91ccfe828c246f4617c5310b2ba2e0661ed7e562eededea9a19bfafaae67a371da9e2db544fce08f2bfdc34fd093fea6eaa41c46fe1d9cd190af5617a495b9fd541c094cfbfbf42e23e2eb768c8e5e0f68fe0e1b79fbf6a0532fc29e86eb68ef50042770f8352f09dd76446a1f37d609926a3cd78fd84599c7058773853477e224bf2b607ca4703e4471b46e55e21860bd7e02803b0427b3a836e50f132f3f7d828c2522857253d111c61ba2193b406d4ce77c15f755c272535a5d082080e71fa7454353adf4600d0d9530f815ab96731444bc7119e96edb4c339b782c0623b2d7516201c168cb9e0166965e4277e844a54e59ec0d7201079c3f779c0ad0167c16d5725feefb281998f6cfe2b7a812d9db7d5ecedfd7478afd7d61b6443e6af6f199b3dc78b23233f298b4cc977f2abe2fe441f9a6bcf1bea8de9fda759645b04ebf56e91439add1bd51ec8f4712912ac07c902fc593d5c3b5ceec893a639cb581414d67b5ae224b4c6f59783bc16d064afba26503672f1e698c56004d6808c9d359aa8cdfc0a89a8451549959d0bda793322b6f0ee7481fa3d46b82e7a52c54f727c5a2ff9da17981ea4df273108d79ddee364cfe6a7e084c431d87d70be443cb4d2012ad5ea6279121ad3c56e923676dce747ac4da3d9f412b45ee980fc13232b88605bc425ac0d5862e062e68c156bcf40336a98b23f2fdccbd71b6a6dc1b90c12ea22693f2feef1222c691f3eacbde62ff16e27a03ab5d7b160738262a6c62c326af948e9b9fa62fa786284cb1ff0689d7fdb05add4914ee6990a55df2256d8a7ffeba7fb50afad6ca9f3279c4c2e2cc557645e808a4234ea8fcfb66ac22f6bffe1d5334d9ec88e6d9172b1bcaba8c66a33b459457c3e7476907dfdf3247a578b0e661e3f75b1c2cdb26934c0ef36df09fa9aa7b91394ada69f82f12cd12c49c7f266b03156b018e4bf71045b4955305423e9df53ef5a94488d3dedcffde7d045f2f812d745c7f90ae3cbead1576ad0824afeaf3f86d2d19943270cdcb4826982ef11f35188211f69a9ad0b06f7fb13538c10ae4f603f7bb9542356de544e3e21788a9fd5d34b8186fd7adf71428030dd625f7e90546584d1b43467913911121b6ad0b438810418d742bb2cf993eb01e344099036ae8d242a8d38d4cfe8851688a98657cf8dfafaa4cac088ea19773c7768c70bc87514a7272d46f48f5da97552b44716d01a19af33160a40d40879f558dddf59bbfd76aea9d1e569611bc543f421cee78c7495b9b1300870a9e612ce67157a352a2a03abb0751bdd8fc5cb2c3dab4e3584d4f8a366ab10bc03c8e8e55cc44ba41c6ca39ee17855bacfa36d6a16df8ecc0418b6402bcc4944be34ada1f6a6297b14cdde8d590fba5c777e9d058940470928e7cbf81b3ed032e755e7a51083dd86754bb577c788240fd0467a776d7375eab5d78ed45ad0952c3e7c233192e15f22705a977d6a046e3913be076231f84839d109667068a712c6ae08060869b7a8849e2ca3b867b0c3b7402ccf63624f082f3c4406e0148d63b4ea2bb7d549f3424896ef5ab6d1b0353e4a93259a1699d1f63ba76646c3804c85a13d43d976b0ebe74195e1db1fb6a87ce79a24ac605226c913a65071170c66a079617452b3cf376ccc1db38c52cb95e792f0cebabe42cd7585d9c77045b39cb829bdf29083a1f9cecfc719d32336517b8e2334d8d722079942d4fb1130643a02666879c79dcb38c448328d2ce0a9ca3c79388c38a06cb468e0c690ac4fc2447b3bae4da70023e7f01cbd857297ae200d14039fbf9777341edd25649a27488c8f592576de9b5752d9da007bc76198be652a164c79248b0436684843a26135ff4f908e8e89ad209777c0b3db0fb39fa3ff7b207198f77baafa0cbf4c0d6214cbcabf4b3012ff72ed479f7bbfb04437e442193859d95dc483281bd270e1b45c8fb670dad3f2fc7618625a913c47faf7e7edbec24f5f345775147845bec91ddae39210d29c17f069e25d7790da7afe4fd126990e780d0c4a26f6fab7185857134470011a3d3623855e95eaaa70fead8cb81c15d3234554cab8d9d8d9764ce93d773583f8289db6b67bb386b98394f315cd9b2e2bbc6df95cb2b548edfc3e6cf91a64228bf6e34e2a91de82f46251115bafd44106da8b424e597cd50550fc1da85a33d60ce8ec73e32b408b80c446127d035c22b68f9dae2a2356e280509783aaed7c99d7b8431f5df6190436c5acb21b8266be3d8417d9e429c05f8cbbf63e93c28b4562d5821cc4f21045c227138596249c0129b2ad86756da32f1e401a90e96422ce3c79fcbabcf70372a35fdae61295a364883d05eb34bff97bc10194ef1dce95f5c4caa906ecdc03411c0e2689d18223ced045fe6708992e917e80ef085204cb5240e3c2005e82bde6457dfa189c419f1326a453d0058b8a4d50f1447eea12595959acaa0630a20a7fcab485f381ba6edfb8a498efdd7f8f59e72a9aa159c6370ca28e603d30c97ed2fc6a4efa02e0bd54e146b5261b9027a85a64b804be13c98233975e2d4c1d1933eee884227f23d8671ae5b00e8b7c6e2576a1f4aa4c8f69c4ac8e2d58d6fe6b996fbd41314de756a5160068afc3b6e6df94d3056ef696be14fbd4843bc1e4468de4ff43946ea0d69ee5127d0950e3df45aa6c5e5c12157dc187f85df4d94f37a39ad5b1b34f4e8e390ab5ae77bee35f4bc655b110d5522621f301ea3672bc70ad56c0c534931d39c6676db214b1e6e8c29d29703b459c417f0ee335714450389a513ec526fca41e03bc1a318693769e9057272256a842c269e719a0c9e877d62b7998fc4c66d7d12b98a8e0f17b552a402e93c260d723cb316bd0a502c23af720345218da82805f4574af8aaa6437b435fb54c1624e72f1c792176a3a84a17ac229490244ccda299cb578ec18d615e5f2aa3bd1c1a9a4a7d09fa89c768a3ef317a91b950a67d7ad95710a878a1b9c374985ae1a3a5bb209e2ac095e8341a249db41e5f4611ecae7c4ff8726d2953eb95beed11cebee9276e377c1965034a16f5009e07ecb5f6e38345115a678183031c80432695c90cbe855f15dd4fc7dc7f796017307dc934c1053b61aebc"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000615c0)={0x0, 0x0, "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", "59713d180a741c78016638d8c80bffdce90b15a2456535802688f206cc75243dea94534faddaf3365350eb9ee9a8c06389073248c5239ae09a595445d25e9b2696e8e0c8493eff2645306915a805b988dc8aacf0fc1c825dc975925dca0af06a1b97d1b4a52f8253b32af686ea464330850760cd1b4346e12e256534e416e0918d97aac3b33d7b563f6d1fdbc9504ad70fc8d61ddf7755be4a93d6c7a2d68538519b7c4ae2fc68602bf1a9d9d7050774307850dd25ae64b3558d793987104a2baa1c5768af74112bab50f530c9db31473cd739a83d3c4ef7ff8f4c2f67a0a312a3fffeeed931a10f45f018f46d6d5fdfcc6d430da028c42ee4c6a08da73ae0801b1a470a23e9cf683e796e7ef975f461e16782d8cd173b0d390730c64c52ef31f03ed7ce98f720b2a13356ff92e9c43231b1754011829304ebe2a0fe7859d18a30d387e1b9f01a413dd149c9b07a8bfb38a07cb016d8d9801c0bfa3b9c1d907b16502525f9bf9619349132260c75f42c6a513e26e1989fe4d1bd88dd074d89287ae7a31d604cbcd1fa0a1380a1a3512dbe29d62e4a2b1cb1ed01b30a1d74dd7f37d7f51b30925602553b7003063f9167e252fef315ca9ca3e85db7579ab0fe121b03ff6ba3158da116968cbb1138ba4c6c6a77143c27b506b568369690677e2fac2d972146a798f89da6572f9a3d16ebb5d075cef19e4dd001b4c4ef1c773dc569fb097f2bed11c0a1c7b2a261a5bb807c804e84310f9cbc285095c4c65d552a08d85a5a31ff0869fd49274a45acb8c0d923706918a58521ff58c2b1a4ef2343580b4228f40f56a9ca46906dbe9a7afa23091ecdf322d66dd03c0bcae6e46ae56d76b987243351dbe755e3c2469cf97a862cf36a8b2f3fbda12797ff9c30b2dec0bea1ec01d5cff335bc5c7286c8b0132fac2f6941fb2d562b4f4fe6de3dc9e7159ef11f6d4a5161e157175c10d7fdb90ae3c8f237b2ef1f78e8993a0df7a9acfeb407a423981d50cedfe3a19edee0831a7bd01bafeaf6bcc67bca71d2f1ca48e3162d2a51b87ef574d44300e6db3f8df7824b77989c66e28c746dfa0620756787321b58cb59fe79c1aa8e9cf423eb6e3ebad92f2e90a1664d1a003ab3acd0669dd3e9fef8433b470c1d815e9ff8a591014181989680f607f949788eeae9be5bbfd812499ab9b4ca11184d301e04ceefb19b18e350b93d3a6f6bd437a89f1a96146a1441b6c38a15e63fba043fdb464b4cf04f869e60408ae3181b301536cee9b85dfa8c61ace1e1f1f82629e86162e49036feb26e95d9bad5d6bad5cb5853e1e7b68ee8595c3d6b28741800606a390288924e07f846cb6e6cdc92b379a05214092f09c1b2cecb23b0aa0fa5af012314fe3ddbe93cc37dee0e56bdebee28065b6bbd9931686bbbf1c6d9fc6c14231f8871b94478556e696bf628df6075c35a7665ed9e7b09ee9fbc1efc777439978758b98525302368fde6d67802284cf23607713d257c44bc31b7fcd9d612726df83dd114e82525ae49f0af42b312c51e2751be9963c73f2e7894ae507913cc00d4742c35a703e7e88ab67fd50769a85cc938ebbb1b44d16179df01210d35dd6420971662ef4650537fb2657b03816295054f24a74a8085a6ca3dd30a6261ddcef6a70d28c71332e7cde039b3a9cb190ba4bbefd35ef3c2c53ea40165437970465276eb0584820a30c90ea7333effe5ca4fa6794119733b4921b2c4509fd950731ad940fd9994f0f18b6d4a47aaabd662e0e4d29f29dcbe0bb6b3ab6ac943b49f3c35089a27da2c95c2e74016c0daa9de0b352662d8b1c2a7cf4bc20e84ef38727c645a2de0d62df90e17a4b736846be244860dc12948c840b8cbc6ba1aa1072d7650824259d4663b79f733c74aa8043db5db53fe3f3adda4a3bec5f2429aed04ab1fd40910fb64a51105081b4a803341685ba6478e725de5614c610d71fb8d94ca08f2c4ea4ad472c8c6f9025cc0e2adcabe6bff60e7898c9a8bd0e7d9a37908260791a53fe1007caec4874c984d4a9c2ab6801f7262cce6b1dff887e4c8cfe7fb565708b6afacff00ad0fd69dec188bdc66e100463b459545b04d62387edb2b169c96c8c8b8d47bd404cbdf81b4101e5dd3363b8afa40d1d27c657171920c3946701ad152987297c68c896640949c078123ec968380366900eb5b59172045e3e193c7756ad0f88e163b2855c1fe908b86869363ee92a5f81dbec2b35de6868ef742c3e8aa660b462ec72283a608c90d89e10e1c73c140222c40d12f335fcb23c52794987794a8470f9ae6a453b75e477b110d73851aea03612f017f8f8318bb9a22e0cb77b1da5acc38c46336beeec49b3b4618412e060629c4a0d014cf2ddaea9cd254258696d37c4ace84f99fc1a15ae5a0f46d7e0f79105c140160644d1f1056eb2723594a579d31b4fff08d25991fe612724c871126de02cf1c0c7a503922f3c9d046978ec448ab2b51e49b13e07a3a43e0484d5f9fb9a70e2d415e8306c56afcfd4ebce10eb20c300f3c8a9eb1f4364379c4145db03bc8f2cddfb0daef7e6c2971188eb00078a81e9a58fcea95895ad5e1e9a61a1a41da8cc72f1171aa64c6842df8df84306568066c5f33486672c9e1edc56872c2f9da31ebc65aa80543917c36f6a05603096d56910add3dd758ec8a6d4a3a3c7892d2a86b948c2adbacd53eee49b214f81a06e73804fa665c41a8e30a1440f2932592f2df053dec65151e7d9feda76a80fe5d8beb78190ce3b53e9a128f032a3991413c101ee6a46dc12eeeb0f0d124217e19785f8194a6b67bb69d7a99803faca3fe3f26fb7e21efa111abfcbd21f9d9edd8042cddee281bf78ef329b8d0232950189205f45da33ae70ce082c149ca0d6341f4a77a8cfbadbc468a6e601ba393edab9315d80c7199084b3ffa2971135d5e4b9f8fb9f83bb6565f6c6fac5e24f6b0c50b5718342701311f229d99be21ee1e0cba0d7c3f30cf7e9b010e2739b156adcbd977fe6b6c8fd78d9b34853700384e8240717f63622929302800b62d0a57ee64c66eb250c01e6b2062f53e42c852b4ba286a6a2417b06140392d80eeab31b7ddb9441f8b895d9f05918d701f87215a481598e7ce4b7647243af1612dca96c0cf8cbf4a443cd20b4ad612a7374a3ad478e690c87c2e207ecfa174cbdbd58650809907e3994f41d85c82152b74da0ce4676275e5ea42bc2be72aec2bc427239e8da819fb0bc813b7cae218b04ea3a0731e9c8ba5b6fffd1f87004d01d1c2db6a7842540bc8ab0b03a86dadc8aa7240c5a2aa84a2fda591801abe8b823a97f25f2d68ab0a0a315daa1f30b3073b236ca1dc17eff22c14a23c74006bebf85ddb962d39fb6cff45f63a7a9950ca09486362deda16029c1d61c51b066048e3e83c01405020215a52e09552a1418f672d82000cfe1f6a9de54a7840014c9b585c0a2d4081577cdccf7c77e66d320c041f1099bd49187767f1fc2781f257f5e2e280fb8b33dcf390d48e07c35a3191b831d3041761979d871b95be95b7214de3afdc0d7ce47a1cf257dbf5bcbdeb26dfd4f08d38b99d0249f691e9bb6696561d07009ed74767b3d24f58daa9871794954425802a78213208ef7e5152dc711bda8735e2b02fba724a23c12c0e38f11f26f241f4e3d8c4e9b27e26c2a122072d0757153e04c9a602c3ec47a32b177bad7b1484cb645a4599322629ec9d49e8832b64738433e10b4d9666fcaf1cf7c2b4b606c11c8ad4b48767ac023cc4e8f96b6d9d350ef6f3b222743625ad04152fd25c414687a0d009185c11a84002c24d9fb35dde470b641753929e16699ade9b0abc477b16e74dfd97acab4d1778f5956bbd5bcddc73354884e4f7c989c3b5778ff61b30033bfdb34056b9fdbe30c4115e9b0f1f38cb8513e75ea587b5218af5631636649735e74e9f33a3b91b2fe93edad1118bcd467cd8288ca795967a48d7b5dd3e6148b4702e36ff48967c159ae8455e2c04f50de9c2666fdafac8286583a965145caec840f837a16aa190ce8204ccf4ac43c28debbb5d38f3568344b74d7b08133c7da07aae904580172fcd17423fd59fb212747e55516245ddf3cfb5f93627cbd79120bf87c24c948584b069f8937691713a5fdfe07d3373b0aba972b0a4ddad62d7b97a96afc805b63f6b90976a694fa074ef4cda144ababbc870b5c989c21fffba5efb56446834da8b6a06ca936898dda950e2bafddda2e5c7b0c8bf9eb321beabb68a37e5a146bde48f23fe5a77321d71535c1f0d93364f4f607153788c1e102c37ebefb1cca81ec7b76d254ec02063a4198d632a6eaf1aa08861f643fae2ab48165ff4401a88cf1788d13eb9975e39ed7b9163bf0a8d505ad6462ca07632301b57a4864a8204998f7f49b267594221d893435ceb8f7c5f5e4eb9a9e3a1e4397b7b2bed0554cadc12e9da0d6b8209b213c4072e81df9d5bc1b6e5abd883fb20dc8b95b05d40e09730cf41d1d4be5dae88c0db31d1e50ec094bda1891e86b886541223c893fc5a3552cdb09fb8fbf2ec66a0607d5a9c0fa8e256e63e137fee1a05ce35e50c3a73a758115839f5ed35a4329b6a48edaa65e4f6822cba819a2ab5687e056a21a9dfdeaab0a9332d3ce930b49f69acab1bc7f3c2f9bff55a9bbdbabd415d757c1e3c765112ad1107d66a651b904e3f814fe312b9a65278e2953b364af2172410d5bbc793951dccb49fc7be1e7d5fe3d938e31192cc006034d5c86175ea2fd1b978084c811ee7a4c8b0966afba16b8ce5f009baba1975adc89dbdda57c0e1e28f8e49978f488c947af42cb180f8545479acea60575ac090ebaae4526783f33d2dca751a705b9e2a0a0488f02dc64efc20383aa8bf9553ea37e91a0c77c8b813d23b869e8e16c16e7dcbc97a143fce81018653dd79091b2ca8cb376f8ce14ff0c3dab43e76fa992613b332018f83248648521867760e0b8e60c1c5c7c4f1232c958130e994607bc031120b6514475e829e945a8a881c614d11db9ec1ea2f351875b0d2065e53912a5faa3c32a9091c71bf37da04e706db37d326d524c416e693a7b62a6f7cbf71e5e17a72e4862dac1401b3bb83775c55bc80d65d7375a8b544851ff5c7a1b5ca5ad867f23ab5d10a3c65f0c758acf2716031e6c0c2a2e6901c598d0ed071283ec36de80062f3e4240c513fa9e920f03ed08e5d9f75c8e0ec956e017b01e928997a2849e3d1cef8e7b248ba1bcff0b7883fa13c35a448d24d987e24d1c9280948ba447a0bf39fba24a3a24e9be4ed48bfa40f620545f53f2dd4d5cb6365c7541786aeb27e4b34940fd1d0613675f55ba671aa0ed30f8c253482c628e94937b7dfdf4dbd6f4d88a022f412a341c4a635ea9946e9995f773710f27ef8caac5839bc194903c805614aad8fb58559b45d45"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000625c0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xce, "e4f218321216f3"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000635c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000637c0)={{0x0, 0x3, 0x0, 0x1, 0xdec, 0x14a, 0xcef, 0x4, 0x5, 0x1f, 0xfffffff8, 0x1000, 0x49, 0x4, 0x7}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000063880)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000064880)={{0x0, 0x4, 0x1, 0x5, 0x6cb0000000000000, 0x7, 0x7, 0x6, 0x7, 0x0, 0x6, 0x8, 0x101, 0x0, 0x8001}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000064940)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000064b40)={{0x0, 0x0, 0x1, 0x8, 0x7fff, 0x6, 0x4, 0xb22e, 0x0, 0x101, 0x5, 0x8, 0x101, 0x6, 0x7}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000065b40)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000065d40)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000065f40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xce, "1dbba29ff24e30"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000066f40)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1, "eda8ac4499b5cb"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000067f40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000068f40)={{0x0, 0x3, 0x9, 0xf46, 0x1000, 0xe1e, 0x2, 0x400, 0x4, 0x2, 0x9, 0x3, 0x80000001, 0x9, 0x908}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000069f40)={0x0, 0x0, "65e159d10ed1094ac48ce89b786ef0870b2f41bc0d2f0c7f5bcaa28b99a7bbefe19f2547f0b344b0a17824fe341e8fdbf8137947ded29796d43112cf4519519812bd01b507c8b2ecd7bea2a6cef1d037bd1807c76a8aabe8eb88369c003bfc3619283bf085a471f0d3a8b9cb444a8ec92498e404062ae6fa02ea219c2f851bed4dd34b4d1b7658c913bcdfd1f116044caf2d5a53976f97e935d45aacfce148ccbccfcca054a5d4f4b4465490b3bc12775c11a5a70b417e35ea761978c81dfb982df5d7473f87d07f27de815fc4b7f0221c9b5146579abf7f2f4716264ff5dc34a0c443d62fbcbbb2bf78ec3fde6565a026d34326eab1987274f787503ba622c3", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000006af40)={0xb0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x2, "d61c264133cd13"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000006bf40)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r0}, {0x0, r1}, {0x0, r2}, {r3}, {r4}, {r5}, {}, {}, {r6}, {}, {r7}, {r8, r9}, {}, {}, {0x0, r10}, {}, {r11}, {}, {0x0, r12}, {}, {0x0, r13}, {}, {}, {r14}, {0x0, r15}, {}, {}, {0x0, r16}], 0x71, "4aa18c9f16d52c"}) r17 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r17, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) 12:32:19 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 12) [ 536.187646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 536.195741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:32:19 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x2, 0x3, 0x301, 0x0, 0x0, {0x5}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x6}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x21}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x1e82e3e4f5238b8b) madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) mlock(&(0x7f0000def000/0x1000)=nil, 0x1000) 12:32:19 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 13) 12:32:19 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000000c0)=""/4096) 12:32:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x54}}, 0x0) [ 536.312751] FAULT_INJECTION: forcing a failure. [ 536.312751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 536.313671] CPU: 1 UID: 0 PID: 6865 Comm: syz-executor.7 Not tainted 6.16.0-rc6-next-20250717 #1 PREEMPT(voluntary) [ 536.313688] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 536.313695] Call Trace: [ 536.313701] [ 536.313706] dump_stack_lvl+0xfa/0x120 [ 536.313729] should_fail_ex+0x4d7/0x5e0 [ 536.313752] _copy_to_user+0x32/0xd0 [ 