x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:54:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000066000000", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 11:54:58 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000180)={r0, 0x1, 0x6, @multicast}, 0x10) [ 516.558006] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 516.569451] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 516.574944] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 516.591416] FAULT_INJECTION: forcing a failure. [ 516.591416] name failslab, interval 1, probability 0, space 0, times 0 [ 516.592347] CPU: 1 UID: 0 PID: 5782 Comm: syz-executor.4 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 516.592388] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 516.592406] Call Trace: [ 516.592415] [ 516.592427] dump_stack_lvl+0xfa/0x120 [ 516.592483] should_fail_ex+0x4d7/0x5e0 [ 516.592524] should_failslab+0xc2/0x120 [ 516.592540] kmem_cache_alloc_node_noprof+0x71/0x3e0 [ 516.592559] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 516.592575] ? __alloc_skb+0x2ab/0x370 [ 516.592593] __alloc_skb+0x2ab/0x370 [ 516.592606] ? __pfx___alloc_skb+0x10/0x10 [ 516.592618] ? perf_trace_lock+0xb5/0x5d0 [ 516.592637] ? __pfx_perf_trace_lock+0x10/0x10 [ 516.592654] nl80211_ch_switch_notify.constprop.0+0xc8/0x500 [ 516.592676] ? __pfx_nl80211_ch_switch_notify.constprop.0+0x10/0x10 [ 516.592693] ? ieee80211_tx_skb_tid+0x19c/0x4c0 [ 516.592708] ? lock_release+0xc8/0x290 [ 516.592729] cfg80211_ch_switch_started_notify+0x1b5/0x3e0 [ 516.592747] __ieee80211_channel_switch+0xf8a/0x2610 [ 516.592768] ? __pfx___ieee80211_channel_switch+0x10/0x10 [ 516.592799] ? lock_is_held_type+0x9e/0x120 [ 516.592823] nl80211_channel_switch+0xbe7/0xfb0 [ 516.592845] ? __pfx_nl80211_channel_switch+0x10/0x10 [ 516.592901] ? nl80211_pre_doit+0x111/0x980 [ 516.592920] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 516.592938] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 516.592962] ? security_capable+0x2f/0x90 [ 516.592978] ? ns_capable+0xe2/0x120 [ 516.592997] genl_rcv_msg+0x532/0x7e0 [ 516.593015] ? __pfx_genl_rcv_msg+0x10/0x10 [ 516.593035] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 516.593050] ? __pfx_nl80211_channel_switch+0x10/0x10 [ 516.593064] ? __pfx_nl80211_post_doit+0x10/0x10 [ 516.593085] netlink_rcv_skb+0x147/0x430 [ 516.593099] ? __pfx_genl_rcv_msg+0x10/0x10 [ 516.593115] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 516.593139] ? netlink_deliver_tap+0x1ae/0xce0 [ 516.593150] ? selinux_netlink_send+0x507/0x880 [ 516.593163] ? is_vmalloc_addr+0x86/0xa0 [ 516.593184] genl_rcv+0x28/0x40 [ 516.593197] netlink_unicast+0x5a7/0x870 [ 516.593214] ? __pfx_netlink_unicast+0x10/0x10 [ 516.593237] netlink_sendmsg+0x8ac/0xd80 [ 516.593255] ? __pfx_netlink_sendmsg+0x10/0x10 [ 516.593278] ____sys_sendmsg+0xa67/0xc20 [ 516.593296] ? copy_msghdr_from_user+0xfb/0x150 [ 516.593310] ? __pfx_____sys_sendmsg+0x10/0x10 [ 516.593333] ? lock_acquire+0x15e/0x2f0 [ 516.593349] ___sys_sendmsg+0x10f/0x1b0 [ 516.593363] ? __pfx____sys_sendmsg+0x10/0x10 [ 516.593374] ? perf_trace_lock+0xb5/0x5d0 [ 516.593391] ? __pfx_perf_trace_lock+0x10/0x10 [ 516.593403] ? proc_fail_nth_write+0x97/0x220 [ 516.593420] ? lock_acquire+0x15e/0x2f0 [ 516.593432] ? __fget_files+0x34/0x3b0 [ 516.593451] ? find_held_lock+0x2b/0x80 [ 516.593467] ? __fget_files+0x203/0x3b0 [ 516.593485] ? lock_release+0xc8/0x290 [ 516.593501] ? __fget_files+0x20d/0x3b0 [ 516.593527] __sys_sendmsg+0x150/0x200 [ 516.593540] ? __pfx___sys_sendmsg+0x10/0x10 [ 516.593560] ? __pfx_ksys_write+0x10/0x10 [ 516.593580] do_syscall_64+0xbf/0x360 [ 516.593601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.593613] RIP: 0033:0x7f7f0ab43b19 [ 516.593623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 516.593634] RSP: 002b:00007f7f080b9188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 516.593645] RAX: ffffffffffffffda RBX: 00007f7f0ac56f60 RCX: 00007f7f0ab43b19 [ 516.593653] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000003 [ 516.593660] RBP: 00007f7f080b91d0 R08: 0000000000000000 R09: 0000000000000000 [ 516.593667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 516.593674] R13: 00007ffc62a1a05f R14: 00007f7f080b9300 R15: 0000000000022000 [ 516.593693] [ 516.612347] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 516.635425] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 11:54:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r4, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x3, 0x53}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4c800) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 516.644080] FAULT_INJECTION: forcing a failure. [ 516.644080] name failslab, interval 1, probability 0, space 0, times 0 [ 516.645119] CPU: 1 UID: 0 PID: 5786 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 516.645158] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 516.645179] Call Trace: [ 516.645184] [ 516.645188] dump_stack_lvl+0xfa/0x120 [ 516.645209] should_fail_ex+0x4d7/0x5e0 [ 516.645230] ? copy_process+0x2316/0x73e0 [ 516.645241] should_failslab+0xc2/0x120 [ 516.645254] kmem_cache_alloc_noprof+0x5f/0x3d0 [ 516.645273] ? lock_release+0xc8/0x290 [ 516.645290] copy_process+0x2316/0x73e0 [ 516.645301] ? __pfx_perf_trace_lock+0x10/0x10 [ 516.645324] ? __pfx_copy_process+0x10/0x10 [ 516.645336] ? __might_fault+0xe0/0x190 [ 516.645355] ? _copy_from_user+0x5b/0xd0 [ 516.645372] kernel_clone+0xea/0x7f0 [ 516.645383] ? get_pid_task+0xfd/0x250 [ 516.645403] ? __pfx_kernel_clone+0x10/0x10 [ 516.645413] ? perf_trace_lock+0xb5/0x5d0 [ 516.645433] ? find_held_lock+0x2b/0x80 [ 516.645450] ? ksys_write+0x121/0x240 [ 516.645461] ? lock_is_held_type+0x9e/0x120 [ 516.645481] __do_sys_clone3+0x1f5/0x280 [ 516.645493] ? __pfx___do_sys_clone3+0x10/0x10 [ 516.645516] ? __fget_files+0x20d/0x3b0 [ 516.645540] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 516.645560] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 516.645580] ? ksys_write+0x1a3/0x240 [ 516.645591] ? __pfx_ksys_write+0x10/0x10 [ 516.645614] do_syscall_64+0xbf/0x360 [ 516.645633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.645645] RIP: 0033:0x7ffb744edb19 [ 516.645654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 516.645665] RSP: 002b:00007ffb71a63188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 516.645676] RAX: ffffffffffffffda RBX: 00007ffb74600f60 RCX: 00007ffb744edb19 [ 516.645684] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 516.645691] RBP: 00007ffb71a631d0 R08: 0000000000000000 R09: 0000000000000000 [ 516.645698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.645705] R13: 00007ffeb487a35f R14: 00007ffb71a63300 R15: 0000000000022000 [ 516.645724] 11:54:58 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000180)={0x0, 0x1, 0x6, @multicast}, 0x10) [ 516.697453] mac80211_hwsim hwsim11 wlan1: left promiscuous mode 11:54:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) (fail_nth: 11) [ 516.742507] FAULT_INJECTION: forcing a failure. [ 516.742507] name failslab, interval 1, probability 0, space 0, times 0 [ 516.743578] CPU: 1 UID: 0 PID: 5793 Comm: syz-executor.5 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 516.743594] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 516.743601] Call Trace: [ 516.743606] [ 516.743614] dump_stack_lvl+0xfa/0x120 [ 516.743635] should_fail_ex+0x4d7/0x5e0 [ 516.743657] ? ieee80211_alloc_chanctx+0xa2/0x570 [ 516.743675] should_failslab+0xc2/0x120 [ 516.743689] __kmalloc_noprof+0xb4/0x4b0 [ 516.743708] ? lock_is_held_type+0x9e/0x120 [ 516.743729] ieee80211_alloc_chanctx+0xa2/0x570 [ 516.743748] ieee80211_link_reserve_chanctx+0xbef/0xfd0 [ 516.743772] ? __pfx_ieee80211_link_reserve_chanctx+0x10/0x10 [ 516.743791] ? __pfx_perf_trace_lock+0x10/0x10 [ 516.743815] ? lock_is_held_type+0x9e/0x120 [ 516.743835] __ieee80211_channel_switch+0xa52/0x2610 [ 516.743855] ? __pfx___ieee80211_channel_switch+0x10/0x10 [ 516.743870] ? cfg80211_chandef_dfs_required+0xe7/0x1100 [ 516.743907] ? lock_is_held_type+0x9e/0x120 [ 516.743930] nl80211_channel_switch+0xbe7/0xfb0 [ 516.743951] ? __pfx_nl80211_channel_switch+0x10/0x10 [ 516.744018] ? nl80211_pre_doit+0x111/0x980 [ 516.744037] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 516.744056] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 516.744080] ? security_capable+0x2f/0x90 [ 516.744096] ? ns_capable+0xe2/0x120 [ 516.744114] genl_rcv_msg+0x532/0x7e0 [ 516.744132] ? __pfx_genl_rcv_msg+0x10/0x10 [ 516.744147] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 516.744162] ? __pfx_nl80211_channel_switch+0x10/0x10 [ 516.744177] ? __pfx_nl80211_post_doit+0x10/0x10 [ 516.744198] netlink_rcv_skb+0x147/0x430 [ 516.744212] ? __pfx_genl_rcv_msg+0x10/0x10 [ 516.744228] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 516.744252] ? netlink_deliver_tap+0x1ae/0xce0 [ 516.744264] ? selinux_netlink_send+0x507/0x880 [ 516.744276] ? is_vmalloc_addr+0x86/0xa0 [ 516.744297] genl_rcv+0x28/0x40 [ 516.744310] netlink_unicast+0x5a7/0x870 [ 516.744327] ? __pfx_netlink_unicast+0x10/0x10 [ 516.744350] netlink_sendmsg+0x8ac/0xd80 [ 516.744368] ? __pfx_netlink_sendmsg+0x10/0x10 [ 516.744391] ____sys_sendmsg+0xa67/0xc20 [ 516.744410] ? copy_msghdr_from_user+0xfb/0x150 [ 516.744424] ? __pfx_____sys_sendmsg+0x10/0x10 [ 516.744448] ? lock_acquire+0x15e/0x2f0 [ 516.744464] ___sys_sendmsg+0x10f/0x1b0 [ 516.744478] ? __pfx____sys_sendmsg+0x10/0x10 [ 516.744490] ? perf_trace_lock+0xb5/0x5d0 [ 516.744506] ? __pfx_perf_trace_lock+0x10/0x10 [ 516.744519] ? proc_fail_nth_write+0x97/0x220 [ 516.744535] ? lock_acquire+0x15e/0x2f0 [ 516.744547] ? __fget_files+0x34/0x3b0 [ 516.744566] ? find_held_lock+0x2b/0x80 [ 516.744582] ? __fget_files+0x203/0x3b0 [ 516.744600] ? lock_release+0xc8/0x290 [ 516.744616] ? __fget_files+0x20d/0x3b0 [ 516.744642] __sys_sendmsg+0x150/0x200 [ 516.744655] ? __pfx___sys_sendmsg+0x10/0x10 [ 516.744675] ? __pfx_ksys_write+0x10/0x10 [ 516.744694] do_syscall_64+0xbf/0x360 [ 516.744715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.744727] RIP: 0033:0x7f4e6e1d6b19 [ 516.744736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 516.744747] RSP: 002b:00007f4e6b74c188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 516.744759] RAX: ffffffffffffffda RBX: 00007f4e6e2e9f60 RCX: 00007f4e6e1d6b19 [ 516.744766] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000003 [ 516.744773] RBP: 00007f4e6b74c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 516.744780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 516.744787] R13: 00007ffcc6516def R14: 00007f4e6b74c300 R15: 0000000000022000 [ 516.744806] 11:54:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000066000000", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 11:54:58 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 10) tgkill(r0, r1, 0xb) [ 516.826130] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode 11:54:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) (fail_nth: 12) [ 516.860913] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 11:54:59 executing program 6: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)=ANY=[@ANYBLOB="010000090100000018000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./cgroup/pids.max\x00']) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) lsetxattr$trusted_overlay_upper(&(0x7f0000000140)='./cgroup/pids.max\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) [ 516.908492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 516.926207] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 11:55:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) (fail_nth: 22) 11:55:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000660000000800", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 11:55:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0xe, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f00000000c0)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:55:08 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000180)={0x0, 0x1, 0x6, @multicast}, 0x10) 11:55:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) (fail_nth: 13) 11:55:08 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}, {@size={'size', 0x3d, [0x25, 0x38]}}]}) 11:55:08 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 11) tgkill(r0, r1, 0xb) 11:55:08 executing program 7: syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) recvfrom(r2, &(0x7f0000000300)=""/49, 0x31, 0x10000, &(0x7f0000000340)=@caif=@dbg={0x25, 0x0, 0x5}, 0x80) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x34, 0x0, 0x1, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x404}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000010) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x28, 0x0, 0x1, 0x3, 0x0, 0x0, {}, [@CTA_SEQ_ADJ_REPLY={0xfffffe38, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}]}, 0x28}}, 0x800) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4081}, 0x4080) [ 526.755954] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 526.773016] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 526.780452] FAULT_INJECTION: forcing a failure. [ 526.780452] name failslab, interval 1, probability 0, space 0, times 0 [ 526.782078] CPU: 0 UID: 0 PID: 5829 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 526.782107] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 526.782120] Call Trace: [ 526.782127] [ 526.782136] dump_stack_lvl+0xfa/0x120 [ 526.782176] should_fail_ex+0x4d7/0x5e0 [ 526.782216] ? copy_process+0x66d4/0x73e0 [ 526.782236] should_failslab+0xc2/0x120 [ 526.782262] kmem_cache_alloc_noprof+0x5f/0x3d0 [ 526.782308] copy_process+0x66d4/0x73e0 [ 526.782328] ? __pfx_perf_trace_lock+0x10/0x10 [ 526.782373] ? __pfx_copy_process+0x10/0x10 [ 526.782394] ? __might_fault+0xe0/0x190 [ 526.782428] ? _copy_from_user+0x5b/0xd0 [ 526.782471] kernel_clone+0xea/0x7f0 [ 526.782490] ? get_pid_task+0xfd/0x250 [ 526.782525] ? __pfx_kernel_clone+0x10/0x10 [ 526.782544] ? perf_trace_lock+0xb5/0x5d0 [ 526.782578] ? find_held_lock+0x2b/0x80 [ 526.782616] ? ksys_write+0x121/0x240 [ 526.782638] ? lock_is_held_type+0x9e/0x120 [ 526.782674] __do_sys_clone3+0x1f5/0x280 [ 526.782695] ? __pfx___do_sys_clone3+0x10/0x10 [ 526.782738] ? __fget_files+0x20d/0x3b0 [ 526.782781] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 526.782817] ? fput+0x6a/0x100 [ 526.782842] ? ksys_write+0x1a3/0x240 [ 526.782863] ? __pfx_ksys_write+0x10/0x10 [ 526.782897] do_syscall_64+0xbf/0x360 [ 526.782933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.782956] RIP: 0033:0x7ffb744edb19 11:55:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) (fail_nth: 23) [ 526.782972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 526.782992] RSP: 002b:00007ffb71a63188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 526.783013] RAX: ffffffffffffffda RBX: 00007ffb74600f60 RCX: 00007ffb744edb19 [ 526.783027] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 526.783040] RBP: 00007ffb71a631d0 R08: 0000000000000000 R09: 0000000000000000 [ 526.783053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 526.783065] R13: 00007ffeb487a35f R14: 00007ffb71a63300 R15: 0000000000022000 [ 526.783105] [ 526.818927] tmpfs: Bad value for 'size' [ 526.820439] FAULT_INJECTION: forcing a failure. [ 526.820439] name failslab, interval 1, probability 0, space 0, times 0 [ 526.822004] CPU: 0 UID: 0 PID: 5832 Comm: syz-executor.5 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 526.822033] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 526.822044] Call Trace: [ 526.822051] [ 526.822060] dump_stack_lvl+0xfa/0x120 [ 526.822094] should_fail_ex+0x4d7/0x5e0 [ 526.822133] should_failslab+0xc2/0x120 [ 526.822157] kmem_cache_alloc_node_noprof+0x71/0x3e0 [ 526.822192] ? __alloc_skb+0x2ab/0x370 [ 526.822223] __alloc_skb+0x2ab/0x370 [ 526.822246] ? __pfx___alloc_skb+0x10/0x10 [ 526.822266] ? ieee80211_check_combinations+0x29e/0x560 [ 526.822300] ? __pfx_ieee80211_check_combinations+0x10/0x10 [ 526.822327] ? __pfx_perf_trace_lock+0x10/0x10 [ 526.822359] __netdev_alloc_skb+0x1eb/0x7c0 [ 526.822390] ieee80211_send_action_csa+0xec/0x860 [ 526.822415] ? lock_is_held_type+0x9e/0x120 11:55:09 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x0, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) [ 526.822461] __ieee80211_channel_switch+0x1978/0x2610 [ 526.822498] ? __pfx___ieee80211_channel_switch+0x10/0x10 [ 526.822559] ? lock_is_held_type+0x9e/0x120 [ 526.822600] nl80211_channel_switch+0xbe7/0xfb0 [ 526.822645] ? __pfx_nl80211_channel_switch+0x10/0x10 [ 526.822757] ? nl80211_pre_doit+0x111/0x980 [ 526.822793] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 526.822825] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 526.822872] ? security_capable+0x2f/0x90 [ 526.822900] ? ns_capable+0xe2/0x120 [ 526.822934] genl_rcv_msg+0x532/0x7e0 [ 526.822967] ? __pfx_genl_rcv_msg+0x10/0x10 [ 526.822996] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 526.823022] ? __pfx_nl80211_channel_switch+0x10/0x10 [ 526.823050] ? __pfx_nl80211_post_doit+0x10/0x10 [ 526.823088] netlink_rcv_skb+0x147/0x430 [ 526.823114] ? __pfx_genl_rcv_msg+0x10/0x10 [ 526.823144] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 526.823189] ? netlink_deliver_tap+0x1ae/0xce0 [ 526.823209] ? selinux_netlink_send+0x507/0x880 [ 526.823231] ? is_vmalloc_addr+0x86/0xa0 [ 526.823270] genl_rcv+0x28/0x40 [ 526.823293] netlink_unicast+0x5a7/0x870 [ 526.823325] ? __pfx_netlink_unicast+0x10/0x10 [ 526.823368] netlink_sendmsg+0x8ac/0xd80 [ 526.823401] ? __pfx_netlink_sendmsg+0x10/0x10 [ 526.823444] ____sys_sendmsg+0xa67/0xc20 [ 526.823477] ? copy_msghdr_from_user+0xfb/0x150 [ 526.823501] ? __pfx_____sys_sendmsg+0x10/0x10 [ 526.823545] ? lock_acquire+0x15e/0x2f0 [ 526.823575] ___sys_sendmsg+0x10f/0x1b0 [ 526.823600] ? __pfx____sys_sendmsg+0x10/0x10 [ 526.823622] ? perf_trace_lock+0xb5/0x5d0 [ 526.823653] ? __pfx_perf_trace_lock+0x10/0x10 [ 526.823676] ? proc_fail_nth_write+0x97/0x220 [ 526.823705] ? lock_acquire+0x15e/0x2f0 [ 526.823727] ? __fget_files+0x34/0x3b0 [ 526.823760] ? find_held_lock+0x2b/0x80 [ 526.823790] ? __fget_files+0x203/0x3b0 [ 526.823823] ? lock_release+0xc8/0x290 [ 526.823853] ? __fget_files+0x20d/0x3b0 [ 526.823901] __sys_sendmsg+0x150/0x200 [ 526.823925] ? __pfx___sys_sendmsg+0x10/0x10 [ 526.823963] ? __pfx_ksys_write+0x10/0x10 [ 526.823998] do_syscall_64+0xbf/0x360 [ 526.824034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.824055] RIP: 0033:0x7f4e6e1d6b19 [ 526.824072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 526.824091] RSP: 002b:00007f4e6b74c188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 526.824111] RAX: ffffffffffffffda RBX: 00007f4e6e2e9f60 RCX: 00007f4e6e1d6b19 [ 526.824125] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000003 [ 526.824138] RBP: 00007f4e6b74c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 526.824151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 526.824163] R13: 00007ffcc6516def R14: 00007f4e6b74c300 R15: 0000000000022000 [ 526.824200] [ 526.879514] tmpfs: Bad value for 'size' [ 526.902899] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.7'. [ 527.692437] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.7'. 11:55:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) (fail_nth: 24) 11:55:20 executing program 7: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x42c0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000480), 0x20000) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000040)={0x2, 0x42d89c6a}) clone3(&(0x7f0000005880)={0x71060100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = fork() ptrace(0x10, r2) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x8, 0x5, 0x9, 0x0, 0x1f, 0x14000, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x10001, 0x1, @perf_bp={&(0x7f0000000000), 0x1}, 0xb400, 0x0, 0x8, 0x0, 0xa4d, 0x3, 0x1, 0x0, 0x1}, r2, 0x8, 0xffffffffffffffff, 0x1) r3 = signalfd(r0, &(0x7f00000003c0)={[0x78]}, 0x8) clone3(&(0x7f0000000400)={0x280, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x38}, &(0x7f00000001c0)=""/159, 0x9f, &(0x7f0000000280)=""/195, &(0x7f0000000380)=[r2], 0x1, {r3}}, 0x58) 11:55:20 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 12) tgkill(r0, r1, 0xb) 11:55:20 executing program 6: shmat(0xffffffffffffffff, &(0x7f0000ffa000/0x3000)=nil, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x34000, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r4, @ANYBLOB="080026006c090080030000004dfc"], 0x2c}}, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x80800) write$binfmt_elf64(r5, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x76, 0x5, 0x81, 0x4, 0x1, 0x3, 0x3, 0x1, 0x31c, 0x40, 0x4d, 0x400, 0x6, 0x38, 0x1, 0x3f, 0x4e18, 0x9}, [{0x6, 0x3, 0x9, 0x5, 0xa000000000, 0x5, 0x4, 0x1}], "8d30b8b3d4ebbb355c568c3355e763fa895fcfeed2f5ce04998ee5ea79211996df4fed19cb1299b67fa85b8603ec1054f869620f5db54a01ab5959a4cca5287e4bf0de5ccb75ae82a1430dfdd695a4ebecee6a6dbb7382bf0bfdc6ec9c25205b64cc6ff068648e3a8b1575e34271281f89d2aa8d729901168da1f16ebbf664bf0656263f64687715a8a9ca6ee7f8775601deae40e0a44580de7b94e73d4d50", ['\x00']}, 0x217) creat(&(0x7f00000001c0)='./file0\x00', 0x100) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendfile(r0, 0xffffffffffffffff, &(0x7f00000000c0)=0xe2, 0x2) r7 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x408200, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r7, &(0x7f0000000080)={0x14}) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) munmap(&(0x7f0000ff8000/0x3000)=nil, 0x3000) 11:55:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) (fail_nth: 14) 11:55:20 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x0, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 11:55:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000660000000800", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 11:55:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000180)={0x0, 0x1, 0x6, @multicast}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg1\x00', 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r7, 0x1, 0x6, @multicast}, 0x10) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)={0x14c, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x408}, 0x11) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r8) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 538.335201] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. 11:55:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) (fail_nth: 25) [ 538.363389] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 538.386851] mac80211_hwsim hwsim14 wlan1: entered promiscuous mode 11:55:20 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x0, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) [ 538.424487] mac80211_hwsim hwsim14 wlan1: left promiscuous mode 11:55:20 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = fcntl$getown(r0, 0x9) r3 = openat$cgroup_ro(r1, &(0x7f0000000140)='pids.events\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x2, 0x3, 0x0, 0x8, 0x0, 0x6, 0x1, 0xb, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x1}, 0x200, 0xd809, 0x0, 0x2, 0x8000, 0x4, 0x2, 0x0, 0x1, 0x0, 0x1f0}, r2, 0xb, r3, 0x12) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r4, r5, 0x0, 0xc0000) truncate(0x0, 0x7f) [ 538.449920] mac80211_hwsim hwsim14 wlan1: entered promiscuous mode 11:55:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000660000000800", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 11:55:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) (fail_nth: 26) [ 538.490173] mac80211_hwsim hwsim14 wlan1: left promiscuous mode 11:55:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) (fail_nth: 15) 11:55:20 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 11:55:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000066000000080003", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) [ 538.630668] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 538.643125] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 538.703431] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 11:55:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) (fail_nth: 16) 11:55:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) (fail_nth: 27) 11:55:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="08f867e6640330ea6b00b70200000000"], 0x2c}}, 0x0) 11:55:29 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 11:55:29 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='status\x00') setgroups(0x0, 0x0) read$char_usb(r0, &(0x7f0000000000)=""/1, 0x1) 11:55:29 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 13) tgkill(r0, r1, 0xb) 11:55:29 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = fcntl$getown(r0, 0x9) r3 = openat$cgroup_ro(r1, &(0x7f0000000140)='pids.events\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x2, 0x3, 0x0, 0x8, 0x0, 0x6, 0x1, 0xb, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x1}, 0x200, 0xd809, 0x0, 0x2, 0x8000, 0x4, 0x2, 0x0, 0x1, 0x0, 0x1f0}, r2, 0xb, r3, 0x12) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r4, r5, 0x0, 0xc0000) truncate(0x0, 0x7f) 11:55:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000066000000080003", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) [ 547.285292] FAULT_INJECTION: forcing a failure. [ 547.285292] name failslab, interval 1, probability 0, space 0, times 0 [ 547.286402] CPU: 1 UID: 0 PID: 5914 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 547.286437] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 547.286449] Call Trace: [ 547.286453] [ 547.286458] dump_stack_lvl+0xfa/0x120 [ 547.286485] should_fail_ex+0x4d7/0x5e0 [ 547.286508] ? create_new_namespaces+0x30/0xab0 [ 547.286525] should_failslab+0xc2/0x120 [ 547.286540] kmem_cache_alloc_noprof+0x5f/0x3d0 [ 547.286567] create_new_namespaces+0x30/0xab0 [ 547.286583] ? security_capable+0x2f/0x90 [ 547.286601] copy_namespaces+0x45c/0x580 [ 547.286624] copy_process+0x26d5/0x73e0 [ 547.286636] ? __pfx_perf_trace_lock+0x10/0x10 [ 547.286663] ? __pfx_copy_process+0x10/0x10 [ 547.286674] ? __might_fault+0xe0/0x190 [ 547.286693] ? _copy_from_user+0x5b/0xd0 [ 547.286711] kernel_clone+0xea/0x7f0 [ 547.286732] ? get_pid_task+0xfd/0x250 [ 547.286752] ? __pfx_kernel_clone+0x10/0x10 [ 547.286762] ? perf_trace_lock+0xb5/0x5d0 [ 547.286780] ? find_held_lock+0x2b/0x80 [ 547.286798] ? ksys_write+0x121/0x240 [ 547.286810] ? lock_is_held_type+0x9e/0x120 [ 547.286830] __do_sys_clone3+0x1f5/0x280 [ 547.286842] ? __pfx___do_sys_clone3+0x10/0x10 [ 547.286865] ? __fget_files+0x20d/0x3b0 [ 547.286889] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 547.286908] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 547.286928] ? ksys_write+0x1a3/0x240 [ 547.286939] ? __pfx_ksys_write+0x10/0x10 [ 547.286957] do_syscall_64+0xbf/0x360 [ 547.286977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.286989] RIP: 0033:0x7ffb744edb19 [ 547.286998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 547.287009] RSP: 002b:00007ffb71a63188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 547.287021] RAX: ffffffffffffffda RBX: 00007ffb74600f60 RCX: 00007ffb744edb19 [ 547.287028] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 547.287035] RBP: 00007ffb71a631d0 R08: 0000000000000000 R09: 0000000000000000 [ 547.287042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 547.287049] R13: 00007ffeb487a35f R14: 00007ffb71a63300 R15: 0000000000022000 [ 547.287068] [ 547.288595] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 11:55:29 executing program 7: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x729b5e31bc7cc44) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000000000000000000040000000000000000000000000290809b0b4eec30000000000000000003800"/127], 0x78) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) [ 547.336296] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 547.344923] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode 11:55:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) (fail_nth: 17) [ 547.361225] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 547.367195] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 547.370085] FAULT_INJECTION: forcing a failure. [ 547.370085] name failslab, interval 1, probability 0, space 0, times 0 [ 547.372189] CPU: 0 UID: 0 PID: 5920 Comm: syz-executor.4 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 547.372219] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 547.372232] Call Trace: [ 547.372239] [ 547.372247] dump_stack_lvl+0xfa/0x120 [ 547.372288] should_fail_ex+0x4d7/0x5e0 [ 547.372328] ? ieee80211_vif_use_reserved_switch+0x15be/0x2010 [ 547.372364] should_failslab+0xc2/0x120 [ 547.372390] __kmalloc_noprof+0xb4/0x4b0 [ 547.372426] ? lock_is_held_type+0x9e/0x120 [ 547.372463] ieee80211_vif_use_reserved_switch+0x15be/0x2010 [ 547.372513] ieee80211_link_use_reserved_context+0x298/0x410 [ 547.372553] __ieee80211_csa_finalize+0x204/0x10c0 [ 547.372595] ? __pfx___ieee80211_csa_finalize+0x10/0x10 [ 547.372641] ? cfg80211_ch_switch_started_notify+0x1b5/0x3e0 [ 547.372676] __ieee80211_channel_switch+0x1669/0x2610 [ 547.372713] ? __pfx___ieee80211_channel_switch+0x10/0x10 [ 547.372771] ? lock_is_held_type+0x9e/0x120 [ 547.372811] nl80211_channel_switch+0xbe7/0xfb0 [ 547.372850] ? __pfx_nl80211_channel_switch+0x10/0x10 [ 547.372955] ? nl80211_pre_doit+0x111/0x980 [ 547.372991] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 547.373023] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 547.373069] ? security_capable+0x2f/0x90 [ 547.373097] ? ns_capable+0xe2/0x120 [ 547.373131] genl_rcv_msg+0x532/0x7e0 [ 547.373165] ? __pfx_genl_rcv_msg+0x10/0x10 [ 547.373193] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 547.373220] ? __pfx_nl80211_channel_switch+0x10/0x10 [ 547.373247] ? __pfx_nl80211_post_doit+0x10/0x10 [ 547.373285] netlink_rcv_skb+0x147/0x430 [ 547.373311] ? __pfx_genl_rcv_msg+0x10/0x10 [ 547.373342] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 547.373386] ? netlink_deliver_tap+0x1ae/0xce0 [ 547.373407] ? selinux_netlink_send+0x507/0x880 [ 547.373429] ? is_vmalloc_addr+0x86/0xa0 [ 547.373469] genl_rcv+0x28/0x40 [ 547.373492] netlink_unicast+0x5a7/0x870 [ 547.373524] ? __pfx_netlink_unicast+0x10/0x10 [ 547.373567] netlink_sendmsg+0x8ac/0xd80 [ 547.373600] ? __pfx_netlink_sendmsg+0x10/0x10 [ 547.373643] ____sys_sendmsg+0xa67/0xc20 [ 547.373677] ? copy_msghdr_from_user+0xfb/0x150 [ 547.373702] ? __pfx_____sys_sendmsg+0x10/0x10 [ 547.373746] ? lock_acquire+0x15e/0x2f0 [ 547.373777] ___sys_sendmsg+0x10f/0x1b0 [ 547.373803] ? __pfx____sys_sendmsg+0x10/0x10 [ 547.373824] ? perf_trace_lock+0xb5/0x5d0 [ 547.373857] ? __pfx_perf_trace_lock+0x10/0x10 [ 547.373880] ? proc_fail_nth_write+0x97/0x220 [ 547.373909] ? lock_acquire+0x15e/0x2f0 [ 547.373931] ? __fget_files+0x34/0x3b0 [ 547.373965] ? find_held_lock+0x2b/0x80 [ 547.373996] ? __fget_files+0x203/0x3b0 [ 547.374029] ? lock_release+0xc8/0x290 [ 547.374059] ? __fget_files+0x20d/0x3b0 [ 547.374107] __sys_sendmsg+0x150/0x200 [ 547.374130] ? __pfx___sys_sendmsg+0x10/0x10 [ 547.374169] ? __pfx_ksys_write+0x10/0x10 [ 547.374206] do_syscall_64+0xbf/0x360 [ 547.374243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.374265] RIP: 0033:0x7f7f0ab43b19 [ 547.374282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 547.374302] RSP: 002b:00007f7f080b9188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 547.374322] RAX: ffffffffffffffda RBX: 00007f7f0ac56f60 RCX: 00007f7f0ab43b19 [ 547.374337] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000003 [ 547.374350] RBP: 00007f7f080b91d0 R08: 0000000000000000 R09: 0000000000000000 [ 547.374363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 547.374375] R13: 00007ffc62a1a05f R14: 00007f7f080b9300 R15: 0000000000022000 [ 547.374412] [ 547.426787] wlan1: failed to finalize CSA on link 0, disconnecting 11:55:29 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 11:55:29 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000100)={r8, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000180)={r5, 0x1, 0x6, @multicast}, 0x10) bind(r3, &(0x7f0000000100)=@ll={0x11, 0x4, r5, 0x1, 0x8, 0x6, @multicast}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x24, r0, 0x300, 0x0, 0x0, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x8}]}, 0x24}}, 0x0) [ 547.487410] FAULT_INJECTION: forcing a failure. [ 547.487410] name failslab, interval 1, probability 0, space 0, times 0 [ 547.488336] CPU: 1 UID: 0 PID: 5926 Comm: syz-executor.5 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 547.488352] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 547.488359] Call Trace: [ 547.488364] [ 547.488369] dump_stack_lvl+0xfa/0x120 [ 547.488395] should_fail_ex+0x4d7/0x5e0 [ 547.488420] should_failslab+0xc2/0x120 [ 547.488435] kmem_cache_alloc_node_noprof+0x71/0x3e0 [ 547.488455] ? __alloc_skb+0x2ab/0x370 [ 547.488474] __alloc_skb+0x2ab/0x370 [ 547.488486] ? __pfx___alloc_skb+0x10/0x10 [ 547.488501] ? do_raw_spin_lock+0x123/0x260 [ 547.488519] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 547.488538] skb_copy+0x1d5/0x3b0 [ 547.488548] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 547.488566] mac80211_hwsim_tx_frame_no_nl.isra.0+0xafa/0x1320 [ 547.488594] ? __pfx_mac80211_hwsim_tx_frame_no_nl.isra.0+0x10/0x10 [ 547.488625] ? mac80211_hwsim_monitor_rx+0x1be/0x820 [ 547.488644] mac80211_hwsim_tx+0x7b9/0x2420 [ 547.488673] ieee80211_tx_frags+0x5a5/0xa10 [ 547.488697] ? __pfx_ieee80211_tx_frags+0x10/0x10 [ 547.488712] ? invoke_tx_handlers_late+0x13f/0x2680 [ 547.488738] __ieee80211_tx+0x145/0x5a0 [ 547.488761] ieee80211_tx+0x31a/0x410 [ 547.488774] ? __pfx_ieee80211_tx+0x10/0x10 [ 547.488786] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 547.488813] ? kasan_print_address_stack_frame+0x1d2/0x230 [ 547.488828] ? ieee80211_skb_resize+0x116/0x680 [ 547.488845] ? ieee80211_set_qos_hdr+0x8b/0x310 [ 547.488865] ieee80211_xmit+0x1f5/0x270 [ 547.488881] __ieee80211_tx_skb_tid_band+0x2a5/0x770 [ 547.488899] ieee80211_tx_skb_tid+0x171/0x4c0 [ 547.488915] ieee80211_send_action_csa+0x4b4/0x860 [ 547.488933] __ieee80211_channel_switch+0x1978/0x2610 [ 547.488953] ? __pfx___ieee80211_channel_switch+0x10/0x10 [ 547.488984] ? lock_is_held_type+0x9e/0x120 [ 547.489007] nl80211_channel_switch+0xbe7/0xfb0 [ 547.489029] ? __pfx_nl80211_channel_switch+0x10/0x10 [ 547.489085] ? nl80211_pre_doit+0x111/0x980 [ 547.489107] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 547.489127] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 547.489152] ? security_capable+0x2f/0x90 [ 547.489167] ? ns_capable+0xe2/0x120 [ 547.489186] genl_rcv_msg+0x532/0x7e0 [ 547.489204] ? __pfx_genl_rcv_msg+0x10/0x10 [ 547.489219] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 547.489234] ? __pfx_nl80211_channel_switch+0x10/0x10 [ 547.489249] ? __pfx_nl80211_post_doit+0x10/0x10 [ 547.489270] netlink_rcv_skb+0x147/0x430 [ 547.489284] ? __pfx_genl_rcv_msg+0x10/0x10 [ 547.489300] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 547.489324] ? netlink_deliver_tap+0x1ae/0xce0 [ 547.489336] ? selinux_netlink_send+0x507/0x880 [ 547.489348] ? is_vmalloc_addr+0x86/0xa0 [ 547.489370] genl_rcv+0x28/0x40 [ 547.489383] netlink_unicast+0x5a7/0x870 [ 547.489400] ? __pfx_netlink_unicast+0x10/0x10 [ 547.489423] netlink_sendmsg+0x8ac/0xd80 [ 547.489441] ? __pfx_netlink_sendmsg+0x10/0x10 [ 547.489464] ____sys_sendmsg+0xa67/0xc20 [ 547.489482] ? copy_msghdr_from_user+0xfb/0x150 [ 547.489496] ? __pfx_____sys_sendmsg+0x10/0x10 [ 547.489520] ? lock_acquire+0x15e/0x2f0 [ 547.489536] ___sys_sendmsg+0x10f/0x1b0 [ 547.489550] ? __pfx____sys_sendmsg+0x10/0x10 [ 547.489561] ? perf_trace_lock+0xb5/0x5d0 [ 547.489579] ? __pfx_perf_trace_lock+0x10/0x10 [ 547.489592] ? proc_fail_nth_write+0x97/0x220 [ 547.489608] ? lock_acquire+0x15e/0x2f0 [ 547.489620] ? __fget_files+0x34/0x3b0 [ 547.489639] ? find_held_lock+0x2b/0x80 [ 547.489656] ? __fget_files+0x203/0x3b0 [ 547.489674] ? lock_release+0xc8/0x290 [ 547.489690] ? __fget_files+0x20d/0x3b0 [ 547.489716] __sys_sendmsg+0x150/0x200 [ 547.489729] ? __pfx___sys_sendmsg+0x10/0x10 [ 547.489749] ? __pfx_ksys_write+0x10/0x10 [ 547.489769] do_syscall_64+0xbf/0x360 [ 547.489790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.489803] RIP: 0033:0x7f4e6e1d6b19 [ 547.489812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 547.489823] RSP: 002b:00007f4e6b74c188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 547.489834] RAX: ffffffffffffffda RBX: 00007f4e6e2e9f60 RCX: 00007f4e6e1d6b19 [ 547.489842] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000003 [ 547.489849] RBP: 00007f4e6b74c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 547.489856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 547.489862] R13: 00007ffcc6516def R14: 00007f4e6b74c300 R15: 0000000000022000 [ 547.489882] [ 547.527201] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode 11:55:29 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 14) tgkill(r0, r1, 0xb) [ 547.545116] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 11:55:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000066000000080003", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 11:55:29 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 11:55:29 executing program 6: mknodat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/raw6\x00') pread64(r1, &(0x7f0000000140)=""/217, 0xd9, 0x0) recvmmsg$unix(r1, &(0x7f0000000dc0), 0x0, 0x12000, 0x0) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f00000001c0), &(0x7f0000000200)=0xc) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f0000000000)={0x1, 0x5}) openat$incfs(r0, &(0x7f0000000080)='.pending_reads\x00', 0x8000, 0x2) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/raw6\x00') pread64(r2, &(0x7f0000000140)=""/217, 0xd9, 0x0) recvmmsg$unix(r2, &(0x7f0000003c80)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/87, 0x57}], 0x1, &(0x7f00000000c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000000340)=""/241, 0xf1}, {&(0x7f0000000440)=""/178, 0xb2}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/13, 0xd}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/217, 0xd9}], 0x6, &(0x7f00000026c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f0000002740)=@abs, 0x6e, &(0x7f0000003bc0)=[{&(0x7f00000027c0)=""/87, 0x57}, {&(0x7f0000002840)=""/214, 0xd6}, {&(0x7f0000002940)=""/4096, 0x1000}, {&(0x7f0000003940)=""/61, 0x3d}, {&(0x7f0000003980)=""/20, 0x14}, {&(0x7f00000039c0)=""/233, 0xe9}, {&(0x7f0000003ac0)=""/212, 0xd4}], 0x7, &(0x7f0000003d80)=ANY=[@ANYBLOB="140000000000020001e2ffff000000005b920b4ddeda8a071b100f83866ef2e8732905135e3890d0e9d8472da218023311914103df5eeb586fc156347a51d34d2c3129391ba5f9f506101b5ff0c57068af8197d80811aa", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x18}}], 0x3, 0x41, &(0x7f0000003d40)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x63020180, 0x0, &(0x7f0000005700), 0x0, {0x1c}, 0x0, 0x0, &(0x7f0000000100)=""/32, 0x0}, 0x58) [ 547.609750] mac80211_hwsim hwsim14 wlan1: entered promiscuous mode 11:55:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) (fail_nth: 18) [ 547.616564] mac80211_hwsim hwsim14 wlan1: left promiscuous mode [ 547.645480] mac80211_hwsim hwsim14 wlan1: entered promiscuous mode [ 547.655301] mac80211_hwsim hwsim14 wlan1: left promiscuous mode [ 547.666573] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 547.677317] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 547.688090] FAULT_INJECTION: forcing a failure. [ 547.688090] name failslab, interval 1, probability 0, space 0, times 0 [ 547.688228] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 547.690007] CPU: 0 UID: 0 PID: 5940 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 547.690037] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 547.690051] Call Trace: [ 547.690058] [ 547.690066] dump_stack_lvl+0xfa/0x120 [ 547.690110] should_fail_ex+0x4d7/0x5e0 [ 547.690151] ? copy_process+0x66d4/0x73e0 [ 547.690171] should_failslab+0xc2/0x120 [ 547.690197] kmem_cache_alloc_noprof+0x5f/0x3d0 [ 547.690246] copy_process+0x66d4/0x73e0 [ 547.690266] ? __pfx_perf_trace_lock+0x10/0x10 [ 547.690313] ? __pfx_copy_process+0x10/0x10 [ 547.690334] ? __might_fault+0xe0/0x190 [ 547.690368] ? _copy_from_user+0x5b/0xd0 [ 547.690399] kernel_clone+0xea/0x7f0 [ 547.690419] ? get_pid_task+0xfd/0x250 [ 547.690455] ? __pfx_kernel_clone+0x10/0x10 [ 547.690473] ? perf_trace_lock+0xb5/0x5d0 [ 547.690508] ? find_held_lock+0x2b/0x80 [ 547.690539] ? ksys_write+0x121/0x240 [ 547.690561] ? lock_is_held_type+0x9e/0x120 [ 547.690599] __do_sys_clone3+0x1f5/0x280 [ 547.690627] ? __pfx___do_sys_clone3+0x10/0x10 [ 547.690672] ? __fget_files+0x20d/0x3b0 [ 547.690716] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 547.690765] ? fput+0x6a/0x100 [ 547.690790] ? ksys_write+0x1a3/0x240 [ 547.690811] ? __pfx_ksys_write+0x10/0x10 [ 547.690845] do_syscall_64+0xbf/0x360 [ 547.690881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.690904] RIP: 0033:0x7ffb744edb19 [ 547.690921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 547.690941] RSP: 002b:00007ffb71a63188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 547.690961] RAX: ffffffffffffffda RBX: 00007ffb74600f60 RCX: 00007ffb744edb19 [ 547.690976] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 547.690989] RBP: 00007ffb71a631d0 R08: 0000000000000000 R09: 0000000000000000 [ 547.691002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 547.691014] R13: 00007ffeb487a35f R14: 00007ffb71a63300 R15: 0000000000022000 [ 547.691050] 11:55:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) (fail_nth: 28) 11:55:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) (fail_nth: 19) 11:55:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r2, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 11:55:29 executing program 1: getcwd(&(0x7f0000000100)=""/44, 0x2c) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) getcwd(&(0x7f0000000280)=""/33, 0x21) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='batadv_slave_0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[], 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r6, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x26}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x10) 11:55:29 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 15) tgkill(r0, r1, 0xb) [ 547.911241] FAULT_INJECTION: forcing a failure. [ 547.911241] name failslab, interval 1, probability 0, space 0, times 0 [ 547.913076] CPU: 0 UID: 0 PID: 5953 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 547.913106] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 547.913118] Call Trace: [ 547.913126] [ 547.913134] dump_stack_lvl+0xfa/0x120 [ 547.913177] should_fail_ex+0x4d7/0x5e0 [ 547.913218] ? copy_utsname+0x159/0x470 [ 547.913241] should_failslab+0xc2/0x120 [ 547.913266] kmem_cache_alloc_noprof+0x5f/0x3d0 [ 547.913301] ? copy_mnt_ns+0xac/0xab0 [ 547.913333] copy_utsname+0x159/0x470 [ 547.913361] create_new_namespaces+0x16e/0xab0 [ 547.913393] ? security_capable+0x2f/0x90 [ 547.913426] copy_namespaces+0x45c/0x580 [ 547.913459] copy_process+0x26d5/0x73e0 [ 547.913481] ? __pfx_perf_trace_lock+0x10/0x10 [ 547.913527] ? __pfx_copy_process+0x10/0x10 [ 547.913549] ? __might_fault+0xe0/0x190 [ 547.913583] ? _copy_from_user+0x5b/0xd0 [ 547.913622] kernel_clone+0xea/0x7f0 [ 547.913641] ? get_pid_task+0xfd/0x250 [ 547.913677] ? __pfx_kernel_clone+0x10/0x10 [ 547.913695] ? perf_trace_lock+0xb5/0x5d0 [ 547.913730] ? find_held_lock+0x2b/0x80 [ 547.913761] ? ksys_write+0x121/0x240 [ 547.913783] ? lock_is_held_type+0x9e/0x120 [ 547.913819] __do_sys_clone3+0x1f5/0x280 [ 547.913840] ? __pfx___do_sys_clone3+0x10/0x10 [ 547.913884] ? __fget_files+0x20d/0x3b0 [ 547.913927] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 547.913962] ? fput+0x6a/0x100 [ 547.913988] ? ksys_write+0x1a3/0x240 [ 547.914008] ? __pfx_ksys_write+0x10/0x10 [ 547.914042] do_syscall_64+0xbf/0x360 [ 547.914079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.914101] RIP: 0033:0x7ffb744edb19 [ 547.914118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 547.914138] RSP: 002b:00007ffb71a63188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 547.914159] RAX: ffffffffffffffda RBX: 00007ffb74600f60 RCX: 00007ffb744edb19 [ 547.914174] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 547.914187] RBP: 00007ffb71a631d0 R08: 0000000000000000 R09: 0000000000000000 [ 547.914200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 547.914213] R13: 00007ffeb487a35f R14: 00007ffb71a63300 R15: 0000000000022000 [ 547.914248] 11:55:38 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 16) tgkill(r0, r1, 0xb) 11:55:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xec, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r5, @ANYBLOB="080026006c09000008e4e83cb4000000"], 0x2c}}, 0x0) 11:55:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) (fail_nth: 20) 11:55:38 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 11:55:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r2, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 11:55:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:55:38 executing program 7: r0 = msgget(0x2, 0x200) msgrcv(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007dba4e57a264eaaf00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007a68af5fe28f7ce55e3a8b5180caf830ccd9620d512919cb8374e7df9fed3a88728eafcb902d1e6b2aaba3ef98e4531f7e481fb589de4d633b1ba956aaa7d607a649c49bdfc7f309a8f0e886d2db9e29598a14ece665bba13f3fa9031dd25f2ebf1c837615114f6e4957b6514b8b97417622c7775175fc73df9934465744eff0d30e7e8f15d4ae864d615061c8c231d9d5d97cae92acd1c36366b87a838152e31eea8817d77c164bf951e76d62152d4895"], 0x103, 0x3, 0x3000) msgsnd(r0, &(0x7f0000000280)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000280)=""/79) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000000), 0x4) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/raw6\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = open(&(0x7f0000000300)='./file0\x00', 0x80041, 0xb5) sendmsg$NL80211_CMD_NEW_MPATH(r5, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, 0x0, 0x480, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x53}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) dup3(r4, r1, 0x80000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000000240)={0x0, 'ipvlan0\x00', {}, 0x824}) pread64(r3, &(0x7f0000000140)=""/217, 0xd9, 0x0) sendmsg$SOCK_DESTROY(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000004a80)=ANY=[@ANYBLOB="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"], 0x241c}, 0x1, 0x0, 0x0, 0x54}, 0x40805) 11:55:38 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c80000001b0001000000000000000000ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f00", @ANYRES32=0x0, @ANYBLOB], 0xc8}}, 0x0) 11:55:38 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000140)={0x2, 'bond_slave_0\x00', {0x6}, 0x9}) r1 = getgid() syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x3, &(0x7f000000e880)=[{&(0x7f000000e5c0)="b9", 0x1}, {&(0x7f000000e700)="cf", 0x1}, {&(0x7f000000e7c0)='M', 0x1}], 0x0, 0x0) setfsgid(r1) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x40029, &(0x7f00000000c0)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x6}}], [{@fowner_gt={'fowner>', 0xee01}}, {@hash}]}}) 11:55:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r2, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) [ 556.678948] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode 11:55:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 556.705694] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 556.718085] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:55:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) (fail_nth: 21) 11:55:39 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 11:55:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r2, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 11:55:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x2, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 557.024375] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 557.031271] FAULT_INJECTION: forcing a failure. [ 557.031271] name failslab, interval 1, probability 0, space 0, times 0 [ 557.032296] CPU: 1 UID: 0 PID: 5995 Comm: syz-executor.5 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 557.032313] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 557.032320] Call Trace: [ 557.032325] [ 557.032330] dump_stack_lvl+0xfa/0x120 [ 557.032358] should_fail_ex+0x4d7/0x5e0 [ 557.032382] should_failslab+0xc2/0x120 [ 557.032398] kmem_cache_alloc_node_noprof+0x71/0x3e0 [ 557.032418] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 557.032434] ? __alloc_skb+0x2ab/0x370 [ 557.032451] __alloc_skb+0x2ab/0x370 [ 557.032464] ? __pfx___alloc_skb+0x10/0x10 [ 557.032475] ? perf_trace_lock+0xb5/0x5d0 [ 557.032495] ? __pfx_perf_trace_lock+0x10/0x10 [ 557.032512] nl80211_ch_switch_notify.constprop.0+0xc8/0x500 [ 557.032535] ? __pfx_nl80211_ch_switch_notify.constprop.0+0x10/0x10 [ 557.032552] ? ieee80211_tx_skb_tid+0x19c/0x4c0 [ 557.032567] ? lock_release+0xc8/0x290 [ 557.032588] cfg80211_ch_switch_started_notify+0x1b5/0x3e0 [ 557.032611] __ieee80211_channel_switch+0xf8a/0x2610 [ 557.032631] ? __pfx___ieee80211_channel_switch+0x10/0x10 [ 557.032663] ? lock_is_held_type+0x9e/0x120 [ 557.032687] nl80211_channel_switch+0xbe7/0xfb0 [ 557.032708] ? __pfx_nl80211_channel_switch+0x10/0x10 [ 557.032765] ? nl80211_pre_doit+0x111/0x980 [ 557.032784] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 557.032803] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 557.032828] ? security_capable+0x2f/0x90 [ 557.032845] ? ns_capable+0xe2/0x120 [ 557.032864] genl_rcv_msg+0x532/0x7e0 [ 557.032882] ? __pfx_genl_rcv_msg+0x10/0x10 [ 557.032897] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 557.032912] ? __pfx_nl80211_channel_switch+0x10/0x10 [ 557.032927] ? __pfx_nl80211_post_doit+0x10/0x10 [ 557.032947] netlink_rcv_skb+0x147/0x430 [ 557.032962] ? __pfx_genl_rcv_msg+0x10/0x10 [ 557.032978] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 557.033002] ? netlink_deliver_tap+0x1ae/0xce0 [ 557.033013] ? selinux_netlink_send+0x507/0x880 [ 557.033026] ? is_vmalloc_addr+0x86/0xa0 [ 557.033048] genl_rcv+0x28/0x40 [ 557.033060] netlink_unicast+0x5a7/0x870 [ 557.033077] ? __pfx_netlink_unicast+0x10/0x10 [ 557.033100] netlink_sendmsg+0x8ac/0xd80 [ 557.033118] ? __pfx_netlink_sendmsg+0x10/0x10 [ 557.033141] ____sys_sendmsg+0xa67/0xc20 [ 557.033159] ? copy_msghdr_from_user+0xfb/0x150 [ 557.033173] ? __pfx_____sys_sendmsg+0x10/0x10 [ 557.033197] ? lock_acquire+0x15e/0x2f0 [ 557.033212] ___sys_sendmsg+0x10f/0x1b0 [ 557.033226] ? __pfx____sys_sendmsg+0x10/0x10 [ 557.033238] ? perf_trace_lock+0xb5/0x5d0 [ 557.033255] ? __pfx_perf_trace_lock+0x10/0x10 [ 557.033267] ? proc_fail_nth_write+0x97/0x220 [ 557.033284] ? lock_acquire+0x15e/0x2f0 [ 557.033296] ? __fget_files+0x34/0x3b0 [ 557.033315] ? find_held_lock+0x2b/0x80 [ 557.033332] ? __fget_files+0x203/0x3b0 [ 557.033350] ? lock_release+0xc8/0x290 [ 557.033366] ? __fget_files+0x20d/0x3b0 [ 557.033392] __sys_sendmsg+0x150/0x200 [ 557.033405] ? __pfx___sys_sendmsg+0x10/0x10 [ 557.033425] ? __pfx_ksys_write+0x10/0x10 [ 557.033445] do_syscall_64+0xbf/0x360 [ 557.033466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.033478] RIP: 0033:0x7f4e6e1d6b19 [ 557.033489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 557.033500] RSP: 002b:00007f4e6b74c188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 557.033512] RAX: ffffffffffffffda RBX: 00007f4e6e2e9f60 RCX: 00007f4e6e1d6b19 [ 557.033519] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000003 [ 557.033526] RBP: 00007f4e6b74c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 557.033533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 557.033540] R13: 00007ffcc6516def R14: 00007f4e6b74c300 R15: 0000000000022000 [ 557.033559] [ 557.045464] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 557.181536] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 11:55:47 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 11:55:47 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x8000, 0x8}) 11:55:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040004}, 0x8000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:55:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x3, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:55:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r2, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 11:55:47 executing program 7: r0 = msgget(0x2, 0x200) msgrcv(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007dba4e57a264eaaf00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007a68af5fe28f7ce55e3a8b5180caf830ccd9620d512919cb8374e7df9fed3a88728eafcb902d1e6b2aaba3ef98e4531f7e481fb589de4d633b1ba956aaa7d607a649c49bdfc7f309a8f0e886d2db9e29598a14ece665bba13f3fa9031dd25f2ebf1c837615114f6e4957b6514b8b97417622c7775175fc73df9934465744eff0d30e7e8f15d4ae864d615061c8c231d9d5d97cae92acd1c36366b87a838152e31eea8817d77c164bf951e76d62152d4895"], 0x103, 0x3, 0x3000) msgsnd(r0, &(0x7f0000000280)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000280)=""/79) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000000), 0x4) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/raw6\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = open(&(0x7f0000000300)='./file0\x00', 0x80041, 0xb5) sendmsg$NL80211_CMD_NEW_MPATH(r5, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, 0x0, 0x480, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x53}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) dup3(r4, r1, 0x80000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000000240)={0x0, 'ipvlan0\x00', {}, 0x824}) pread64(r3, &(0x7f0000000140)=""/217, 0xd9, 0x0) sendmsg$SOCK_DESTROY(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000004a80)=ANY=[@ANYBLOB="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"], 0x241c}, 0x1, 0x0, 0x0, 0x54}, 0x40805) 11:55:47 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 17) tgkill(r0, r1, 0xb) 11:55:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) (fail_nth: 22) 11:55:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r2, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) [ 565.517913] FAULT_INJECTION: forcing a failure. [ 565.517913] name failslab, interval 1, probability 0, space 0, times 0 [ 565.519823] CPU: 0 UID: 0 PID: 6038 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 565.519854] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 565.519868] Call Trace: [ 565.519876] [ 565.519886] dump_stack_lvl+0xfa/0x120 [ 565.519927] should_fail_ex+0x4d7/0x5e0 [ 565.519971] ? copy_pid_ns+0x2c3/0xd20 [ 565.520001] should_failslab+0xc2/0x120 [ 565.520028] kmem_cache_alloc_noprof+0x5f/0x3d0 [ 565.520063] ? perf_trace_lock+0xb5/0x5d0 [ 565.520090] ? copy_utsname+0x266/0x470 [ 565.520124] copy_pid_ns+0x2c3/0xd20 [ 565.520161] ? __pfx_copy_pid_ns+0x10/0x10 [ 565.520190] ? down_read+0x1b1/0x470 [ 565.520213] ? __pfx___up_read+0x10/0x10 [ 565.520244] ? lock_release+0xc8/0x290 [ 565.520278] ? copy_ipcs+0xb7/0x630 [ 565.520319] create_new_namespaces+0x2b2/0xab0 [ 565.520363] copy_namespaces+0x45c/0x580 [ 565.520399] copy_process+0x26d5/0x73e0 [ 565.520422] ? __pfx_perf_trace_lock+0x10/0x10 [ 565.520468] ? __pfx_copy_process+0x10/0x10 [ 565.520491] ? __might_fault+0xe0/0x190 [ 565.520527] ? _copy_from_user+0x5b/0xd0 [ 565.520560] kernel_clone+0xea/0x7f0 [ 565.520580] ? get_pid_task+0xfd/0x250 [ 565.520625] ? __pfx_kernel_clone+0x10/0x10 [ 565.520645] ? perf_trace_lock+0xb5/0x5d0 [ 565.520682] ? find_held_lock+0x2b/0x80 [ 565.520715] ? ksys_write+0x121/0x240 [ 565.520738] ? lock_is_held_type+0x9e/0x120 [ 565.520776] __do_sys_clone3+0x1f5/0x280 [ 565.520804] ? __pfx___do_sys_clone3+0x10/0x10 [ 565.520851] ? __fget_files+0x20d/0x3b0 [ 565.520898] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 565.520935] ? fput+0x6a/0x100 [ 565.520962] ? ksys_write+0x1a3/0x240 [ 565.520984] ? __pfx_ksys_write+0x10/0x10 [ 565.521020] do_syscall_64+0xbf/0x360 [ 565.521059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.521083] RIP: 0033:0x7ffb744edb19 [ 565.521102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 565.521125] RSP: 002b:00007ffb71a63188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 565.521147] RAX: ffffffffffffffda RBX: 00007ffb74600f60 RCX: 00007ffb744edb19 [ 565.521163] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 565.521176] RBP: 00007ffb71a631d0 R08: 0000000000000000 R09: 0000000000000000 [ 565.521190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 565.521203] R13: 00007ffeb487a35f R14: 00007ffb71a63300 R15: 0000000000022000 [ 565.521242] [ 565.573953] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode 11:55:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 11:55:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x4, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:55:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000080), r3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x2, 0x4, 0x8, @empty, @private1, 0x40, 0x40, 0x0, 0x40}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$packet(0x11, 0x2, 0x300) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000100)={r10, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000180)={0x0, 0x1, 0x6, @multicast}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x6c}}, 0x4004810) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x20040000) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x8, 0x60}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x30}}, 0x0) [ 565.636108] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 11:55:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) (fail_nth: 23) 11:55:47 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x3f, 0x0, 0x0, &(0x7f0000000e40)={[{@nr_inodes={'nr_inodes', 0x3d, [0x6d]}}, {@size={'size', 0x3d, [0x67, 0x0]}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = signalfd(r1, &(0x7f0000000080)={[0x3]}, 0x8) faccessat2(r5, &(0x7f00000000c0)='./file0\x00', 0x104, 0x200) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x24, r3, 0x2, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params, @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x24}}, 0x0) sendfile(r0, r2, &(0x7f0000000040)=0x2ddb, 0x100000001) 11:55:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x5, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 565.777351] mac80211_hwsim hwsim14 wlan1: entered promiscuous mode [ 565.898569] mac80211_hwsim hwsim14 wlan1: left promiscuous mode [ 565.952486] mac80211_hwsim hwsim14 wlan1: entered promiscuous mode [ 565.965267] mac80211_hwsim hwsim14 wlan1: left promiscuous mode 11:55:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:55:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) (fail_nth: 24) 11:55:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 11:55:58 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 11:55:58 executing program 7: r0 = msgget(0x2, 0x200) msgrcv(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007dba4e57a264eaaf00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007a68af5fe28f7ce55e3a8b5180caf830ccd9620d512919cb8374e7df9fed3a88728eafcb902d1e6b2aaba3ef98e4531f7e481fb589de4d633b1ba956aaa7d607a649c49bdfc7f309a8f0e886d2db9e29598a14ece665bba13f3fa9031dd25f2ebf1c837615114f6e4957b6514b8b97417622c7775175fc73df9934465744eff0d30e7e8f15d4ae864d615061c8c231d9d5d97cae92acd1c36366b87a838152e31eea8817d77c164bf951e76d62152d4895"], 0x103, 0x3, 0x3000) msgsnd(r0, &(0x7f0000000280)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000280)=""/79) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000000), 0x4) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/raw6\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = open(&(0x7f0000000300)='./file0\x00', 0x80041, 0xb5) sendmsg$NL80211_CMD_NEW_MPATH(r5, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, 0x0, 0x480, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x53}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) dup3(r4, r1, 0x80000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000000240)={0x0, 'ipvlan0\x00', {}, 0x824}) pread64(r3, &(0x7f0000000140)=""/217, 0xd9, 