536.313766] simple_read_from_buffer+0xe0/0x180 [ 536.313786] proc_fail_nth_read+0x189/0x270 [ 536.313808] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 536.313828] ? security_file_permission+0x22/0x90 [ 536.313846] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 536.313866] vfs_read+0x1eb/0xbe0 [ 536.313889] ? __pfx_vfs_read+0x10/0x10 [ 536.313908] ? lock_release+0xc8/0x290 [ 536.313925] ? __fget_files+0x20d/0x3b0 [ 536.313949] ksys_read+0x121/0x240 [ 536.313960] ? __pfx_ksys_read+0x10/0x10 [ 536.313976] do_syscall_64+0xbf/0x360 [ 536.313993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.314006] RIP: 0033:0x7fbfbdbbb69c [ 536.314015] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 536.314027] RSP: 002b:00007fbfbb17e170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 536.314038] RAX: ffffffffffffffda RBX: 000000000000001c RCX: 00007fbfbdbbb69c [ 536.314046] RDX: 000000000000000f RSI: 00007fbfbb17e1e0 RDI: 0000000000000004 [ 536.314053] RBP: 00007fbfbb17e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 536.314060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 536.314067] R13: 00007ffca268c8bf R14: 00007fbfbb17e300 R15: 0000000000022000 [ 536.314084] 12:32:19 executing program 1: setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000000)={0x401, 0x7f, 0x4800000, 0x2}, 0x10) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x1, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) 12:32:20 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000ded000/0x4000)=nil, 0x4000, 0x1) mlock(&(0x7f0000df0000/0x4000)=nil, 0x4000) mlock(&(0x7f0000df3000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) r0 = pkey_alloc(0x0, 0x0) munmap(&(0x7f0000ded000/0x1000)=nil, 0x1000) mlock2(&(0x7f0000df3000/0x1000)=nil, 0x1000, 0x1) pkey_mprotect(&(0x7f0000df0000/0x4000)=nil, 0x4000, 0xd, r0) 12:32:20 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:32:30 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x46088010}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="00010000", @ANYRES16=r0, @ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000480)={0x0, 0x80, 0x2, 0x1, 0x4, 0x7f, 0x0, 0xfff, 0x4a439, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000440), 0x3}, 0x9288, 0x3, 0x5, 0x3, 0x864, 0x3, 0x7, 0x0, 0x9, 0x0, 0x8001}, 0xffffffffffffffff, 0x6, r1, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) chroot(&(0x7f0000000040)='./file0\x00') fspick(r2, &(0x7f00000001c0)='./file0\x00', 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 12:32:30 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r2}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r2, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xc, 0x0, r4) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f00000003c0)=r5, 0x1) 12:32:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f00000000c0)=""/249) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x80084504, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000000)={0x9, 0x9, 0x1, 0x800, "91599e89ffcc33f845a5f0a3bb353862d0d999ba940fbfd097832c405fafd8d2"}) 12:32:30 executing program 3: syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f00000000c0)=""/4096) 12:32:30 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) munmap(&(0x7f0000dee000/0x1000)=nil, 0x1000) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) 12:32:30 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:32:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x54}}, 0x0) 12:32:30 executing program 5: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="800000000802000000010802110000110000000000000000000064"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) [ 547.024309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 547.045890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:32:30 executing program 6: mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000df0000/0x2000)=nil, 0x2000) 12:32:30 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:32:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x54}}, 0x0) 12:32:30 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f00000000c0)=""/4096) 12:32:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f00000000c0)=""/18) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) 12:32:30 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r2}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r2, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xc, 0x0, r4) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f00000003c0)=r5, 0x1) 12:32:30 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000ded000/0x1000)=nil, 0x1000, 0x3) munmap(&(0x7f0000ded000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) 12:32:31 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:32:31 executing program 3: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f00000000c0)=""/4096) 12:32:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x54}}, 0x0) 12:32:31 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r2}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r2, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xc, 0x0, r4) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f00000003c0)=r5, 0x1) 12:32:31 executing program 5: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="800000000802000000010802110000110000000000000000000064"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) [ 547.625669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 547.637304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:32:39 executing program 3: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f00000000c0)=""/4096) 12:32:39 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x80084504, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f00000000c0)={0x4, 0x1, &(0x7f0000000000)='\f'}) 12:32:39 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0xa) mincore(&(0x7f0000ded000/0x3000)=nil, 0x3000, &(0x7f0000000000)=""/233) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) 12:32:39 executing program 5: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="800000000802000000010802110000110000000000000000000064"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) 12:32:39 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r2}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r2, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xc, 0x0, r4) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f00000003c0)=r5, 0x1) 12:32:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x54}}, 0x0) 12:32:39 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x4, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:32:39 executing program 4: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="800000000802000000010802110000110000000000000000000064"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) [ 555.959994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 555.968728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:32:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x0) [ 556.023101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 556.040556] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:32:39 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000000)={0x12, 0x7e, &(0x7f00000000c0)="f143f82f29f4d23f88b92cbcbf35e891433f9f4c1287392984f911b0857562b7991aaf1cc2dbb2da706a2e3292147dca4d6bb6a5952971a3ae1c310c6fe7557aacc0c9c3d5af550e3669c7c78160d678c09a3f7ceb1bbdbc6daaf1222d0b02657bec5d770d8bababa9724dcc40c9385cc797fc6048cfb438197c6c3968db"}) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) 12:32:39 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ded000/0x1000)=nil, 0x1000) 12:32:51 executing program 4: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="800000000802000000010802110000110000000000000000000064"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) 12:32:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x0) 12:32:51 executing program 5: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080200000001080211000011000000000000000000006400010002020202020201f25108"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) 12:32:51 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r2}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r2, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xc, 0x0, r4) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f00000003c0)=r5, 0x1) 12:32:51 executing program 3: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f00000000c0)=""/4096) 12:32:51 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x5, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:32:51 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ded000/0x4000)=nil, 0x4000) 12:32:51 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x80084504, 0x0) write$evdev(r1, &(0x7f00000000c0)=[{{0x77359400}, 0x5, 0x0, 0x800}, {{}, 0x17, 0x657}, {{0x0, 0x2710}, 0x1, 0x8669, 0x8281}, {{0x0, 0xea60}, 0x12, 0x93e, 0x7ff}, {{0x77359400}, 0x15, 0x7e79, 0x1}, {{0x0, 0xea60}, 0x16, 0xff00, 0x8}], 0x90) 12:32:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x0) [ 568.320525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 568.330734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:32:51 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) mlock(&(0x7f0000def000/0x1000)=nil, 0x1000) [ 568.341668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 568.345930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:32:52 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) r1 = getpid() r2 = pidfd_open(r1, 0x0) process_madvise(r2, 0x0, 0x0, 0x4, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) fsetxattr$security_selinux(r3, &(0x7f00000001c0), 0x0, 0x0, 0x0) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.log\x00', 0x80400, 0x12a) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000780)=0xc) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000007c0)='/sys/module/pci_hotplug', 0x800, 0x60) kcmp$KCMP_EPOLL_TFD(r5, r1, 0x7, r0, &(0x7f0000000800)={r6, r0, 0xc254}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r2, 0x3ff, 0x9, 0x6, 0x7}) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) fallocate(r7, 0x65, 0x6, 0x100000001) clock_gettime(0x4, &(0x7f00000000c0)) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2, 0x2, 0x100000}], 0x18) 12:32:52 executing program 3: syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000000c0)=""/4096) 12:32:52 executing program 6: madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x13) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) 12:32:52 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x6, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:32:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 12:32:52 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x10081) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) 12:33:01 executing program 3: syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000000c0)=""/4096) 12:33:01 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x7, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:33:01 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mremap(&(0x7f0000dec000/0x3000)=nil, 0x3000, 0x1000, 0x7, &(0x7f0000ded000/0x1000)=nil) mbind(&(0x7f0000dec000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000000000)=0x5, 0x4, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x2000)=nil, 0x2000) mlock(&(0x7f0000dec000/0x3000)=nil, 0x3000) 12:33:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 12:33:01 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xc, 0x0, r1) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r2}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f00000003c0)=r2, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xc, 0x0, r4) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f00000003c0)=r5, 0x1) 12:33:01 executing program 4: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="800000000802000000010802110000110000000000000000000064"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) 12:33:01 executing program 5: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="800000000802000000010802110000110000000000000000000064"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) 12:33:01 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) r1 = signalfd(r0, &(0x7f0000000000)={[0x61]}, 0x8) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f00000000c0)=[0x8, 0x8001]) 12:33:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) [ 578.148992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 578.158641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 578.180555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:33:01 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x8, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 578.199685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:33:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 12:33:01 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000000), 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x80084504, 0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x1}) write$evdev(r1, &(0x7f0000000080)=[{{}, 0x0, 0xabc1, 0x2d5}, {{0x77359400}, 0x1, 0xfffe, 0x60d6}, {{0x0, 0xea60}, 0x11, 0x3, 0x17c}, {{}, 0x5, 0x8000, 0x4}], 0x60) 12:33:01 executing program 3: syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000000c0)=""/4096) 12:33:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 12:33:01 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x9, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:33:11 executing program 5: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="800000000802000000010802110000110000000000000000000064"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) 12:33:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 12:33:11 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, 0x0) 12:33:11 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:33:11 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)={0x68, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x4800) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x88001, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x12) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000940)={0x20, r0, 0x1, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x20}}, 0xc044) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000100)={'syz1', "8bce0407026424dad5314bb5dfd6a93f2946ba34dedd3ddd527eb47e06fa2fd1dbba36e337adafbd05d0a9dfa8569ab4036cdd41b1eac33a0c10e50b8c968ae1b305613742a212f50c5ad1fee9136987af089bf989f53996a3b56a1b7217c82fa4e8d94f20aa56219ae32b02c471116ad513de35eae336ac5183"}, 0x7e) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={0x0, @can={0x1d, 0x0}, @llc={0x1a, 0x201, 0x0, 0x4, 0x9, 0x1f, @remote}, @qipcrtr={0x2a, 0x4, 0x1}, 0x3f, 0x0, 0x0, 0x0, 0x7ff, &(0x7f0000000280)='veth0_macvtap\x00', 0x9, 0x9, 0x5189}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x110, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x44000012}, 0xc001) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000980)={0x0, @phonet={0x23, 0xff, 0x1, 0x16}, @llc={0x1a, 0x110, 0xff, 0x7, 0x6, 0xff}, @can={0x1d, 0x0}, 0x7, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000940)='geneve1\x00', 0x7f, 0x6, 0x8001}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10c, r0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x200040c4}, 0x20000090) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x11) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) 12:33:11 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1ff, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x80084504, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000000)=[0x1, 0xffffffff]) 12:33:11 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r2}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r2, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xc, 0x0, r4) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f00000003c0)=r5, 0x1) 12:33:11 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xc, 0x0, r1) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r2}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f00000003c0)=r2, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xc, 0x0, r4) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f00000003c0)=r5, 0x1) [ 587.878930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 587.895977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:33:11 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xcc, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:33:11 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, 0x0) 12:33:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x54, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x54}}, 0x0) 12:33:11 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0xd41, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x15, 0x1, 0xa99}], 0x18) 12:33:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x54, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x54}}, 0x0) 12:33:11 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, 0x0) 12:33:11 executing program 6: madvise(&(0x7f0000dee000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) munmap(&(0x7f0000df0000/0x2000)=nil, 0x2000) 12:33:11 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000300)=[0x10001, 0x6]) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x4, 0x0, 0xfffffffc}], 0x18) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000180)={0x2, 0x2add400000000000, 0x3f, 0xa1, 0x2, 0x9, 0x3}, &(0x7f00000001c0)={0x5, 0x6, 0x5, 0x5, 0x5, 0xe81f, 0x7, 0xfffffffffffffe85}, &(0x7f0000000200)={0x8, 0x5, 0x6, 0x7f, 0x3ff, 0x4, 0xc8115ac, 0x8}, &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280)={[0x100000000]}, 0x8}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000100)=[{{r1, r2/1000+60000}, 0x12, 0x6, 0xffffff01}, {{0x0, 0xea60}, 0x15, 0x1f, 0xffffffe0}, {{0x77359400}, 0x1, 0x94bb, 0xfffffffb}, {{r3, r4/1000+10000}, 0x5, 0x8, 0x401}], 0x60) r5 = dup(0xffffffffffffffff) ioctl$EVIOCGSW(r5, 0x8040451b, &(0x7f0000000340)=""/137) 12:33:21 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000000c0)={0x4, 0x1b, &(0x7f0000000000)="fdbc8fb539583dcc187d2418124b2762173f1adbad9fc03db9f8e1"}) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) 12:33:21 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xc, 0x0, r1) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r2}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f00000003c0)=r2, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xc, 0x0, r4) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f00000003c0)=r5, 0x1) 12:33:21 executing program 5: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="800000000802000000010802110000110000000000000000000064"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) 12:33:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x54, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x54}}, 0x0) 12:33:21 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xc, 0x0, r1) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r2}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f00000003c0)=r2, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xc, 0x0, r4) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f00000003c0)=r5, 0x1) 12:33:21 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf0, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:33:21 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r2}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r2, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xc, 0x0, r4) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f00000003c0)=r5, 0x1) 12:33:21 executing program 6: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000180)='\x00'/11) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r2, &(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000180)='\x00'/11) add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r2) madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x1000)=nil, 0x1000) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r3, &(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000180)='\x00'/11) r4 = add_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key(&(0x7f0000000100)='syzkaller\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r3, r4, r5, 0x0) [ 597.834241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 597.842503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:33:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x54, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x54}}, 0x0) 12:33:21 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r5, 0x4, 0x70bd27, 0x1000, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x11) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r11, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x1c}}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x70, r8, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x4}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x4}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x91}, 0x4) r13 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r13, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) 12:33:21 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) munmap(&(0x7f0000dee000/0x1000)=nil, 0x1000) 12:33:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x54, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x54}}, 0x0) 12:33:21 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x300, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:33:21 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) 12:33:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x54, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x54}}, 0x0) 12:33:21 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) munmap(&(0x7f0000df0000/0x2000)=nil, 0x2000) 12:33:21 executing program 5: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080200000001080211000011000000000000000000006400010002020202"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) [ 598.265014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 598.277290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:33:32 executing program 1: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b000d0bd9925a63355efb4d47adde23710", @ANYRES16=r0, @ANYBLOB="000128bd7000ffdbdf2506000000400003801400020076657468315f6d616376746170000000080001000000000006000400070000000800030000000000080001000000000008000300030000005c000380080003000400000014000200626f6e6430000000000000000000000008000500e000000108000500ac1414231400020076657468315f766c616e00000000000005000800030000000600040006000000060007004e200000"], 0xb0}, 0x1, 0x0, 0x0, 0x44010}, 0x40) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r0, 0x721, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x10) write$evdev(r1, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) r2 = syz_open_dev$vcsu(&(0x7f0000000340), 0x7, 0xc2001) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r3, 0x8, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24048004}, 0x20000084) 12:33:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x54}}, 0x0) 12:33:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf0, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:33:32 executing program 5: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080200000001080211000011000000000000000000006400010002020202"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) 12:33:32 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x500, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:33:32 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000dee000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) mlock(&(0x7f0000dec000/0x4000)=nil, 0x4000) 12:33:32 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, 0x0) 12:33:32 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) [ 608.574656] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:33:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x54}}, 0x0) [ 608.595685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:33:32 executing program 4: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080200000001080211000011000000000000000000006400010002020202020201f25108"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) 12:33:32 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x600, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:33:32 executing program 3: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="800000000802000000010802110000110000000000000000000064"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) 12:33:32 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000def000/0x4000)=nil, 0x4000) [ 608.769041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 608.783584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 608.856170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 608.900554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:33:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x54}}, 0x0) 12:33:32 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x200000000000, 0x2da603) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) 12:33:32 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x700, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:33:32 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) 12:33:32 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) 12:33:32 executing program 5: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080200000001080211000011000000000000000000006400010002020202"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) [ 609.068508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 609.076790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:33:32 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000000)=""/50) 12:33:32 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x900, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:33:32 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000000)=""/37) 12:33:32 executing program 4: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080200000001080211000011000000000000000000006400010002020202020201f25108"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) [ 609.217313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 609.227519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:33:42 executing program 4: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080200000001080211000011000000000000000000006400010002020202020201f25108"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) 12:33:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}]}, 0x4c}}, 0x0) 12:33:42 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf00, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:33:42 executing program 6: mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) munmap(&(0x7f0000dec000/0x2000)=nil, 0x2000) 12:33:42 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x80081) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) 12:33:42 executing program 3: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="800000000802000000010802110000110000000000000000000064"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) 12:33:42 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xc, 0x0, r1) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r2}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000003c0)=r2, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xc, 0x0, r4) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f00000003c0)=r5, 0x1) 12:33:42 executing program 5: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080200000001080211000011000000000000000000006400010002020202020201"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) [ 618.485432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 618.486312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 618.495195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 618.498224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 618.499614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:33:42 executing program 1: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xcc, r0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'xfrm0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_SECCTX={0x21, 0x7, 'system_u:object_r:tmpfs_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wlan1\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, '/usr/lib/telepathy/mission-control-5\x00'}]}, 0xcc}, 0x1, 0x0, 0x0, 0x8000}, 0x4011) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x88001, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x12) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x3, 0x7f, 0xfffffffc00000000}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c776664403de30c06f1c62e186e6f3d9e9e5c2ca755e21afc617233df300f7fcf358579d931eebcac32649d113443eb2684dfdbb9f4328ccbe5d424d551d413f6884c5d304b791a14e880c3", @ANYRESHEX, @ANYBLOB="2c616669643d3078303030303030303030303031303030312c756e616d653d7e275e2c64656275673d3078303030303030303030303030307c7350c60e878d66666600007363616368652c646f6e745f6d6561737572652c00"]) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r2, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) [ 618.529236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:33:42 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000ded000/0x1000)=nil, 0x1000, 0xc) mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x65) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) 12:33:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x44}}, 0x0) 12:33:42 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xcc00, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:33:42 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x88001, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x12) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r4, @ANYBLOB="14002c"], 0x30}}, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r1, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r5, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) 12:33:51 executing program 4: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080200000001080211000011000000000000000000006400010002020202020201"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) [ 628.127710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:33:51 executing program 5: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080200000001080211000011000000000000000000006400010002020202020201"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) 12:33:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}], @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x3c}}, 0x0) 12:33:51 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000def000/0x1000)=nil, 0x1000) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x4) 12:33:51 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xc, 0x0, r1) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r2}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000003c0)=r2, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xc, 0x0, r4) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f00000003c0)=r5, 0x1) 12:33:51 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000000)=[{{0x77359400}, 0x3}], 0x18) 12:33:51 executing program 3: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="800000000802000000010802110000110000000000000000000064"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) 12:33:51 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf000, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 628.132242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 628.201921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 628.214230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 628.215809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:33:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1698}]]}, 0x34}}, 0x0) 12:33:51 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) [ 628.252916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:33:51 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffd, 