0x0) sendmsg$SOCK_DESTROY(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000004a80)=ANY=[@ANYBLOB="1c240000150000042bbd7000fedbdf25100581000100d42c98e0dd7fc8989546a79035b7ab4336b6f6def46d3771150392c2e5761dc3a88b0f3c9a4e4822393fa75633b3c9639ba44ebe72b01d2266a31833ba81bfa2bbdd1e42c1c7e2f396a669fa14d0e4a9fb535bb51ce21ac101d82e8ebb99abb5eeaef640aa22a497428a4e9d85f7494c34c9bf44aea7a955a1197b1c8e0000009400010008c3d6484a49be0d3e98028b87cbb4eaf19011353da954f1c83aaa5ff9bb6b6e100523b9ec3b93991c123e1e16e577f9476eaa3721617e04de7aa64f12c33cef55e3c99c06904b42eff12ca475ba904c8688e569a55272e990e1f036a6935a850dd7c25334ed73c6e06657054ad49a5c0337b3fe4204823c7b6b2b2bb80cfca7da01ccb929110a198fbe552687409a2b830001004167b8fbc66ecdd4ea58f4b7e6fa98b503e2725ea23c6514c4f00992e776689eeb435c36aee3f697406eb21348d99fb1c5ca01d9cb01182d7a68902e666c1e2464f9a70107288a922e22c95b8e9f126d3aec2b8e5d6c64acc7b35cedbb3bf72a9d392038de72b94da13e10ff462825d20bdcf6570a8429cee7427d881eb9dc00d5000100b9eb310513a4e73678047c42fb2a9117755ee9224483bd683981c0b137b38430185c669b422edb4cee57432a57b28c2c5288f014055e3382222c83c5ed058ae54d4bb33a6648bfa2991c68de394b72cf093746151598ec1ac7893e59327e8b2f58b6bace86f3e19cd73f79a00470866664100fed51f1b056c4792d6e4df81fe6171f5a645dcea97156328e878483cbffc4bb461815c5df3ba7c67637914827a10bb640748ba156e9edc26889e33a9a69033d9cb051279739a5357468f330d75e49d645c55b4510f7ff0265cbf52f5eac4b0000003a0001009300b41500fdd2a2ab2114efbc044eab36de7537d1f36dd402410d5e9b5fb0c01c688fc9ea3e977817ad3f06ec2904456b124f83634e0000430001008dba308701f779ddabd0b7c43dcc630ddf63efa662ff7b0c0f4ebcaacd7d4d2626e0f0d685a28f71bf47e6bf834e5f16811dc9347bcc6beb91038508156d1900f9000100e043715aa774f6d1c9c5a3b5251bbca607031dd87544bda9453d2db415f49d18be39bd7e7f7e16d679284cfe4334ba4d5d55c56f5d3e24c35cd2b0a6eae6b41317a8a47818657302a65715cb26ec87327095393d18f79f2dece0519d77c255552bf145a5054f65c522103a448b53f45062b73f8ef7b286fee58a7070c4cdb880147f43cc84f0f6cc7a2049997cc4fd312cb6b8f7725b74de1036d9e0c59635219e7d617b2e291bb7f8d84dcc4e73f89abb1a5593eb18637930daba6f7d586bb18937b47c0a4fd864030ee3615616be261365b4c9d75f1430a2782bc03c50abe2592a19462f879b1c87caee6436df37ffab749a4db50000000410010059ffa5e8ee58c6bfa6fc9857c2019e1e1341132dd1fa5d856d85398b6b30b2e7e739e383f528c7b5548bfa75d606acd96fe3f1418b70016315310caa695e693d525c76b7dd7ae01ab275e824720e0f0c16efaa894e308086dec48a357c3aed6d2b6313074fbcafee6cbca326f8e3a6afd890585f2c94a59249158cb5cad631fe8b363ca9b9ca90258c8616999d1d40eece3f6e3e0eb3a306c74f4ff0ba88c0385f5f5b00a4f7a3ed493f9afc809551aa64821c7f23e4070744b5c8931ff595899ff4e5ac9ecf308249c4c377ac5075a015b58d4f6bb3ef03aaab69fc24c34496f0788caabfdb2965b19b790a364592352f0fe787895891fc0cb3048adc29e6654e15f7fba08f745fd8e42db69d82b409715d4410fa3ddb2a0d773812d377412cd943c915244ad7095624497658cf3d924ad7df45827134d6031135c8f2232cd2b960ba76e31be1c1aafbf090f9c874eb5a1b91f2834865721e387dfd918b0ead380d489f6a91a2da2e52ba5cfe42dda292461fb90e53d98864b07a4d6c36115bc4cd2e711d65522412c72c622ef3223041c0f089060e90ff82cbabdaf570cee7d8b4f38255b7581c1e2dc25297129e8c5e4ce78e713931e10641dfc7e961e6ee2126d771ab1529ac0c941a8eb6302fda15f2e8360f550fbf79fb4ac15d36c1e665e26e0e64eaf6bb879ba13676440ddd13b576bdd7759320d80d0f571b6c1f73fac544092606b90c2a36cfbb83b577b2b3c10e91b7bbe4074bf147a7e6783d2386c9c8f59a31f258355c509d15e15aa382ef02f02989fea0e0b6397a19d1fafecf9b82c29fad8a7b068bac5250bd1191099998b92158b52e7749ec333d160fcdea00037f4a4a070c6eb7903fff30aa22ef4b3a1999c817106067dd268cb129c5db75ca15e1d6082d135f255053190f803eb50ebae21fc968551f7295c19830758cb778cd04e72842746aef1de8047ce4d6833e41b2d53e36e0a9623f8c847fc9ef7154364a20289d9ea968d7ab9010bf7f7a86030551a773c29949e564e82ebb10519ca1019f7b9b459094e8df9d258f25d4217dc108f0be0bd78b5cbe377c6d3c6fb51bb57a63dd60720a8fed6c1783f5164568ed2d0dfec2f2c9efb1193e16a7996dac61e83d2dcc0e69f4f85c1952d8131833a889349c039e58746159784b1b0f99c2cb52efb03b5ac070bfab06290db7220c1a30a9972e0a16897c36225fa70094384896b88e13a5008ab6f11f802b2e10febd25741483a7c964b6405c8366b8615e6471d16e35a9dd36f5c944739cbbbb4d8716ad0c3f4827187380ecc9e1f82cf2d5c3e0736445af6b5e35838b901ea9fb166959477bf26880a9f7b1b4f11e22a8d354b06c899a056181692711100f2b638a23a88d4e18f6d40ebcebd48cadeca3695875ba3aeffc78d88718707c01dba3b0919ffe67f06a8958ad84fe441856763419240fecce29236e5cc3dbba23fe2655e75c691e3f3af3f1d45a39aacc88f17d16d91a92dd80801fe0f354098fd07d0270a7b72816cfc62bb9427e3547217d1e9f45bc37a5d4cfb96f378c0092cd70375f73c7be4bb1dcddde1e00ef52c04813d33dd3cdfec6993ef3e8d620b5924cf32d9e037f5b4de703f315a64af423ab2fb07da971d445df4510e3df7269a88ae86311b1246e23f707f0c8130e1f7d5afa1291b497ec9b77d58412f56279b24e4a8bf158bd5079ed826d036d8b949ef4461e75c8ff0c3168b1531aa0002c38bc70ea6410d367c19113ab2e0287da250c399251bcec73684aee1d3d2a8a9a68cec232c0cadaad84bd9008fca527f4cfdf8bd8d41468560e538ed4925a81825a084c725004b84f0db5a7ee25b34d0e5a48477e85fa138617e5830193d9b330d08e4225899cb4dbc2e4684e9c04a5a631d11d7d0cec47bdfeae635048675256c4e3850f5e5093c301920635dc74fcb5ad83eb9b3cd339c8db9f48f462141735baad7621d2ffc696ed77b27d0a8f708e62f434315a6a11e84f45431c46eeba6328cc34644d8148ca48a638be5cffee0c2b74ddd8144d0ce5dfe3a20d19d5ca312b988ba3a9c0bfae7517adf7e4b9f5f7b2fbe4021905fdbedb2fdfa1ee2f9b9b925b19ba33f96fc870e7a80dd68059618b9c2d42599abab19db75b571ecabd4227ad23e69e9005138bdbcbdae71e23b68c3e91a3a624108a19e3f393948dc4d1f0e648e4205006d1d7b74b40898479a42b2d5dfddfd99fbeb18f1fceff36c37871e46cf00bd3120a5b25a26fd51f87a0d439e6b8dfc48bb0549a6c81be18068149e162bd7c74ddb246565ce84e8d80a8cdf8fdaa1f4a1ebde770eeca119797fadc026b48055b1373bccc73a32d0de09f2637c44f3b64dc46170d58a6d1131f400c6565dbe88380e1af7bfe869b7b35dce0466c7a2184271c990115704a5c91bc7d63d3509fd299bec1bcc2c10e09288b7a3e6bc97776bf8547b30a96ce056f8843a628820699604aa5de23f4483923bf47c20c9764a5cdb4a8b6f88cec49ea01ec74003ff47e08dda8a4a7246b2dea3b9d21bfb59a367da08b6160decf4998d504d7c983fb647589779b51f6001f2162c53604bead205c3839880a65e189b0b2619c17c20eb341604fc43a4dd18710e885ab77bdacf8477b554943df995fb9f06e966ba782ba720f6d64a36827e60dd561d4ba37d1e4caeb05d52bee43d010dab11a6b4daed7992c728e5e147d5ea5f2422380f04218e22b593fcd067ce13db02d695c4eebef409e2b7f5cf5ab77ba511229e372c830407f9012cb47eeeed2f9bf6655cacab54828afa037f2e447123f3f69fe1024d99a745d0ab024d5263ee239f0603ec83d0dacfdfa3014263e94d17c77d783ed1782b08fe9fb6ae2029c4c8c7b279c03ac6f155be074548cdb551575ca4c148c0063e7c14bb2c1fa355f15d329c569765ae4f2b738584598c5414ad0e9dae389f92250b9573d3f269cbbb3bedff138b71ce9cc20e296e0e63aea3b4f8fde715cc864de17ab1c59188fca3895a891154eb10cd35720242bfebc16462e003a12cb93448bf260f737f5ebb8fdbbaab9db87d8b6a2a25015b472bc743c070f174b274e954bbc915d5e4a40d617d7ae138cc455233d50fbaea326048112ea14213c1376a0943997011b0eb1f8033375e75fe6a5e287d6ecfb1ad46e979ff2bc107415e9722f989e6a49897c41ee41aab1036b374d5641d0addd31b6c5651afd409ba2a48324ba56a00128467fa036e253c0066df8312c8e6f97e618de7c93f8f548de40c909177150bfb11d97d378491bece626be25a4830cc1ca22c1da543ff23cdf35df2ca5c1cf274a074e84f0f96ce07cea44c82fdd4b85784a5b0276ca7756dd85d19183196f8329d03cd7af4fced2ef65a60d83bfcf878602cb6859555d2c4ccb519734b7fff37496921b1ef7843676411cbc274357f857174e7e34c06866fbe310f02bacb6f63d226fd5d81fd125fe69aee50ff6df2fe55b295bc24e6cc0840cd1788794db4803e0f4f0a956bba4f685860df9ddff28021b8759d8eeacb843b190e75c01da3eeae54949b95e0abf4caf16e5bef7b2e8a72f6e8312c29bf41c4e62a6960fd72abf6f67f3ce774c2c8be343afa4164b4b78e39791ca19541bf047ec8944f7d55d85b8119ee2e8c2c0fd266979a94f633506c35dd73c77593fc6819a1b3054a7e2e70805facbb47dbb79ede2dd26d5d6f566ded8cbfcc87d59f7ff9ad4b12a472e881596e87e9d2391034c9a2c72f86dfb5e7fe6b1a1fc635bd2534d67583680c9bde6189e921fbed38630bd08d08dfd97b9b5e16304f8db0d2f9991d61364837d9512ca0c5e26f82083e4b031d3c18d9d30285ebe64b7912ded6347c6912b50f7beb093bf045464bb7190df2899abbfd904192622f0e36887373b11796df014f514ba3391fa53333871b64dfb5f215158d0a9320de2fad2771c55fd297e464632254e604a408bb3a245b2fd2e40815108efb35fa32b777d46a63159fc71e6cb06b1783ac1d2cec3753f12aacc1d57045af35dd8aa705602171498edb147b19e82ee7bc57713d8dcebdd32d998ad6e1ff80b50205ffd119c33c6d7ff3be57f0fad4f8883c6f030c76220c12e46679129e073e601d1cd55b29dc3b71f19f6525ffbbde849819179f1ea65f74aec7ec06cde845b9e09665c63ca9fb4479e073ad25c70d857f77461c0b35feafcc7f01441d6d57cd5a55475344a4244b76e6c000e0d328a80939470cb8560b2d6f98918ed146280b186c32714e0989f34709635441a741adfc853f738bdc4e96bfc61394d036cf8c517a2ea7ee0ef67f4706a34f97029f6a89bbbc809c9564b3b5852da09959fe6d36c1bb813487d8db6dd23302ba8c393aae42a39715a46ce347584cabfb9b26abceb52ba2ac4507dfd8f1566106265b2aa87c05515f9cafc401d1fcbc3611de29813daba6eebc308f149ffa13c964438dc03a3acb6b37f1250e2d3774929016b78cbb37975be387e47e658057412a334e4283a46ff0201f8bee276ce8fd754fcaecb1caca9469248df53f1798b215b3fd58beb448339a1951b2677d2369ad9cad056924812ebfb8e73115ed893def96680224081e72cb83ea236541ea20a708e5dd4e0fbc901062a70bd1228ab0cd23507e244ccf8a1dd3059ea51f93a3df5824a78592a0b9d41427e7ed76f9773fc8c7caac7d3be3f6d8c981cce2899b10257e40be3825935194e0aebeb11de5df95a57634b4352bf085791d00445210e104acbe5f5a3a6616e3be3ee8ec7ce5184e6fbb73f85f39c7a9d795cb166bee10b98bf8d8192cc324ec725be6366fee9b07d2dd89f8e5db39ec03632cb51a92c4aa3db087b20f35ce5d90ec1c99f7dfaa13c2c4b9976efb5d1e34a643d5c6067707bde547f3c5d139aefa9069415507d521a74c2a3f89887786ce18cc1117197727c9fd39d88784910a1d000a5867f86225d90c18759aa33ad29d5daa388b906c5fb384d77f21eaae3d7589988b4195ff2ba0fee4dd1e62ff85016ee7d7f062f68713f6e3ea896975625cf60252356ab164d7abed91ade6a873d096f9318456cf0d131d020fb1e018424fa051cdd35cc3b82ea787cae08bae8f0489304d92641ddaae11a8b5f24eb5f3cc7280549609629ef131fdd2d616b4bda484627dbca3a4a49fd9ea2be65e2036f0de391abd7e8d7b3347b558b5c237d892078996cfb9dcf83ea4891b3d6da40559e5962f6f96dc0f5870541ec7a392b194e928c895930645e287e06c33b3f33cf735fca4ebec61a1b039fa994352710da0cc8d258776e60ea2e4f7d11e45b8f6ab6e12efda7b5d04e7f437f533cf75b6183a477eeaf81f29b28443bfd18e3b1f4102de0179a5c3ba923729377f420a2a2b9cf67188b6e5ca1852b9af7177978d7a4076709a0626f3efc2ab2c1e1382c714b46325cbe3075e6a40c06ec06daf8fb4f684826f73fd370f371510828d63f275a4f24bee7a55a9857cb7446af0ee458ad5abbafe5f976e58c25e68301011bb82719213f86561873686d49e8caa2adca591fb5bf4fc7c7c6f4c57260fed26e9c8bdc0b2a5cd93fbcbf17fdafc1757187750c8a77caf5f827e6358ce472de32d125a29f83050ab78bda7da9e74ee9740f08dc5a5bdadd1760156704fa5fb6ddac2b24c68930ca5ed9a8843176c784ef3699702ed14127ec8dc3cedddac4831cc69c8132d72af259ac57fb6372af21d16a224d43f5e851bd1fe6c2bb2ab2eac6fc594e8a407f0bd81afda2aff08b8f0f4ba94ee5b895de89d0642824327e90e6596465180410010099b32a0bf2d9fd72f1cdb2e2e08d05a82b66b11fb304cdd5f2f0012dbc3b0be3981fa368fe59ef0da332a4426d9bbd6b6470b20cad98c0e3033d1eda606a86a49d5b75a85efb472bd9c2df4e6ab654cbcd7d1b5726eb184c3d78ea9ca392314187275352e0b739ec38fb2b3f98f99614c1906182f769a2a8ba40f6975c2a343bc60669a965b91b79e5b0b8a89fd9427295b0cfd21bfaf92bec001a2efacbaab8ab0a539ac4bd5530b82596242614feb72569dc6325ea8fbccf9e71087e9255fd108e9a440d0faf32dd2a6e11aad6d55481b3b505d8ba1fff782c44eae7e0b298e8deacdb3b20fdafd69c264dafe69eed85f769e5b93a5b239c49069a26dbb9a737e5179b691b147ca65c26f5c9b71fe13a098e0efa9c3a9263c08e71615e5291edef2267535da2e9df7d34d57bb64ae3297e94d1a714fbb50a8a5e69665e7e50e2599055ae676728fb8eac7a7ce595209cb5d5ee800303ae347a244f8c66e1068dafb548c872314ba8fba86083479f372d8d024c4d2f1f8213303bffb08c6ae81ce966a1a952b8c667a1e6512fb3f6a98176144e011214d729cba92f8d2cff29f596b1eb8a42141b6a725632a16238f3a175ad00641ddd0bef08ec5dea1bd97017233c4b00b1c79ae72b78b1c43daa52add1030bcc821b39aaa71f6739900c6239f492e7d7fe5dbf827e36fc75c25e5b8036c821ea43fd570ab1793dadc54da2e7e5ad4692e45e22adcd136573ce60eb1efe6907d2028b434de88312838c85fcbcff8cabd4971e6d6a8db3e71db95ab6049c11f4d175aae5dfc8cff2f46278060ddc685bcd006285f68a96378363012e416de89fa158b54ce0916d354ae00eba531a45bc47e5681c88d58c035e9e00943199a18f463a63fffe8bdc36652b7305e84d40061923220f8440ed760b6df8cf59cff514396936bb04857c46bbb5589305f71f7349483ded99081914e6e1f8cda611eed8d6a38e5193550ffac5d2a3c01bf4c88eb79d0a15071b478456812f9b0179a634b5a25a81dbdec3d5dbf9787159167a68c5e8fc01e9634fbf407b03a21208c6ade2d1294ac09cac31c71f7b0966d3d08cde4074b57ca0d5a052ac7c730cc449d33121a12ec11ed591f8c9cc7179b84377168235686dbcf92de958e107b072046565f4969799ae779ac8cf514295b0784c14ce24818106167fd8934ffefd77c121952924ffcefd24bc123c0b3913590952bbb6d45ca8068736ed6ac248c3e22940598277ccdd1647ee62b12fed835400f4ece824437d326057ecb00e9d837d1ee81a15d92d9ae2aa53d589beda29ea25a47ba191314ab0fff82c51d6f448dae59f764df77267be57a67ac7e8867c5c59b64a08ef364d3cb59342640ad14e1d4015bdd6201e46431af811c16a4c84671b4f866d69c123c12ff289d1a2f9e76d647c7bd9bf25cc9393dcec3fa4f938c4f451f0f6ec94bc16cf4e9300131c7f14d334aabb4b63bd68fdc0bb2c1d949749104a84f9bc895a39d099cfa31c79427cc310f931bbdf108d2333bef5bb1afb435adb63c3b31915d0abed5d272bd2785dd1629011262f32fb43c344263537e4abbe5406f44cd1cce263988a732829387d60dc5547fa21442c190ac273677f47508dfdd778efe15a90fe65a7bc68348a9449d16a97cd040b4c2455ba65b61c79ecd8ece87d9acfb830192db6d7b8ff48128ac7fc31ee72c3b7e64ad93b0b2a0f8e972c84df697f48f4c1b6447a5b1a1f1eeb9ff1ad07eec22a721bbeb669f21e8f245a38e0e6a45f33ba26660991c41c797b54b9bc286d479f08eba8e165a8f006e1aec5b9c7582de6a779bee40d4b0a279ccaf57e4880e9cc10942137c02f1147a28bd2b4d1537f05ed5442ebc71e0e3d7dc5eddf7b97671d0fab9247147590bde589f8f632a5425f4c63aec197cd23c2f13cac8d0d73b6c201730cd83092a549e9b0a204c7a2cf089c9670c19942fc2d7ef075a8230df0a1745b6157e4a1e17cf4765e8aaf67dd3e590263a37a18f14cb6f3f16d0f8890d12bc734f9fefde402e15da08f184f0a22cbfce80963b3943b0e6e150d7c69cdddec2c6ac110cb585164457dd08d97784aedd3b49b83cf0c39cef0aefcac46968fe323687467df6e2012d88816f1842022825fcccd53ed6f3d773e70120e818709868faf24e4baae411ef7f64bee731e4798343c7ed6ad83d5a658fbbc2b2f16858c2240a76b89a864dee7d3e4b596bd9f5f53f92b080e4d525d6062f2d2179699fdff1586298d033256a09f589710987d3541fce3f53a6162b81bff39d53c38a353bad0921713e1329921ca8a8510947320f4b0a6797d936bee68850bcdc958c28d56318b0c7803ea31317d47c03b43fe7dd1271ea48ceea8196ac0f5007118f81ebe765b4b271ab6a58624583cbe88ef60cb765ab664716fc6be4b4b4ee510231e41475f528f146261df494c3076779f92eb4848b92dba8c77f2d2c39155b0471c1acb209936a6689dde06d695f48bdfd0a8f173b7f27d6f551afcd145783cc482e9ccda482a60bc0ae1c6b2a0363d6767242ccc38081a28e4bdb12a0491716f48a8e63b1a022b37653b7323d83cd19c9bc18ba79404cf95dad277c02fbb1e09631e279d71ad96414896314a50bf6308a77154c5017e46c05bc4e83f6183b87ae3de3202c4a3ff1a2a1149e5e04efb1db09fc5f82fe2085f7b1a0b979b1a32cc344f06f7490550483c41e78bf8210b4389ac646f08d265e266c9999a566cce8b13f361e5032d85e4dbbfac1f416420d98fece1384c88d4a7c4193de759b0cb6020f371c04466077637698e53e7e456d1bc603d75dd4304bd856fcfebc18bd8cf8433ccc53c2f8c453cdfcf101d94b853c1340c18d68c281377266fd7015d2984dece8df45515920c88a5251e9c42614627367e07e8b6406d3974aea39fcda0ff77337d7e317d86eab67b35fc18d8460df318b51f0a0ab027e3acd20306fba446047a30abba6c8ce6865ff39a428e87ec5c508e6515b01da84fca1d3bd1e06f88ed611f96e4f97491aecee22fd795c03751906108a91c9fbb455928cf72028ea2893a4729d616b5ed1411d7aaf7ee145ed5439d5855a967421b54d78189f837b87cd5328efc0c05bb83052131abefea04cc0fd6561f65903e00daf8825b7a077394607ef84c2dbb6ec98fa4c2f8ee24eb55d09aeb3ed8d2f5debc755b1d3fa7e328eeeb4aede12d36ef03b69026048a55a0ab5170512bd8a5affcd5d082358cd71238905840f143cd9a9c7eab968a4c895055294358c78559cbd4f07404ac657f876f96d097fd19a14d82c1de1a166d32eac07c36abec0afedc883fc751c81f6227bf384e56b0724e05e98267f791db75eef6eee89d37dce201833039127f520ad6292ad68f766c288a167cbe710e47d7ac192e579ffe21594e60f8e7c0480508e037cc7b0ad45405f7b97c000b439f2a6314e1db2ea6ac90bf8cd1076616f8777cfde00e06ebebafd94d9f2841ed00de2ad19b340c42cc60806b4482b56369cde2ff129afa1e7fbb4f49c0d8d05698b8125958addb558d3689d4263fdd2aba583b5bc7e3f08e210f37c6476d7d2883308f8c5df41c52c493ff889e0dfdf5909e490290559ed70fb3655c1c1634a20e1cc3f370dce0149808e7d784d85b62ea6c7cc2156da9603dbcc35928d7595a7e22e0c5e473149cba9f111c6d826af2e6f166b685b965373146deac985c5c0a1ce19734d70fdb7ec3ea7474c184c42016b9437cea43fd3044648726a2cd7b73c57a415431138dcfe4a59d38ba1b8c110ebf0b2a975fd526e9d8d5845d10bf0755f9209557d685bbfc37b1cabc83fcb08aa4a593c09c48ba8c32f0b3261496ed0255c80a62f6bf23943a79f7887009b075ee3f49677f2d81d37b2e629b1b18759bba5e4307bbb69adac514771932db5ff921f25a832fc49042a247617f1e2ef188909bd8b41c8d57d13c630f47d066b4e1ff06c21b5a00210e479921ba49fce7f95dad1f59b0ba2f16108e5dde78913c15a37d42ecbd0a9b8362978b9a7cc77f4e403c16ad53467b551c7838b44517003ea610cc0fd25541d2a9a2c7ad9487f548879db727d7e43ddde143b37c1b91e8e12e19278c17001f4b5e87f320580e11aa660e6cbf430b828a0f38779ba67ae1f34de9d725c810a77131285e17d432f944f8808760434bdf24c660144cafd9df697db959e4ad86f80a01213431b415d725789b937c5dd3249c8db620ec3993e8f8d87ef3e1f26c2c4b1e50f5b6fa7f508822076ea1067d4fda22dc27495b641e7d7bf22abe11900a9fd27f917725767b895c36d336b1d57121022e1968e5342769058d7ce7bb087807aa8a023788be67930bd1a1f6279ccd828eb3dda46fad66b5db5cc0b953ce3aea655a4e36afcf2af428fcd5f0c71297d20d36becb78a782d8899c04fa9ee1678a8de2c0a6326d9a31ce336ec02c2419d5d23240d5aa89179391892e0dc6aff4f1423d5fcab1bda005a5228a036c2c992732360bcc7cbaf97d272823da69a3483f4d69604ff401f803d312ce4b3964cb46834e95e082c618ebaaaf0540c67b7d260272f971a8b9f5c001b19168bf2b4ae37e76e3b9f6d52c9169f586d7798e178924b458ee68ad5863392cb0066fc250d2e8560a10420b8d10934c9fcd762d6727b0a639380963ba189e104a0144cd8c42519c3b1573d500202ef0f66f7e6b61a411b6542efed3367c3110ef72a6de9cb281a2127340393355d355382024a97049b0f14ef9bde44821141f637b70eea9ffffdc7380110ec84be6828004b45855391a6eb5ddf96930127361512187f5b3a3ee9c2a910ce64f9a37904ec8c14d33616ef4ed89d292827440b0e3dec8f5c5047f9f1cd85bedd34382e70f470e08b0fbbfbed18794fc0939ba3ed67720e5f965b7861ea667f5409f14a021a0a07b3775e84bfb2968770ea08862d6dd2404595e6ab6ef1402919b23d9283ea969de77a96a72973cc7077f93a0d5b4c9e2fc1827c29c4fff6849a0a54d11517917163482fa476edf423c5086901aace21956512d88c5f3e811e8cd38d1f8f4f7883dd78e6485ceef2b4bfb79bbc26c5343a308ef5a32a28ec1e7cb0efb25f1e2dfd22aba0377580df291c14b5c41f63f9e73849325d83baa5edc62c3133fdd750c7b8e7b7e915498f78d982481bab831da2579576734d69b1120d3359ff0490c29ffb34f737a5b6bd88776658ecfc2144c985c3738485dd1006a36ac02e02b5ecdd6cba786e1fc4058d8d659a5dbbd327e89492f16d492d6be38745987708748782c501302260fd383604ec5ba500aa82920a6b37f0ba02ab76f9c8d19f59b9cca80a0d1a3964145642caad50206aadf763f14f7c185a7bcc4b01e6d2b3b669023ec4401604d74b81b5c8adee35cb7d08f28f0a55b27fa35965b725e967d54a081369ba207a8cee96360b423d2205605473ec5c457dd646e429ae6e25b2d2da3b3200a3b1a4a053bab2b61a430a413110e889b1980a155a2fc0e6d6c059b34395f11440d18f401d45d40224399bedf18baa6c86ef8aec715782a379d3bc98b0dbc62d56f489d04458f63efeac6b27e00416415ec83c84db0a4f9ab1fd5d880b3634556417f595c7d357cdb255601df07d14ee8da6fd1c87ec05d8c2fafdff52be85b83b35f2948f427dfc06a0c2b5f23720a3937639d5ea0214b219bf91bbfff95b3f23935f44b500d953792521d743bb8a2dc8ea5e7182954ab3ab386fec568b1fdd31000fb3fe5923bd0046790f3ecaec9533942006114dabbfd0515584502cbb99068b4fbb05c0b740e0001008f96392c3d2a82f6280c00000000bd3323f92c48232cda50c6f9c855c85f1a272264e7aad1146982cb6ddaa62b24bdb04a24bc3a560000000000b2a9064629020000000000"], 0x241c}, 0x1, 0x0, 0x0, 0x54}, 0x40805) 11:55:58 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 18) tgkill(r0, r1, 0xb) 11:55:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x6, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:55:58 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/raw6\x00') pread64(r1, &(0x7f0000000140)=""/217, 0xd9, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x14) setsockopt$sock_int(r0, 0x1, 0x0, 0x0, 0xd) [ 575.960174] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 575.976018] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 11:55:58 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 11:55:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 11:55:58 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 19) tgkill(r0, r1, 0xb) [ 576.172137] FAULT_INJECTION: forcing a failure. [ 576.172137] name failslab, interval 1, probability 0, space 0, times 0 [ 576.173138] CPU: 0 UID: 0 PID: 6105 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 576.173154] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 576.173162] Call Trace: [ 576.173156] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 576.173168] [ 576.173174] dump_stack_lvl+0xfa/0x120 [ 576.173202] should_fail_ex+0x4d7/0x5e0 [ 576.173225] should_failslab+0xc2/0x120 [ 576.173241] __kmalloc_node_track_caller_noprof+0xb8/0x490 [ 576.173263] ? register_pidns_sysctls+0x4b/0x1c0 [ 576.173281] kmemdup_noprof+0x2b/0x60 [ 576.173298] register_pidns_sysctls+0x4b/0x1c0 [ 576.173319] copy_pid_ns+0x54c/0xd20 [ 576.173346] ? __pfx_copy_pid_ns+0x10/0x10 [ 576.173367] ? down_read+0x1b1/0x470 [ 576.173383] ? __pfx___up_read+0x10/0x10 [ 576.173406] ? lock_release+0xc8/0x290 [ 576.173431] ? copy_ipcs+0xb7/0x630 [ 576.173461] create_new_namespaces+0x2b2/0xab0 [ 576.173493] copy_namespaces+0x45c/0x580 [ 576.173518] copy_process+0x26d5/0x73e0 [ 576.173535] ? __pfx_perf_trace_lock+0x10/0x10 [ 576.173569] ? __pfx_copy_process+0x10/0x10 [ 576.173585] ? __might_fault+0xe0/0x190 [ 576.173616] ? _copy_from_user+0x5b/0xd0 [ 576.173639] kernel_clone+0xea/0x7f0 [ 576.173653] ? get_pid_task+0xfd/0x250 [ 576.173679] ? __pfx_kernel_clone+0x10/0x10 [ 576.173693] ? perf_trace_lock+0xb5/0x5d0 [ 576.173719] ? find_held_lock+0x2b/0x80 [ 576.173741] ? ksys_write+0x121/0x240 [ 576.173758] ? lock_is_held_type+0x9e/0x120 [ 576.173784] __do_sys_clone3+0x1f5/0x280 [ 576.173800] ? __pfx___do_sys_clone3+0x10/0x10 [ 576.173833] ? __fget_files+0x20d/0x3b0 [ 576.173865] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 576.173892] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 576.173920] ? ksys_write+0x1a3/0x240 [ 576.173934] ? __pfx_ksys_write+0x10/0x10 [ 576.173959] do_syscall_64+0xbf/0x360 [ 576.173985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.174001] RIP: 0033:0x7ffb744edb19 [ 576.174013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 576.174028] RSP: 002b:00007ffb71a63188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 576.174043] RAX: ffffffffffffffda RBX: 00007ffb74600f60 RCX: 00007ffb744edb19 [ 576.174054] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 576.174063] RBP: 00007ffb71a631d0 R08: 0000000000000000 R09: 0000000000000000 [ 576.174073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 576.174082] R13: 00007ffeb487a35f R14: 00007ffb71a63300 R15: 0000000000022000 [ 576.174108] 11:55:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) (fail_nth: 25) 11:55:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x7, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:55:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) [ 576.262902] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 11:56:09 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 20) tgkill(r0, r1, 0xb) 11:56:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x8, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:56:09 executing program 7: r0 = msgget(0x2, 0x200) msgrcv(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007dba4e57a264eaaf00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007a68af5fe28f7ce55e3a8b5180caf830ccd9620d512919cb8374e7df9fed3a88728eafcb902d1e6b2aaba3ef98e4531f7e481fb589de4d633b1ba956aaa7d607a649c49bdfc7f309a8f0e886d2db9e29598a14ece665bba13f3fa9031dd25f2ebf1c837615114f6e4957b6514b8b97417622c7775175fc73df9934465744eff0d30e7e8f15d4ae864d615061c8c231d9d5d97cae92acd1c36366b87a838152e31eea8817d77c164bf951e76d62152d4895"], 0x103, 0x3, 0x3000) msgsnd(r0, &(0x7f0000000280)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000280)=""/79) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000000), 0x4) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/raw6\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = open(&(0x7f0000000300)='./file0\x00', 0x80041, 0xb5) sendmsg$NL80211_CMD_NEW_MPATH(r5, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, 0x0, 0x480, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x53}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) dup3(r4, r1, 0x80000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000000240)={0x0, 'ipvlan0\x00', {}, 0x824}) pread64(r3, &(0x7f0000000140)=""/217, 0xd9, 0x0) sendmsg$SOCK_DESTROY(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000004a80)=ANY=[@ANYBLOB="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"], 0x241c}, 0x1, 0x0, 0x0, 0x54}, 0x40805) 11:56:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) (fail_nth: 26) 11:56:09 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x40e5, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, 0x3}, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) fcntl$dupfd(r1, 0x0, r0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x3, 0x8a, 0x79, 0x87, 0x0, 0x1, 0x124281, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x4, @perf_bp={&(0x7f0000000040), 0x5}, 0x10020, 0x3, 0x2, 0x0, 0xffffffff, 0x1, 0x7, 0x0, 0xed1, 0x0, 0x80000001}, 0xffffffffffffffff, 0xc, r0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r2, &(0x7f0000000900)="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", 0x44f) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) sendfile(r2, r3, 0x0, 0xfdef) 11:56:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x1c, r1, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 11:56:09 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) setsockopt$packet_add_memb(r2, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 11:56:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 11:56:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x9, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 587.393116] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 587.417764] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 11:56:09 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 21) tgkill(r0, r1, 0xb) 11:56:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) (fail_nth: 27) 11:56:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0xf, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:56:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) [ 587.561115] FAULT_INJECTION: forcing a failure. [ 587.561115] name failslab, interval 1, probability 0, space 0, times 0 [ 587.562278] CPU: 1 UID: 0 PID: 6149 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 587.562295] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 587.562303] Call Trace: [ 587.562307] [ 587.562312] dump_stack_lvl+0xfa/0x120 [ 587.562337] should_fail_ex+0x4d7/0x5e0 [ 587.562360] ? __register_sysctl_table+0xb5/0x16a0 [ 587.562377] should_failslab+0xc2/0x120 [ 587.562392] __kmalloc_noprof+0xb4/0x4b0 [ 587.562417] __register_sysctl_table+0xb5/0x16a0 [ 587.562432] ? kasan_save_track+0x14/0x30 [ 587.562446] ? __kasan_kmalloc+0x7f/0x90 [ 587.562462] ? __pfx___register_sysctl_table+0x10/0x10 [ 587.562478] ? register_pidns_sysctls+0x4b/0x1c0 [ 587.562493] ? __asan_memcpy+0x3d/0x60 [ 587.562508] register_pidns_sysctls+0x119/0x1c0 [ 587.562523] copy_pid_ns+0x54c/0xd20 [ 587.562543] ? __pfx_copy_pid_ns+0x10/0x10 [ 587.562557] ? down_read+0x1b1/0x470 [ 587.562569] ? __pfx___up_read+0x10/0x10 [ 587.562586] ? lock_release+0xc8/0x290 [ 587.562608] ? copy_ipcs+0xb7/0x630 [ 587.562629] create_new_namespaces+0x2b2/0xab0 [ 587.562652] copy_namespaces+0x45c/0x580 [ 587.562670] copy_process+0x26d5/0x73e0 [ 587.562682] ? __pfx_perf_trace_lock+0x10/0x10 [ 587.562705] ? __pfx_copy_process+0x10/0x10 [ 587.562717] ? __might_fault+0xe0/0x190 [ 587.562735] ? _copy_from_user+0x5b/0xd0 [ 587.562752] kernel_clone+0xea/0x7f0 [ 587.562762] ? get_pid_task+0xfd/0x250 [ 587.562781] ? __pfx_kernel_clone+0x10/0x10 [ 587.562791] ? perf_trace_lock+0xb5/0x5d0 [ 587.562809] ? find_held_lock+0x2b/0x80 [ 587.562826] ? ksys_write+0x121/0x240 [ 587.562838] ? lock_is_held_type+0x9e/0x120 [ 587.562857] __do_sys_clone3+0x1f5/0x280 [ 587.562869] ? __pfx___do_sys_clone3+0x10/0x10 [ 587.562892] ? __fget_files+0x20d/0x3b0 [ 587.562916] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 587.562935] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 587.562955] ? ksys_write+0x1a3/0x240 [ 587.562966] ? __pfx_ksys_write+0x10/0x10 [ 587.562984] do_syscall_64+0xbf/0x360 [ 587.563004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.563017] RIP: 0033:0x7ffb744edb19 [ 587.563026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 587.563037] RSP: 002b:00007ffb71a63188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 587.563049] RAX: ffffffffffffffda RBX: 00007ffb74600f60 RCX: 00007ffb744edb19 [ 587.563057] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 587.563064] RBP: 00007ffb71a631d0 R08: 0000000000000000 R09: 0000000000000000 [ 587.563070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 587.563077] R13: 00007ffeb487a35f R14: 00007ffb71a63300 R15: 0000000000022000 [ 587.563096] 11:56:09 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) setsockopt$packet_add_memb(r2, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 11:56:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = memfd_create(&(0x7f0000000080)='\x00', 0x3) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f00000000c0)={"3b03b9ec0f6849977edcdda6e1ba4ed5", 0x0, 0x0, {0x7f87, 0x1}, {0x10000, 0x2}, 0xc00, [0x3f, 0x8, 0xffffffffffffff80, 0x3, 0x20, 0x6f3, 0x80000001, 0x0, 0x9, 0x5, 0x6, 0x4, 0x0, 0x7, 0x9, 0x6]}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x800, 0x49}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x38}}, 0x0) [ 587.693549] FAULT_INJECTION: forcing a failure. [ 587.693549] name failslab, interval 1, probability 0, space 0, times 0 [ 587.694721] CPU: 1 UID: 0 PID: 6154 Comm: syz-executor.5 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 587.694761] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 587.694778] Call Trace: [ 587.694788] [ 587.694798] dump_stack_lvl+0xfa/0x120 [ 587.694850] should_fail_ex+0x4d7/0x5e0 [ 587.694882] ? ieee80211_vif_use_reserved_switch+0x15be/0x2010 [ 587.694903] should_failslab+0xc2/0x120 [ 587.694919] __kmalloc_noprof+0xb4/0x4b0 [ 587.694940] ? lock_is_held_type+0x9e/0x120 [ 587.694961] ieee80211_vif_use_reserved_switch+0x15be/0x2010 [ 587.694990] ieee80211_link_use_reserved_context+0x298/0x410 [ 587.695013] __ieee80211_csa_finalize+0x204/0x10c0 [ 587.695037] ? __pfx___ieee80211_csa_finalize+0x10/0x10 [ 587.695059] ? cfg80211_ch_switch_started_notify+0x1b5/0x3e0 [ 587.695079] __ieee80211_channel_switch+0x1669/0x2610 [ 587.695100] ? __pfx___ieee80211_channel_switch+0x10/0x10 [ 587.695132] ? lock_is_held_type+0x9e/0x120 [ 587.695155] nl80211_channel_switch+0xbe7/0xfb0 [ 587.695177] ? __pfx_nl80211_channel_switch+0x10/0x10 [ 587.695235] ? nl80211_pre_doit+0x111/0x980 [ 587.695256] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 587.695276] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 587.695302] ? security_capable+0x2f/0x90 [ 587.695319] ? ns_capable+0xe2/0x120 [ 587.695339] genl_rcv_msg+0x532/0x7e0 [ 587.695358] ? __pfx_genl_rcv_msg+0x10/0x10 [ 587.695375] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 587.695390] ? __pfx_nl80211_channel_switch+0x10/0x10 [ 587.695424] ? __pfx_nl80211_post_doit+0x10/0x10 [ 587.695446] netlink_rcv_skb+0x147/0x430 [ 587.695460] ? __pfx_genl_rcv_msg+0x10/0x10 [ 587.695478] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 587.695503] ? netlink_deliver_tap+0x1ae/0xce0 [ 587.695515] ? selinux_netlink_send+0x507/0x880 [ 587.695528] ? is_vmalloc_addr+0x86/0xa0 [ 587.695552] genl_rcv+0x28/0x40 [ 587.695565] netlink_unicast+0x5a7/0x870 [ 587.695583] ? __pfx_netlink_unicast+0x10/0x10 [ 587.695611] netlink_sendmsg+0x8ac/0xd80 [ 587.695630] ? __pfx_netlink_sendmsg+0x10/0x10 [ 587.695655] ____sys_sendmsg+0xa67/0xc20 [ 587.695675] ? copy_msghdr_from_user+0xfb/0x150 [ 587.695689] ? __pfx_____sys_sendmsg+0x10/0x10 [ 587.695714] ? lock_acquire+0x15e/0x2f0 [ 587.695732] ___sys_sendmsg+0x10f/0x1b0 [ 587.695747] ? __pfx____sys_sendmsg+0x10/0x10 [ 587.695760] ? perf_trace_lock+0xb5/0x5d0 [ 587.695779] ? __pfx_perf_trace_lock+0x10/0x10 [ 587.695792] ? proc_fail_nth_write+0x97/0x220 [ 587.695809] ? lock_acquire+0x15e/0x2f0 [ 587.695823] ? __fget_files+0x34/0x3b0 [ 587.695843] ? find_held_lock+0x2b/0x80 [ 587.695861] ? __fget_files+0x203/0x3b0 [ 587.695880] ? lock_release+0xc8/0x290 [ 587.695897] ? __fget_files+0x20d/0x3b0 [ 587.695925] __sys_sendmsg+0x150/0x200 [ 587.695939] ? __pfx___sys_sendmsg+0x10/0x10 [ 587.695960] ? __pfx_ksys_write+0x10/0x10 [ 587.695981] do_syscall_64+0xbf/0x360 [ 587.696003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.696016] RIP: 0033:0x7f4e6e1d6b19 [ 587.696027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 587.696039] RSP: 002b:00007f4e6b74c188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 587.696051] RAX: ffffffffffffffda RBX: 00007f4e6e2e9f60 RCX: 00007f4e6e1d6b19 [ 587.696060] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000003 [ 587.696067] RBP: 00007f4e6b74c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 587.696075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 587.696082] R13: 00007ffcc6516def R14: 00007f4e6b74c300 R15: 0000000000022000 [ 587.696103] [ 587.723365] wlan1: failed to finalize CSA on link 0, disconnecting [ 587.751802] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode 11:56:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0xb7, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 587.759145] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 11:56:09 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 22) tgkill(r0, r1, 0xb) 11:56:09 executing program 7: r0 = msgget(0x2, 0x200) msgrcv(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007dba4e57a264eaaf00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007a68af5fe28f7ce55e3a8b5180caf830ccd9620d512919cb8374e7df9fed3a88728eafcb902d1e6b2aaba3ef98e4531f7e481fb589de4d633b1ba956aaa7d607a649c49bdfc7f309a8f0e886d2db9e29598a14ece665bba13f3fa9031dd25f2ebf1c837615114f6e4957b6514b8b97417622c7775175fc73df9934465744eff0d30e7e8f15d4ae864d615061c8c231d9d5d97cae92acd1c36366b87a838152e31eea8817d77c164bf951e76d62152d4895"], 0x103, 0x3, 0x3000) msgsnd(r0, &(0x7f0000000280)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000280)=""/79) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000000), 0x4) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/raw6\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = open(&(0x7f0000000300)='./file0\x00', 0x80041, 0xb5) sendmsg$NL80211_CMD_NEW_MPATH(r5, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, 0x0, 0x480, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x53}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) dup3(r4, r1, 0x80000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000000240)={0x0, 'ipvlan0\x00', {}, 0x824}) pread64(r3, &(0x7f0000000140)=""/217, 0xd9, 0x0) 11:56:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) (fail_nth: 28) 11:56:18 executing program 7: r0 = msgget(0x2, 0x200) msgrcv(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007dba4e57a264eaaf00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007a68af5fe28f7ce55e3a8b5180caf830ccd9620d512919cb8374e7df9fed3a88728eafcb902d1e6b2aaba3ef98e4531f7e481fb589de4d633b1ba956aaa7d607a649c49bdfc7f309a8f0e886d2db9e29598a14ece665bba13f3fa9031dd25f2ebf1c837615114f6e4957b6514b8b97417622c7775175fc73df9934465744eff0d30e7e8f15d4ae864d615061c8c231d9d5d97cae92acd1c36366b87a838152e31eea8817d77c164bf951e76d62152d4895"], 0x103, 0x3, 0x3000) msgsnd(r0, &(0x7f0000000280)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000280)=""/79) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000000), 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/raw6\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = open(&(0x7f0000000300)='./file0\x00', 0x80041, 0xb5) sendmsg$NL80211_CMD_NEW_MPATH(r4, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, 0x0, 0x480, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x53}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) dup3(r3, r1, 0x80000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000240)={0x0, 'ipvlan0\x00', {}, 0x824}) 11:56:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 11:56:18 executing program 6: write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xf, 0x1, {{0x8, 0x0, 0x1}, 0x2}}, 0x18) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f00000000c0)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 11:56:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0xf0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:56:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x44, r5, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x150, r2, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x80}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x200}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x120, 0x3, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xb3, 0x1, "ce7d554d9a91835254bb385df7cacc07da8f6fc919512cc9f6f6bfff28113f802c3d46838e4e7897bd2017c23507db172bffef08ce43b443b51d11cbf9e1966fdc447580c1228b26107e2a09ea9cd8ae96c6e3a9709875279bb6234052f85f03b012b6489c36a399c2ed3675a0b46f690e13a9817e3f25c5b0b4a98ae0a51846c5ea8fa35b2c75dd335a4cd53bc1f04671bc0da15358fceb1efc7aed8eb6b8580984f7bb92bbcdc47b30a4df26c844"}}, {0x64, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x60, 0x2, "95246e327ece1639403cdef576aa42d88a3a88a468c464dfbcfdb24d4c9ca096cf80b82834188dc07fb473246dc6e4f689e4b67b2e49a25cdd5b76ae5217ef75ee59ef774c8e6a1edbe7b2deecf19cb636b1915fe3f723b09acfe37e"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x150}}, 0x40000) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x24, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@chandef_params, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xca}]}, 0x24}}, 0x0) 11:56:18 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 23) tgkill(r0, r1, 0xb) 11:56:18 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) setsockopt$packet_add_memb(r2, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) [ 596.141846] FAULT_INJECTION: forcing a failure. [ 596.141846] name failslab, interval 1, probability 0, space 0, times 0 [ 596.142947] CPU: 1 UID: 0 PID: 6186 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 596.142963] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 596.142970] Call Trace: [ 596.142974] [ 596.142978] dump_stack_lvl+0xfa/0x120 [ 596.143002] should_fail_ex+0x4d7/0x5e0 [ 596.143024] ? __register_sysctl_table+0xd4f/0x16a0 [ 596.143041] should_failslab+0xc2/0x120 [ 596.143056] __kmalloc_noprof+0xb4/0x4b0 [ 596.143074] ? lock_release+0xc8/0x290 [ 596.143093] __register_sysctl_table+0xd4f/0x16a0 [ 596.143114] ? __pfx___register_sysctl_table+0x10/0x10 [ 596.143129] ? register_pidns_sysctls+0x4b/0x1c0 [ 596.143144] ? __asan_memcpy+0x3d/0x60 [ 596.143159] register_pidns_sysctls+0x119/0x1c0 [ 596.143173] copy_pid_ns+0x54c/0xd20 [ 596.143193] ? __pfx_copy_pid_ns+0x10/0x10 [ 596.143207] ? down_read+0x1b1/0x470 [ 596.143219] ? __pfx___up_read+0x10/0x10 [ 596.143236] ? lock_release+0xc8/0x290 [ 596.143253] ? copy_ipcs+0xb7/0x630 [ 596.143275] create_new_namespaces+0x2b2/0xab0 [ 596.143297] copy_namespaces+0x45c/0x580 [ 596.143315] copy_process+0x26d5/0x73e0 [ 596.143327] ? __pfx_perf_trace_lock+0x10/0x10 [ 596.143351] ? __pfx_copy_process+0x10/0x10 [ 596.143362] ? __might_fault+0xe0/0x190 [ 596.143380] ? _copy_from_user+0x5b/0xd0 [ 596.143398] kernel_clone+0xea/0x7f0 [ 596.143408] ? get_pid_task+0xfd/0x250 [ 596.143426] ? __pfx_kernel_clone+0x10/0x10 [ 596.143436] ? perf_trace_lock+0xb5/0x5d0 [ 596.143455] ? find_held_lock+0x2b/0x80 [ 596.143471] ? ksys_write+0x121/0x240 [ 596.143483] ? lock_is_held_type+0x9e/0x120 [ 596.143503] __do_sys_clone3+0x1f5/0x280 [ 596.143514] ? __pfx___do_sys_clone3+0x10/0x10 [ 596.143551] ? __fget_files+0x20d/0x3b0 [ 596.143575] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 596.143594] ? fput+0x6a/0x100 [ 596.143612] ? ksys_write+0x1a3/0x240 [ 596.143623] ? __pfx_ksys_write+0x10/0x10 [ 596.143641] do_syscall_64+0xbf/0x360 [ 596.143661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.143674] RIP: 0033:0x7ffb744edb19 [ 596.143683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 596.143694] RSP: 002b:00007ffb71a63188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 596.143705] RAX: ffffffffffffffda RBX: 00007ffb74600f60 RCX: 00007ffb744edb19 [ 596.143713] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 596.143720] RBP: 00007ffb71a631d0 R08: 0000000000000000 R09: 0000000000000000 [ 596.143727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 596.143734] R13: 00007ffeb487a35f R14: 00007ffb71a63300 R15: 0000000000022000 [ 596.143753] [ 596.164491] sysctl could not get directory: /kernel -12 [ 596.186374] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 596.207300] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 11:56:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x300, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:56:18 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 11:56:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 11:56:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:56:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x500, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:56:18 executing program 7: r0 = msgget(0x2, 0x200) msgrcv(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007dba4e57a264eaaf00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007a68af5fe28f7ce55e3a8b5180caf830ccd9620d512919cb8374e7df9fed3a88728eafcb902d1e6b2aaba3ef98e4531f7e481fb589de4d633b1ba956aaa7d607a649c49bdfc7f309a8f0e886d2db9e29598a14ece665bba13f3fa9031dd25f2ebf1c837615114f6e4957b6514b8b97417622c7775175fc73df9934465744eff0d30e7e8f15d4ae864d615061c8c231d9d5d97cae92acd1c36366b87a838152e31eea8817d77c164bf951e76d62152d4895"], 0x103, 0x3, 0x3000) msgsnd(r0, &(0x7f0000000280)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000280)=""/79) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000000), 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/raw6\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = open(&(0x7f0000000300)='./file0\x00', 0x80041, 0xb5) sendmsg$NL80211_CMD_NEW_MPATH(r4, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, 0x0, 0x480, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x53}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) dup3(r3, r1, 0x80000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 11:56:18 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 24) tgkill(r0, r1, 0xb) [ 596.371319] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 596.395845] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 11:56:18 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 11:56:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b53d02d5786466293b967ac6ad04869f53d0e5c982edc3ab3ee41816dd590ea863bc1915c7d322ced624002f96c1ce23b8018703d54519ecf2f40cb10024736e25b22a9da790dfe29a08734e37e957bc116f06799b99c088a23ca7e4312c49ba6718980686367b0c4c8114772d720a86991907ea886bf14397062779e3fc831751f7b2f21e6fe01be52aa73a3e375b6a8267e1f124167c4edcf47ce32c4399b4bf3edf5ec400efcfd3afe48460aa022a471cf6112651efa9b9dc798aa8a40c744eb0deddab8e0068276e320f346a4d4f7a1f18bf968d9767f00239", @ANYRES32=r3, @ANYBLOB="080026006c0900000800b70000000000"], 0x2c}}, 0x0) 11:56:18 executing program 6: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000240)=0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000c80)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="bbc6b1ca293ef44ca3ee1b36d403cfd882f98c7f5c4d030000000000000033d491bd028be9381d4f7c3cdf2626e4c4c9a36f7d61e079339008002ad77785fd2ab77a7c0ab2f9ba25b9"]) r3 = openat2(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x8820, 0x59, 0x17}, 0x18) kcmp(0x0, r1, 0x0, r2, r3) r4 = openat2(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x801, 0x100, 0x9}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="03100000040000002e2f66696c653000"]) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000380)={0x4, 0x2, 0x5, 0x3ff, 0x7, [{0x2, 0x4, 0x81, '\x00', 0x801}, {0x7f, 0xa00000000000000, 0x3ff, '\x00', 0x503}, {0x6, 0x8001, 0xfff, '\x00', 0x310}, {0xfffffffffffffff8, 0x8001, 0x1, '\x00', 0x804}, {0x48e7, 0x8, 0x3}, {0x2, 0xfffffffffffffffd, 0x1ff, '\x00', 0x2800}, {0x3e, 0x9, 0x5, '\x00', 0xc}]}) poll(&(0x7f0000000540)=[{0xffffffffffffffff, 0x7449}, {r5, 0xc}, {r4, 0x1020}, {0xffffffffffffffff, 0xa470}, {0xffffffffffffffff, 0x14b5}, {r4, 0xb381}], 0x6, 0x3) r7 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000600)={0x5bc, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x599, 0x33, @data_frame={@qos_no_ht={{@type01={{0x0, 0x2, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_a, @from_mac=@device_b, @broadcast, {0xc, 0xff7}}, {0x8, 0x1, 0x2, 0x0, 0x7}}, {@type01={{0x0, 0x2, 0xc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x7b1}, @broadcast, @random="0b87cecfb57a", @random="926841abe077", {0x4, 0x3}}, {0x7, 0x1, 0x0, 0x1, 0x5}}}, @random="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"}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x5bc}, 0x1, 0x0, 0x0, 0x40000}, 0x10) fcntl$setstatus(r8, 0x4, 0x46400) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x206, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x0, [{{0x9, 0x2, 0x48}}]}}, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) [ 596.515334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.521272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.524750] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 596.545972] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 596.599791] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 596.605435] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 11:56:27 executing program 7: r0 = msgget(0x2, 0x200) msgrcv(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007dba4e57a264eaaf00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007a68af5fe28f7ce55e3a8b5180caf830ccd9620d512919cb8374e7df9fed3a88728eafcb902d1e6b2aaba3ef98e4531f7e481fb589de4d633b1ba956aaa7d607a649c49bdfc7f309a8f0e886d2db9e29598a14ece665bba13f3fa9031dd25f2ebf1c837615114f6e4957b6514b8b97417622c7775175fc73df9934465744eff0d30e7e8f15d4ae864d615061c8c231d9d5d97cae92acd1c36366b87a838152e31eea8817d77c164bf951e76d62152d4895"], 0x103, 0x3, 0x3000) msgsnd(r0, &(0x7f0000000280)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000280)=""/79) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000000), 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/raw6\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = open(&(0x7f0000000300)='./file0\x00', 0x80041, 0xb5) sendmsg$NL80211_CMD_NEW_MPATH(r4, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, 0x0, 0x480, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x53}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) dup3(r3, r1, 0x80000) socket$nl_generic(0x10, 0x3, 0x10) 11:56:27 executing program 6: creat(&(0x7f0000000000)='./file0/file0\x00', 0x182) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_cancel(r0, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3530725f}) 11:56:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r0, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket(0x1a, 0x4, 0x6) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r5, 0x20, 0x70bd27, 0x0, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x2) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r5, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_FLOW={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) 11:56:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:56:27 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 11:56:27 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 25) tgkill(r0, r1, 0xb) 11:56:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x600, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:56:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) [ 605.685838] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 605.704900] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 605.747998] FAULT_INJECTION: forcing a failure. [ 605.747998] name failslab, interval 1, probability 0, space 0, times 0 [ 605.748954] CPU: 1 UID: 0 PID: 6253 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 605.748970] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 605.748977] Call Trace: [ 605.748982] [ 605.748987] dump_stack_lvl+0xfa/0x120 [ 605.749011] should_fail_ex+0x4d7/0x5e0 [ 605.749037] ? copy_net_ns+0xdb/0x650 [ 605.749052] should_failslab+0xc2/0x120 [ 605.749067] __kmalloc_noprof+0xb4/0x4b0 [ 605.749086] ? lock_release+0xc8/0x290 [ 605.749105] copy_net_ns+0xdb/0x650 [ 605.749119] ? copy_cgroup_ns+0x70/0x700 [ 605.749139] create_new_namespaces+0x3f6/0xab0 [ 605.749162] copy_namespaces+0x45c/0x580 [ 605.749180] copy_process+0x26d5/0x73e0 [ 605.749192] ? __pfx_perf_trace_lock+0x10/0x10 [ 605.749216] ? __pfx_copy_process+0x10/0x10 [ 605.749228] ? __might_fault+0xe0/0x190 [ 605.749246] ? _copy_from_user+0x5b/0xd0 [ 605.749266] kernel_clone+0xea/0x7f0 [ 605.749277] ? get_pid_task+0xfd/0x250 [ 605.749296] ? __pfx_kernel_clone+0x10/0x10 [ 605.749306] ? perf_trace_lock+0xb5/0x5d0 [ 605.749325] ? find_held_lock+0x2b/0x80 [ 605.749341] ? ksys_write+0x121/0x240 [ 605.749354] ? lock_is_held_type+0x9e/0x120 [ 605.749374] __do_sys_clone3+0x1f5/0x280 [ 605.749385] ? __pfx___do_sys_clone3+0x10/0x10 [ 605.749408] ? __fget_files+0x20d/0x3b0 [ 605.749432] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 605.749451] ? fput+0x6a/0x100 [ 605.749465] ? ksys_write+0x1a3/0x240 [ 605.749476] ? __pfx_ksys_write+0x10/0x10 [ 605.749494] do_syscall_64+0xbf/0x360 [ 605.749514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.749526] RIP: 0033:0x7ffb744edb19 [ 605.749535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 605.749546] RSP: 002b:00007ffb71a63188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 605.749557] RAX: ffffffffffffffda RBX: 00007ffb74600f60 RCX: 00007ffb744edb19 [ 605.749565] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 605.749572] RBP: 00007ffb71a631d0 R08: 0000000000000000 R09: 0000000000000000 [ 605.749579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 605.749586] R13: 00007ffeb487a35f R14: 00007ffb71a63300 R15: 0000000000022000 [ 605.749605] 11:56:27 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) [ 605.830644] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode 11:56:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x2, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:56:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) [ 605.855449] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 11:56:28 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 26) tgkill(r0, r1, 0xb) 11:56:28 executing program 7: r0 = msgget(0x2, 0x200) msgrcv(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007dba4e57a264eaaf00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007a68af5fe28f7ce55e3a8b5180caf830ccd9620d512919cb8374e7df9fed3a88728eafcb902d1e6b2aaba3ef98e4531f7e481fb589de4d633b1ba956aaa7d607a649c49bdfc7f309a8f0e886d2db9e29598a14ece665bba13f3fa9031dd25f2ebf1c837615114f6e4957b6514b8b97417622c7775175fc73df9934465744eff0d30e7e8f15d4ae864d615061c8c231d9d5d97cae92acd1c36366b87a838152e31eea8817d77c164bf951e76d62152d4895"], 0x103, 0x3, 0x3000) msgsnd(r0, &(0x7f0000000280)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000280)=""/79) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000000), 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/raw6\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = open(&(0x7f0000000300)='./file0\x00', 0x80041, 0xb5) sendmsg$NL80211_CMD_NEW_MPATH(r4, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, 0x0, 0x480, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x53}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) dup3(r3, r1, 0x80000) [ 606.010948] FAULT_INJECTION: forcing a failure. [ 606.010948] name failslab, interval 1, probability 0, space 0, times 0 [ 606.012669] CPU: 0 UID: 0 PID: 6275 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 606.012700] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 606.012713] Call Trace: [ 606.012722] [ 606.012731] dump_stack_lvl+0xfa/0x120 [ 606.012772] should_fail_ex+0x4d7/0x5e0 [ 606.012815] ? copy_net_ns+0xdb/0x650 [ 606.012843] should_failslab+0xc2/0x120 [ 606.012870] __kmalloc_noprof+0xb4/0x4b0 [ 606.012907] ? lock_release+0xc8/0x290 [ 606.012941] copy_net_ns+0xdb/0x650 [ 606.012968] ? copy_cgroup_ns+0x70/0x700 [ 606.013007] create_new_namespaces+0x3f6/0xab0 [ 606.013051] copy_namespaces+0x45c/0x580 [ 606.013086] copy_process+0x26d5/0x73e0 [ 606.013109] ? __pfx_perf_trace_lock+0x10/0x10 [ 606.013155] ? __pfx_copy_process+0x10/0x10 [ 606.013178] ? __might_fault+0xe0/0x190 [ 606.013213] ? _copy_from_user+0x5b/0xd0 [ 606.013245] kernel_clone+0xea/0x7f0 [ 606.013266] ? get_pid_task+0xfd/0x250 [ 606.013303] ? __pfx_kernel_clone+0x10/0x10 [ 606.013323] ? perf_trace_lock+0xb5/0x5d0 [ 606.013360] ? find_held_lock+0x2b/0x80 [ 606.013393] ? ksys_write+0x121/0x240 [ 606.013416] ? lock_is_held_type+0x9e/0x120 [ 606.013454] __do_sys_clone3+0x1f5/0x280 [ 606.013477] ? __pfx___do_sys_clone3+0x10/0x10 [ 606.013522] ? __fget_files+0x20d/0x3b0 [ 606.013568] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 606.013612] ? fput+0x6a/0x100 [ 606.013640] ? ksys_write+0x1a3/0x240 [ 606.013662] ? __pfx_ksys_write+0x10/0x10 [ 606.013697] do_syscall_64+0xbf/0x360 [ 606.013736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.013760] RIP: 0033:0x7ffb744edb19 [ 606.013777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 606.013799] RSP: 002b:00007ffb71a63188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 606.013821] RAX: ffffffffffffffda RBX: 00007ffb74600f60 RCX: 00007ffb744edb19 [ 606.013837] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 606.013850] RBP: 00007ffb71a631d0 R08: 0000000000000000 R09: 0000000000000000 [ 606.013864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 606.013878] R13: 00007ffeb487a35f R14: 00007ffb71a63300 R15: 0000000000022000 [ 606.013915] 11:56:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x3, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:56:36 executing program 6: accept$unix(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e65745f7072696f2c6e75722a695c3a07f14975f1ae9ee45dbbf0359c7e02c7dacf5fd70000000000000000"]) sendto(0xffffffffffffffff, &(0x7f0000000140)="da258faecad49d183210f95d14108e6bd5e2363f1ca5ca33436fdcfa96315c0d6746de9de72d641341b900e0890c150364645b28a1f45b2d52ef3b1145e6f1c684b86166722fbf34cf1f0c84ac42f899405d1b2ad8852f164b91d4221f9a39ef612b903c22133e1765d62da742188ad3ae64054cc82cba35eb888fca5671bb0c99a1e536f2d152ed6ce34577e29718d8ac22177c4a3bc00d840ab6", 0x9b, 0x0, &(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @dev={0xac, 0x14, 0x14, 0x5e}}}, 0x80) chdir(&(0x7f0000000000)='./file1\x00') 11:56:36 executing program 7: r0 = msgget(0x2, 0x200) msgrcv(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007dba4e57a264eaaf00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007a68af5fe28f7ce55e3a8b5180caf830ccd9620d512919cb8374e7df9fed3a88728eafcb902d1e6b2aaba3ef98e4531f7e481fb589de4d633b1ba956aaa7d607a649c49bdfc7f309a8f0e886d2db9e29598a14ece665bba13f3fa9031dd25f2ebf1c837615114f6e4957b6514b8b97417622c7775175fc73df9934465744eff0d30e7e8f15d4ae864d615061c8c231d9d5d97cae92acd1c36366b87a838152e31eea8817d77c164bf951e76d62152d4895"], 0x103, 0x3, 0x3000) msgsnd(r0, &(0x7f0000000280)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000280)=""/79) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000000), 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/raw6\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = open(&(0x7f0000000300)='./file0\x00', 0x80041, 0xb5) sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, 0x0, 0x480, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x53}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 11:56:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 11:56:36 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 27) tgkill(r0, r1, 0xb) 11:56:36 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 11:56:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x10401, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa0, r1, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xbf, 0x61}}}}, [@NL80211_ATTR_DURATION={0x8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xfffffff9}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x80000001}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x170c}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xa1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2c5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x9}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000004) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1699}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:56:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x700, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 614.245591] FAULT_INJECTION: forcing a failure. [ 614.245591] name failslab, interval 1, probability 0, space 0, times 0 [ 614.247860] CPU: 0 UID: 0 PID: 6287 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 614.247896] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 614.247912] Call Trace: [ 614.247926] [ 614.247940] dump_stack_lvl+0xfa/0x120 [ 614.248010] should_fail_ex+0x4d7/0x5e0 [ 614.248068] ? copy_net_ns+0x121/0x650 [ 614.248100] should_failslab+0xc2/0x120 [ 614.248131] kmem_cache_alloc_noprof+0x5f/0x3d0 [ 614.248173] ? lock_release+0xc1/0x290 [ 614.248212] copy_net_ns+0x121/0x650 [ 614.248242] ? copy_cgroup_ns+0x70/0x700 [ 614.248285] create_new_namespaces+0x3f6/0xab0 [ 614.248335] copy_namespaces+0x45c/0x580 [ 614.248375] copy_process+0x26d5/0x73e0 [ 614.248400] ? __pfx_perf_trace_lock+0x10/0x10 [ 614.248453] ? __pfx_copy_process+0x10/0x10 [ 614.248478] ? __might_fault+0xe0/0x190 [ 614.248518] ? _copy_from_user+0x5b/0xd0 [ 614.248542] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 614.248555] kernel_clone+0xea/0x7f0 [ 614.248579] ? get_pid_task+0xfd/0x250 [ 614.248635] ? __pfx_kernel_clone+0x10/0x10 [ 614.248657] ? perf_trace_lock+0xb5/0x5d0 [ 614.248698] ? find_held_lock+0x2b/0x80 [ 614.248735] ? ksys_write+0x121/0x240 [ 614.248761] ? lock_is_held_type+0x9e/0x120 [ 614.248804] __do_sys_clone3+0x1f5/0x280 [ 614.248829] ? __pfx___do_sys_clone3+0x10/0x10 [ 614.248881] ? __fget_files+0x20d/0x3b0 [ 614.248946] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 614.249005] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 614.249050] ? ksys_write+0x1a3/0x240 [ 614.249074] ? __pfx_ksys_write+0x10/0x10 [ 614.249115] do_syscall_64+0xbf/0x360 [ 614.249158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.249185] RIP: 0033:0x7ffb744edb19 [ 614.249205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 614.249229] RSP: 002b:00007ffb71a63188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 614.249254] RAX: ffffffffffffffda RBX: 00007ffb74600f60 RCX: 00007ffb744edb19 [ 614.249271] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 614.249286] RBP: 00007ffb71a631d0 R08: 0000000000000000 R09: 0000000000000000 [ 614.249302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 614.249317] R13: 00007ffeb487a35f R14: 00007ffb71a63300 R15: 0000000000022000 [ 614.249359] [ 614.281480] cgroup: Unknown subsys name 'nur*i\:ñIuñ®žä]»ð5œ~ÇÚÏ_×' [ 614.293981] cgroup: Unknown subsys name 'nur*i\:ñIuñ®žä]»ð5œ~ÇÚÏ_×' 11:56:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@chandef_params, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x18}, 0x0) 11:56:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x900, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:56:36 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 28) tgkill(r0, r1, 0xb) [ 614.366904] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 11:56:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) [ 614.396664] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 614.409306] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 11:56:36 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x10401, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa0, r1, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xbf, 0x61}}}}, [@NL80211_ATTR_DURATION={0x8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xfffffff9}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x80000001}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x170c}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xa1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2c5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x9}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000004) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1699}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:56:36 executing program 7: r0 = msgget(0x2, 0x200) msgrcv(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007dba4e57a264eaaf00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007a68af5fe28f7ce55e3a8b5180caf830ccd9620d512919cb8374e7df9fed3a88728eafcb902d1e6b2aaba3ef98e4531f7e481fb589de4d633b1ba956aaa7d607a649c49bdfc7f309a8f0e886d2db9e29598a14ece665bba13f3fa9031dd25f2ebf1c837615114f6e4957b6514b8b97417622c7775175fc73df9934465744eff0d30e7e8f15d4ae864d615061c8c231d9d5d97cae92acd1c36366b87a838152e31eea8817d77c164bf951e76d62152d4895"], 0x103, 0x3, 0x3000) msgsnd(r0, &(0x7f0000000280)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000280)=""/79) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000000), 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/raw6\x00') socket$nl_generic(0x10, 0x3, 0x10) r2 = open(&(0x7f0000000300)='./file0\x00', 0x80041, 0xb5) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, 0x0, 0x480, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x53}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x50}}, 0x0) 11:56:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x4, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:56:36 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 11:56:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0xf00, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 614.540006] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 614.555882] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 11:56:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0xb700, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:56:46 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 29) tgkill(r0, r1, 0xb) 11:56:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x5, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:56:46 executing program 6: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}, {@gid={'gid', 0x3d, r1}}]}) 11:56:46 executing program 7: r0 = msgget(0x2, 0x200) msgrcv(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007dba4e57a264eaaf00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007a68af5fe28f7ce55e3a8b5180caf830ccd9620d512919cb8374e7df9fed3a88728eafcb902d1e6b2aaba3ef98e4531f7e481fb589de4d633b1ba956aaa7d607a649c49bdfc7f309a8f0e886d2db9e29598a14ece665bba13f3fa9031dd25f2ebf1c837615114f6e4957b6514b8b97417622c7775175fc73df9934465744eff0d30e7e8f15d4ae864d615061c8c231d9d5d97cae92acd1c36366b87a838152e31eea8817d77c164bf951e76d62152d4895"], 0x103, 0x3, 0x3000) msgsnd(r0, &(0x7f0000000280)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000280)=""/79) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000000), 