0x81) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000010000001809e72aa3be83b3ddc2000000", @ANYRES32=r0, @ANYBLOB='K!s\x00\x00\x00\x00\x00./file0\x00']) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0xea60}, 0x9, 0x6, 0x372}, {{r1, r2/1000+60000}, 0x4, 0x800, 0xaa88}, {{}, 0x0, 0xb9, 0xfffffffc}, {{0x77359400}, 0x16, 0x81, 0x100}, {{r3, r4/1000+10000}, 0x1f, 0x1, 0xed}], 0x78) 12:33:51 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x30000, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:33:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}]]}, 0x2c}}, 0x0) 12:34:01 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) mlock(&(0x7f0000def000/0x3000)=nil, 0x3000) 12:34:01 executing program 4: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080200000001080211000011000000000000000000006400010002020202020201"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) 12:34:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:34:01 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x10001, 0x8181) write$evdev(r0, &(0x7f0000000080), 0x0) 12:34:01 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xc, 0x0, r1) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r2}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000003c0)=r2, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xc, 0x0, r4) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f00000003c0)=r5, 0x1) 12:34:01 executing program 5: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080200000001080211000011000000000000000000006400010002020202020201"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) 12:34:01 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xc, 0x0, r1) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r2}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000003c0)=r2, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xc, 0x0, r4) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f00000003c0)=r5, 0x1) 12:34:01 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x80000, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 637.908419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:34:01 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}, {{0x0, 0x2710}, 0x3, 0x401, 0xd28}], 0x30) [ 637.920662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:34:01 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf0ffff, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 637.959313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 637.976030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:34:01 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mbind(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000040)=0x4243, 0x5294, 0x0) mlock2(&(0x7f0000df0000/0x2000)=nil, 0x2000, 0x0) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x5, 0x2, 0x2) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 12:34:01 executing program 1: syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x80084504, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x806914b46d903bb2, 0xbe, 0xd86}, {{0x77359400}, 0x5, 0x3667, 0x3}, {{r1, r2/1000+10000}, 0x12, 0x9, 0x1}, {{0x77359400}, 0x2, 0x7fff, 0xffff}, {{0x0, 0xea60}, 0x16, 0x8, 0x40}], 0x78) 12:34:01 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x1000000, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:34:01 executing program 2: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080200000001080211000011000000000000000000006400010002020202"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) 12:34:01 executing program 6: mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) [ 638.214092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:34:01 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000140)=[0x7fffffff, 0xffff8cc7]) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x80084504, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000000)={0x4, 0x58, &(0x7f00000000c0)="50d03fc94e7bc34ef996c6919d93bb9ba3110467be094fa2657aad3ee98ed8147fd90e78a5c3ef00603425047003cae73674c49b38a30dd072321a1627a15d7a1ff2eb09d6aaa3b1dbc87964994c58aa389550178ad69635"}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0xad, 0x81, 0x8, 0x9}, {0x2, 0x1, 0x7f, 0xfffffffb}]}) signalfd(r2, &(0x7f0000000200)={[0x8]}, 0x8) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) [ 638.245742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:34:01 executing program 4: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080200000001080211000011000000000000000000006400010002020202020201"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) 12:34:01 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x64) 12:34:01 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xc, 0x0, r1) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r2}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000003c0)=r2, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xc, 0x0, r4) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f00000003c0)=r5, 0x1) [ 638.392071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 638.420466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:34:11 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) process_madvise(r2, 0x0, 0x0, 0x4, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000040)={{r2}, 0x1, &(0x7f0000000000)=[0x800], 0x0, 0x3, [0x100, 0xee, 0x5, 0x6]}) madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) r3 = getpid() r4 = pidfd_open(r3, 0x0) process_madvise(r4, 0x0, 0x0, 0x4, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f00000000c0)) 12:34:11 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x2000000, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:34:11 executing program 5: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080200000001080211000011000000000000000000006400010002020202020201f251"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) 12:34:11 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xc, 0x0, r1) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r2}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000003c0)=r2, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xc, 0x0, r4) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f00000003c0)=r5, 0x1) 12:34:11 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) fgetxattr(r0, &(0x7f0000000000)=@random={'security.', '+\\[@\x1c%\x00'}, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r1, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) 12:34:11 executing program 2: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080200000001080211000011000000000000000000006400010002020202"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) 12:34:11 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xc, 0x0, r1) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r2}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000003c0)=r2, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xc, 0x0, r4) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f00000003c0)=r5, 0x1) 12:34:11 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) [ 648.276807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 648.283774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:34:11 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x3000000, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 648.292023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 648.294685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:34:11 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) r1 = getpid() r2 = pidfd_open(r1, 0x0) process_madvise(r2, 0x0, 0x0, 0x4, 0x0) r3 = dup2(r2, r0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000000)=0x0) kcmp$KCMP_EPOLL_TFD(r4, r1, 0x7, r0, &(0x7f00000000c0)={r3, r2, 0x48e}) 12:34:11 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) munmap(&(0x7f0000ded000/0x1000)=nil, 0x1000) munmap(&(0x7f0000ded000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) 12:34:12 executing program 6: madvise(&(0x7f0000df0000/0x2000)=nil, 0x2000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) munmap(&(0x7f0000def000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) 12:34:21 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x4000000, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:34:21 executing program 1: readv(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000800)=""/223, 0xdf}, {&(0x7f00000001c0)=""/89, 0x59}, {&(0x7f0000000240)=""/69, 0x45}, {&(0x7f0000000480)=""/228, 0xe4}, {&(0x7f00000002c0)=""/239, 0xef}, {&(0x7f00000003c0)=""/168, 0xa8}, {&(0x7f0000000100)=""/66, 0x42}, {&(0x7f0000000600)=""/192, 0xc0}, {&(0x7f0000000580)=""/122, 0x7a}, {&(0x7f00000000c0)=""/47, 0x2f}], 0xa) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) 12:34:21 executing program 5: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080200000001080211000011000000000000000000006400010002020202020201f2"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) 12:34:21 executing program 2: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080200000001080211000011000000000000000000006400010002020202"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) 12:34:21 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xc, 0x0, r1) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r2}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000003c0)=r2, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xc, 0x0, r4) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f00000003c0)=r5, 0x1) 12:34:21 executing program 3: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="800000000802000000010802110000110000000000000000000064"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) 12:34:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 1) 12:34:21 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) shmget(0x1, 0x1000, 0x54000000, &(0x7f0000def000/0x1000)=nil) [ 658.003202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 658.008859] FAULT_INJECTION: forcing a failure. [ 658.008859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 658.010655] CPU: 1 UID: 0 PID: 7473 Comm: syz-executor.4 Not tainted 6.16.0-rc6-next-20250717 #1 PREEMPT(voluntary) [ 658.010685] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 658.010698] Call Trace: [ 658.010705] [ 658.010713] dump_stack_lvl+0xfa/0x120 [ 658.010748] should_fail_ex+0x4d7/0x5e0 [ 658.010787] _copy_from_user+0x30/0xd0 [ 658.010810] copy_msghdr_from_user+0x88/0x150 [ 658.010833] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 658.010858] ? __pfx_perf_trace_lock+0x10/0x10 [ 658.010890] ? lock_acquire+0x15e/0x2f0 [ 658.010919] ___sys_sendmsg+0xdc/0x1b0 [ 658.010941] ? __pfx____sys_sendmsg+0x10/0x10 [ 658.010959] ? perf_trace_lock+0xb5/0x5d0 [ 658.010989] ? __pfx_perf_trace_lock+0x10/0x10 [ 658.011012] ? proc_fail_nth_write+0x98/0x250 [ 658.011039] ? lock_acquire+0x15e/0x2f0 [ 658.011062] ? __fget_files+0x34/0x3b0 [ 658.011095] ? find_held_lock+0x2b/0x80 [ 658.011126] ? __fget_files+0x203/0x3b0 [ 658.011158] ? lock_release+0xc8/0x290 [ 658.011186] ? __fget_files+0x20d/0x3b0 [ 658.011229] __sys_sendmsg+0x150/0x200 [ 658.011250] ? __pfx___sys_sendmsg+0x10/0x10 [ 658.011275] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 658.011311] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 658.011348] ? ksys_write+0x1a3/0x240 [ 658.011376] ? __pfx_ksys_write+0x10/0x10 [ 658.011406] do_syscall_64+0xbf/0x360 [ 658.011437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.011460] RIP: 0033:0x7f98f4796b19 [ 658.011477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 658.011497] RSP: 002b:00007f98f1d0c188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 658.011518] RAX: ffffffffffffffda RBX: 00007f98f48a9f60 RCX: 00007f98f4796b19 [ 658.011533] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 658.011546] RBP: 00007f98f1d0c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 658.011559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 658.011571] R13: 00007ffcaa77881f R14: 00007f98f1d0c300 R15: 0000000000022000 [ 658.011605] [ 658.044337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 658.051734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 658.053174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:34:21 executing program 6: mlock2(&(0x7f0000dee000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) munmap(&(0x7f0000dee000/0x3000)=nil, 0x3000) mlock(&(0x7f0000dee000/0x4000)=nil, 0x4000) [ 658.084085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 658.092061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:34:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 2) 12:34:21 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x5000000, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:34:21 executing program 1: ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000000)) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) 12:34:21 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000df0000/0x1000)=nil, 0x1000) madvise(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x3) munmap(&(0x7f0000df0000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) [ 658.268616] FAULT_INJECTION: forcing a failure. [ 658.268616] name failslab, interval 1, probability 0, space 0, times 0 [ 658.270490] CPU: 1 UID: 0 PID: 7494 Comm: syz-executor.4 Not tainted 6.16.0-rc6-next-20250717 #1 PREEMPT(voluntary) [ 658.270521] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 658.270533] Call Trace: [ 658.270541] [ 658.270549] dump_stack_lvl+0xfa/0x120 [ 658.270584] should_fail_ex+0x4d7/0x5e0 [ 658.270642] should_failslab+0xc2/0x120 [ 658.270668] kmem_cache_alloc_node_noprof+0x71/0x3e0 [ 658.270702] ? __alloc_skb+0x2ab/0x370 [ 658.270743] __alloc_skb+0x2ab/0x370 [ 658.270776] ? __pfx___alloc_skb+0x10/0x10 [ 658.270814] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 658.270870] netlink_alloc_large_skb+0x69/0x150 [ 658.270906] netlink_sendmsg+0x676/0xd80 [ 658.270934] ? __pfx_netlink_sendmsg+0x10/0x10 [ 658.270968] ____sys_sendmsg+0xa67/0xc20 [ 658.270998] ? copy_msghdr_from_user+0xfb/0x150 [ 658.271019] ? __pfx_____sys_sendmsg+0x10/0x10 [ 658.271056] ? lock_acquire+0x15e/0x2f0 [ 658.271085] ___sys_sendmsg+0x10f/0x1b0 [ 658.271107] ? __pfx____sys_sendmsg+0x10/0x10 [ 658.271126] ? perf_trace_lock+0xb5/0x5d0 [ 658.271156] ? __pfx_perf_trace_lock+0x10/0x10 [ 658.271179] ? proc_fail_nth_write+0x98/0x250 [ 658.271206] ? lock_acquire+0x15e/0x2f0 [ 658.271228] ? __fget_files+0x34/0x3b0 [ 658.271262] ? find_held_lock+0x2b/0x80 [ 658.271292] ? __fget_files+0x203/0x3b0 [ 658.271324] ? lock_release+0xc8/0x290 [ 658.271360] ? __fget_files+0x20d/0x3b0 [ 658.271404] __sys_sendmsg+0x150/0x200 [ 658.271424] ? __pfx___sys_sendmsg+0x10/0x10 [ 658.271455] ? __pfx_ksys_write+0x10/0x10 [ 658.271487] do_syscall_64+0xbf/0x360 [ 658.271517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.271539] RIP: 0033:0x7f98f4796b19 [ 658.271556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 658.271577] RSP: 002b:00007f98f1d0c188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 658.271598] RAX: ffffffffffffffda RBX: 00007f98f48a9f60 RCX: 00007f98f4796b19 [ 658.271613] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 658.271626] RBP: 00007f98f1d0c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 658.271639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 658.271651] R13: 00007ffcaa77881f R14: 00007f98f1d0c300 R15: 0000000000022000 [ 658.271682] 12:34:21 executing program 6: ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x9) madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) 12:34:22 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080), 0x0) 12:34:22 executing program 5: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080200000001080211000011000000000000000000006400010002020202020201"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) 12:34:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 3) 12:34:22 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x6000000, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:34:22 executing program 3: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="800000000802000000010802110000110000000000000000000064"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) 12:34:22 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xc, 0x0, r1) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r2}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000003c0)=r2, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xc, 0x0, r4) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f00000003c0)=r5, 0x1) 12:34:22 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xc, 0x0, r1) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r2}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000003c0)=r2, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xc, 0x0, r4) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f00000003c0)=r5, 0x1) [ 658.599746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 658.620806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 658.632040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 658.646715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:34:32 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) mlock(&(0x7f0000dec000/0x4000)=nil, 0x4000) 12:34:32 executing program 5: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080200000001080211000011000000000000000000006400010002020202020201"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) 12:34:32 executing program 3: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="800000000802000000010802110000110000000000000000000064"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) 12:34:32 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x7000000, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:34:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 4) 12:34:32 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x200081) r1 = dup(r0) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f00000000c0)=""/165) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSREP(r2, 0x80084504, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x444000) ioctl$EVIOCSREP(r3, 0x80084504, 0x0) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000000)={0x5, 0xcf, &(0x7f0000000200)="593b88d10e62d4a487425a9c2308a87d4ad796516212034e957d0c449a0cf961d16f9849301e3212b5937dd5820a9f3b3d25feb67fd5f791292d0fc101bfd9702cc86e9afde2881795d638eb10855557031c00f151293ea63a075d1f99b232385fb34e58aaf5964d35e068f95775ebd2058647ec30eb428f46eb675ae97bd802f6f213396e83adfe297e910cdbe85055d92e87f2b9c186d4756ae7f8a03fe98e4ce28aa781d3e924448601dbf3fb5f2b99d6794fc381c096284aebb85fae51fbf28b5dce1581ecf986f0a9214e4725"}) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000180)=""/89) r4 = syz_open_dev$evdev(&(0x7f0000000300), 0x4d, 0x20000) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000340)=[0x8001, 0x3]) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x88001, 0x0) write$cgroup_pid(r5, &(0x7f0000000000), 0x12) r6 = syz_open_dev$mouse(&(0x7f0000000400), 0x4, 0x400180) ioctl$EVIOCSCLOCKID(r6, 0x400445a0, &(0x7f0000000440)=0x8) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r7, {0x100}}, './file0\x00'}) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) 12:34:32 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) 12:34:32 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xc, 0x0, r1) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r2}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000003c0)=r2, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xc, 0x0, r4) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f00000003c0)=r5, 0x1) [ 669.253045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 669.260671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 669.268925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 669.282771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:34:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 5) 12:34:33 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000def000/0x2000)=nil, 0x2000, 0x1) mlock(&(0x7f0000def000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) mlock(&(0x7f0000bcf000/0x3000)=nil, 0x3000) 12:34:33 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x88001, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x12) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0xb14a}}, './file0\x00'}) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) 12:34:33 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x9000000, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:34:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 6) 12:34:43 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xc, 0x0, r1) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r2}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000003c0)=r2, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xc, 0x0, r4) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f00000003c0)=r5, 0x1) 12:34:43 executing program 6: madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) mbind(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000000)=0x1f, 0xa9c, 0x4) munmap(&(0x7f0000df0000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ff3000/0xd000)=nil, 0xd000) 12:34:43 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x4083) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x1, 0xbc2, 0x1}], 0x41) 12:34:43 executing program 5: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080200000001080211000011000000000000000000006400010002020202020201"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) 12:34:43 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xc, 0x0, r1) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r2}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000003c0)=r2, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xc, 0x0, r4) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f00000003c0)=r5, 0x1) 12:34:43 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf000000, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:34:43 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) [ 679.860162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 679.863719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:34:43 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3a, 0x10081) open_by_handle_at(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000810000e60400000000000000040000000000000005000000000000007f000000"], 0x20200) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000000)=[0x8001, 0x6]) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x80084504, 0x0) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000100)=""/154) [ 679.926867] FAULT_INJECTION: forcing a failure. [ 679.926867] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 679.928604] CPU: 1 UID: 0 PID: 7588 Comm: syz-executor.4 Not tainted 6.16.0-rc6-next-20250717 #1 PREEMPT(voluntary) [ 679.928633] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 679.928646] Call Trace: [ 679.928654] [ 679.928663] dump_stack_lvl+0xfa/0x120 [ 679.928697] should_fail_ex+0x4d7/0x5e0 [ 679.928737] _copy_from_iter+0x1dc/0x15b0 [ 679.928759] ? lock_acquire+0x15e/0x2f0 [ 679.928784] ? __virt_addr_valid+0x1c6/0x5d0 [ 679.928817] ? find_held_lock+0x2b/0x80 [ 679.928850] ? __pfx__copy_from_iter+0x10/0x10 [ 679.928869] ? lock_release+0xc8/0x290 [ 679.928897] ? __virt_addr_valid+0x100/0x5d0 [ 679.928930] ? __check_object_size+0x57b/0x880 [ 679.928967] netlink_sendmsg+0x809/0xd80 [ 679.928997] ? __pfx_netlink_sendmsg+0x10/0x10 [ 679.929032] ____sys_sendmsg+0xa67/0xc20 [ 679.929061] ? copy_msghdr_from_user+0xfb/0x150 [ 679.929082] ? __pfx_____sys_sendmsg+0x10/0x10 [ 679.929119] ? lock_acquire+0x15e/0x2f0 [ 679.929147] ___sys_sendmsg+0x10f/0x1b0 [ 679.929169] ? __pfx____sys_sendmsg+0x10/0x10 [ 679.929187] ? perf_trace_lock+0xb5/0x5d0 [ 679.929217] ? __pfx_perf_trace_lock+0x10/0x10 [ 679.929240] ? proc_fail_nth_write+0x98/0x250 [ 679.929266] ? lock_acquire+0x15e/0x2f0 [ 679.929289] ? __fget_files+0x34/0x3b0 [ 679.929322] ? find_held_lock+0x2b/0x80 [ 679.929360] ? __fget_files+0x203/0x3b0 [ 679.929392] ? lock_release+0xc8/0x290 [ 679.929420] ? __fget_files+0x20d/0x3b0 [ 679.929463] __sys_sendmsg+0x150/0x200 [ 679.929484] ? __pfx___sys_sendmsg+0x10/0x10 [ 679.929515] ? __pfx_ksys_write+0x10/0x10 [ 679.929546] do_syscall_64+0xbf/0x360 [ 679.929577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.929599] RIP: 0033:0x7f98f4796b19 [ 679.929616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 679.929637] RSP: 002b:00007f98f1d0c188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 679.929658] RAX: ffffffffffffffda RBX: 00007f98f48a9f60 RCX: 00007f98f4796b19 [ 679.929673] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 679.929686] RBP: 00007f98f1d0c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 679.929698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 679.929711] R13: 00007ffcaa77881f R14: 00007f98f1d0c300 R15: 0000000000022000 [ 679.929743] 12:34:43 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x9effffff, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:34:43 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dec000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) 12:34:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 7) 12:34:43 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x0, 0xea60}, 0x2, 0x2}], 0x18) 12:34:43 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) munmap(&(0x7f0000dee000/0x4000)=nil, 0x4000) [ 680.139804] FAULT_INJECTION: forcing a failure. [ 680.139804] name failslab, interval 1, probability 0, space 0, times 0 [ 680.141518] CPU: 1 UID: 0 PID: 7607 Comm: syz-executor.4 Not tainted 6.16.0-rc6-next-20250717 #1 PREEMPT(voluntary) [ 680.141547] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 680.141560] Call Trace: [ 680.141567] [ 680.141576] dump_stack_lvl+0xfa/0x120 [ 680.141610] should_fail_ex+0x4d7/0x5e0 [ 680.141649] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 680.141677] should_failslab+0xc2/0x120 [ 680.141702] __kmalloc_noprof+0xb4/0x4b0 [ 680.141736] ? avc_has_perm_noaudit+0x150/0x3d0 [ 680.141772] genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 680.141807] genl_family_rcv_msg_doit+0xab/0x2f0 [ 680.141833] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 680.141864] ? cap_capable+0xdb/0x3b0 [ 680.141894] ? security_capable+0x2f/0x90 [ 680.141920] ? ns_capable+0xe2/0x120 [ 680.141953] genl_rcv_msg+0x532/0x7e0 [ 680.141981] ? __pfx_genl_rcv_msg+0x10/0x10 [ 680.142006] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 680.142030] ? __pfx_nl80211_start_ap+0x10/0x10 [ 680.142054] ? __pfx_nl80211_post_doit+0x10/0x10 [ 680.142098] netlink_rcv_skb+0x147/0x430 [ 680.142120] ? __pfx_genl_rcv_msg+0x10/0x10 [ 680.142147] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 680.142183] ? netlink_deliver_tap+0x1ae/0xce0 [ 680.142216] ? is_vmalloc_addr+0x86/0xa0 [ 680.142254] genl_rcv+0x28/0x40 [ 680.142274] netlink_unicast+0x58d/0x850 [ 680.142300] ? __pfx_netlink_unicast+0x10/0x10 [ 680.142336] netlink_sendmsg+0x8ac/0xd80 [ 680.142371] ? __pfx_netlink_sendmsg+0x10/0x10 [ 680.142407] ____sys_sendmsg+0xa67/0xc20 [ 680.142436] ? copy_msghdr_from_user+0xfb/0x150 [ 680.142457] ? __pfx_____sys_sendmsg+0x10/0x10 [ 680.142495] ? lock_acquire+0x15e/0x2f0 [ 680.142524] ___sys_sendmsg+0x10f/0x1b0 [ 680.142546] ? __pfx____sys_sendmsg+0x10/0x10 [ 680.142565] ? perf_trace_lock+0xb5/0x5d0 [ 680.142595] ? __pfx_perf_trace_lock+0x10/0x10 [ 680.142618] ? proc_fail_nth_write+0x98/0x250 [ 680.142645] ? lock_acquire+0x15e/0x2f0 [ 680.142668] ? __fget_files+0x34/0x3b0 [ 680.142701] ? find_held_lock+0x2b/0x80 [ 680.142731] ? __fget_files+0x203/0x3b0 [ 680.142763] ? lock_release+0xc8/0x290 [ 680.142792] ? __fget_files+0x20d/0x3b0 [ 680.142848] __sys_sendmsg+0x150/0x200 [ 680.142869] ? __pfx___sys_sendmsg+0x10/0x10 [ 680.142901] ? __pfx_ksys_write+0x10/0x10 [ 680.142932] do_syscall_64+0xbf/0x360 [ 680.142963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.142986] RIP: 0033:0x7f98f4796b19 [ 680.143003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 680.143023] RSP: 002b:00007f98f1d0c188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 680.143045] RAX: ffffffffffffffda RBX: 00007f98f48a9f60 RCX: 00007f98f4796b19 [ 680.143059] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 680.143072] RBP: 00007f98f1d0c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 680.143085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 680.143097] R13: 00007ffcaa77881f R14: 00007f98f1d0c300 R15: 0000000000022000 [ 680.143129] 12:34:43 executing program 5: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080200000001080211000011000000000000000000006400010002020202020201f2"], 0x36) syz_80211_inject_frame(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) [ 680.253885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 680.283867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:34:54 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_gettime(0x2, &(0x7f0000000180)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0xea60}, 0x2, 0xe747, 0x1f}, {{r1, r2/1000+10000}, 0x3, 0x5, 0x4}, {{r3, r4/1000+60000}, 0x1, 0x2, 0x7}, {{0x0, 0xea60}, 0x5, 0x1, 0xffffe0ee}, {{0x0, 0x2710}, 0x17, 0x7, 0x8}], 0x78) 12:34:54 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xcc000000, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:34:54 executing program 5: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080200000001080211000011000000000000000000006400010002020202020201f2"], 0x36) syz_80211_inject_frame(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) 12:34:54 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000ded000/0x1000)=nil, 0x1000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) 12:34:54 executing program 2: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080200000001080211000011000000000000000000006400010002020202020201"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) 12:34:54 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) 12:34:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 8) 12:34:54 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xc, 0x0, r1) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r2}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000003c0)=r2, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xc, 0x0, r4) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f00000003c0)=r5, 0x1) [ 690.853979] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 690.861485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 690.873262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 690.908611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:34:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 9) 12:34:54 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf0ffffff, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:34:54 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) recvmmsg$unix(r1, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000000000000", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000180)={0x12, 0x74, &(0x7f0000000100)="180fff8c3c243f368d6fce915b76d3277e90fb0cd98845c45e7a3d4a2003b32d56e0a6f9e24385ae2e5e1e4cec41fce43f53150d62e7fc128776b24ed33b31cf5aae20a351c62ed81c479f97b46c15d3269c022a76b332b5b3584d4ad2db9c4e6b30ec633df9ab4475394a039d729c4ada38c427"}) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240)={0x0, 0xfb, 0xc2, 0x0, 0x20, "ca0b7e86bae27335b82fe7d6cca6a74e", "d104c98cbadfb091b70c093893da723ecd2e1e705637197f3cc8f5f7fab64ccd533a35c9bdf97ea76b9875b1315b2060f56423fd4d4873a9be29eff0f237402fa2fbeefcd14759894dc6f34b68b63b2a135c700d3ec461ef2a0d3e1e536dcd741a53751a56412b3a8c4175236f36e8500a4be8bc2bf722573fc954f647feec8dcc60b55c33bc1efbb99cf5f7ece7350f9c6c3b9cd77b38cce0e5446b3a0f1bc47a829f514ca5c94e9cdac87a08"}, 0xc2, 0x2) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x1f, 0xfffd, 0xa3f8}], 0x18) dup2(r0, r0) [ 691.015782] FAULT_INJECTION: forcing a failure. [ 691.015782] name failslab, interval 1, probability 0, space 0, times 0 [ 691.017906] CPU: 