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/raw6\x00') socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000300)='./file0\x00', 0x80041, 0xb5) 11:56:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0xf000, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:56:46 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, 0x0, 0x0) 11:56:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010072a7196600000008000900a30ebbdd94573fb74c580c06f5b4890000005754f4e8902a215e2a1d8bd67dce85d5f1ef766280bb19bb893778908a5f00040000000000009c8be25f36", @ANYRES32=r7, @ANYBLOB="080026006c0900000800b70000000000"], 0x2c}}, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r8, 0x300, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffe}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x100}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4050}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r6, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)={0x48, r9, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x3, 0x10}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @random="2d4227f3229e"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_SURVEY(r11, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r1, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xff, 0x3b}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 624.367458] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 624.385982] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 624.396767] FAULT_INJECTION: forcing a failure. [ 624.396767] name failslab, interval 1, probability 0, space 0, times 0 [ 624.397802] CPU: 1 UID: 0 PID: 6353 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 624.397818] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 624.397825] Call Trace: [ 624.397829] [ 624.397834] dump_stack_lvl+0xfa/0x120 [ 624.397858] should_fail_ex+0x4d7/0x5e0 [ 624.397881] should_failslab+0xc2/0x120 [ 624.397896] __kmalloc_cache_noprof+0x6a/0x3e0 [ 624.397913] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 624.397927] ? kmem_cache_alloc_noprof+0x1a6/0x3d0 [ 624.397945] ? copy_net_ns+0x16f/0x650 [ 624.397965] copy_net_ns+0x16f/0x650 [ 624.397978] ? copy_cgroup_ns+0x70/0x700 [ 624.397999] create_new_namespaces+0x3f6/0xab0 [ 624.398021] copy_namespaces+0x45c/0x580 [ 624.398039] copy_process+0x26d5/0x73e0 [ 624.398052] ? __pfx_perf_trace_lock+0x10/0x10 [ 624.398076] ? __pfx_copy_process+0x10/0x10 [ 624.398088] ? __might_fault+0xe0/0x190 [ 624.398106] ? _copy_from_user+0x5b/0xd0 [ 624.398122] kernel_clone+0xea/0x7f0 [ 624.398133] ? get_pid_task+0xfd/0x250 [ 624.398152] ? __pfx_kernel_clone+0x10/0x10 [ 624.398162] ? perf_trace_lock+0xb5/0x5d0 [ 624.398181] ? find_held_lock+0x2b/0x80 [ 624.398197] ? ksys_write+0x121/0x240 [ 624.398210] ? lock_is_held_type+0x9e/0x120 [ 624.398230] __do_sys_clone3+0x1f5/0x280 [ 624.398241] ? __pfx___do_sys_clone3+0x10/0x10 [ 624.398264] ? __fget_files+0x20d/0x3b0 [ 624.398288] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 624.398308] ? fput+0x6a/0x100 [ 624.398322] ? ksys_write+0x1a3/0x240 [ 624.398332] ? __pfx_ksys_write+0x10/0x10 [ 624.398351] do_syscall_64+0xbf/0x360 [ 624.398371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.398383] RIP: 0033:0x7ffb744edb19 [ 624.398392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 624.398403] RSP: 002b:00007ffb71a63188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 624.398414] RAX: ffffffffffffffda RBX: 00007ffb74600f60 RCX: 00007ffb744edb19 [ 624.398422] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 624.398429] RBP: 00007ffb71a631d0 R08: 0000000000000000 R09: 0000000000000000 [ 624.398436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 624.398443] R13: 00007ffeb487a35f R14: 00007ffb71a63300 R15: 0000000000022000 [ 624.398462] [ 624.442276] tmpfs: Invalid gid '0x00000000ffffffff' 11:56:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) (fail_nth: 1) 11:56:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x30000, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 624.458397] tmpfs: Invalid gid '0x00000000ffffffff' 11:56:46 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 30) tgkill(r0, r1, 0xb) 11:56:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x6, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 624.510826] FAULT_INJECTION: forcing a failure. [ 624.510826] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 624.511921] CPU: 1 UID: 0 PID: 6368 Comm: syz-executor.3 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 624.511937] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 624.511945] Call Trace: [ 624.511949] [ 624.511953] dump_stack_lvl+0xfa/0x120 [ 624.511978] should_fail_ex+0x4d7/0x5e0 [ 624.512000] _copy_from_user+0x30/0xd0 [ 624.512023] copy_msghdr_from_user+0x88/0x150 [ 624.512039] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 624.512055] ? __pfx_perf_trace_lock+0x10/0x10 [ 624.512074] ? lock_acquire+0x15e/0x2f0 [ 624.512090] ___sys_sendmsg+0xdc/0x1b0 [ 624.512103] ? __pfx____sys_sendmsg+0x10/0x10 [ 624.512115] ? perf_trace_lock+0xb5/0x5d0 [ 624.512131] ? __pfx_perf_trace_lock+0x10/0x10 [ 624.512144] ? proc_fail_nth_write+0x97/0x220 [ 624.512160] ? lock_acquire+0x15e/0x2f0 [ 624.512172] ? __fget_files+0x34/0x3b0 [ 624.512191] ? find_held_lock+0x2b/0x80 [ 624.512207] ? __fget_files+0x203/0x3b0 [ 624.512225] ? lock_release+0xc8/0x290 [ 624.512240] ? __fget_files+0x20d/0x3b0 [ 624.512266] __sys_sendmsg+0x150/0x200 [ 624.512278] ? __pfx___sys_sendmsg+0x10/0x10 [ 624.512294] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 624.512314] ? fput+0x6a/0x100 [ 624.512329] ? ksys_write+0x1a3/0x240 [ 624.512339] ? __pfx_ksys_write+0x10/0x10 [ 624.512358] do_syscall_64+0xbf/0x360 [ 624.512378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.512390] RIP: 0033:0x7f9c727d4b19 [ 624.512400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 624.512411] RSP: 002b:00007f9c6fd4a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 624.512422] RAX: ffffffffffffffda RBX: 00007f9c728e7f60 RCX: 00007f9c727d4b19 [ 624.512430] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000003 [ 624.512437] RBP: 00007f9c6fd4a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 624.512444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 624.512450] R13: 00007ffc2e9c9c7f R14: 00007f9c6fd4a300 R15: 0000000000022000 [ 624.512469] [ 624.596869] FAULT_INJECTION: forcing a failure. [ 624.596869] name failslab, interval 1, probability 0, space 0, times 0 [ 624.597844] CPU: 1 UID: 0 PID: 6373 Comm: syz-executor.3 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 624.597860] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 624.597867] Call Trace: [ 624.597871] [ 624.597876] dump_stack_lvl+0xfa/0x120 [ 624.597900] should_fail_ex+0x4d7/0x5e0 [ 624.597927] should_failslab+0xc2/0x120 [ 624.597942] kmem_cache_alloc_node_noprof+0x71/0x3e0 [ 624.597962] ? __alloc_skb+0x2ab/0x370 [ 624.597980] __alloc_skb+0x2ab/0x370 [ 624.597992] ? __pfx___alloc_skb+0x10/0x10 [ 624.598007] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 624.598026] netlink_alloc_large_skb+0x69/0x150 [ 624.598040] netlink_sendmsg+0x676/0xd80 [ 624.598058] ? __pfx_netlink_sendmsg+0x10/0x10 11:56:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) (fail_nth: 2) [ 624.598080] ____sys_sendmsg+0xa67/0xc20 [ 624.598098] ? copy_msghdr_from_user+0xfb/0x150 [ 624.598112] ? __pfx_____sys_sendmsg+0x10/0x10 [ 624.598135] ? lock_acquire+0x15e/0x2f0 [ 624.598152] ___sys_sendmsg+0x10f/0x1b0 [ 624.598166] ? __pfx____sys_sendmsg+0x10/0x10 [ 624.598177] ? perf_trace_lock+0xb5/0x5d0 [ 624.598195] ? __pfx_perf_trace_lock+0x10/0x10 [ 624.598208] ? proc_fail_nth_write+0x97/0x220 [ 624.598224] ? lock_acquire+0x15e/0x2f0 [ 624.598236] ? __fget_files+0x34/0x3b0 [ 624.598255] ? find_held_lock+0x2b/0x80 [ 624.598271] ? __fget_files+0x203/0x3b0 [ 624.598289] ? lock_release+0xc8/0x290 [ 624.598305] ? __fget_files+0x20d/0x3b0 [ 624.598330] __sys_sendmsg+0x150/0x200 [ 624.598343] ? __pfx___sys_sendmsg+0x10/0x10 [ 624.598363] ? __pfx_ksys_write+0x10/0x10 [ 624.598382] do_syscall_64+0xbf/0x360 [ 624.598402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.598415] RIP: 0033:0x7f9c727d4b19 [ 624.598424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 624.598434] RSP: 002b:00007f9c6fd4a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 624.598446] RAX: ffffffffffffffda RBX: 00007f9c728e7f60 RCX: 00007f9c727d4b19 [ 624.598454] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000003 [ 624.598461] RBP: 00007f9c6fd4a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 624.598468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 624.598475] R13: 00007ffc2e9c9c7f R14: 00007f9c6fd4a300 R15: 0000000000022000 [ 624.598494] 11:56:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) (fail_nth: 3) 11:56:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) (fail_nth: 4) 11:56:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0xfffffffffffffdb8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:56:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x80000, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:56:57 executing program 6: recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@ieee802154, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/82, 0x52}, {&(0x7f0000000400)=""/140, 0x8c}], 0x3, &(0x7f00000002c0)=""/208, 0xd0}, 0x122) 11:56:57 executing program 7: r0 = msgget(0x2, 0x200) msgrcv(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007dba4e57a264eaaf00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007a68af5fe28f7ce55e3a8b5180caf830ccd9620d512919cb8374e7df9fed3a88728eafcb902d1e6b2aaba3ef98e4531f7e481fb589de4d633b1ba956aaa7d607a649c49bdfc7f309a8f0e886d2db9e29598a14ece665bba13f3fa9031dd25f2ebf1c837615114f6e4957b6514b8b97417622c7775175fc73df9934465744eff0d30e7e8f15d4ae864d615061c8c231d9d5d97cae92acd1c36366b87a838152e31eea8817d77c164bf951e76d62152d4895"], 0x103, 0x3, 0x3000) msgsnd(r0, &(0x7f0000000280)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000280)=""/79) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000000), 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/raw6\x00') socket$nl_generic(0x10, 0x3, 0x10) 11:56:57 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, 0x0, 0x0) 11:56:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x7, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:56:57 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 31) tgkill(r0, r1, 0xb) [ 635.432848] FAULT_INJECTION: forcing a failure. [ 635.432848] name failslab, interval 1, probability 0, space 0, times 0 [ 635.434126] CPU: 1 UID: 0 PID: 6398 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 635.434143] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 635.434151] Call Trace: [ 635.434155] [ 635.434159] dump_stack_lvl+0xfa/0x120 [ 635.434186] should_fail_ex+0x4d7/0x5e0 [ 635.434210] ? proc_net_ns_init+0x42/0x420 [ 635.434228] should_failslab+0xc2/0x120 [ 635.434243] kmem_cache_alloc_noprof+0x5f/0x3d0 [ 635.434266] ? __pfx_proc_net_ns_init+0x10/0x10 [ 635.434284] proc_net_ns_init+0x42/0x420 [ 635.434300] ? __pfx_proc_net_ns_init+0x10/0x10 [ 635.434316] ops_init+0x1e1/0x650 [ 635.434336] setup_net+0x10d/0x320 [ 635.434348] ? lockdep_init_map_type+0x4b/0x240 [ 635.434364] ? __pfx_setup_net+0x10/0x10 [ 635.434381] ? debug_mutex_init+0x37/0x70 [ 635.434402] copy_net_ns+0x2e3/0x650 [ 635.434419] create_new_namespaces+0x3f6/0xab0 [ 635.434443] copy_namespaces+0x45c/0x580 [ 635.434462] copy_process+0x26d5/0x73e0 [ 635.434475] ? __pfx_perf_trace_lock+0x10/0x10 [ 635.434500] ? __pfx_copy_process+0x10/0x10 [ 635.434512] ? __might_fault+0xe0/0x190 [ 635.434531] ? _copy_from_user+0x5b/0xd0 [ 635.434549] kernel_clone+0xea/0x7f0 [ 635.434559] ? get_pid_task+0xfd/0x250 [ 635.434579] ? __pfx_kernel_clone+0x10/0x10 [ 635.434589] ? perf_trace_lock+0xb5/0x5d0 [ 635.434612] ? find_held_lock+0x2b/0x80 [ 635.434628] ? ksys_write+0x121/0x240 [ 635.434641] ? lock_is_held_type+0x9e/0x120 [ 635.434661] __do_sys_clone3+0x1f5/0x280 [ 635.434673] ? __pfx___do_sys_clone3+0x10/0x10 [ 635.434696] ? __fget_files+0x20d/0x3b0 [ 635.434721] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 635.434740] ? fput+0x6a/0x100 [ 635.434754] ? ksys_write+0x1a3/0x240 [ 635.434765] ? __pfx_ksys_write+0x10/0x10 [ 635.434784] do_syscall_64+0xbf/0x360 [ 635.434804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.434816] RIP: 0033:0x7ffb744edb19 [ 635.434825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 635.434836] RSP: 002b:00007ffb71a63188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 635.434848] RAX: ffffffffffffffda RBX: 00007ffb74600f60 RCX: 00007ffb744edb19 [ 635.434856] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 635.434863] RBP: 00007ffb71a631d0 R08: 0000000000000000 R09: 0000000000000000 [ 635.434869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 635.434876] R13: 00007ffeb487a35f R14: 00007ffb71a63300 R15: 0000000000022000 [ 635.434896] [ 635.456723] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 635.462917] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 11:56:57 executing program 6: socket$packet(0x11, 0x4, 0x300) 11:56:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34000000f39a4eb81c66c3c0d5e16f22d64e6d6d1a451baf624c0f47db8b69352fcda4b94a0fabe26d42af23efc9d6ee44e31a059fdba382190dce21831784c08c65f8434a28b18029221a5e1e30667422ee52454f06d37e3a8dccb531b7998b89ea61b172dec5491a7176db2b6912c34d18dc7f9d3259007d50875b9fe3f5aa5a54c56276f4c63e1a632468dfe7ce36be31bbc57fe30b886112c740758b427261bedff5037bd71743b060c896db2243145811ce0026a9dcdb49fb767faae1fdb0ca205f49c8b5b83b61fc8672c2da69492c0f9dffe2e89c9dea1a38d815e4fc72ebb2648e0ca86a9338123721", @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="0c009900000000005e0000000400b8000800b70014000000"], 0x34}}, 0x0) r4 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x1a1300, 0x102, 0x4}, 0x18) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="8e032cbd7000fbdbdf252e0009cfbd549900010000007edca7acb500b0000004000080000100160f07001e0094000010180500000000000000ff008c0015000000000309000000020000"], 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 11:56:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x8, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 635.549999] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 635.570612] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 11:56:57 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x1000}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x1000}, 0x4) close(r0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000340)=ANY=[@ANYRES16=r1, @ANYBLOB="e64a097833110aad81ef5d48d385d46eef2296ced3bd4509bdca5640f236bd90d95dc604ce3147d3c5b23a616b44c225fe0c8df9b18160d3625f89d6cfc88efc7952dbd498d130caed606f5fe59565d287c95908d91cb7aa012fead4c4f337b03623c0ff1d49641423d8d13ac8f6409fe666ae0b82cf01ed9f1cbb1614007d85657ef675b7171c747612f6edeb96e5e66f20093b6ec175de73b6e2adb66cd4159673a0523b6bd1be", @ANYBLOB="06000000000000002e2f66696c653000"]) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @local}, 0x10) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f00000001c0)=""/190, &(0x7f0000000080)=0xbe) 11:56:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0xf0ffff, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:56:57 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 32) tgkill(r0, r1, 0xb) 11:56:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) (fail_nth: 5) 11:56:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x9, 0x8}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x30}}, 0x0) 11:56:57 executing program 7: r0 = msgget(0x2, 0x200) msgrcv(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007dba4e57a264eaaf00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007a68af5fe28f7ce55e3a8b5180caf830ccd9620d512919cb8374e7df9fed3a88728eafcb902d1e6b2aaba3ef98e4531f7e481fb589de4d633b1ba956aaa7d607a649c49bdfc7f309a8f0e886d2db9e29598a14ece665bba13f3fa9031dd25f2ebf1c837615114f6e4957b6514b8b97417622c7775175fc73df9934465744eff0d30e7e8f15d4ae864d615061c8c231d9d5d97cae92acd1c36366b87a838152e31eea8817d77c164bf951e76d62152d4895"], 0x103, 0x3, 0x3000) msgsnd(r0, &(0x7f0000000280)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000280)=""/79) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000000), 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/raw6\x00') 11:56:57 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, 0x0, 0x0) 11:56:57 executing program 6: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'vlan0\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46443, 0x5, 0x0, 0x4, 0x6e}, r0, 0x2, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) fcntl$setstatus(r1, 0x4, 0x4000) clone3(&(0x7f0000005880)={0x61020100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0}, 0x58) [ 635.784171] FAULT_INJECTION: forcing a failure. [ 635.784171] name failslab, interval 1, probability 0, space 0, times 0 [ 635.785871] CPU: 0 UID: 0 PID: 6441 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 635.785901] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 635.785914] Call Trace: [ 635.785922] [ 635.785931] dump_stack_lvl+0xfa/0x120 [ 635.785972] should_fail_ex+0x4d7/0x5e0 [ 635.786013] should_failslab+0xc2/0x120 [ 635.786039] __kmalloc_cache_noprof+0x6a/0x3e0 [ 635.786071] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 635.786097] ? kmem_cache_alloc_noprof+0x1a6/0x3d0 [ 635.786131] ? copy_net_ns+0x16f/0x650 [ 635.786166] copy_net_ns+0x16f/0x650 [ 635.786191] ? copy_cgroup_ns+0x70/0x700 [ 635.786228] create_new_namespaces+0x3f6/0xab0 [ 635.786270] copy_namespaces+0x45c/0x580 [ 635.786303] copy_process+0x26d5/0x73e0 [ 635.786325] ? __pfx_perf_trace_lock+0x10/0x10 [ 635.786370] ? __pfx_copy_process+0x10/0x10 [ 635.786392] ? __might_fault+0xe0/0x190 [ 635.786425] ? _copy_from_user+0x5b/0xd0 [ 635.786456] kernel_clone+0xea/0x7f0 [ 635.786475] ? get_pid_task+0xfd/0x250 [ 635.786510] ? __pfx_kernel_clone+0x10/0x10 [ 635.786529] ? perf_trace_lock+0xb5/0x5d0 [ 635.786564] ? find_held_lock+0x2b/0x80 [ 635.786597] ? ksys_write+0x121/0x240 [ 635.786629] ? lock_is_held_type+0x9e/0x120 [ 635.786666] __do_sys_clone3+0x1f5/0x280 [ 635.786687] ? __pfx___do_sys_clone3+0x10/0x10 [ 635.786730] ? __fget_files+0x20d/0x3b0 [ 635.786774] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 635.786809] ? fput+0x6a/0x100 [ 635.786834] ? ksys_write+0x1a3/0x240 [ 635.786854] ? __pfx_ksys_write+0x10/0x10 [ 635.786889] do_syscall_64+0xbf/0x360 [ 635.786925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.786947] RIP: 0033:0x7ffb744edb19 [ 635.786964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 635.786984] RSP: 002b:00007ffb71a63188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 635.787005] RAX: ffffffffffffffda RBX: 00007ffb74600f60 RCX: 00007ffb744edb19 [ 635.787020] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 635.787032] RBP: 00007ffb71a631d0 R08: 0000000000000000 R09: 0000000000000000 [ 635.787045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 635.787058] R13: 00007ffeb487a35f R14: 00007ffb71a63300 R15: 0000000000022000 [ 635.787093] 11:56:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) (fail_nth: 6) 11:56:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0xb, 0x6, 0xa3971582b7e27c3, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x95f}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 11:56:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x9, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 635.879806] FAULT_INJECTION: forcing a failure. [ 635.879806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 635.880920] CPU: 1 UID: 0 PID: 6448 Comm: syz-executor.3 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 635.880940] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 635.880948] Call Trace: [ 635.880953] [ 635.880958] dump_stack_lvl+0xfa/0x120 [ 635.880988] should_fail_ex+0x4d7/0x5e0 [ 635.881014] _copy_from_iter+0x1dc/0x15b0 [ 635.881028] ? lock_acquire+0x15e/0x2f0 [ 635.881044] ? __virt_addr_valid+0x1c6/0x5d0 [ 635.881063] ? find_held_lock+0x2b/0x80 [ 635.881082] ? __pfx__copy_from_iter+0x10/0x10 [ 635.881093] ? lock_release+0xc8/0x290 [ 635.881110] ? __virt_addr_valid+0x100/0x5d0 [ 635.881128] ? __check_object_size+0x57b/0x880 [ 635.881153] netlink_sendmsg+0x809/0xd80 [ 635.881173] ? __pfx_netlink_sendmsg+0x10/0x10 [ 635.881199] ____sys_sendmsg+0xa67/0xc20 [ 635.881218] ? copy_msghdr_from_user+0xfb/0x150 [ 635.881231] ? __pfx_____sys_sendmsg+0x10/0x10 [ 635.881255] ? lock_acquire+0x15e/0x2f0 [ 635.881272] ___sys_sendmsg+0x10f/0x1b0 [ 635.881286] ? __pfx____sys_sendmsg+0x10/0x10 [ 635.881297] ? perf_trace_lock+0xb5/0x5d0 [ 635.881315] ? __pfx_perf_trace_lock+0x10/0x10 [ 635.881327] ? proc_fail_nth_write+0x97/0x220 [ 635.881343] ? lock_acquire+0x15e/0x2f0 [ 635.881356] ? __fget_files+0x34/0x3b0 [ 635.881375] ? find_held_lock+0x2b/0x80 [ 635.881391] ? __fget_files+0x203/0x3b0 [ 635.881409] ? lock_release+0xc8/0x290 [ 635.881425] ? __fget_files+0x20d/0x3b0 [ 635.881450] __sys_sendmsg+0x150/0x200 [ 635.881463] ? __pfx___sys_sendmsg+0x10/0x10 [ 635.881482] ? __pfx_ksys_write+0x10/0x10 [ 635.881502] do_syscall_64+0xbf/0x360 [ 635.881522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.881535] RIP: 0033:0x7f9c727d4b19 [ 635.881545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 635.881556] RSP: 002b:00007f9c6fd4a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 635.881567] RAX: ffffffffffffffda RBX: 00007f9c728e7f60 RCX: 00007f9c727d4b19 [ 635.881575] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000003 [ 635.881582] RBP: 00007f9c6fd4a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 635.881590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 635.881597] R13: 00007ffc2e9c9c7f R14: 00007f9c6fd4a300 R15: 0000000000022000 [ 635.881621] [ 635.917330] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 635.948987] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 11:57:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x1000000, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:57:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0xf, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:57:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) (fail_nth: 7) 11:57:06 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000180)={0x0, 0x1, 0x6, @multicast}, 0x10) 11:57:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="89ea00000f0bc9b9281fd5b6f67c0c0cc31f3085c90d716bd6b788b436dfda28b69fe0c5df41164eb04ca1fb93d32043acd6", @ANYRES16=r0, @ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x40000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0900000800b70000000000"], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000180)={0x0, 0x1, 0x6, @multicast}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r7, 0x1, 0x6, @multicast}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'gre0\x00', 0x0}) r9 = socket$packet(0x11, 0x2, 0x300) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000100)={r11, 0x1, 0x6, @multicast}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000600)={0x258, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [{{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r7}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x258}, 0x1, 0x0, 0x0, 0x4008080}, 0x800) 11:57:06 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 33) tgkill(r0, r1, 0xb) 11:57:06 executing program 7: r0 = msgget(0x2, 0x200) msgrcv(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007dba4e57a264eaaf00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007a68af5fe28f7ce55e3a8b5180caf830ccd9620d512919cb8374e7df9fed3a88728eafcb902d1e6b2aaba3ef98e4531f7e481fb589de4d633b1ba956aaa7d607a649c49bdfc7f309a8f0e886d2db9e29598a14ece665bba13f3fa9031dd25f2ebf1c837615114f6e4957b6514b8b97417622c7775175fc73df9934465744eff0d30e7e8f15d4ae864d615061c8c231d9d5d97cae92acd1c36366b87a838152e31eea8817d77c164bf951e76d62152d4895"], 0x103, 0x3, 0x3000) msgsnd(r0, &(0x7f0000000280)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000280)=""/79) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000000), 0x4) 11:57:06 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x295, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000100), 0x4) [ 644.255182] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 644.262282] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 644.270909] mac80211_hwsim hwsim14 wlan1: entered promiscuous mode [ 644.307793] FAULT_INJECTION: forcing a failure. [ 644.307793] name failslab, interval 1, probability 0, space 0, times 0 [ 644.308860] CPU: 1 UID: 0 PID: 6481 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 644.308891] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 644.308899] Call Trace: [ 644.308904] [ 644.308908] dump_stack_lvl+0xfa/0x120 [ 644.308937] should_fail_ex+0x4d7/0x5e0 [ 644.308960] ? __proc_create+0x306/0x920 [ 644.308977] should_failslab+0xc2/0x120 [ 644.308992] kmem_cache_alloc_noprof+0x5f/0x3d0 [ 644.309011] ? lock_release+0xc8/0x290 [ 644.309031] __proc_create+0x306/0x920 [ 644.309048] ? __pfx___proc_create+0x10/0x10 [ 644.309068] ? mark_held_locks+0x49/0x80 [ 644.309086] _proc_mkdir+0xb1/0x210 [ 644.309102] ? __pfx__proc_mkdir+0x10/0x10 [ 644.309118] ? kmem_cache_alloc_noprof+0x1a6/0x3d0 [ 644.309143] proc_net_ns_init+0x273/0x420 [ 644.309161] ? __pfx_proc_net_ns_init+0x10/0x10 [ 644.309177] ops_init+0x1e1/0x650 [ 644.309197] setup_net+0x10d/0x320 [ 644.309210] ? lockdep_init_map_type+0x4b/0x240 [ 644.309223] ? __pfx_setup_net+0x10/0x10 [ 644.309239] ? debug_mutex_init+0x37/0x70 [ 644.309261] copy_net_ns+0x2e3/0x650 [ 644.309279] create_new_namespaces+0x3f6/0xab0 [ 644.309302] copy_namespaces+0x45c/0x580 [ 644.309320] copy_process+0x26d5/0x73e0 [ 644.309333] ? __pfx_perf_trace_lock+0x10/0x10 [ 644.309357] ? __pfx_copy_process+0x10/0x10 [ 644.309369] ? __might_fault+0xe0/0x190 [ 644.309387] ? _copy_from_user+0x5b/0xd0 [ 644.309405] kernel_clone+0xea/0x7f0 [ 644.309415] ? get_pid_task+0xfd/0x250 [ 644.309435] ? __pfx_kernel_clone+0x10/0x10 [ 644.309445] ? perf_trace_lock+0xb5/0x5d0 [ 644.309464] ? find_held_lock+0x2b/0x80 [ 644.309480] ? ksys_write+0x121/0x240 [ 644.309493] ? lock_is_held_type+0x9e/0x120 [ 644.309513] __do_sys_clone3+0x1f5/0x280 [ 644.309524] ? __pfx___do_sys_clone3+0x10/0x10 [ 644.309548] ? __fget_files+0x20d/0x3b0 [ 644.309572] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 644.309592] ? fput+0x6a/0x100 [ 644.309610] ? ksys_write+0x1a3/0x240 [ 644.309621] ? __pfx_ksys_write+0x10/0x10 [ 644.309640] do_syscall_64+0xbf/0x360 [ 644.309660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.309673] RIP: 0033:0x7ffb744edb19 [ 644.309682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 644.309693] RSP: 002b:00007ffb71a63188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 644.309705] RAX: ffffffffffffffda RBX: 00007ffb74600f60 RCX: 00007ffb744edb19 [ 644.309713] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 644.309720] RBP: 00007ffb71a631d0 R08: 0000000000000000 R09: 0000000000000000 [ 644.309727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 644.309733] R13: 00007ffeb487a35f R14: 00007ffb71a63300 R15: 0000000000022000 [ 644.309753] [ 644.342556] FAULT_INJECTION: forcing a failure. [ 644.342556] name failslab, interval 1, probability 0, space 0, times 0 [ 644.343556] CPU: 1 UID: 0 PID: 6482 Comm: syz-executor.3 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 644.343572] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 644.343579] Call Trace: [ 644.343583] 11:57:06 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000180)={0x0, 0x1, 0x6, @multicast}, 0x10) [ 644.343587] dump_stack_lvl+0xfa/0x120 [ 644.343610] should_fail_ex+0x4d7/0x5e0 [ 644.343630] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 644.343648] should_failslab+0xc2/0x120 [ 644.343662] __kmalloc_noprof+0xb4/0x4b0 [ 644.343681] ? avc_has_perm_noaudit+0x150/0x3d0 [ 644.343703] genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 644.343725] genl_family_rcv_msg_doit+0xab/0x2f0 [ 644.343742] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 644.343762] ? cap_capable+0xdb/0x3b0 [ 644.343781] ? security_capable+0x2f/0x90 [ 644.343797] ? ns_capable+0xe2/0x120 [ 644.343815] genl_rcv_msg+0x532/0x7e0 [ 644.343834] ? __pfx_genl_rcv_msg+0x10/0x10 [ 644.343849] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 644.343866] ? __pfx_nl80211_channel_switch+0x10/0x10 [ 644.343881] ? __pfx_nl80211_post_doit+0x10/0x10 [ 644.343902] netlink_rcv_skb+0x147/0x430 [ 644.343916] ? __pfx_genl_rcv_msg+0x10/0x10 [ 644.343932] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 644.343956] ? netlink_deliver_tap+0x1ae/0xce0 [ 644.343967] ? selinux_netlink_send+0x507/0x880 [ 644.343979] ? is_vmalloc_addr+0x86/0xa0 [ 644.344001] genl_rcv+0x28/0x40 [ 644.344014] netlink_unicast+0x5a7/0x870 [ 644.344031] ? __pfx_netlink_unicast+0x10/0x10 [ 644.344053] netlink_sendmsg+0x8ac/0xd80 [ 644.344071] ? __pfx_netlink_sendmsg+0x10/0x10 [ 644.344094] ____sys_sendmsg+0xa67/0xc20 [ 644.344112] ? copy_msghdr_from_user+0xfb/0x150 [ 644.344126] ? __pfx_____sys_sendmsg+0x10/0x10 [ 644.344149] ? lock_acquire+0x15e/0x2f0 [ 644.344165] ___sys_sendmsg+0x10f/0x1b0 [ 644.344179] ? __pfx____sys_sendmsg+0x10/0x10 [ 644.344191] ? perf_trace_lock+0xb5/0x5d0 [ 644.344207] ? __pfx_perf_trace_lock+0x10/0x10 [ 644.344219] ? proc_fail_nth_write+0x97/0x220 [ 644.344234] ? lock_acquire+0x15e/0x2f0 [ 644.344247] ? __fget_files+0x34/0x3b0 [ 644.344264] ? find_held_lock+0x2b/0x80 [ 644.344281] ? __fget_files+0x203/0x3b0 [ 644.344298] ? lock_release+0xc8/0x290 [ 644.344314] ? __fget_files+0x20d/0x3b0 [ 644.344359] __sys_sendmsg+0x150/0x200 [ 644.344376] ? __pfx___sys_sendmsg+0x10/0x10 [ 644.344405] ? __pfx_ksys_write+0x10/0x10 [ 644.344424] do_syscall_64+0xbf/0x360 [ 644.344443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.344454] RIP: 0033:0x7f9c727d4b19 11:57:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x2000000, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 644.344463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 644.344474] RSP: 002b:00007f9c6fd4a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 644.344484] RAX: ffffffffffffffda RBX: 00007f9c728e7f60 RCX: 00007f9c727d4b19 [ 644.344492] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000003 [ 644.344499] RBP: 00007f9c6fd4a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 644.344506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 644.344512] R13: 00007ffc2e9c9c7f R14: 00007f9c6fd4a300 R15: 0000000000022000 [ 644.344532] [ 644.451574] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 644.464897] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 644.474909] mac80211_hwsim hwsim14 wlan1: left promiscuous mode [ 644.494132] mac80211_hwsim hwsim14 wlan1: entered promiscuous mode [ 644.549199] mac80211_hwsim hwsim14 wlan1: left promiscuous mode 11:57:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x3000000, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:57:15 executing program 7: r0 = msgget(0x2, 0x200) msgrcv(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007dba4e57a264eaaf00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007a68af5fe28f7ce55e3a8b5180caf830ccd9620d512919cb8374e7df9fed3a88728eafcb902d1e6b2aaba3ef98e4531f7e481fb589de4d633b1ba956aaa7d607a649c49bdfc7f309a8f0e886d2db9e29598a14ece665bba13f3fa9031dd25f2ebf1c837615114f6e4957b6514b8b97417622c7775175fc73df9934465744eff0d30e7e8f15d4ae864d615061c8c231d9d5d97cae92acd1c36366b87a838152e31eea8817d77c164bf951e76d62152d4895"], 0x103, 0x3, 0x3000) msgsnd(r0, &(0x7f0000000280)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000280)=""/79) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 11:57:15 executing program 6: stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setregid(r5, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setregid(r7, 0x0) setregid(r7, r5) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f00000002c0)={{}, {}, [{0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x6, r0}], {0x4, 0x2}, [{0x8, 0x1, r1}, {0x8, 0x1, r3}], {0x10, 0xf}, {0x20, 0x4}}, 0x44, 0x2) request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='\\:\x16\x1c[(^{,@!