1 UID: 0 PID: 7648 Comm: syz-executor.4 Not tainted 6.16.0-rc6-next-20250717 #1 PREEMPT(voluntary) [ 691.017938] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 691.017952] Call Trace: [ 691.017959] [ 691.017968] dump_stack_lvl+0xfa/0x120 [ 691.018005] should_fail_ex+0x4d7/0x5e0 [ 691.018047] should_failslab+0xc2/0x120 [ 691.018074] kmem_cache_alloc_node_noprof+0x71/0x3e0 [ 691.018111] ? __alloc_skb+0x2ab/0x370 [ 691.018154] __alloc_skb+0x2ab/0x370 [ 691.018190] ? __pfx___alloc_skb+0x10/0x10 [ 691.018227] ? genl_rcv_msg+0x532/0x7e0 [ 691.018264] netlink_ack+0x167/0xbf0 [ 691.018300] netlink_rcv_skb+0x344/0x430 [ 691.018323] ? __pfx_genl_rcv_msg+0x10/0x10 [ 691.018359] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 691.018399] ? netlink_deliver_tap+0x1ae/0xce0 [ 691.018435] ? is_vmalloc_addr+0x86/0xa0 [ 691.018475] genl_rcv+0x28/0x40 [ 691.018497] netlink_unicast+0x58d/0x850 [ 691.018525] ? __pfx_netlink_unicast+0x10/0x10 [ 691.018560] netlink_sendmsg+0x8ac/0xd80 [ 691.018589] ? __pfx_netlink_sendmsg+0x10/0x10 [ 691.018627] ____sys_sendmsg+0xa67/0xc20 [ 691.018659] ? copy_msghdr_from_user+0xfb/0x150 [ 691.018681] ? __pfx_____sys_sendmsg+0x10/0x10 [ 691.018722] ? lock_acquire+0x15e/0x2f0 [ 691.018754] ___sys_sendmsg+0x10f/0x1b0 [ 691.018778] ? __pfx____sys_sendmsg+0x10/0x10 [ 691.018798] ? perf_trace_lock+0xb5/0x5d0 [ 691.018831] ? __pfx_perf_trace_lock+0x10/0x10 [ 691.018856] ? proc_fail_nth_write+0x98/0x250 [ 691.018884] ? lock_acquire+0x15e/0x2f0 [ 691.018909] ? __fget_files+0x34/0x3b0 [ 691.018956] ? find_held_lock+0x2b/0x80 [ 691.018990] ? __fget_files+0x203/0x3b0 [ 691.019024] ? lock_release+0xc8/0x290 [ 691.019054] ? __fget_files+0x20d/0x3b0 [ 691.019102] __sys_sendmsg+0x150/0x200 [ 691.019124] ? __pfx___sys_sendmsg+0x10/0x10 [ 691.019158] ? __pfx_ksys_write+0x10/0x10 [ 691.019192] do_syscall_64+0xbf/0x360 [ 691.019226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.019250] RIP: 0033:0x7f98f4796b19 [ 691.019267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 691.019290] RSP: 002b:00007f98f1d0c188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 691.019313] RAX: ffffffffffffffda RBX: 00007f98f48a9f60 RCX: 00007f98f4796b19 [ 691.019329] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 691.019343] RBP: 00007f98f1d0c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 691.019357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 691.019371] R13: 00007ffcaa77881f R14: 00007f98f1d0c300 R15: 0000000000022000 [ 691.019406] 12:34:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 10) 12:34:54 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000000)={0x5, 0x2, 0x7, 0x5, "cb70632afa16535eb8786614a7310bdfec4377c1131d6db5677ee210f01d876e"}) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000000c0)="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") write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e23, @empty}, 0x10) fsetxattr$security_selinux(r1, &(0x7f00000001c0), &(0x7f0000000200)='system_u:object_r:sulogin_exec_t:s0\x00', 0x24, 0x0) 12:34:54 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f00000000c0)=""/4096) (fail_nth: 1) [ 691.176629] audit: type=1400 audit(1752755694.827:20): avc: denied { relabelto } for pid=7658 comm="syz-executor.1" name="UDP" dev="sockfs" ino=17257 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:sulogin_exec_t:s0 tclass=udp_socket permissive=1 [ 691.195518] FAULT_INJECTION: forcing a failure. [ 691.195518] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 691.196570] CPU: 0 UID: 0 PID: 7663 Comm: syz-executor.3 Not tainted 6.16.0-rc6-next-20250717 #1 PREEMPT(voluntary) [ 691.196586] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 691.196593] Call Trace: [ 691.196598] [ 691.196602] dump_stack_lvl+0xfa/0x120 [ 691.196627] should_fail_ex+0x4d7/0x5e0 [ 691.196650] _copy_from_user+0x30/0xd0 [ 691.196663] evdev_handle_get_keycode+0xb7/0x180 [ 691.196678] ? __pfx_evdev_handle_get_keycode+0x10/0x10 [ 691.196694] ? __pfx___mutex_trylock_common+0x10/0x10 [ 691.196711] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 691.196729] evdev_do_ioctl+0x3ed/0x1990 [ 691.196743] ? __mutex_lock+0x163/0xbc0 [ 691.196758] ? __pfx_evdev_do_ioctl+0x10/0x10 [ 691.196771] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 691.196788] ? __pfx___mutex_lock+0x10/0x10 [ 691.196801] ? __fget_files+0x34/0x3b0 [ 691.196822] ? __fget_files+0x203/0x3b0 [ 691.196840] ? lock_release+0xc8/0x290 [ 691.196861] evdev_ioctl+0x14a/0x1b0 [ 691.196872] ? __pfx_evdev_ioctl+0x10/0x10 [ 691.196886] __x64_sys_ioctl+0x18f/0x210 [ 691.196905] do_syscall_64+0xbf/0x360 [ 691.196922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.196936] RIP: 0033:0x7fc5379d9b19 [ 691.196945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 691.196956] RSP: 002b:00007fc534f4f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 691.196968] RAX: ffffffffffffffda RBX: 00007fc537aecf60 RCX: 00007fc5379d9b19 [ 691.196976] RDX: 00000000200000c0 RSI: 0000000080084504 RDI: 0000000000000003 [ 691.196983] RBP: 00007fc534f4f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 691.196991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 691.196998] R13: 00007ffd431a6c4f R14: 00007fc534f4f300 R15: 0000000000022000 [ 691.197015] 12:34:54 executing program 2: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080200000001080211000011000000000000000000006400010002020202020201"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) 12:34:54 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xfffff000, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:34:54 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x80084504, 0x0) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000010c0)=""/4095) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) [ 691.300670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 691.310087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:35:03 executing program 2: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080200000001080211000011000000000000000000006400010002020202020201"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) 12:35:03 executing program 6: r0 = open(&(0x7f0000000000)='./file0\x00', 0x1, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)={'syz1', "8bce0407026424dad5314bb5dfd6a93f2946ba34dedd3ddd527eb47e06fa2fd1dbba36e337adafbd05d0a9dfa8569ab4036cdd41b1eac33a0c10e50b8c968ae1b305613742a212f50c5ad1fee9136987af089bf989f53996a3b56a1b7217c82fa4e8d94f20aa56219ae32b02c471116ad513de35eae336ac5183"}, 0x7e) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={0x0, @can={0x1d, 0x0}, @llc={0x1a, 0x201, 0x0, 0x4, 0x9, 0x1f, @remote}, @qipcrtr={0x2a, 0x4, 0x1}, 0x3f, 0x0, 0x0, 0x0, 0x7ff, &(0x7f0000000280)='veth0_macvtap\x00', 0x9, 0x9, 0x5189}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x110, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x44000012}, 0xc001) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000040)={'syztnl1\x00', r4, 0x10, 0x8000, 0x10001, 0x9, {{0x8, 0x4, 0x1, 0x6, 0x20, 0x65, 0x0, 0x7f, 0x2d, 0x0, @multicast1, @local, {[@timestamp={0x44, 0xc, 0x2a, 0x0, 0xf, [0x1, 0xfc000000]}]}}}}}) madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x0, 0xee01}}, './file0\x00'}) sendmsg$TIPC_NL_MON_GET(r6, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0x100, 0x0, 0x30, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x11, 0x3, "0cd31485b2477fc5b1a1cd3196"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd809}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x29}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5d5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe0}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x101}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xafa}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfc000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x20400000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffff000}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x40050}, 0x20000000) 12:35:03 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) 12:35:03 executing program 5: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080200000001080211000011000000000000000000006400010002020202020201f2"], 0x36) syz_80211_inject_frame(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d43c50f1dc7393fa3c6c2568cc522bb991b14cfc276f87a30afa71ef7432b657f8476e4803c621d67c744022e96cb7f8c7fdd2dd8dcd87e4d361cf7f1835e63fc7a1d1ddb0da6ff655e0be6675d51d53610514ee8e73a482885d1119529b9bc7f61c7245651d9c58282c062e029c2f4ec2fb0d81"], 0xe6) 12:35:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 11) 12:35:03 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xffffff7f, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:35:03 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x80084504, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f00000000c0)=""/142) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x2}], 0x18) 12:35:03 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f00000000c0)=""/4096) (fail_nth: 2) [ 699.595986] FAULT_INJECTION: forcing a failure. [ 699.595986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 699.596978] CPU: 0 UID: 0 PID: 7684 Comm: syz-executor.3 Not tainted 6.16.0-rc6-next-20250717 #1 PREEMPT(voluntary) [ 699.596994] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 699.597002] Call Trace: [ 699.597006] [ 699.597011] dump_stack_lvl+0xfa/0x120 [ 699.597036] should_fail_ex+0x4d7/0x5e0 [ 699.597059] _copy_to_user+0x32/0xd0 [ 699.597073] simple_read_from_buffer+0xe0/0x180 [ 699.597093] proc_fail_nth_read+0x189/0x270 [ 699.597114] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 699.597134] ? security_file_permission+0x22/0x90 [ 699.597153] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 699.597172] vfs_read+0x1eb/0xbe0 [ 699.597195] ? __pfx_vfs_read+0x10/0x10 [ 699.597214] ? lock_release+0xc8/0x290 [ 699.597231] ? __fget_files+0x20d/0x3b0 [ 699.597256] ksys_read+0x121/0x240 [ 699.597267] ? __pfx_ksys_read+0x10/0x10 [ 699.597276] ? evdev_ioctl+0x15f/0x1b0 [ 699.597296] do_syscall_64+0xbf/0x360 [ 699.597313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.597326] RIP: 0033:0x7fc53798c69c [ 699.597335] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 699.597347] RSP: 002b:00007fc534f4f170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 699.597362] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fc53798c69c [ 699.597370] RDX: 000000000000000f RSI: 00007fc534f4f1e0 RDI: 0000000000000004 [ 699.597378] RBP: 00007fc534f4f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 699.597385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 699.597392] R13: 00007ffd431a6c4f R14: 00007fc534f4f300 R15: 0000000000022000 [ 699.597410] [ 699.638854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:35:03 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:35:03 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x81) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000180)=[{{0x77359400}, 0x2, 0x8, 0x1000}, {{0x77359400}, 0x2, 0x6ea, 0x81}, {{}, 0x15, 0x9, 0x6}, {{0x77359400}, 0x16, 0x6}, {{r1, r2/1000+60000}, 0x4, 0x7, 0x9}, {{0x77359400}, 0x2, 0x0, 0x6}, {{}, 0x17, 0xff, 0x4}, {{}, 0x4, 0x5, 0x1f}], 0xc0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000300)={0x16, 0xb0, &(0x7f0000000240)="8a3144119dd6219bcfd3d014e03f6d1af7cf0cef51bf72bca6cb5d48217ff0dfb00baafcac68e505475109b832d4d92d446b0e68a8b70460e2aa13510f204b311d9ca5fa3d9fa9d5d582d3c3a77ce2648d93c27cd0981adc73f4347716143795ad3bbc85df87435bf297e472b33b19c025409f927d0d77e64ccc8cdf9b7a6a1c0bc37878a617108ffd563a8f5e107652dea4a19d230c40a7d58d8e78984d466819b49e3ba1c7aad95def48aa0aa9aa98"}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) write$evdev(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0xea60}, 0x5, 0x0, 0x9}, {{0x0, 0x2710}, 0x12, 0x3, 0x7}, {{0x0, 0xea60}, 0x14, 0x20, 0x3f}, {{}, 0x14, 0x8001, 0x6948}, {{r3, r4/1000+60000}, 0x1, 0x5, 0x81}, {{0x0, 0x2710}, 0x16, 0xfd8, 0x399f}, {{0x77359400}, 0x14, 0x0, 0x7}, {{}, 0x2, 0x5, 0x7}], 0xc0) [ 699.658270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 699.662715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 699.669276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:35:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 12) 12:35:03 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f00000000c0)=""/4096) 12:35:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 13) 12:35:03 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) 12:35:03 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x2, &(0x7f00000000c0)=""/4096) 12:35:03 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xfffffff0, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 699.857479] FAULT_INJECTION: forcing a failure. [ 699.857479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 699.858545] CPU: 0 UID: 0 PID: 7712 Comm: syz-executor.4 Not tainted 6.16.0-rc6-next-20250717 #1 PREEMPT(voluntary) [ 699.858561] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 699.858569] Call Trace: [ 699.858573] [ 699.858577] dump_stack_lvl+0xfa/0x120 [ 699.858599] should_fail_ex+0x4d7/0x5e0 [ 699.858622] _copy_to_user+0x32/0xd0 [ 699.858636] simple_read_from_buffer+0xe0/0x180 [ 699.858656] proc_fail_nth_read+0x189/0x270 [ 699.858678] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 699.858698] ? security_file_permission+0x22/0x90 [ 699.858717] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 699.858736] vfs_read+0x1eb/0xbe0 [ 699.858759] ? __pfx_vfs_read+0x10/0x10 [ 699.858778] ? lock_release+0xc8/0x290 [ 699.858796] ? __fget_files+0x20d/0x3b0 [ 699.858821] ksys_read+0x121/0x240 [ 699.858831] ? __pfx_ksys_read+0x10/0x10 [ 699.858848] do_syscall_64+0xbf/0x360 [ 699.858865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.858878] RIP: 0033:0x7f98f474969c [ 699.858887] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 699.858898] RSP: 002b:00007f98f1d0c170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 699.858910] RAX: ffffffffffffffda RBX: 000000000000001c RCX: 00007f98f474969c [ 699.858918] RDX: 000000000000000f RSI: 00007f98f1d0c1e0 RDI: 0000000000000004 [ 699.858925] RBP: 00007f98f1d0c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 699.858932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 699.858939] R13: 00007ffcaa77881f R14: 00007f98f1d0c300 R15: 0000000000022000 [ 699.858956] 12:35:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:35:14 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xffffffff, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:35:14 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x88001, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x12) unlinkat(r0, &(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) clone3(&(0x7f0000005880)={0x61020100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0}, 0x58) clone3(0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) 12:35:14 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x4b47, &(0x7f00000000c0)=""/4096) 12:35:14 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) r0 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000deb000/0x4000)=nil, 0x4000, 0x4, r0) mlock(&(0x7f0000dee000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000dee000/0x4000)=nil, 0x4000, 0x10) munmap(&(0x7f0000ded000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) mlock(&(0x7f0000df0000/0x2000)=nil, 0x2000) 12:35:14 executing program 5: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080200000001080211000011000000000000000000006400010002020202020201f2"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, 0x0, 0xe6) 12:35:14 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) 12:35:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xfffffff0, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:35:14 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) munmap(&(0x7f0000ded000/0x3000)=nil, 0x3000) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) munmap(&(0x7f0000df0000/0x1000)=nil, 