\x00', 0xfffffffffffffffc) 11:57:15 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 34) tgkill(r0, r1, 0xb) 11:57:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) (fail_nth: 8) 11:57:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0xed, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:57:15 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000180)={0x0, 0x1, 0x6, @multicast}, 0x10) 11:57:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x4040001}, 0x4000000) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:57:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0xf0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:57:15 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000080)=""/172, 0xac}, {&(0x7f0000000140)=""/141, 0x8d}, {&(0x7f0000000280)=""/203, 0xcb}, {&(0x7f0000000200)=""/22, 0x16}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/221, 0xdd}], 0x6, &(0x7f0000000580)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}, 0x180) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) r6 = dup2(0xffffffffffffffff, r0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000680)={{0x1, 0x1, 0x18, r2, {r6}}, './file0\x00'}) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r0) close(r0) 11:57:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) (fail_nth: 9) [ 653.750575] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 653.776582] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 11:57:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000008000300"/18, @ANYRES32=r3, @ANYBLOB="080026006c0900000800b70000000000"], 0x2c}}, 0x0) 11:57:16 executing program 7: r0 = msgget(0x2, 0x200) msgrcv(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007dba4e57a264eaaf00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007a68af5fe28f7ce55e3a8b5180caf830ccd9620d512919cb8374e7df9fed3a88728eafcb902d1e6b2aaba3ef98e4531f7e481fb589de4d633b1ba956aaa7d607a649c49bdfc7f309a8f0e886d2db9e29598a14ece665bba13f3fa9031dd25f2ebf1c837615114f6e4957b6514b8b97417622c7775175fc73df9934465744eff0d30e7e8f15d4ae864d615061c8c231d9d5d97cae92acd1c36366b87a838152e31eea8817d77c164bf951e76d62152d4895"], 0x103, 0x3, 0x3000) msgsnd(r0, &(0x7f0000000280)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000280)=""/79) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) [ 653.894522] FAULT_INJECTION: forcing a failure. [ 653.894522] name failslab, interval 1, probability 0, space 0, times 0 [ 653.895630] CPU: 1 UID: 0 PID: 6539 Comm: syz-executor.3 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 653.895647] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 653.895655] Call Trace: [ 653.895659] [ 653.895665] dump_stack_lvl+0xfa/0x120 [ 653.895692] should_fail_ex+0x4d7/0x5e0 [ 653.895716] should_failslab+0xc2/0x120 [ 653.895731] kmem_cache_alloc_node_noprof+0x71/0x3e0 [ 653.895751] ? __alloc_skb+0x2ab/0x370 [ 653.895769] __alloc_skb+0x2ab/0x370 [ 653.895782] ? __pfx___alloc_skb+0x10/0x10 [ 653.895795] ? genl_rcv_msg+0x532/0x7e0 [ 653.895819] netlink_ack+0x167/0xbf0 [ 653.895841] netlink_rcv_skb+0x344/0x430 [ 653.895855] ? __pfx_genl_rcv_msg+0x10/0x10 [ 653.895872] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 653.895896] ? netlink_deliver_tap+0x1ae/0xce0 [ 653.895908] ? selinux_netlink_send+0x507/0x880 [ 653.895920] ? is_vmalloc_addr+0x86/0xa0 [ 653.895943] genl_rcv+0x28/0x40 [ 653.895956] netlink_unicast+0x5a7/0x870 [ 653.895973] ? __pfx_netlink_unicast+0x10/0x10 [ 653.895996] netlink_sendmsg+0x8ac/0xd80 [ 653.896014] ? __pfx_netlink_sendmsg+0x10/0x10 [ 653.896037] ____sys_sendmsg+0xa67/0xc20 [ 653.896056] ? copy_msghdr_from_user+0xfb/0x150 [ 653.896069] ? __pfx_____sys_sendmsg+0x10/0x10 [ 653.896093] ? lock_acquire+0x15e/0x2f0 [ 653.896110] ___sys_sendmsg+0x10f/0x1b0 [ 653.896124] ? __pfx____sys_sendmsg+0x10/0x10 [ 653.896136] ? perf_trace_lock+0xb5/0x5d0 [ 653.896154] ? __pfx_perf_trace_lock+0x10/0x10 11:57:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f0000005e00)=[{{&(0x7f0000000280)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/183, 0xb7}, {&(0x7f0000000300)=""/82, 0x52}, {&(0x7f00000004c0)=""/50, 0x32}, {&(0x7f0000000500)=""/169, 0xa9}], 0x4, &(0x7f0000000600)=""/231, 0xe7}, 0x3}, {{&(0x7f0000000700)=@l2, 0x80, &(0x7f0000001840)=[{&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/163, 0xa3}], 0x2, &(0x7f0000001880)=""/70, 0x46}, 0x3bd4324c}, {{&(0x7f0000001900)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000002a80)=[{&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000002980)=""/3, 0x3}, {&(0x7f00000029c0)=""/133, 0x85}], 0x3, &(0x7f0000002ac0)=""/129, 0x81}, 0x3}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002b80)=""/101, 0x65}], 0x1, &(0x7f0000002c40)=""/143, 0x8f}, 0x800}, {{&(0x7f0000002d00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002d80)=""/87, 0x57}], 0x1, &(0x7f0000002e40)=""/1, 0x1}, 0x7fffffff}, {{&(0x7f0000002e80)=@can, 0x80, &(0x7f0000003180)=[{&(0x7f0000002f00)=""/18, 0x12}, {&(0x7f0000002f40)=""/94, 0x5e}, {&(0x7f0000002fc0)=""/10, 0xa}, {&(0x7f0000003000)=""/123, 0x7b}, {&(0x7f0000003080)=""/52, 0x34}, {&(0x7f00000030c0)=""/185, 0xb9}], 0x6, &(0x7f0000003200)=""/167, 0xa7}, 0xfffffffc}, {{&(0x7f00000032c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000005540)=[{&(0x7f0000003340)=""/4096, 0x1000}, {&(0x7f0000004340)=""/208, 0xd0}, {&(0x7f0000004440)=""/4096, 0x1000}, {&(0x7f0000005440)=""/220, 0xdc}], 0x4}, 0x3}, {{&(0x7f0000005580)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000005800)=[{&(0x7f0000005600)=""/83, 0x53}, {&(0x7f0000005680)=""/131, 0x83}, {&(0x7f0000005740)=""/153, 0x99}], 0x3, &(0x7f0000005840)}, 0xfffff9c8}, {{0x0, 0x0, &(0x7f0000005cc0)=[{&(0x7f0000005880)=""/216, 0xd8}, {&(0x7f0000005980)=""/30, 0x1e}, {&(0x7f00000059c0)=""/233, 0xe9}, {&(0x7f0000005ac0)}, {&(0x7f0000005b00)=""/62, 0x3e}, {&(0x7f0000005b40)=""/121, 0x79}, {&(0x7f0000005bc0)=""/216, 0xd8}], 0x7, &(0x7f0000005d40)=""/156, 0x9c}, 0xc7500000}], 0x9, 0x2, &(0x7f0000006040)={0x0, 0x989680}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x1c8000, 0x2d}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x60000040}, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x280, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r1, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x29}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x50}}, 0x24000000) [ 653.896166] ? proc_fail_nth_write+0x97/0x220 [ 653.896183] ? lock_acquire+0x15e/0x2f0 [ 653.896195] ? __fget_files+0x34/0x3b0 [ 653.896214] ? find_held_lock+0x2b/0x80 [ 653.896231] ? __fget_files+0x203/0x3b0 [ 653.896248] ? lock_release+0xc8/0x290 [ 653.896264] ? __fget_files+0x20d/0x3b0 [ 653.896290] __sys_sendmsg+0x150/0x200 [ 653.896303] ? __pfx___sys_sendmsg+0x10/0x10 [ 653.896323] ? __pfx_ksys_write+0x10/0x10 [ 653.896343] do_syscall_64+0xbf/0x360 [ 653.896363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.896376] RIP: 0033:0x7f9c727d4b19 [ 653.896385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 653.896396] RSP: 002b:00007f9c6fd4a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 653.896408] RAX: ffffffffffffffda RBX: 00007f9c728e7f60 RCX: 00007f9c727d4b19 [ 653.896416] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000003 [ 653.896423] RBP: 00007f9c6fd4a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 653.896430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 653.896437] R13: 00007ffc2e9c9c7f R14: 00007f9c6fd4a300 R15: 0000000000022000 [ 653.896456] 11:57:16 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) (fail_nth: 1) 11:57:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x4000000, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:57:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) (fail_nth: 10) 11:57:16 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000180)=""/223) ioctl$EVIOCSREP(r0, 0x80104592, &(0x7f0000000040)) r1 = syz_open_dev$vcsa(&(0x7f0000000140), 0x8000, 0x80001) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x3, 0x4, 0x101}, {{r2, r3/1000+60000}, 0x0, 0x3f, 0x8}], 0x30) write$evdev(r1, &(0x7f00000000c0), 0x0) [ 654.032207] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 654.050910] FAULT_INJECTION: forcing a failure. [ 654.050910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 654.052652] CPU: 0 UID: 0 PID: 6550 Comm: syz-executor.2 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 654.052681] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 654.052693] Call Trace: [ 654.052701] [ 654.052710] dump_stack_lvl+0xfa/0x120 [ 654.052750] should_fail_ex+0x4d7/0x5e0 [ 654.052791] _copy_from_user+0x30/0xd0 [ 654.052818] copy_from_sockptr_offset.constprop.0+0x167/0x1a0 [ 654.052854] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 654.052902] packet_setsockopt+0x7bc/0x3060 [ 654.052931] ? __pfx_packet_setsockopt+0x10/0x10 [ 654.052954] ? selinux_netlbl_socket_setsockopt+0xa1/0x460 [ 654.052980] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 654.053010] ? lock_acquire+0x15e/0x2f0 [ 654.053035] ? __fget_files+0x34/0x3b0 [ 654.053070] ? find_held_lock+0x2b/0x80 [ 654.053109] ? selinux_socket_setsockopt+0x6e/0x90 [ 654.053139] ? __pfx_packet_setsockopt+0x10/0x10 [ 654.053160] do_sock_setsockopt+0xf7/0x1e0 [ 654.053198] __sys_setsockopt+0x11f/0x1a0 [ 654.053229] __x64_sys_setsockopt+0xbe/0x160 [ 654.053251] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 654.053276] do_syscall_64+0xbf/0x360 [ 654.053312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.053334] RIP: 0033:0x7f18f3717b19 [ 654.053350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 654.053371] RSP: 002b:00007f18f0c8d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 654.053392] RAX: ffffffffffffffda RBX: 00007f18f382af60 RCX: 00007f18f3717b19 [ 654.053406] RDX: 0000000000000001 RSI: 0000000000000107 RDI: 0000000000000005 [ 654.053419] RBP: 00007f18f0c8d1d0 R08: 0000000000000010 R09: 0000000000000000 [ 654.053431] R10: 0000000020000180 R11: 0000000000000246 R12: 0000000000000001 [ 654.053444] R13: 00007ffe00748fcf R14: 00007f18f0c8d300 R15: 0000000000022000 [ 654.053480] 11:57:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x5000000, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:57:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) (fail_nth: 11) 11:57:16 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 35) tgkill(r0, r1, 0xb) [ 654.130936] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 654.217890] FAULT_INJECTION: forcing a failure. [ 654.217890] name failslab, interval 1, probability 0, space 0, times 0 [ 654.218920] CPU: 1 UID: 0 PID: 6570 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 654.218949] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 654.218956] Call Trace: [ 654.218961] [ 654.218966] dump_stack_lvl+0xfa/0x120 [ 654.218995] should_fail_ex+0x4d7/0x5e0 [ 654.219020] ? __proc_create+0x306/0x920 [ 654.219037] should_failslab+0xc2/0x120 [ 654.219052] kmem_cache_alloc_noprof+0x5f/0x3d0 [ 654.219072] ? lock_release+0xc8/0x290 [ 654.219093] __proc_create+0x306/0x920 [ 654.219110] ? __pfx___proc_create+0x10/0x10 [ 654.219137] _proc_mkdir+0xb1/0x210 [ 654.219153] ? __pfx__proc_mkdir+0x10/0x10 [ 654.219175] ? __pfx_netfilter_net_init+0x10/0x10 [ 654.219194] netfilter_net_init+0x215/0x300 [ 654.219212] ops_init+0x1e1/0x650 [ 654.219232] setup_net+0x10d/0x320 [ 654.219244] ? lockdep_init_map_type+0x4b/0x240 [ 654.219258] ? __pfx_setup_net+0x10/0x10 [ 654.219274] ? debug_mutex_init+0x37/0x70 [ 654.219295] copy_net_ns+0x2e3/0x650 [ 654.219312] create_new_namespaces+0x3f6/0xab0 [ 654.219336] copy_namespaces+0x45c/0x580 [ 654.219354] copy_process+0x26d5/0x73e0 [ 654.219367] ? __pfx_perf_trace_lock+0x10/0x10 [ 654.219391] ? __pfx_copy_process+0x10/0x10 [ 654.219403] ? __might_fault+0xe0/0x190 [ 654.219421] ? _copy_from_user+0x5b/0xd0 [ 654.219439] kernel_clone+0xea/0x7f0 [ 654.219449] ? get_pid_task+0xfd/0x250 [ 654.219469] ? __pfx_kernel_clone+0x10/0x10 [ 654.219479] ? perf_trace_lock+0xb5/0x5d0 [ 654.219498] ? find_held_lock+0x2b/0x80 [ 654.219515] ? ksys_write+0x121/0x240 [ 654.219527] ? lock_is_held_type+0x9e/0x120 [ 654.219547] __do_sys_clone3+0x1f5/0x280 [ 654.219558] ? __pfx___do_sys_clone3+0x10/0x10 [ 654.219582] ? __fget_files+0x20d/0x3b0 [ 654.219612] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 654.219632] ? fput+0x6a/0x100 [ 654.219646] ? ksys_write+0x1a3/0x240 [ 654.219657] ? __pfx_ksys_write+0x10/0x10 [ 654.219676] do_syscall_64+0xbf/0x360 [ 654.219697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.219709] RIP: 0033:0x7ffb744edb19 [ 654.219719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 654.219730] RSP: 002b:00007ffb71a63188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 654.219742] RAX: ffffffffffffffda RBX: 00007ffb74600f60 RCX: 00007ffb744edb19 [ 654.219750] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 654.219757] RBP: 00007ffb71a631d0 R08: 0000000000000000 R09: 0000000000000000 [ 654.219764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 654.219770] R13: 00007ffeb487a35f R14: 00007ffb71a63300 R15: 0000000000022000 [ 654.219790] 11:57:26 executing program 7: r0 = msgget(0x2, 0x200) msgrcv(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007dba4e57a264eaaf00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007a68af5fe28f7ce55e3a8b5180caf830ccd9620d512919cb8374e7df9fed3a88728eafcb902d1e6b2aaba3ef98e4531f7e481fb589de4d633b1ba956aaa7d607a649c49bdfc7f309a8f0e886d2db9e29598a14ece665bba13f3fa9031dd25f2ebf1c837615114f6e4957b6514b8b97417622c7775175fc73df9934465744eff0d30e7e8f15d4ae864d615061c8c231d9d5d97cae92acd1c36366b87a838152e31eea8817d77c164bf951e76d62152d4895"], 0x103, 0x3, 0x3000) msgsnd(r0, &(0x7f0000000280)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000280)=""/79) 11:57:26 executing program 6: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') pread64(r0, &(0x7f0000000080)=""/51, 0x33, 0x0) 11:57:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r1, 0x800, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x3e}}}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x1, 0xfffffe00}}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40e0}, 0x22040880) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000000080)=0x7e32, 0x4) 11:57:26 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 36) tgkill(r0, r1, 0xb) 11:57:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) (fail_nth: 12) 11:57:26 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) (fail_nth: 2) 11:57:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x6000000, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:57:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x300, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 654.238793] cannot create netfilter proc entry [ 664.649711] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 664.666479] FAULT_INJECTION: forcing a failure. [ 664.666479] name failslab, interval 1, probability 0, space 0, times 0 [ 664.668171] CPU: 0 UID: 0 PID: 6590 Comm: syz-executor.2 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 664.668201] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 664.668214] Call Trace: [ 664.668222] [ 664.668231] dump_stack_lvl+0xfa/0x120 [ 664.668272] should_fail_ex+0x4d7/0x5e0 [ 664.668313] should_failslab+0xc2/0x120 [ 664.668340] __kmalloc_cache_noprof+0x6a/0x3e0 [ 664.668375] ? packet_setsockopt+0x1ae3/0x3060 [ 664.668405] packet_setsockopt+0x1ae3/0x3060 [ 664.668434] ? __pfx_packet_setsockopt+0x10/0x10 [ 664.668457] ? selinux_netlbl_socket_setsockopt+0xa1/0x460 [ 664.668483] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 664.668513] ? lock_acquire+0x15e/0x2f0 [ 664.668540] ? __fget_files+0x34/0x3b0 [ 664.668574] ? find_held_lock+0x2b/0x80 [ 664.668621] ? selinux_socket_setsockopt+0x6e/0x90 [ 664.668663] ? __pfx_packet_setsockopt+0x10/0x10 [ 664.668685] do_sock_setsockopt+0xf7/0x1e0 [ 664.668723] __sys_setsockopt+0x11f/0x1a0 [ 664.668755] __x64_sys_setsockopt+0xbe/0x160 [ 664.668777] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 664.668802] do_syscall_64+0xbf/0x360 [ 664.668838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.668861] RIP: 0033:0x7f18f3717b19 [ 664.668877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 664.668897] RSP: 002b:00007f18f0c8d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 664.668923] RAX: ffffffffffffffda RBX: 00007f18f382af60 RCX: 00007f18f3717b19 [ 664.668944] RDX: 0000000000000001 RSI: 0000000000000107 RDI: 0000000000000005 [ 664.668962] RBP: 00007f18f0c8d1d0 R08: 0000000000000010 R09: 0000000000000000 [ 664.668979] R10: 0000000020000180 R11: 0000000000000246 R12: 0000000000000001 [ 664.668991] R13: 00007ffe00748fcf R14: 00007f18f0c8d300 R15: 0000000000022000 [ 664.669028] 11:57:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) (fail_nth: 13) [ 664.870116] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 664.910064] FAULT_INJECTION: forcing a failure. [ 664.910064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 664.911913] CPU: 0 UID: 0 PID: 6606 Comm: syz-executor.3 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 664.911952] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 664.911969] Call Trace: [ 664.911976] [ 664.911985] dump_stack_lvl+0xfa/0x120 [ 664.912023] should_fail_ex+0x4d7/0x5e0 [ 664.912061] _copy_to_user+0x32/0xd0 [ 664.912087] simple_read_from_buffer+0xe0/0x180 [ 664.912121] proc_fail_nth_read+0x18a/0x240 [ 664.912145] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 664.912168] ? security_file_permission+0x22/0x90 [ 664.912201] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 664.912222] vfs_read+0x1eb/0xbe0 [ 664.912250] ? __pfx_vfs_read+0x10/0x10 [ 664.912271] ? lock_release+0xc8/0x290 [ 664.912301] ? __fget_files+0x20d/0x3b0 [ 664.912347] ksys_read+0x121/0x240 [ 664.912366] ? __pfx_ksys_read+0x10/0x10 [ 664.912398] do_syscall_64+0xbf/0x360 [ 664.912432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.912455] RIP: 0033:0x7f9c7278769c [ 664.912472] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 664.912494] RSP: 002b:00007f9c6fd4a170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 664.912513] RAX: ffffffffffffffda RBX: 000000000000002c RCX: 00007f9c7278769c [ 664.912526] RDX: 000000000000000f RSI: 00007f9c6fd4a1e0 RDI: 0000000000000005 [ 664.912538] RBP: 00007f9c6fd4a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 664.912550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 664.912562] R13: 00007ffc2e9c9c7f R14: 00007f9c6fd4a300 R15: 0000000000022000 [ 664.912596] 11:57:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 11:57:36 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 37) tgkill(r0, r1, 0xb) 11:57:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x500, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:57:36 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x80000001, 0x42}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x14c, r5, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x57}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xfff9}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_IE={0x100, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0x74, 0x2}}, @random_vendor={0xdd, 0xd9, "972d01530c9371694ba8fb4fcd02cda152703414d1a91c1d2f3974c0c3417feb7dc4237a1239293e052bb01f6092765aff344bb063c0965aaa87d97b29c837729202be68e4fc1bc7bb519ede64c3841a0720e0bc24d84e7771426b2c4ae8c80de4b0e70b3d9fe696a5d82431942a647e46ee4528f8e45e5aaf50b6b60c968d7e24c3a86f47847fb1bf875b72334e7048de325d88db8664aef86fb0eb2849c2774f91a44282b7b5cfb8c4e4a039f367409e922c324e34e616e3ae5b153a668e7b199ad749cbf7051419de6fb87423e0dc37be34971d4e9d911e"}, @measure_req={0x26, 0x1a, {0x5, 0x7f, 0x5, "a567d54090b15d04c8f8ebdcdd88f3408aa2b72ca8f24d"}}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000}, 0x40001) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth0_to_batadv\x00', &(0x7f0000000280)=@ethtool_rx_ntuple={0x35, {0x1, @udp_ip4_spec={@loopback, @multicast2, 0x4e22, 0x4e22}, @esp_ip4_spec={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x6, 0x9}, 0x3, 0x3, 0x0, 0xfff, 0xffffffffffffffff}}}) mount$9p_tcp(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)={'trans=tcp,', {}, 0x2c, {[{@privport}]}}) 11:57:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000100)={r8, 0x1, 0x6, @multicast}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x29, 0xfb, 0x5b, 0x0, 0x4e, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x80, 0x7, 0x6, 0x15a}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)={0x228, r5, 0x5a992addb292b442, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x4c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x26, 0x5, "946747400c9279084897b2088e5639e54153454b83c9bb3cfcde0bf7b3d8aa2e99b9"}, @ETHTOOL_A_BITSET_VALUE={0x19, 0x4, "3b44f6f1cb6eeacee1edf3e0ac72ba9357c03b949e"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xf0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xe6, 0x5, "dff1acbd0e5e1d8f976d3704a5e7eb6f35fbb0e3d82cc85e767f8925800fbcc287f13ea58b679bd73a43dee35c5e20eaef3c7390c674cbb1bdd2e330704e48ad651ed507adb874afe5c16ffd9b1e231611393a9fbf594081c6cee752304efdf922df5d79f3d8b72ab83467ed6280cd7d8387f3ebe11b6d8b3cb781ad3260919d7b4d221e35b2e942da1e643b08afc25b81f8d4313c322d02c230a8f7ba9cdc44b438f433b4c525b25b41bf5a68075550436ea3cdefee84d99326945f7b6bca6d2e9db59905e9d1dd5a361b0b937311dfd82937e0b9698054b6cbc8c59cd62b3a4565"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:57:36 executing program 7: r0 = msgget(0x2, 0x200) msgrcv(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007dba4e57a264eaaf00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007a68af5fe28f7ce55e3a8b5180caf830ccd9620d512919cb8374e7df9fed3a88728eafcb902d1e6b2aaba3ef98e4531f7e481fb589de4d633b1ba956aaa7d607a649c49bdfc7f309a8f0e886d2db9e29598a14ece665bba13f3fa9031dd25f2ebf1c837615114f6e4957b6514b8b97417622c7775175fc73df9934465744eff0d30e7e8f15d4ae864d615061c8c231d9d5d97cae92acd1c36366b87a838152e31eea8817d77c164bf951e76d62152d4895"], 0x103, 0x3, 0x3000) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000280)=""/79) 11:57:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x7000000, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:57:36 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) (fail_nth: 3) [ 674.585534] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 674.594255] FAULT_INJECTION: forcing a failure. [ 674.594255] name failslab, interval 1, probability 0, space 0, times 0 [ 674.595975] CPU: 0 UID: 0 PID: 6627 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 674.596005] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 674.596017] Call Trace: [ 674.596025] [ 674.596034] dump_stack_lvl+0xfa/0x120 [ 674.596073] should_fail_ex+0x4d7/0x5e0 [ 674.596113] ? __proc_create+0x306/0x920 [ 674.596141] should_failslab+0xc2/0x120 [ 674.596168] kmem_cache_alloc_noprof+0x5f/0x3d0 [ 674.596202] ? lock_release+0xc8/0x290 [ 674.596237] __proc_create+0x306/0x920 [ 674.596268] ? __pfx___proc_create+0x10/0x10 [ 674.596297] ? proc_register+0x55e/0x6d0 [ 674.596342] proc_create_reg+0xb6/0x180 [ 674.596378] proc_create_net_data+0x8f/0x1c0 [ 674.596410] ? __pfx_proc_create_net_data+0x10/0x10 [ 674.596443] ? __pfx__proc_mkdir+0x10/0x10 [ 674.596478] ? __pfx_nf_log_net_init+0x10/0x10 [ 674.596511] nf_log_net_init+0x6a/0x380 [ 674.596539] ? __pfx_netfilter_net_init+0x10/0x10 [ 674.596569] ? __pfx_nf_log_net_init+0x10/0x10 [ 674.596601] ops_init+0x1e1/0x650 [ 674.596644] setup_net+0x10d/0x320 [ 674.596667] ? lockdep_init_map_type+0x4b/0x240 [ 674.596692] ? __pfx_setup_net+0x10/0x10 [ 674.596722] ? debug_mutex_init+0x37/0x70 [ 674.596759] copy_net_ns+0x2e3/0x650 [ 674.596805] create_new_namespaces+0x3f6/0xab0 [ 674.596888] copy_namespaces+0x45c/0x580 [ 674.596923] copy_process+0x26d5/0x73e0 [ 674.596945] ? __pfx_perf_trace_lock+0x10/0x10 [ 674.596990] ? __pfx_copy_process+0x10/0x10 [ 674.597011] ? __might_fault+0xe0/0x190 [ 674.597045] ? _copy_from_user+0x5b/0xd0 [ 674.597076] kernel_clone+0xea/0x7f0 [ 674.597095] ? get_pid_task+0xfd/0x250 [ 674.597130] ? __pfx_kernel_clone+0x10/0x10 [ 674.597149] ? perf_trace_lock+0xb5/0x5d0 [ 674.597184] ? find_held_lock+0x2b/0x80 [ 674.597214] ? ksys_write+0x121/0x240 [ 674.597236] ? lock_is_held_type+0x9e/0x120 [ 674.597272] __do_sys_clone3+0x1f5/0x280 [ 674.597294] ? __pfx___do_sys_clone3+0x10/0x10 [ 674.597338] ? __fget_files+0x20d/0x3b0 [ 674.597381] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 674.597416] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 674.597453] ? ksys_write+0x1a3/0x240 [ 674.597474] ? __pfx_ksys_write+0x10/0x10 [ 674.597509] do_syscall_64+0xbf/0x360 [ 674.597547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.597569] RIP: 0033:0x7ffb744edb19 [ 674.597586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 674.597606] RSP: 002b:00007ffb71a63188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 674.597627] RAX: ffffffffffffffda RBX: 00007ffb74600f60 RCX: 00007ffb744edb19 [ 674.597641] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 674.597654] RBP: 00007ffb71a631d0 R08: 0000000000000000 R09: 0000000000000000 [ 674.597667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 674.597679] R13: 00007ffeb487a35f R14: 00007ffb71a63300 R15: 0000000000022000 [ 674.597716] [ 674.640964] mac80211_hwsim hwsim14 wlan1: entered promiscuous mode [ 674.673804] 9pnet_fd: p9_fd_create_tcp (6626): problem connecting socket to 127.0.0.1 [ 674.678775] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 11:57:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x600, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:57:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) [ 674.738852] mac80211_hwsim hwsim14 wlan1: left promiscuous mode 11:57:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x9000000, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:57:36 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) (fail_nth: 4) [ 674.769843] mac80211_hwsim hwsim14 wlan1: entered promiscuous mode 11:57:36 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 38) tgkill(r0, r1, 0xb) [ 674.797666] 9pnet_fd: p9_fd_create_tcp (6626): problem connecting socket to 127.0.0.1 [ 674.834571] mac80211_hwsim hwsim14 wlan1: left promiscuous mode [ 674.845399] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 674.856000] FAULT_INJECTION: forcing a failure. [ 674.856000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 674.856965] CPU: 0 UID: 0 PID: 6645 Comm: syz-executor.2 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 674.856982] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 674.856990] Call Trace: [ 674.856995] [ 674.857000] dump_stack_lvl+0xfa/0x120 [ 674.857033] should_fail_ex+0x4d7/0x5e0 [ 674.857058] _copy_to_user+0x32/0xd0 [ 674.857075] simple_read_from_buffer+0xe0/0x180 [ 674.857097] proc_fail_nth_read+0x18a/0x240 [ 674.857114] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 674.857127] ? security_file_permission+0x22/0x90 [ 674.857148] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 674.857161] vfs_read+0x1eb/0xbe0 [ 674.857178] ? __pfx_vfs_read+0x10/0x10 [ 674.857191] ? lock_release+0xc8/0x290 [ 674.857210] ? __fget_files+0x20d/0x3b0 [ 674.857240] ksys_read+0x121/0x240 [ 674.857251] ? __pfx_ksys_read+0x10/0x10 [ 674.857272] do_syscall_64+0xbf/0x360 [ 674.857293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.857307] RIP: 0033:0x7f18f36ca69c [ 674.857316] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 674.857327] RSP: 002b:00007f18f0c8d170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 674.857339] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f18f36ca69c [ 674.857347] RDX: 000000000000000f RSI: 00007f18f0c8d1e0 RDI: 0000000000000007 [ 674.857354] RBP: 00007f18f0c8d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 674.857361] R10: 0000000020000180 R11: 0000000000000246 R12: 0000000000000001 [ 674.857369] R13: 00007ffe00748fcf R14: 00007f18f0c8d300 R15: 0000000000022000 [ 674.857388] [ 674.904210] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 11:57:37 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 11:57:37 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(r2, r1, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000040)='./file0/file0\x00', 0x10, 0x0) faccessat2(r0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) 11:57:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x2, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 11:57:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x700, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:57:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) recvmmsg(r0, &(0x7f0000002740)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/13, 0xd}, {&(0x7f00000000c0)=""/22, 0x16}, {&(0x7f0000000100)=""/165, 0xa5}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4}, 0x9}, {{&(0x7f0000000200)=@nl=@proc, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)=""/8, 0x8}, {&(0x7f00000002c0)=""/56, 0x38}, {&(0x7f0000001480)=""/241, 0xf1}, {&(0x7f0000001580)=""/196, 0xc4}, {&(0x7f0000001680)=""/147, 0x93}], 0x5, &(0x7f0000001740)=""/4096, 0x1000}, 0x2}], 0x2, 0x2100, &(0x7f0000000400)={0x77359400}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000027c0)=ANY=[@ANYBLOB="100000b95500080000000000003d4efc68bd196cc100", @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0900000800b70000000000"], 