0x1000) madvise(&(0x7f0000def000/0x1000)=nil, 0x1000, 0x17) [ 710.666275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:35:14 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0xf, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:35:14 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x4b49, &(0x7f00000000c0)=""/4096) 12:35:14 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) 12:35:14 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) 12:35:14 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) setxattr$incfs_size(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0), 0x8, 0x3) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x6611, 0x0) 12:35:14 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x541b, &(0x7f00000000c0)=""/4096) 12:35:14 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000dee000/0x1000)=nil, 0x1000, 0x1) munmap(&(0x7f0000dec000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ded000/0x1000)=nil, 0x1000, 0x12) mlock2(&(0x7f0000ded000/0x1000)=nil, 0x1000, 0x1) 12:35:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:35:14 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x14, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:35:14 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x5421, &(0x7f00000000c0)=""/4096) 12:35:14 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = eventfd2(0x0, 0x0) r2 = epoll_create(0xffffffff) fadvise64(r2, 0x5, 0x0, 0x6) sendfile(r1, r0, &(0x7f0000000480)=0x800000000, 0x5) 12:35:14 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) madvise(&(0x7f0000df0000/0x1000)=nil, 0x1000, 0x11) 12:35:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 713.613860] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 713.621270] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 713.624072] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 713.629297] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 713.633047] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 715.645499] Bluetooth: hci7: command tx timeout [ 717.693638] Bluetooth: hci7: command tx timeout [ 719.741518] Bluetooth: hci7: command tx timeout [ 721.789801] Bluetooth: hci7: command tx timeout [ 732.489495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.490662] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.576456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.577900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.930989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 732.938624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:35:48 executing program 6: madvise(&(0x7f0000df5000/0x2000)=nil, 0x2000, 0xf) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000df3000/0x4000)=nil, 0x4000) 12:35:48 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) 12:35:48 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x5450, &(0x7f00000000c0)=""/4096) 12:35:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:35:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:35:48 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x180, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:35:48 executing program 5: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080200000001080211000011000000000000000000006400010002020202020201f2"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, 0x0, 0xe6) 12:35:48 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) [ 745.050076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 745.059021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:35:48 executing program 6: fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) madvise(&(0x7f0000dee000/0x4000)=nil, 0x4000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) 12:35:48 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) 12:35:48 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x33fe0, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:35:48 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x5451, &(0x7f00000000c0)=""/4096) 12:35:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x4, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:35:49 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 12:36:00 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x49, &(0x7f0000002680)={0x4, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@mcast2}, &(0x7f0000000040)=0x14) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='team_slave_1\x00') 12:36:00 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) 12:36:00 executing program 6: madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 12:36:00 executing program 5: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080200000001080211000011000000000000000000006400010002020202020201f2"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, 0x0, 0xe6) 12:36:00 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0xfffffdef, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:36:00 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x5452, &(0x7f00000000c0)=""/4096) 12:36:00 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r0, 0x7, r2, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = getpid() pidfd_open(r4, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x40, 0xcf, 0x8a, 0xa1, 0x0, 0x7, 0x2000, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3, 0x8000}, 0x2, 0x2, 0x2, 0x1, 0x20, 0x8001, 0x2, 0x0, 0x40, 0x0, 0x8}, r4, 0x5, 0xffffffffffffffff, 0x0) mkdirat(r3, &(0x7f0000001740)='./file0\x00', 0x0) 12:36:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x5, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 756.556674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:36:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x6, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:36:00 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x5460, &(0x7f00000000c0)=""/4096) 12:36:00 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x4, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 756.694895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 759.185628] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 759.189450] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 759.191410] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 759.196068] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 759.198934] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 761.277435] Bluetooth: hci7: command tx timeout [ 763.325443] Bluetooth: hci7: command tx timeout [ 765.373476] Bluetooth: hci7: command tx timeout [ 767.422945] Bluetooth: hci7: command tx timeout [ 777.581783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 777.582978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 777.651118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 777.652387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 778.033843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 778.040176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:36:32 executing program 5: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080200000001080211000011000000000000000000006400010002020202020201f2"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[], 0xe6) 12:36:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x7, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:36:32 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0xf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:36:32 executing program 2: set_mempolicy(0x0, &(0x7f0000000040), 0x5db) r0 = gettid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) r2 = getpid() pidfd_open(r2, 0x0) r3 = getpid() pidfd_open(r3, 0x0) r4 = fcntl$getown(0xffffffffffffffff, 0x9) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000280)={0x0, 0x0}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000002c0)=0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x88001, 0x0) write$cgroup_pid(r7, &(0x7f0000000000), 0x12) clone3(&(0x7f0000000340)={0x20e010880, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0), {0x2}, &(0x7f0000000100)=""/11, 0xb, &(0x7f0000000140)=""/130, &(0x7f0000000300)=[r0, r1, r2, r3, r4, 0xffffffffffffffff, r5, 0x0, r6, 0xffffffffffffffff], 0xa, {r7}}, 0x58) clone3(&(0x7f0000005880)={0x61020100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0}, 0x58) 12:36:32 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x40044581, &(0x7f00000000c0)=""/4096) 12:36:32 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) munmap(&(0x7f0000dee000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) 12:36:32 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) 12:36:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x14, 0x1a, 0xffffffffffffffff, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1, 0x0, 0x0, 0x383cc64b67f854d8}, 0x0) [ 789.121836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 789.138992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:36:32 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x25, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:36:32 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x40044590, &(0x7f00000000c0)=""/4096) 12:36:32 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) readahead(r0, 0xfffffffffffffffe, 0xfffffffffffffffc) readahead(0xffffffffffffffff, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r2, &(0x7f0000000900)="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", 0x2e9) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x341602, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x185000, 0x81) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0) readahead(0xffffffffffffffff, 0x8, 0x4) fcntl$setstatus(r2, 0x4, 0x44000) sendfile(r2, r3, 0x0, 0xfdef) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) creat(&(0x7f0000000040)='./file0\x00', 0x110) 12:36:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x8, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:36:32 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) madvise(&(0x7f0000dee000/0x4000)=nil, 0x4000, 0xa) madvise(&(0x7f0000ded000/0x2000)=nil, 0x2000, 0x65) mlock2(&(0x7f0000ded000/0x4000)=nil, 0x4000, 0x1) mlock2(&(0x7f0000df0000/0x1000)=nil, 0x1000, 0x1) 12:36:33 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x40044591, &(0x7f00000000c0)=""/4096) 12:36:33 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) readahead(r0, 0xfffffffffffffffe, 0xfffffffffffffffc) readahead(0xffffffffffffffff, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r2, &(0x7f0000000900)="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", 0x2e9) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x341602, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x185000, 0x81) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0) readahead(0xffffffffffffffff, 0x8, 0x4) fcntl$setstatus(r2, 0x4, 0x44000) sendfile(r2, r3, 0x0, 0xfdef) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) creat(&(0x7f0000000040)='./file0\x00', 0x110) 12:36:33 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x74, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:36:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x9, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:36:43 executing program 6: timer_delete(0x0) madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) timer_delete(0x0) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000dee000/0x4000)=nil, 0x4000, 0x1) mlock2(&(0x7f0000dec000/0x3000)=nil, 0x3000, 0x1) 12:36:43 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) readahead(r0, 0xfffffffffffffffe, 0xfffffffffffffffc) readahead(0xffffffffffffffff, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r2, &(0x7f0000000900)="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", 0x2e9) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x341602, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x185000, 0x81) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0) readahead(0xffffffffffffffff, 0x8, 0x4) fcntl$setstatus(r2, 0x4, 0x44000) sendfile(r2, r3, 0x0, 0xfdef) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) creat(&(0x7f0000000040)='./file0\x00', 0x110) 12:36:43 executing program 5: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080200000001080211000011000000000000000000006400010002020202020201f2"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[], 0xe6) 12:36:43 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfe, 0x0, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x0, 0x8001}, 0x0, 0x2, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffffffff000) 12:36:43 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) 12:36:43 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 800.136571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:36:43 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x400445a0, &(0x7f00000000c0)=""/4096) [ 800.140932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:36:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:36:43 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x40049409, &(0x7f00000000c0)=""/4096) 12:36:43 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x2, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:36:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf0, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:36:43 executing program 6: madvise(&(0x7f0000def000/0x2000)=nil, 0x2000, 0x1) mlock(&(0x7f0000dee000/0x3000)=nil, 0x3000) mlock(&(0x7f0000dee000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ded000/0x3000)=nil, 0x3000) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) madvise(&(0x7f0000dee000/0x2000)=nil, 0x2000, 0x10) 12:36:44 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:36:44 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x40084503, &(0x7f00000000c0)=""/4096) 12:36:44 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="8b6b000b", @ANYRES16=r2, @ANYBLOB="01000000000000000000060000002c00070073797374656d5f753a6f626a6563745f723a6c6f61645f706f6c6963795f657865635f743a7330000500010000000000"], 0x48}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r2, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2d}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x60004}, 0x80) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) mknodat$loop(r3, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) statx(r3, &(0x7f0000001100)='./file0\x00', 0x0, 0x0, &(0x7f0000001140)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x6, &(0x7f00000001c0)=0x1) 12:36:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x300, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:36:44 executing program 5: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080200000001080211000011000000000000000000006400010002020202020201f2"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[], 0xe6) 12:36:44 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0xf) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) [ 800.570927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 800.578971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:36:54 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) 12:36:54 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) truncate(&(0x7f00000000c0)='./file0\x00', 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000100)={0x6}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:36:54 executing program 5: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080200000001080211000011000000000000000000006400010002020202020201f2"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB], 0xe6) 12:36:54 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x4, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:36:54 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x40084504, &(0x7f00000000c0)=""/4096) 12:36:54 executing program 6: madvise(&(0x7f0000dec000/0x3000)=nil, 0x3000, 0x9c4422e3d554872f) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) 12:36:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x500, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:36:54 executing program 2: r0 = getpid() pidfd_open(r0, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000002680)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000000)={0x5, 0x2, 0x0, 'queue0\x00', 0x7ff}) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000008600)) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r1}}, 0x58) clone3(&(0x7f00000003c0)={0x100008000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x20}, &(0x7f0000000480)=""/4096, 0x1000, &(0x7f0000000280)=""/240, &(0x7f0000000380)=[r3], 0x1, {r1}}, 0x58) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) close(r4) [ 810.576591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:36:54 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) [ 810.593322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:36:54 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x40086602, &(0x7f00000000c0)=""/4096) [ 810.678008] cgroup: fork rejected by pids controller in /syz0 12:36:54 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x40087602, &(0x7f00000000c0)=""/4096) 12:36:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x600, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:36:54 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x5, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:37:04 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) truncate(&(0x7f00000000c0)='./file0\x00', 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000100)={0x6}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:37:04 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x40104593, &(0x7f00000000c0)=""/4096) 12:37:04 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x6, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:37:04 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) 12:37:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x700, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:37:04 executing program 5: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080200000001080211000011000000000000000000006400010002020202020201f2"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB], 0xe6) 12:37:04 executing program 2: r0 = getpid() pidfd_open(r0, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000002680)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000000)={0x5, 0x2, 0x0, 'queue0\x00', 0x7ff}) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000008600)) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r1}}, 0x58) clone3(&(0x7f00000003c0)={0x100008000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x20}, &(0x7f0000000480)=""/4096, 0x1000, &(0x7f0000000280)=""/240, &(0x7f0000000380)=[r3], 0x1, {r1}}, 0x58) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) close(r4) 12:37:04 executing program 6: ptrace$getsig(0x4202, 0xffffffffffffffff, 0x2, &(0x7f0000000000)) madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000006, r0) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x1000)=nil, 0x1000) [ 820.808749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 820.828226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:37:04 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x401c5820, &(0x7f00000000c0)=""/4096) 12:37:04 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x7, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:37:04 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000df0000/0x1000)=nil, 0x1000, 0xd6376d35cb241946) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) 12:37:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x900, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:37:04 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x4020940d, &(0x7f00000000c0)=""/4096) 12:37:04 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="209f28bd7000fedbdf25010000000000000001b83c3b6bbf2b8bd3a48cc980db6ee3e14100000018001700000008"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x24040014) madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) 12:37:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf00, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:37:04 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) 12:37:14 executing program 2: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) truncate(&(0x7f00000000c0)='./file0\x00', 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000100)={0x6}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:37:14 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0xb) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x3000)=nil, 0x3000) mremap(&(0x7f0000ded000/0x1000)=nil, 0x1000, 0x4000, 0x2, &(0x7f0000ff9000/0x4000)=nil) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) mlock(&(0x7f0000dee000/0x2000)=nil, 0x2000) 12:37:14 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x40284504, &(0x7f00000000c0)=""/4096) 12:37:14 executing program 5: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080200000001080211000011000000000000000000006400010002020202020201f2"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB], 0xe6) 12:37:14 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) 12:37:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x5, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:37:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf000, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:37:14 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x8, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 830.484850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 830.506751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:37:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x30000, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:37:14 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x23, 0x0, 0x6) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)={@loopback, @remote, 0x1, 0x2, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, 0x18) 12:37:14 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80044501, &(0x7f00000000c0)=""/4096) 12:37:14 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x9, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:37:14 executing program 6: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x88001, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x12) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/msr', 0x105000, 0x8) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x88001, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0x12) r3 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000002c0)='./file0\x00', 0x4, 0x3, &(0x7f0000000540)=[{&(0x7f0000000300)="ee2b30a626cf0e00e6f0c5ce54ae5b0b0143395eb76abbc1028b904463d273c73648692d06f1dc689fd669c1a63653194e07e685f99dbda78e6dd37f23c812512ca97fe4eb18253591ffbf7ae7517edcf8a83fdbe20092edcefbadfb80225f65ea75af84df37695b95edfb1ca3286cc172236f8fb2e1fd1baf9101bb68c3f8c21c3668d053efe57d51749d7a7d5b09", 0x8f, 0x2}, {&(0x7f00000003c0)="7f4787e62f8fffedd248d67a108d929ecf35585da7908698f3f92a30b893ee8fee65383c48aa100ac5d698a811ede35d1c38bcffc4a492a594d98281df8c1c0258025d094d358b202b1f1a6e52409d72a34f41f7f38916a4cc5c9d3668cc72c6509600c5232b40d5cac795499a95fd13f04a03f89d044abfdeb75564181f710ee81cb95157a6c781f604059172ed7d331927b9c0fd04d6d5d736d55a0a20e935c7c6f160f579564e43b907a4ac0010bfeb0a01f302644ac15e26d3c3e8e825995cb44207bfdc68b52c2e", 0xca, 0x60}, {&(0x7f00000004c0)="4d922004b4a090e173b3920089236533215f98359aff62aef0c135443b96762760741b4475223933cb5041e401ca1e34796048b86101bad5d09eb34893a9bc0b70272c5ebd6d5690f74a6eceed587b27d982a79dec714cdb4684f11907ca233263896d0f50672306afe214b49391752f910664", 0x73, 0x20}], 0x800000, &(0x7f00000005c0)={[{@size={'size', 0x3d, [0x53, 0x6d, 0x30, 0x6b, 0x74, 0x36]}}], [{@euid_gt={'euid>', 0xee01}}, {@uid_lt}, {@uid_gt={'uid>', 0xee01}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@pcr={'pcr', 0x3d, 0xa}}]}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x7fffffff}}, './file0\x00'}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x88001, 0x0) write$cgroup_pid(r5, &(0x7f0000000000), 0x12) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa0, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xa7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffffa}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8, 0x1, r4}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r5}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0xc) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4000, 0xa, &(0x7f0000df0000/0x4000)=nil) munmap(&(0x7f0000dee000/0x7000)=nil, 0x7000) mlock2(&(0x7f0000ded000/0x4000)=nil, 0x4000, 0x0) r6 = getpid() r7 = pidfd_open(r6, 0x0) process_madvise(r7, 0x0, 0x0, 0x4, 0x0) fstatfs(r7, &(0x7f0000000200)=""/78) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) 12:37:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x80000, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:37:14 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80044584, &(0x7f00000000c0)=""/4096) 12:37:14 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00']) fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8) 12:37:25 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) 12:37:25 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0xf, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:37:25 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084502, &(0x7f00000000c0)=""/4096) 12:37:25 executing program 5: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080200000001080211000011000000000000000000006400010002020202020201f2"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d4"], 0xe6) 12:37:25 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) munmap(&(0x7f0000ded000/0x4000)=nil, 0x4000) pkey_mprotect(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x6, 0xffffffffffffffff) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) 12:37:25 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) 12:37:25 executing program 2: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) truncate(&(0x7f00000000c0)='./file0\x00', 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000100)={0x6}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:37:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf0ffff, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 841.797002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 841.805276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:37:25 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0xcc, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:37:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x1000000, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:37:25 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084503, &(0x7f00000000c0)=""/4096) 12:37:25 executing program 6: r0 = getpid() ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0xfffffffffffffffd) r1 = pidfd_open(r0, 0x0) process_madvise(r1, 0x0, 0x0, 0x4, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x1) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000040), 0x8, 0x40) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, &(0x7f0000000080)={{r3}, "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"}) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) 12:37:25 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80086601, &(0x7f00000000c0)=""/4096) 12:37:25 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0xf0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:37:25 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r3}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x3}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xc, 0x0, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r6}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r6, 0x1) 12:37:25 executing program 6: madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x17) mlock2(&(0x7f0000dee000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc) munmap(&(0x7f0000c00000/0x400000)=nil, 0x400000) mlock(&(0x7f0000ded000/0x4000)=nil, 0x4000) 12:37:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x2000000, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:37:25 executing program 5: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080200000001080211000011000000000000000000006400010002020202020201f2"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8"], 0xe6) 12:37:25 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80087601, &(0x7f00000000c0)=""/4096) [ 842.346936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:37:26 executing program 2: syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080200000001080211000011000000000000000000006400010002020202020201f2"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="a8be8100ffffffffffff505050505050ffffffffffff92a5700288840100080211000000ffffffffffff5050505050501908d2031200cac031888038fd9fb7e9dcc741ca18c34c51bbce775523a6b7108f5b47f82a6aae54b08917956e37fcb4dd2d9c33e8057088986220ffb50b9713c75c83d4"], 0xe6) [ 842.366773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:37:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x3000000, &(0x7f0000000200)={&(0x7f0000000e40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 842.538467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.578741] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 845.584135] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 845.586118] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 845.592801] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 845.596976] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 847.677453] Bluetooth: hci0: command tx timeout [ 849.725534] Bluetooth: hci0: command tx timeout [ 851.773450] Bluetooth: hci0: command tx timeout [ 853.821710] Bluetooth: hci0: command tx timeout [ 864.461467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 864.462418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 864.499914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 864.500867] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 864.864073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 864.869050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 884.093569] Bluetooth: hci7: command 0x0406 tx timeout [ 970.109499] Bluetooth: hci0: command 0x0406 tx timeout VM DIAGNOSIS: 12:42:34 Registers: info registers vcpu 0 RAX=000000000062bae3 RBX=0000000000000000 RCX=ffffffff84ba3167 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814c7224 RBP=dffffc0000000000 RSP=ffffffff85a07e00 R8 =0000000000000001 R9 =ffffed100d9c630a R10=ffff88806ce31853 R11=0000000000000001 R12=ffffffff8643e350 R13=1ffffffff0b40fc7 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84ba1e9e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e55df000 00000000 00000000 LDT=0000 fffffe3300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005638692c0018 CR3=000000001e1d2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004165992600000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000080db17 RBX=0000000000000001 RCX=ffffffff84ba3167 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814c7224 RBP=dffffc0000000000 RSP=ffff888009717e58 R8 =0000000000000001 R9 =ffffed100d9e630a R10=ffff88806cf31853 R11=0000000000000001 R12=ffffffff8643e350 R13=1ffff110012e2fd2 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84ba1e9e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e56df000 00000000 00000000 LDT=0000 fffffe5000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005638692e8430 CR3=000000001e1d2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000006000000030000000200000000 XMM02=696e696d20636578650d0a0100010101 XMM03=6873616d7320636578650a00657a696d XMM04=786511006c61746f7420636578650a00 XMM05=00737472617473657220726f74756365 XMM06=636578650e007a7a7566206365786509 XMM07=636578650b006574616469646e616320 XMM08=20636578650a00657a696d696e696d20 XMM09=61746f7420636578650a006873616d73 XMM10=7473657220726f74756365786511006c XMM11=007a7a75662063657865090073747261 XMM12=006574616469646e616320636578650e XMM13=7865080065676169727420636578650b XMM14=6e696820636578650a006e6567206365 XMM15=0000736465657320636578650a007374