0x2c}}, 0x0) 11:57:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0xf000000, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 675.050833] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode 11:57:37 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 39) tgkill(r0, r1, 0xb) [ 675.085502] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 11:57:37 executing program 6: r0 = syz_io_uring_setup(0x17be, &(0x7f0000000000)={0x0, 0x68dd, 0x8, 0x0, 0x2fe}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, 0x0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000001240)=[{&(0x7f0000000180)=""/146, 0x92}, {&(0x7f0000000240)=""/4096, 0x1000}], 0x2) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) [ 675.124457] FAULT_INJECTION: forcing a failure. [ 675.124457] name failslab, interval 1, probability 0, space 0, times 0 [ 675.125380] CPU: 0 UID: 0 PID: 6675 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 675.125396] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 675.125404] Call Trace: [ 675.125409] [ 675.125414] dump_stack_lvl+0xfa/0x120 [ 675.125443] should_fail_ex+0x4d7/0x5e0 [ 675.125467] ? __proc_create+0x306/0x920 [ 675.125484] should_failslab+0xc2/0x120 [ 675.125499] kmem_cache_alloc_noprof+0x5f/0x3d0 [ 675.125519] ? lock_release+0xc8/0x290 [ 675.125539] __proc_create+0x306/0x920 [ 675.125556] ? __pfx___proc_create+0x10/0x10 [ 675.125575] ? mark_held_locks+0x49/0x80 [ 675.125594] _proc_mkdir+0xb1/0x210 [ 675.125615] ? __pfx__proc_mkdir+0x10/0x10 [ 675.125631] ? kmem_cache_alloc_noprof+0x1a6/0x3d0 [ 675.125656] proc_net_ns_init+0x273/0x420 [ 675.125676] ? __pfx_proc_net_ns_init+0x10/0x10 [ 675.125692] ops_init+0x1e1/0x650 [ 675.125715] setup_net+0x10d/0x320 [ 675.125728] ? lockdep_init_map_type+0x4b/0x240 [ 675.125742] ? __pfx_setup_net+0x10/0x10 [ 675.125759] ? debug_mutex_init+0x37/0x70 [ 675.125780] copy_net_ns+0x2e3/0x650 [ 675.125797] create_new_namespaces+0x3f6/0xab0 [ 675.125821] copy_namespaces+0x45c/0x580 [ 675.125839] copy_process+0x26d5/0x73e0 [ 675.125852] ? __pfx_perf_trace_lock+0x10/0x10 [ 675.125877] ? __pfx_copy_process+0x10/0x10 [ 675.125888] ? __might_fault+0xe0/0x190 [ 675.125907] ? _copy_from_user+0x5b/0xd0 [ 675.125925] kernel_clone+0xea/0x7f0 [ 675.125936] ? get_pid_task+0xfd/0x250 [ 675.125956] ? __pfx_kernel_clone+0x10/0x10 [ 675.125966] ? perf_trace_lock+0xb5/0x5d0 [ 675.125985] ? find_held_lock+0x2b/0x80 [ 675.126001] ? ksys_write+0x121/0x240 [ 675.126014] ? lock_is_held_type+0x9e/0x120 [ 675.126034] __do_sys_clone3+0x1f5/0x280 [ 675.126046] ? __pfx___do_sys_clone3+0x10/0x10 [ 675.126069] ? __fget_files+0x20d/0x3b0 [ 675.126094] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 675.126114] ? fput+0x6a/0x100 [ 675.126128] ? ksys_write+0x1a3/0x240 [ 675.126139] ? __pfx_ksys_write+0x10/0x10 [ 675.126158] do_syscall_64+0xbf/0x360 [ 675.126178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.126191] RIP: 0033:0x7ffb744edb19 [ 675.126200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 675.126211] RSP: 002b:00007ffb71a63188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 675.126223] RAX: ffffffffffffffda RBX: 00007ffb74600f60 RCX: 00007ffb744edb19 [ 675.126231] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 675.126238] RBP: 00007ffb71a631d0 R08: 0000000000000000 R09: 0000000000000000 [ 675.126245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 675.126252] R13: 00007ffeb487a35f R14: 00007ffb71a63300 R15: 0000000000022000 [ 675.126271] 11:57:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x9effffff, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:57:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1f, 0x400044}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x38}}, 0x8051) 11:57:46 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x29, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 11:57:46 executing program 7: r0 = msgget(0x2, 0x200) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000280)=""/79) 11:57:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x3, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 11:57:46 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/raw6\x00') pread64(r1, &(0x7f0000000140)=""/217, 0xd9, 0x0) write$bt_hci(r1, &(0x7f0000000000)={0x1, @pin_code_reply={{0x40d, 0x17}, {@none, 0x5, "0c4b37a90e5d0dee91bc68f1feff00"}}}, 0x1b) 11:57:46 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 40) tgkill(r0, r1, 0xb) 11:57:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x900, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:57:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0xb7000000, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:57:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x4, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) [ 684.865949] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 684.888526] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 684.897970] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 684.921444] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 11:57:47 executing program 7: msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/79) 11:58:03 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 11:58:03 executing program 7: msgctl$MSG_STAT(0x0, 0xb, 0x0) 11:58:03 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 41) tgkill(r0, r1, 0xb) 11:58:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0xf00, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:58:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x5, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 11:58:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0xf0ffffff, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:58:03 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='s']) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x200000, 0x1) chown(&(0x7f00000001c0)='./file0\x00', r1, 0x0) openat$incfs(r0, &(0x7f0000001740)='.log\x00', 0x2240, 0x0) 11:58:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)={0x32c, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_NODE={0xd8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "125c8652bbabf59124e703578a4b7eb395045742761b12cfc22532a13b"}}, @TIPC_NLA_NODE_ID={0x86, 0x3, "6fb8b7385d1235b4896ccabe9efa4be7568d6ebe4e0ad7115506ddf5b93d77c91d91ea09a67daa0da2ebd3785053cfcbbbe07ec236f5536d9e02a91f04aaed3851b9feff711af58735be36b2acdf2ef344ddecfb47fbb46f12a7d0e4b82cbd9669de6ad8e926940ff4f4806db3642a081a4cc9295f804aa861cda99b42438a11362e"}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x164, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x75, 0x3, "722e01df0c615b706030479426000da833b2fc13f6d77ceeae64adc1de9ac950837ded1b713505e5e0076dff1014ea4ca59e3eb021595a38176b152677df4d0c58d9e7a2faea7f94badb1d88f657aa327f2b6ce5031d8f88e67644453208f4de5fac0561bc66323812775c249580fc21fb"}, @TIPC_NLA_NODE_ID={0xd0, 0x3, "f2f35a197717c29709b936f375871c189c23658c46f5add7fb4be2abf22b07692b569c9442157b083eeed1e4b9768600de8ef17ce5eb765a094d00929d8128807a164b6e19ea1dc4330d8c1c502e05c689d6286eb26e60cc4d3b569294e57a76bfbfe900d156bd707f81dc4f489a2c6d1082d046e4c7c79eee484b29b081c60dc44d7a66adc6dd87ed5da153ff4ecceed29797e3d3e6b3a9c3d8462ade6b16737b9f8f2fc0bfb6b22ceb57dd49ed6f1418671b085fa5f07dec70eb5cfe0d4bf0094575b9ac06b28a6696c855"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_SOCK={0x8c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3f22}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x300}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x32c}, 0x1, 0x0, 0x0, 0x8084}, 0x80) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:58:03 executing program 7: msgctl$MSG_STAT(0x0, 0xb, 0x0) [ 701.813178] FAULT_INJECTION: forcing a failure. [ 701.813178] name failslab, interval 1, probability 0, space 0, times 0 [ 701.814721] CPU: 0 UID: 0 PID: 6747 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 701.814747] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 701.814759] Call Trace: [ 701.814765] [ 701.814773] dump_stack_lvl+0xfa/0x120 [ 701.814809] should_fail_ex+0x4d7/0x5e0 [ 701.814845] ? __register_sysctl_table+0xb5/0x16a0 [ 701.814872] should_failslab+0xc2/0x120 [ 701.814895] __kmalloc_noprof+0xb4/0x4b0 [ 701.814935] __register_sysctl_table+0xb5/0x16a0 [ 701.814964] ? lock_release+0xc8/0x290 [ 701.814991] ? __pfx___register_sysctl_table+0x10/0x10 [ 701.815020] ? is_module_address+0x76/0x120 [ 701.815053] ? register_net_sysctl_sz+0x20b/0x290 [ 701.815085] ? __pfx_nf_log_net_init+0x10/0x10 [ 701.815115] nf_log_net_init+0x10a/0x380 [ 701.815141] ? __pfx_netfilter_net_init+0x10/0x10 [ 701.815168] ? __pfx_nf_log_net_init+0x10/0x10 [ 701.815195] ops_init+0x1e1/0x650 [ 701.815227] setup_net+0x10d/0x320 [ 701.815247] ? lockdep_init_map_type+0x4b/0x240 [ 701.815270] ? __pfx_setup_net+0x10/0x10 [ 701.815297] ? debug_mutex_init+0x37/0x70 [ 701.815331] copy_net_ns+0x2e3/0x650 [ 701.815360] create_new_namespaces+0x3f6/0xab0 [ 701.815398] copy_namespaces+0x45c/0x580 [ 701.815428] copy_process+0x26d5/0x73e0 [ 701.815448] ? __pfx_perf_trace_lock+0x10/0x10 [ 701.815488] ? __pfx_copy_process+0x10/0x10 [ 701.815507] ? __might_fault+0xe0/0x190 [ 701.815538] ? _copy_from_user+0x5b/0xd0 [ 701.815566] kernel_clone+0xea/0x7f0 [ 701.815583] ? get_pid_task+0xfd/0x250 [ 701.815622] ? __pfx_kernel_clone+0x10/0x10 [ 701.815639] ? perf_trace_lock+0xb5/0x5d0 [ 701.815671] ? find_held_lock+0x2b/0x80 [ 701.815698] ? ksys_write+0x121/0x240 [ 701.815718] ? lock_is_held_type+0x9e/0x120 [ 701.815751] __do_sys_clone3+0x1f5/0x280 [ 701.815770] ? __pfx___do_sys_clone3+0x10/0x10 [ 701.815810] ? __fget_files+0x20d/0x3b0 [ 701.815849] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 701.815881] ? fput+0x6a/0x100 [ 701.815903] ? ksys_write+0x1a3/0x240 [ 701.815922] ? __pfx_ksys_write+0x10/0x10 [ 701.815953] do_syscall_64+0xbf/0x360 [ 701.815986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.816006] RIP: 0033:0x7ffb744edb19 [ 701.816021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 701.816039] RSP: 002b:00007ffb71a63188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 701.816058] RAX: ffffffffffffffda RBX: 00007ffb74600f60 RCX: 00007ffb744edb19 [ 701.816071] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 701.816082] RBP: 00007ffb71a631d0 R08: 0000000000000000 R09: 0000000000000000 [ 701.816094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 701.816105] R13: 00007ffeb487a35f R14: 00007ffb71a63300 R15: 0000000000022000 [ 701.816138] [ 701.827410] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 701.830211] tmpfs: Unknown parameter 's' [ 701.844821] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 11:58:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0xed00, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 701.905888] tmpfs: Unknown parameter 's' 11:58:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x6, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 11:58:04 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 42) tgkill(r0, r1, 0xb) 11:58:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0xfffff000, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:58:04 executing program 6: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000180)={0x7d, 0x1, 0x1, "b958e4129d2b0cb9f64f69454eb5966c33e5fee7a9e10fb2132b8b4d50f4c9398e8b6757c6ef7da0705e5cde1dcfaa7aca36906eb615a31e4b3421a2ef19fda868f437aecceeac7c5b07ed3a63d29e3cc1de3307d3106021886eed8ba5dea165161787bc15920a062cc7355897570e9b157b6f9d88082cb3e837a380a8"}) r2 = dup2(r1, r0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000080)=0x21) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[], 0x120) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) fremovexattr(r3, &(0x7f0000000040)=@known='system.sockprotoname\x00') 11:58:04 executing program 7: msgctl$MSG_STAT(0x0, 0xb, 0x0) 11:58:04 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x5, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 11:58:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0xf000, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 702.190060] program syz-executor.6 is using a deprecated SCSI ioctl, please convert it to SG_IO 11:58:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000001240)=ANY=[@ANYBLOB="216ed442bc20e2fb77a5dc59a55cb47961f7835938ea460de88fd452939a49794d5f5e1d9df4ca529fcb2023d3229b04903c01cc28007337f52e0b45e503f4c1f54a94bed1e109b200391a2828cb0f1cc6f2f02f755bc1e8ce81c980a208841237e371066e075c4f332772e4c04c1e61d85659e2d71ed1b1ddc8b58b889485fa5b6e9133ba", @ANYRES16=r4, @ANYBLOB="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"], 0xd04}, 0x1, 0x0, 0x0, 0x20000004}, 0x400c880) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xc8, r9, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x16, 0x5b, "2e308488ecb9af69cd60dd43e3d53c4d1ee0"}, @NL80211_ATTR_FRAME_MATCH={0x9c, 0x5b, "8ab9dbfb602f502ae6b0defab3cafb4b5bc24ba997578fe02dc82583b2142b6f2843d027d8b25069b328e3dbd8304cfebd99d2c293b01f952a015b3609f4338541359cf14e4d15ecef12b2ecb13643de828d2f4823c262d18cb7f64352d992c971476de74563064d5b2d757474ab507f3bace9145555a62416a693c9ef00c0374e3ce17cf277e89fc2e5f2a8e20c60cd3010144706818bdd"}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000012}, 0x40080) [ 702.246750] program syz-executor.6 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 702.277229] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 702.323315] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 702.361198] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 702.394938] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 11:58:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300769b61cead78ac135a8d61e8f9170101e1fbfb296644dfa60516a37091ded2d5c2a988215e5238c533bf7dbb1dfb96f80a1e0478548e3b7fa540e2c21038bcf0c870129ea6e16a39f07c59e2890b62afadf1cf9c156a5e5d669a4ead4db508b9cd4f62438b127788b4434a3ea6406e3cc929451404eb01b407f09a5ae3157531167966c6772a1397c934f616d8441959b744e90c14bc8da3795ff4559b8f3d34f78e3177453e2a31aea8d7775a320e8f61f9e445295a3193c67a3f670e7f43b64e", @ANYRES32=r3, @ANYBLOB="080026006c0900000800b70000000000"], 0x2c}}, 0x0) 11:58:15 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x7, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 11:58:15 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 43) tgkill(r0, r1, 0xb) 11:58:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x7, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 11:58:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x30000, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:58:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0xffffff7f, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:58:15 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r4 = syz_open_dev$vcsa(&(0x7f0000000240), 0x1ff, 0x24000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x100, 0x101, 0x5, 0xc9, 0x6}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000180)={'bond_slave_1\x00'}) r7 = accept(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x80) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@timestamp={0x8, 0x7}, @timestamp, @mss, @sack_perm, @sack_perm, @sack_perm, @timestamp, @window={0x3, 0xfffd}], 0x8) 11:58:15 executing program 7: msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/79) (fail_nth: 1) [ 712.854240] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 712.862491] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 11:58:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x8, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) [ 712.907341] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 712.911318] FAULT_INJECTION: forcing a failure. [ 712.911318] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 712.913228] CPU: 0 UID: 0 PID: 6820 Comm: syz-executor.7 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 712.913259] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 712.913272] Call Trace: [ 712.913280] [ 712.913290] dump_stack_lvl+0xfa/0x120 [ 712.913332] should_fail_ex+0x4d7/0x5e0 [ 712.913376] _copy_to_user+0x32/0xd0 [ 712.913405] ksys_msgctl.constprop.0+0x1f8/0x320 [ 712.913450] ? __pfx_ksys_msgctl.constprop.0+0x10/0x10 [ 712.913484] ? __fget_files+0x20d/0x3b0 [ 712.913557] do_syscall_64+0xbf/0x360 [ 712.913597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.913627] RIP: 0033:0x7f7209919b19 [ 712.913645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 712.913666] RSP: 002b:00007f7206e8f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000047 [ 712.913688] RAX: ffffffffffffffda RBX: 00007f7209a2cf60 RCX: 00007f7209919b19 [ 712.913703] RDX: 0000000020000280 RSI: 000000000000000b RDI: 0000000000000000 [ 712.913717] RBP: 00007f7206e8f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 712.913731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 712.913744] R13: 00007ffd05ee277f R14: 00007f7206e8f300 R15: 0000000000022000 [ 712.913782] [ 712.942035] FAULT_INJECTION: forcing a failure. [ 712.942035] name failslab, interval 1, probability 0, space 0, times 0 11:58:15 executing program 6: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/sockstat\x00') ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000080)) pread64(r1, &(0x7f0000000200)=""/2, 0x2, 0x2) [ 712.944110] CPU: 0 UID: 0 PID: 6822 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 11:58:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000400)={{r1}, 0x0, 0x6, @inherit={0x50, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000001000000000000000101000000000000ff0f0000000000001b000000000000001f0000000000000007000000000000007f000000000000000180000000000000c2020000000000009522ed97b98f37eddfad5b8084ca899b195f5a23f8490ec8543958771f9a5ec7ed2b89d165b39de27daa1f781e0350bc619862e84dc05ebacc326cf7e0f8c17c93c949ab77bdd60800a271592403d477f10273e977a7d6d9c3502496891e98e9a45e3acc8a4f27dc23941a57ccd4f13998bd15a67ce584719d2e5f6f6de3d9"]}, @subvolid=0x3e}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c000000a577ce3769696c39a01545d50b1a88bf2643b462b4861916", @ANYRES16=r2, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r4, @ANYBLOB="080026006c0900000800b70002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4c080}, 0x0) [ 712.944141] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 712.944153] Call Trace: [ 712.944161] [ 712.944170] dump_stack_lvl+0xfa/0x120 [ 712.944210] should_fail_ex+0x4d7/0x5e0 [ 712.944252] ? __register_sysctl_table+0xd4f/0x16a0 [ 712.944284] should_failslab+0xc2/0x120 [ 712.944311] __kmalloc_noprof+0xb4/0x4b0 [ 712.944346] ? lock_release+0xc8/0x290 [ 712.944382] __register_sysctl_table+0xd4f/0x16a0 [ 712.944425] ? __pfx___register_sysctl_table+0x10/0x10 [ 712.944456] ? is_module_address+0x76/0x120 [ 712.944493] ? register_net_sysctl_sz+0x20b/0x290 [ 712.944532] ? __pfx_nf_log_net_init+0x10/0x10 [ 712.944566] nf_log_net_init+0x10a/0x380 [ 712.944598] ? __pfx_netfilter_net_init+0x10/0x10 [ 712.944637] ? __pfx_nf_log_net_init+0x10/0x10 [ 712.944670] ops_init+0x1e1/0x650 [ 712.944707] setup_net+0x10d/0x320 [ 712.944732] ? lockdep_init_map_type+0x4b/0x240 [ 712.944759] ? __pfx_setup_net+0x10/0x10 [ 712.944791] ? debug_mutex_init+0x37/0x70 [ 712.944831] copy_net_ns+0x2e3/0x650 [ 712.944866] create_new_namespaces+0x3f6/0xab0 [ 712.944911] copy_namespaces+0x45c/0x580 [ 712.944947] copy_process+0x26d5/0x73e0 [ 712.944971] ? __pfx_perf_trace_lock+0x10/0x10 [ 712.945021] ? __pfx_copy_process+0x10/0x10 [ 712.945044] ? __might_fault+0xe0/0x190 [ 712.945080] ? _copy_from_user+0x5b/0xd0 [ 712.945113] kernel_clone+0xea/0x7f0 [ 712.945134] ? get_pid_task+0xfd/0x250 [ 712.945171] ? __pfx_kernel_clone+0x10/0x10 [ 712.945191] ? perf_trace_lock+0xb5/0x5d0 [ 712.945229] ? find_held_lock+0x2b/0x80 [ 712.945262] ? ksys_write+0x121/0x240 [ 712.945285] ? lock_is_held_type+0x9e/0x120 [ 712.945324] __do_sys_clone3+0x1f5/0x280 [ 712.945347] ? __pfx___do_sys_clone3+0x10/0x10 [ 712.945399] ? __fget_files+0x20d/0x3b0 [ 712.945473] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 712.945518] ? fput+0x6a/0x100 [ 712.945545] ? ksys_write+0x1a3/0x240 [ 712.945567] ? __pfx_ksys_write+0x10/0x10 [ 712.945604] do_syscall_64+0xbf/0x360 [ 712.945643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.945666] RIP: 0033:0x7ffb744edb19 [ 712.945684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 712.945705] RSP: 002b:00007ffb71a63188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 712.945727] RAX: ffffffffffffffda RBX: 00007ffb74600f60 RCX: 00007ffb744edb19 [ 712.945743] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 712.945756] RBP: 00007ffb71a631d0 R08: 0000000000000000 R09: 0000000000000000 [ 712.945770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 712.945783] R13: 00007ffeb487a35f R14: 00007ffb71a63300 R15: 0000000000022000 [ 712.945822] [ 712.988284] sysctl could not get directory: /net -12 11:58:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0xffffff9e, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 713.022022] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 713.037327] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 713.060857] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 11:58:15 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/raw6\x00') pread64(r1, &(0x7f0000000140)=""/217, 0xd9, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x2, @loopback, 0xff}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) 11:58:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x9, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 11:58:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2c}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x33}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:58:15 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 44) tgkill(r0, r1, 0xb) 11:58:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x80000, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:58:15 executing program 7: msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/79) (fail_nth: 2) 11:58:15 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x8, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 11:58:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0xf, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 11:58:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0xfffffff0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 713.280892] FAULT_INJECTION: forcing a failure. [ 713.280892] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 713.283357] CPU: 0 UID: 0 PID: 6859 Comm: syz-executor.7 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 713.283388] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 713.283401] Call Trace: [ 713.283409] [ 713.283418] dump_stack_lvl+0xfa/0x120 [ 713.283460] should_fail_ex+0x4d7/0x5e0 [ 713.283503] should_fail_alloc_page+0xe0/0x110 [ 713.283534] prepare_alloc_pages+0x1af/0x500 [ 713.283571] __alloc_frozen_pages_noprof+0x17f/0x1f10 [ 713.283620] ? __pfx_perf_trace_lock+0x10/0x10 [ 713.283647] ? __rmqueue_pcplist+0x1f3/0x10f0 [ 713.283694] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 713.283728] ? get_page_from_freelist+0x484/0x24b0 [ 713.283774] ? __kasan_unpoison_pages+0x2f/0x40 [ 713.283801] ? get_page_from_freelist+0x194a/0x24b0 [ 713.283845] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 713.283877] ? policy_nodemask+0xeb/0x4e0 [ 713.283915] alloc_pages_mpol+0xed/0x340 [ 713.283948] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 713.283981] ? __pfx_perf_trace_lock+0x10/0x10 [ 713.284019] alloc_pages_noprof+0xa1/0x380 [ 713.284055] __pmd_alloc+0x3b/0x980 [ 713.284086] ? lock_release+0xc8/0x290 [ 713.284117] __handle_mm_fault+0xcae/0x30f0 [ 713.284150] ? mt_find+0x64c/0x870 [ 713.284187] ? __pfx_mt_find+0x10/0x10 [ 713.284223] ? __pfx___handle_mm_fault+0x10/0x10 [ 713.284282] ? find_vma+0xbf/0x140 [ 713.284309] ? __pfx_find_vma+0x10/0x10 [ 713.284344] handle_mm_fault+0x2c3/0x900 [ 713.284379] ? access_error+0x17d/0x380 [ 713.284404] ? lock_mm_and_find_vma+0xaa/0x6f0 [ 713.284435] do_user_addr_fault+0x395/0xeb0 [ 713.284471] exc_page_fault+0xb0/0x180 [ 713.284507] asm_exc_page_fault+0x26/0x30 [ 713.284529] RIP: 0010:rep_movs_alternative+0x54/0x90 [ 713.284559] Code: 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 eb 05 e9 9f 9c 03 00 48 8b 06 <48> 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 c7 48 01 c6 48 29 [ 713.284580] RSP: 0018:ffff888040d97d98 EFLAGS: 00050202 [ 713.284600] RAX: 00000000798e2651 RBX: 0000000000000078 RCX: 0000000000000078 [ 713.284614] RDX: ffffed10081b2fd6 RSI: ffff888040d97e38 RDI: 0000000020000280 [ 713.284629] RBP: 0000000020000280 R08: 0000000000000000 R09: ffffed10081b2fd5 [ 713.284643] R10: ffff888040d97eaf R11: 0000000000000001 R12: ffff888040d97e38 [ 713.284657] R13: 00000000200002f8 R14: 00007ffffffff000 R15: 0000000000000000 [ 713.284697] _copy_to_user+0xbe/0xd0 [ 713.284727] ksys_msgctl.constprop.0+0x1f8/0x320 [ 713.284760] ? __pfx_ksys_msgctl.constprop.0+0x10/0x10 [ 713.284793] ? __fget_files+0x20d/0x3b0 [ 713.284868] do_syscall_64+0xbf/0x360 [ 713.284907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.284929] RIP: 0033:0x7f7209919b19 [ 713.284946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 11:58:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0xf0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) [ 713.284966] RSP: 002b:00007f7206e8f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000047 [ 713.284987] RAX: ffffffffffffffda RBX: 00007f7209a2cf60 RCX: 00007f7209919b19 [ 713.285002] RDX: 0000000020000280 RSI: 000000000000000b RDI: 0000000000000000 [ 713.285015] RBP: 00007f7206e8f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 713.285029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 713.285042] R13: 00007ffd05ee277f R14: 00007f7206e8f300 R15: 0000000000022000 [ 713.285081] 11:58:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0xf0ffff, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 713.405886] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode 11:58:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x111, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) [ 713.481882] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 11:58:15 executing program 7: msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/79) (fail_nth: 3) [ 713.508763] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode 11:58:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x1000000, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 713.555125] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 11:58:15 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 45) tgkill(r0, r1, 0xb) [ 713.589686] FAULT_INJECTION: forcing a failure. [ 713.589686] name failslab, interval 1, probability 0, space 0, times 0 [ 713.591881] CPU: 1 UID: 0 PID: 6883 Comm: syz-executor.7 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 713.591911] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 713.591923] Call Trace: [ 713.591931] [ 713.591939] dump_stack_lvl+0xfa/0x120 [ 713.591980] should_fail_ex+0x4d7/0x5e0 [ 713.592020] ? __pmd_alloc+0x98/0x980 [ 713.592050] should_failslab+0xc2/0x120 [ 713.592075] kmem_cache_alloc_noprof+0x5f/0x3d0 [ 713.592121] __pmd_alloc+0x98/0x980 [ 713.592149] ? lock_release+0xc8/0x290 [ 713.592179] __handle_mm_fault+0xcae/0x30f0 [ 713.592210] ? mt_find+0x64c/0x870 [ 713.592244] ? __pfx_mt_find+0x10/0x10 [ 713.592278] ? __pfx___handle_mm_fault+0x10/0x10 [ 713.592333] ? find_vma+0xbf/0x140 [ 713.592358] ? __pfx_find_vma+0x10/0x10 [ 713.592391] handle_mm_fault+0x2c3/0x900 [ 713.592424] ? access_error+0x17d/0x380 [ 713.592446] ? lock_mm_and_find_vma+0xaa/0x6f0 [ 713.592475] do_user_addr_fault+0x395/0xeb0 [ 713.592509] exc_page_fault+0xb0/0x180 [ 713.592542] asm_exc_page_fault+0x26/0x30 [ 713.592563] RIP: 0010:rep_movs_alternative+0x54/0x90 [ 713.592591] Code: 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 eb 05 e9 9f 9c 03 00 48 8b 06 <48> 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 c7 48 01 c6 48 29 [ 713.592619] RSP: 0018:ffff8880419dfd98 EFLAGS: 00050202 [ 713.592637] RAX: 00000000798e2651 RBX: 0000000000000078 RCX: 0000000000000078 [ 713.592650] RDX: ffffed100833bfd6 RSI: ffff8880419dfe38 RDI: 0000000020000280 [ 713.592664] RBP: 0000000020000280 R08: 0000000000000000 R09: ffffed100833bfd5 [ 713.592677] R10: ffff8880419dfeaf R11: 0000000000000001 R12: ffff8880419dfe38 [ 713.592691] R13: 00000000200002f8 R14: 00007ffffffff000 R15: 0000000000000000 [ 713.592727] _copy_to_user+0xbe/0xd0 [ 713.592755] ksys_msgctl.constprop.0+0x1f8/0x320 [ 713.592786] ? __pfx_ksys_msgctl.constprop.0+0x10/0x10 [ 713.592817] ? __fget_files+0x20d/0x3b0 [ 713.592887] do_syscall_64+0xbf/0x360 [ 713.592922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.592943] RIP: 0033:0x7f7209919b19 [ 713.592959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 713.592978] RSP: 002b:00007f7206e8f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000047 [ 713.592997] RAX: ffffffffffffffda RBX: 00007f7209a2cf60 RCX: 00007f7209919b19 [ 713.593011] RDX: 0000000020000280 RSI: 000000000000000b RDI: 0000000000000000 [ 713.593024] RBP: 00007f7206e8f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 713.593037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 713.593049] R13: 00007ffd05ee277f R14: 00007f7206e8f300 R15: 0000000000022000 [ 713.593085] 11:58:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0xffffffff, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 713.753205] FAULT_INJECTION: forcing a failure. [ 713.753205] name failslab, interval 1, probability 0, space 0, times 0 [ 713.754984] CPU: 1 UID: 0 PID: 6889 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 713.755017] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 713.755029] Call Trace: [ 713.755037] [ 713.755046] dump_stack_lvl+0xfa/0x120 [ 713.755086] should_fail_ex+0x4d7/0x5e0 [ 713.755126] ? __register_sysctl_table+0xd4f/0x16a0 [ 713.755156] should_failslab+0xc2/0x120 [ 713.755182] __kmalloc_noprof+0xb4/0x4b0 [ 713.755214] ? lock_release+0xc8/0x290 [ 713.755248] __register_sysctl_table+0xd4f/0x16a0 [ 713.755288] ? __pfx___register_sysctl_table+0x10/0x10 [ 713.755317] ? is_module_address+0x76/0x120 [ 713.755352] ? register_net_sysctl_sz+0x20b/0x290 [ 713.755388] ? __pfx_nf_log_net_init+0x10/0x10 [ 713.755422] nf_log_net_init+0x10a/0x380 [ 713.755451] ? __pfx_netfilter_net_init+0x10/0x10 [ 713.755481] ? __pfx_nf_log_net_init+0x10/0x10 [ 713.755511] ops_init+0x1e1/0x650 [ 713.755546] setup_net+0x10d/0x320 [ 713.755569] ? lockdep_init_map_type+0x4b/0x240 [ 713.755595] ? __pfx_setup_net+0x10/0x10 [ 713.755632] ? debug_mutex_init+0x37/0x70 [ 713.755669] copy_net_ns+0x2e3/0x650 [ 713.755702] create_new_namespaces+0x3f6/0xab0 [ 713.755744] copy_namespaces+0x45c/0x580 [ 713.755778] copy_process+0x26d5/0x73e0 [ 713.755800] ? __pfx_perf_trace_lock+0x10/0x10 [ 713.755844] ? __pfx_copy_process+0x10/0x10 [ 713.755866] ? __might_fault+0xe0/0x190 [ 713.755900] ? _copy_from_user+0x5b/0xd0 [ 713.755931] kernel_clone+0xea/0x7f0 [ 713.755950] ? get_pid_task+0xfd/0x250 [ 713.755986] ? __pfx_kernel_clone+0x10/0x10 [ 713.756004] ? perf_trace_lock+0xb5/0x5d0 [ 713.756039] ? find_held_lock+0x2b/0x80 [ 713.756071] ? ksys_write+0x121/0x240 [ 713.756092] ? lock_is_held_type+0x9e/0x120 [ 713.756129] __do_sys_clone3+0x1f5/0x280 [ 713.756151] ? __pfx___do_sys_clone3+0x10/0x10 [ 713.756195] ? __fget_files+0x20d/0x3b0 [ 713.756239] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 713.756274] ? fput+0x6a/0x100 [ 713.756300] ? ksys_write+0x1a3/0x240 [ 713.756319] ? xfd_validate_state+0x55/0x180 [ 713.756348] ? __pfx_ksys_write+0x10/0x10 [ 713.756383] do_syscall_64+0xbf/0x360 [ 713.756420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.756442] RIP: 0033:0x7ffb744edb19 [ 713.756459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 713.756479] RSP: 002b:00007ffb71a63188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 713.756500] RAX: ffffffffffffffda RBX: 00007ffb74600f60 RCX: 00007ffb744edb19 [ 713.756515] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 713.756527] RBP: 00007ffb71a631d0 R08: 0000000000000000 R09: 0000000000000000 [ 713.756540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 713.756552] R13: 00007ffeb487a35f R14: 00007ffb71a63300 R15: 0000000000022000 [ 713.756589] [ 713.795691] sysctl could not get directory: /net/netfilter -12 11:58:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x2000000, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:58:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x300, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 11:58:25 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 46) tgkill(r0, r1, 0xb) 11:58:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0xf, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:58:25 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x9, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 11:58:25 executing program 7: msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/79) (fail_nth: 4) 11:58:25 executing program 6: r0 = inotify_init() creat(&(0x7f0000000080)='./file0/file0/file0\x00', 0x0) inotify_add_watch(r0, &(0x7f00000003c0)='./file0\x00', 0xd4000c8b) poll(&(0x7f0000000400)=[{r0}], 0x1, 0x10001) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) 11:58:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x204d00, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)={0x36c, r10, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xd}, @NL80211_ATTR_MESH_SETUP={0xfc, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_IE={0x21, 0x3, "66cc489807596f6e92e871dec00ea5153857098b2ead90daad1424dcc2"}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_IE={0xa3, 0x3, "3e635c4fc088fe2ed209ee328e9394440647bf81e62192bf014fb73aeac7a156f28a44b3506184c14081c0bbc932b38692bc1fd677f14b8a35fb28010c0247cb27c3328a01373c67868f64710524531dbd0469628c2f7f60105876623a5736be9d2f112656072b99ea4c8c363efe921f6ef237e439b963b220b3ce89867f2e70fe7b557cc1ccd04ef76f9778b0921310f3fa6f406d8fa5f8345cea26eade4d"}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_IE={0x13, 0x3, "7d188ddcb573af122ac828689f8fec"}]}, @NL80211_ATTR_TX_RATES={0x254, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0xc, 0x6, 0x16, 0x36, 0x30, 0x1b, 0x9, 0x30, 0x16, 0x9, 0x60, 0xc, 0x9]}]}, @NL80211_BAND_6GHZ={0xbc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x27, 0x2, [{0x5, 0x5}, {0x0, 0x2}, {0x4, 0x3}, {0x1, 0x6}, {0x0, 0x3}, {0x5, 0x1}, {0x1, 0x4}, {0x0, 0x5}, {0x3, 0x6}, {0x1, 0x8}, {0x1, 0x3}, {0x5, 0x4}, {0x5, 0x9}, {0x0, 0x2}, {0x4, 0x2}, {0x0, 0x3}, {0x4, 0x1}, {0x7, 0x2}, {0x6, 0x5}, {0x6, 0x4}, {0x1, 0x5}, {0x5, 0x5}, {0x2, 0x6}, {0x1, 0x5}, {0x3, 0x2}, {0x0, 0xa}, {0x0, 0x8}, {0x1, 0x5}, {0x7, 0x7}, {0x5, 0x1}, {0x4, 0x7}, {0x1, 0x9}, {0x4, 0xa}, {0x0, 0x2}, {0x7, 0x3}]}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x1, 0x3}, {0x7, 0x2}, {0x4, 0x7}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x6}, {0x7, 0x5}, {0x5, 0x9}, {0x0, 0x4}, {0x1, 0x8}, {0x0, 0x7}, {0x2, 0x5}, {0x4, 0x8}, {0x5, 0x3}, {0x0, 0x5}, {0x7}, {0x5, 0x8}, {0x4, 0x2}, {0x2}, {0x1}, {0x7, 0x4}, {0x6, 0x7}, {0x1}, {0x7, 0x4}, {0x2, 0xa}, {0x0, 0x7}, {0x2, 0xa}, {0x3, 0x8}, {0x6, 0xa}, {0x1, 0x1}, {0x5, 0x2}, {0x5, 0x4}, {0x5, 0x2}, {0x0, 0x8}, {0x4, 0x5}, {0x7, 0x1a}, {0x2, 0xa}, {0x3}, {0x3}, {0x3, 0x8}, {0x5, 0x5}, {0x7}, {0x4, 0x7}, {0x0, 0x2}, {0x7, 0x2}, {0x5}, {0x3, 0x4}, {0x2}, {}, {0x1}, {0x0, 0xa}, {0x7, 0x1}, {0x1, 0x8}, {0x1, 0x9}, {0x3, 0x4}, {0x7}, {0x2, 0x6}, {0x2, 0xa}, {0x4, 0x6}, {0x6, 0xa}, {0x6, 0x9}, {0x1, 0x4}, {0x4, 0x3}, {0x3, 0x3}, {0x1, 0x9}, {0x2, 0x4}, {0x2, 0x8}, {0x0, 0x5}, {0x5, 0x3}]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x1b, 0x9, 0x6, 0x11, 0xc, 0x1b, 0x48, 0x24, 0x12, 0x3, 0x6c, 0x35, 0x30, 0x5, 0x6, 0x1b, 0x16, 0x60, 0x18]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x9, 0xdb41245f4d5cee0b, 0x2, 0x18, 0x16, 0x30, 0x48, 0x48, 0x60, 0x24, 0x60]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x5, 0x1, 0x9, 0x12, 0x6, 0x12, 0x19, 0x24, 0x1b, 0x9, 0x60, 0x12, 0x12, 0x9]}]}, @NL80211_BAND_60GHZ={0x118, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x37, 0x2, [{0x3, 0x8}, {0x7, 0x5}, {0x0, 0x3}, {0x0, 0x4}, {0x1}, {0x7, 0x5}, {0x2, 0xa}, {0x5, 0x3}, {0x5, 0x4}, {0x3, 0x5}, {0x7}, {0x2, 0x8}, {0x5, 0x1}, {0x6, 0x1}, {0x5, 0x9}, {0x3, 0x5}, {0x2}, {0x4, 0x4}, {0x1, 0x7}, {0x5, 0x1}, {0x6, 0x5}, {0x4, 0x6}, {0x4, 0x7}, {0x0, 0x7}, {0x0, 0x4}, {0x3, 0x6}, {0x3, 0x6}, {0x5, 0x3}, {0x1, 0x3}, {0x1}, {0x4, 0x1}, {0x1, 0x4}, {0x4, 0x2}, {}, {0x1, 0x1}, {0x3, 0x4}, {0x1, 0x5}, {0x6, 0x4}, {0x1, 0x3}, {0x1, 0x5}, {0x5, 0x4}, {0x2, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x1, 0x5}, {0x1, 0x9}, {0x2, 0x6}, {0x1, 0x4}, {0x1, 0x5}, {0x3, 0x5}, {0x7, 0x5}]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x6, 0x6, 0x12, 0x3, 0x18, 0x6, 0x48, 0xb, 0x1b, 0x2, 0x6c, 0xc]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x0, 0x3, 0x6c, 0x30, 0x48, 0x60, 0xb, 0x18, 0x18, 0x4, 0x5, 0x50, 0x48, 0xc, 0xb, 0x4, 0x1b]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x5, 0x2}, {0x0, 0x1}, {0x4, 0x7}, {0x1, 0x6}, {0x2, 0x5}, {0x4, 0x1}, {0x4, 0x5}, {0x4, 0x7}, {0x7, 0x1}, {0x6, 0x8}, {0x5, 0x6}, {0x2, 0x2}, {0x7, 0x4}, {0x4, 0x7}, {0x3, 0x4}, {0x1, 0x6}, {0x3, 0x6}, {0x1, 0x9}, {0x3, 0xa}, {0x1, 0x8}, {0x6}, {0x2, 0x3}, {0x0, 0xa}, {0x2, 0x1}, {0x1, 0x8}, {0x1, 0x7}, {0x7, 0x6}, {0x5, 0xa}, {0x3, 0xa}, {0x7, 0x1}, {0x7, 0x8}, {0x6, 0x9}, {0x6, 0x1}, {0x7, 0x1}, {0x5, 0x9}, {0x1}, {0x7, 0x9}, {}, {0x6, 0x2}, {0x1, 0x8}, {0x3, 0x4}, {0x6, 0x6}, {0x1}, {0x7, 0x8}, {0x0, 0x6}, {0x0, 0x9}, {0x4, 0x2}, {0x5, 0x1}, {0x2, 0x3}, {0x0, 0x3}]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x5, 0x1b, 0xb, 0x6c, 0x18, 0x5, 0x18, 0x30, 0x1e, 0x6c, 0x1b, 0x30, 0x36, 0xc, 0xb, 0x12, 0x9, 0x36, 0x69, 0x1b, 0x3c, 0xc, 0x9]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x3, 0x48, 0x9, 0x4, 0x6, 0x1, 0x60, 0x16, 0x4, 0x4, 0xa]}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x1, 0xa}, {0x4, 0x3}, {0x7, 0x7}, {0x4, 0x6}, {0x7, 0x5}, {0x5, 0x6}, {0x1, 0x1}, {0x1, 0xa}, {0x0, 0x3}, {0x1}, {0x5, 0x5}, {0x0, 0x1}, {0x6, 0x9}, {0x1, 0x3}, {0x7, 0xa}, {0x6, 0xa}, {0x0, 0x2}, {0x5, 0xa}, {0x3, 0xa}, {0x3, 0x6}, {0x1, 0x8}, {0x0, 0x9}, {0x3, 0x4}, {0x5, 0x5}, {0x3, 0x5}, {0x7, 0x4}, {0x3, 0x5}, {0x5}, {0x5, 0x2}, {0x1, 0x3}, {0x1}, {0x6, 0x6}, {0x2, 0x5}, {0x4, 0x9}, {0x5, 0x7}, {0x5}, {0x1, 0x6}, {0x0, 0x3}, {0x1, 0x5}, {0x5, 0x9}, {0x4, 0x2}, {0x3, 0x8}, {0x7, 0xa}, {0x7, 0x3}, {0x1, 0x5}, {0x0, 0x9}, {0x3, 0x1}, {0x3, 0x7}, {0x7, 0x6}, {0x1, 0x5}, {0x4, 0x9}, {0x4, 0x9}, {0x2, 0xa}, {0x7, 0x7}, {0x3, 0x1}, {0x3, 0x6}, {0x7, 0x9}, {0x3, 0x4}, {0x1, 0x7}, {0x6}, {0x7, 0x2}, {0x0, 0x7}, {0x1, 0xa}, {0x3, 0x3}, {}, {0x4, 0x2}, {0x2, 0x9}, {0x0, 0x6}, {0x0, 0x4}, {0x2, 0x3}, {0x5, 0x3}, {0x7, 0x7}, {0x2}, {0x7, 0x3}, {0x1, 0x6}]}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x12, 0x9, 0x24, 0x5e, 0x48, 0x9, 0x4c, 0x9, 0x60, 0xb, 0xd, 0x30, 0x12, 0x71, 0x5, 0x1b, 0x6, 0x1]}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x6, 0x9}, {0x4, 0x7}, {0x1, 0x7}, {0x6, 0x3}, {0x7, 0x5}, {0x2, 0x1}, {0x2}, {0x2, 0x9}, {0x5, 0x2}, {0x3}, {0x2, 0x7}, {0x3, 0x9}]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x6, 0x1b, 0x24, 0x6c]}, @NL80211_TXRATE_HT={0x27, 0x2, [{}, {0x0, 0x4}, {}, {0x0, 0xa}, {0x4, 0x9}, {0x7, 0x4}, {0x0, 0xa}, {0x5, 0x1}, {0x3, 0x4}, {0x5, 0x5}, {0x4, 0x6}, {0x1, 0x4}, {0x4, 0x1}, {0x7, 0x5}, {0x0, 0x5}, {0x2, 0x9}, {0x2, 0x5}, {0x2, 0x4}, {0x1, 0x1}, {0x5, 0x8}, {0x4, 0x2}, {0x1, 0x8}, {0x4, 0x2}, {0x2, 0x4}, {0x7, 0x8}, {0x1, 0x6}, {0x0, 0x8}, {0x0, 0x8}, {0x3, 0x3}, {0x5, 0xa}, {0x3, 0x1}, {0x1, 0xa}, {0x0, 0x6}, {0x2, 0x4}, {0x0, 0x8}]}]}]}]}, 0x36c}, 0x1, 0x0, 0x0, 0x40c0}, 0x4000) r11 = dup(r8) bind$unix(r11, &(0x7f0000000000)=@abs, 0x6e) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r11) sendmsg$TIPC_CMD_GET_NODES(r11, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r12, 0x8, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}}, 0x4040010) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r12, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0xed04, @media='ib\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4044}, 0x0) [ 723.303857] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 723.322256] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 723.343513] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 723.371374] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 11:58:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:58:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x500, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 11:58:25 executing program 7: msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/79) (fail_nth: 5) [ 723.475466] FAULT_INJECTION: forcing a failure. [ 723.475466] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 723.477247] CPU: 0 UID: 0 PID: 6933 Comm: syz-executor.7 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 723.477277] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 723.477289] Call Trace: [ 723.477296] [ 723.477305] dump_stack_lvl+0xfa/0x120 [ 723.477345] should_fail_ex+0x4d7/0x5e0 [ 723.477386] should_fail_alloc_page+0xe0/0x110 [ 723.477415] prepare_alloc_pages+0x1af/0x500 [ 723.477441] ? find_held_lock+0x2b/0x80 [ 723.477480] __alloc_frozen_pages_noprof+0x17f/0x1f10 [ 723.477519] ? __is_insn_slot_addr+0x140/0x290 [ 723.477556] ? kernel_text_address+0x5b/0xc0 [ 723.477592] ? __kernel_text_address+0xd/0x40 [ 723.477620] ? unwind_get_return_address+0x59/0xa0 [ 723.477652] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 723.477682] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 723.477733] ? perf_trace_lock+0xb5/0x5d0 [ 723.477761] ? perf_trace_lock_acquire+0xc9/0x700 [ 723.477785] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 723.477815] ? policy_nodemask+0xeb/0x4e0 [ 723.477850] alloc_pages_mpol+0xed/0x340 [ 723.477881] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 723.477913] ? __pfx_perf_trace_lock+0x10/0x10 [ 723.477947] alloc_pages_noprof+0xa1/0x380 [ 723.477981] pte_alloc_one+0x1e/0x360 [ 723.478012] __pte_alloc+0x6c/0x360 [ 723.478041] ? __pfx___pte_alloc+0x10/0x10 [ 723.478070] ? _raw_spin_unlock+0x1e/0x40 [ 723.478096] ? __pmd_alloc+0x3f9/0x980 [ 723.478131] __handle_mm_fault+0x24bf/0x30f0 [ 723.478162] ? mt_find+0x64c/0x870 [ 723.478197] ? __pfx_mt_find+0x10/0x10 [ 723.478231] ? __pfx___handle_mm_fault+0x10/0x10 [ 723.478285] ? find_vma+0xbf/0x140 [ 723.478311] ? __pfx_find_vma+0x10/0x10 [ 723.478344] handle_mm_fault+0x2c3/0x900 [ 723.478377] ? access_error+0x17d/0x380 [ 723.478398] ? lock_mm_and_find_vma+0xaa/0x6f0 [ 723.478427] do_user_addr_fault+0x395/0xeb0 [ 723.478461] exc_page_fault+0xb0/0x180 [ 723.478494] asm_exc_page_fault+0x26/0x30 [ 723.478515] RIP: 0010:rep_movs_alternative+0x54/0x90 [ 723.478543] Code: 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 eb 05 e9 9f 9c 03 00 48 8b 06 <48> 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 c7 48 01 c6 48 29 [ 723.478563] RSP: 0018:ffff888019dc7d98 EFLAGS: 00050202 [ 723.478581] RAX: 00000000798e2651 RBX: 0000000000000078 RCX: 0000000000000078 [ 723.478595] RDX: ffffed10033b8fd6 RSI: ffff888019dc7e38 RDI: 0000000020000280 [ 723.478608] RBP: 0000000020000280 R08: 0000000000000000 R09: ffffed10033b8fd5 [ 723.478622] R10: ffff888019dc7eaf R11: 0000000000000001 R12: ffff888019dc7e38 [ 723.478635] R13: 00000000200002f8 R14: 00007ffffffff000 R15: 0000000000000000 [ 723.478672] _copy_to_user+0xbe/0xd0 [ 723.478700] ksys_msgctl.constprop.0+0x1f8/0x320 [ 723.478731] ? __pfx_ksys_msgctl.constprop.0+0x10/0x10 [ 723.478762] ? __fget_files+0x20d/0x3b0 [ 723.478832] do_syscall_64+0xbf/0x360 [ 723.478868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.478889] RIP: 0033:0x7f7209919b19 [ 723.478905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 723.478924] RSP: 002b:00007f7206e8f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000047 [ 723.478943] RAX: ffffffffffffffda RBX: 00007f7209a2cf60 RCX: 00007f7209919b19 [ 723.478957] RDX: 0000000020000280 RSI: 000000000000000b RDI: 0000000000000000 [ 723.478970] RBP: 00007f7206e8f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 723.478982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 723.478995] R13: 00007ffd05ee277f R14: 00007f7206e8f300 R15: 0000000000022000 [ 723.479032] [ 724.146397] audit: type=1400 audit(1753617506.340:14): avc: denied { watch_reads } for pid=6916 comm="syz-executor.6" path="/syzkaller-testdir137967650/syzkaller.FWKmxj/96/file0" dev="sda" ino=16013 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 11:58:36 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 47) tgkill(r0, r1, 0xb) 11:58:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x3000000, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:58:36 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000001b80)='\xff\xf7\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x29, 0x0, 0x0, 0x8800000}) 11:58:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x22, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:58:36 executing program 7: msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/79) (fail_nth: 6) 11:58:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x600, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 11:58:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x5, 0x4b}}}}, ["", ""]}, 0x20}}, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, r1, 0x100, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4880}, 0x41) 11:58:36 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0xa, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) [ 734.178456] FAULT_INJECTION: forcing a failure. [ 734.178456] name failslab, interval 1, probability 0, space 0, times 0 [ 734.180421] CPU: 1 UID: 0 PID: 6952 Comm: syz-executor.7 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 734.180450] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 734.180462] Call Trace: [ 734.180470] [ 734.180478] dump_stack_lvl+0xfa/0x120 [ 734.180521] should_fail_ex+0x4d7/0x5e0 [ 734.180563] ? ptlock_alloc+0x21/0x70 [ 734.180582] should_failslab+0xc2/0x120 [ 734.180614] kmem_cache_alloc_noprof+0x5f/0x3d0 [ 734.180660] ptlock_alloc+0x21/0x70 [ 734.180682] pte_alloc_one+0x86/0x360 [ 734.180715] __pte_alloc+0x6c/0x360 [ 734.180743] ? __pfx___pte_alloc+0x10/0x10 [ 734.180773] ? _raw_spin_unlock+0x1e/0x40 [ 734.180799] ? __pmd_alloc+0x3f9/0x980 [ 734.180836] __handle_mm_fault+0x24bf/0x30f0 [ 734.180867] ? mt_find+0x64c/0x870 [ 734.180902] ? __pfx_mt_find+0x10/0x10 [ 734.180936] ? __pfx___handle_mm_fault+0x10/0x10 [ 734.180991] ? find_vma+0xbf/0x140 [ 734.181016] ? __pfx_find_vma+0x10/0x10 [ 734.181049] handle_mm_fault+0x2c3/0x900 [ 734.181082] ? access_error+0x17d/0x380 [ 734.181104] ? lock_mm_and_find_vma+0xaa/0x6f0 [ 734.181133] do_user_addr_fault+0x395/0xeb0 [ 734.181167] exc_page_fault+0xb0/0x180 [ 734.181200] asm_exc_page_fault+0x26/0x30 [ 734.181221] RIP: 0010:rep_movs_alternative+0x54/0x90 [ 734.181249] Code: 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 eb 05 e9 9f 9c 03 00 48 8b 06 <48> 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 c7 48 01 c6 48 29 [ 734.181269] RSP: 0018:ffff888016de7d98 EFLAGS: 00050202 [ 734.181287] RAX: 00000000798e2651 RBX: 0000000000000078 RCX: 0000000000000078 [ 734.181300] RDX: ffffed1002dbcfd6 RSI: ffff888016de7e38 RDI: 0000000020000280 [ 734.181314] RBP: 0000000020000280 R08: 0000000000000000 R09: ffffed1002dbcfd5 [ 734.181327] R10: ffff888016de7eaf R11: 0000000000000001 R12: ffff888016de7e38 [ 734.181341] R13: 00000000200002f8 R14: 00007ffffffff000 R15: 0000000000000000 [ 734.181378] _copy_to_user+0xbe/0xd0 [ 734.181406] ksys_msgctl.constprop.0+0x1f8/0x320 [ 734.181437] ? __pfx_ksys_msgctl.constprop.0+0x10/0x10 [ 734.181468] ? __fget_files+0x20d/0x3b0 [ 734.181537] do_syscall_64+0xbf/0x360 [ 734.181573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.181594] RIP: 0033:0x7f7209919b19 [ 734.181610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 734.181629] RSP: 002b:00007f7206e8f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000047 [ 734.181648] RAX: ffffffffffffffda RBX: 00007f7209a2cf60 RCX: 00007f7209919b19 [ 734.181662] RDX: 0000000020000280 RSI: 000000000000000b RDI: 0000000000000000 [ 734.181675] RBP: 00007f7206e8f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 734.181687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 734.181700] R13: 00007ffd05ee277f R14: 00007f7206e8f300 R15: 0000000000022000 [ 734.181748] [ 734.228680] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 734.230025] FAULT_INJECTION: forcing a failure. [ 734.230025] name failslab, interval 1, probability 0, space 0, times 0 [ 734.231595] CPU: 1 UID: 0 PID: 6950 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 734.231629] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 734.231641] Call Trace: [ 734.231648] [ 734.231656] dump_stack_lvl+0xfa/0x120 [ 734.231691] should_fail_ex+0x4d7/0x5e0 [ 734.231730] ? __register_sysctl_table+0xd4f/0x16a0 [ 734.231761] should_failslab+0xc2/0x120 [ 734.231785] __kmalloc_noprof+0xb4/0x4b0 [ 734.231816] ? lock_release+0xc8/0x290 [ 734.231850] __register_sysctl_table+0xd4f/0x16a0 [ 734.231890] ? __pfx___register_sysctl_table+0x10/0x10 [ 734.231920] ? is_module_address+0x76/0x120 [ 734.231955] ? register_net_sysctl_sz+0x20b/0x290 [ 734.231991] ? __pfx_nf_log_net_init+0x10/0x10 [ 734.232024] nf_log_net_init+0x10a/0x380 [ 734.232053] ? __pfx_netfilter_net_init+0x10/0x10 [ 734.232083] ? __pfx_nf_log_net_init+0x10/0x10 [ 734.232113] ops_init+0x1e1/0x650 [ 734.232148] setup_net+0x10d/0x320 [ 734.232171] ? lockdep_init_map_type+0x4b/0x240 [ 734.232196] ? __pfx_setup_net+0x10/0x10 [ 734.232226] ? debug_mutex_init+0x37/0x70 [ 734.232264] copy_net_ns+0x2e3/0x650 [ 734.232297] create_new_namespaces+0x3f6/0xab0 [ 734.232339] copy_namespaces+0x45c/0x580 [ 734.232373] copy_process+0x26d5/0x73e0 [ 734.232394] ? __pfx_perf_trace_lock+0x10/0x10 [ 734.232439] ? __pfx_copy_process+0x10/0x10 [ 734.232460] ? __might_fault+0xe0/0x190 [ 734.232493] ? _copy_from_user+0x5b/0xd0 [ 734.232524] kernel_clone+0xea/0x7f0 [ 734.232543] ? get_pid_task+0xfd/0x250 [ 734.232578] ? __pfx_kernel_clone+0x10/0x10 [ 734.232597] ? perf_trace_lock+0xb5/0x5d0 [ 734.232632] ? find_held_lock+0x2b/0x80 [ 734.232663] ? ksys_write+0x121/0x240 [ 734.232684] ? lock_is_held_type+0x9e/0x120 [ 734.232719] __do_sys_clone3+0x1f5/0x280 [ 734.232740] ? __pfx___do_sys_clone3+0x10/0x10 [ 734.232785] ? __fget_files+0x20d/0x3b0 [ 734.232828] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 734.232863] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 734.232900] ? ksys_write+0x1a3/0x240 [ 734.232920] ? __pfx_ksys_write+0x10/0x10 [ 734.232955] do_syscall_64+0xbf/0x360 [ 734.232991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.233012] RIP: 0033:0x7ffb744edb19 [ 734.233028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 734.233048] RSP: 002b:00007ffb71a63188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 734.233068] RAX: ffffffffffffffda RBX: 00007ffb74600f60 RCX: 00007ffb744edb19 [ 734.233082] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 734.233095] RBP: 00007ffb71a631d0 R08: 0000000000000000 R09: 0000000000000000 [ 734.233108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 734.233120] R13: 00007ffeb487a35f R14: 00007ffb71a63300 R15: 0000000000022000 [ 734.233157] [ 734.234460] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.4'. [ 734.234649] sysctl could not get directory: [ 734.243934] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.4'. [ 734.244335] /net/netfilter/nf_log -12 11:58:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x25, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:58:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x4000000, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:58:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x3]}, 0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r2, @ANYRES16=r2, @ANYBLOB="010000000000000010f60933dc000200000000000000eb7d5bc540fb57ac097910b10b4004a71e33d1a4725bdc57b3db9a", @ANYRES32=r4, @ANYBLOB="080000f900"/16], 0x2c}}, 0x0) [ 734.309043] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 734.325019] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 734.351117] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. 11:58:36 executing program 7: msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/79) (fail_nth: 7) [ 734.355039] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 734.365764] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. 11:58:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x5000000, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:58:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x66, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:58:36 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0xc, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) [ 734.569265] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 734.587449] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 734.598746] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 734.616404] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 11:58:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x700, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 11:58:47 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r1, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004}, 0x4010) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x20400, &(0x7f0000000100)='proc\x00') mount(&(0x7f0000000180)=@sr0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) 11:58:47 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0xd, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 11:58:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x28, r4, 0x1, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x28}}, 0x0) [ 745.063714] FAULT_INJECTION: forcing a failure. [ 745.063714] name failslab, interval 1, probability 0, space 0, times 0 [ 745.064833] CPU: 1 UID: 0 PID: 7006 Comm: syz-executor.7 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 745.064850] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 745.064858] Call Trace: [ 745.064862] [ 745.064867] dump_stack_lvl+0xfa/0x120 [ 745.064892] should_fail_ex+0x4d7/0x5e0 [ 745.064916] ? __anon_vma_prepare+0xae/0x590 [ 745.064936] should_failslab+0xc2/0x120 [ 745.064950] kmem_cache_alloc_noprof+0x5f/0x3d0 [ 745.064977] __anon_vma_prepare+0xae/0x590 [ 745.064999] __vmf_anon_prepare+0x11f/0x250 [ 745.065019] __handle_mm_fault+0x13ad/0x30f0 [ 745.065037] ? mt_find+0x64c/0x870 [ 745.065057] ? __pfx_mt_find+0x10/0x10 [ 745.065077] ? __pfx___handle_mm_fault+0x10/0x10 [ 745.065108] ? find_vma+0xbf/0x140 [ 745.065122] ? __pfx_find_vma+0x10/0x10 [ 745.065141] handle_mm_fault+0x2c3/0x900 [ 745.065160] ? access_error+0x17d/0x380 [ 745.065174] ? lock_mm_and_find_vma+0xaa/0x6f0 [ 745.065190] do_user_addr_fault+0x395/0xeb0 [ 745.065210] exc_page_fault+0xb0/0x180 [ 745.065230] asm_exc_page_fault+0x26/0x30 [ 745.065243] RIP: 0010:rep_movs_alternative+0x54/0x90 [ 745.065260] Code: 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 eb 05 e9 9f 9c 03 00 48 8b 06 <48> 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 c7 48 01 c6 48 29 [ 745.065272] RSP: 0018:ffff888041ddfd98 EFLAGS: 00050202 [ 745.065283] RAX: 00000000798e2651 RBX: 0000000000000078 RCX: 0000000000000078 [ 745.065291] RDX: ffffed10083bbfd6 RSI: ffff888041ddfe38 RDI: 0000000020000280 [ 745.065299] RBP: 0000000020000280 R08: 0000000000000000 R09: ffffed10083bbfd5 [ 745.065307] R10: ffff888041ddfeaf R11: 0000000000000001 R12: ffff888041ddfe38 [ 745.065315] R13: 00000000200002f8 R14: 00007ffffffff000 R15: 0000000000000000 [ 745.065336] _copy_to_user+0xbe/0xd0 [ 745.065353] ksys_msgctl.constprop.0+0x1f8/0x320 [ 745.065371] ? __pfx_ksys_msgctl.constprop.0+0x10/0x10 [ 745.065389] ? __fget_files+0x20d/0x3b0 [ 745.065430] do_syscall_64+0xbf/0x360 [ 745.065451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.065463] RIP: 0033:0x7f7209919b19 [ 745.065472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 745.065484] RSP: 002b:00007f7206e8f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000047 [ 745.065495] RAX: ffffffffffffffda RBX: 00007f7209a2cf60 RCX: 00007f7209919b19 [ 745.065503] RDX: 0000000020000280 RSI: 000000000000000b RDI: 0000000000000000 [ 745.065511] RBP: 00007f7206e8f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 745.065518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 745.065526] R13: 00007ffd05ee277f R14: 00007f7206e8f300 R15: 0000000000022000 [ 745.065550] [ 745.110807] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x5410, r4, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x64}, @void, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x21e4, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x21d8, 0x4, 0x0, 0x1, [{0x10a4, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x1004, 0x1, "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"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6}, @NL80211_PKTPAT_MASK={0x84, 0x1, "60676bb499e0cd3244db67a5f94044aa810f648aac9e243bf66d87c07125db938a915bf7a518dc174c4e18211af79cd1ec62704af1e025b29b7ef146250377243a94e4d916142367dc619227be1cd6fcc498a72ca27bf8421c15627bbdff507e1a74b319fb1c6906e8ff9dbb57138541d9188081fcedc538bb00d0dbd0cfb63a"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x4}, @NL80211_PKTPAT_OFFSET={0x8}]}, {0x1008, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x1004, 0x2, "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"}]}, {0xc8, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x5}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3}, @NL80211_PKTPAT_PATTERN={0xb1, 0x2, "687debc080d33e666f28098475a175f598756bb8174b363a7db875104db3dafdeff2a4e61d79b6b378924923640de85d2ab34c0b9c29763b7ce9b3b02a91a32fbb44a6e0b684eee8d1fe59d996b9db6d123e0e8167643221f42162443fa644124327c49a25664656e6cd1ed62f8655bc3bc6676e18ea8bb4ee9c9d35c6c18ed71953f97e8c30cbad2a6fca5a6a8128b8bf4f38ffa34d84b34c1b758a782b1b848f080ca215332ab7264cc21391"}]}, {0x60, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x54, 0x2, "daf6159995f05485d2b7a5a2d6a8bd9a73ff1150f07a09b553e91bfebc3df2302a9d0249746ac4df15c0f01ed3521fa168335e398aca52e1ef00b0263d4e17e9c2d32d81a1277f167b802818c6a04b1d"}, @NL80211_PKTPAT_MASK={0x6, 0x1, "f1fc"}]}]}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x1c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_NET_DETECT={0x8, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x64, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x4c, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x3ff, 0x0, 0x7}}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x7fffffff, 0x3, 0x6fe}}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x1, 0x2cb3}}, @NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x1}, @NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0x3}]}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x145c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_NET_DETECT={0x40, 0x12, 0x0, 0x1, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x4}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}]}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x140c, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCAN_SUPP_RATES={0x1408, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, "cd708b5ba64afce9f2a1614758177048908ab4656dfdb4b92f883345e6afacf23b30f35dbf89ab95a24dce50223e70dd"}, @NL80211_BAND_2GHZ={0xc6, 0x0, "611795cb9fd7fbd548251264b84ff94e1fed0584383394024ee1b2c1f08481fa0350acedbaf4746bf59467c7c979929196f1099ecac5519e53437b60d2ec8161e51b2808b283ca071069b030778c7ac506bb1ac7844720be5b0f68efccbb523bec2034f47b5185b1c15729fec7afd3b2680658a646cbe436aefa1fee97a326cc0c9af4d13abdd8a68bf07bc53a51dfd95f70ee8f97f1e9e6ac9ecb5071c51b86071f84342aafd5151851054ce50645b7c3b709d8244a5db57d6559aa2a1cd7632aab"}, @NL80211_BAND_2GHZ={0x7a, 0x0, "8a374ca85e292de4930c2b9c53a2ce19c8c0e62059a6596288ef191c3e6391cc823528a64aa583404fd45b98bb917f707affd42b30a484fcd8c37f6421fcd1c365f0f38f9c95a05b62ad35a1409e9d15d83a21c98b07c45092e0ed36ee45b57dac1924880911a1113367a5a6ca8dc8a679c61d45e00c"}, @NL80211_BAND_2GHZ={0x1004, 0x0, "fce24c5e78de62aea6e625776766159074adde981dc7b9823f052b948c24852552011f60fb266777050ea758b09f5e70f2d6f9663e8c30afed72284b0653598badc1bb1ac9b1a25823edeb187ed9d08de891a3b1b38dacc3991ea116053f2337577bb53f722e5947952b4ad789daa6b457973285fa04d58d5bfc49e5c91218089e85c9d17fafc13568881086cc47f742ee2c56db637759498eb9fc6d077579adbbdfe4ecbb60715b03e10b2a6109cdad7cca04b7b64a8b26df6052071f70d258335d7db452e04db73d62d30eccb088fa780295b48a3b977719a981f0ec8c00c61f69ed5346a5aaad243151c13984814f7d465d26c63da3d9ed770f55cb62efd9ebb03d7499b5f711a3a0952078e2d223e11e21bc3c8cfacf363ba8868efc32b4686f8226bd302b72d139534b8291a8be59e6046e41ade857fb8709aaa85d8c19656742effba654fa297f03bf3c10f12350ff5f0e5d44117445a44fd133a6e28311b399b41b64be234f14e3a8d22007a77e7739114fdb1e2603e86636f8bece2106dd49f3dc23039c3d2faeb1eb22b85ed382bb77cb9f9e59d88f551d21c11831ffc6d3e2cbde3c939b6d935cdef504109ea5c5908b87b1e3211f67134ae63df75d52df1d09bc97702d241716bf2948f7a29012fb1aac8a77d414c6febaee63438b267820ebd6e4f5a1478d14fd17295469ed82b6142cc604547e93dab053a1c0b20f12e05ceee3ee7e70b75f2926faab6a6a20b7736de028b6279c6ee4f747f420b2e186ad2f1b9765d7970b33c49d735305855b61dff9b679968ae52b70c897040f64b0876635f2689d983c114e0357a72d0ebbb519eb35069f62444391a1ed069c5ed7edbff2b85a6a1bb63749375630ef4bb77bd4e6fd297aa870cc574559a99ed83538b6522435aa4017d5562ec1f8004487800dd3f00e657bb50444ad66208f9c85286df7c146c4a7d3f6f14e01c2a278866f78a1d6b23c83999b022d5b8c54e538bee4ce470e6bf6f1edf09b958e8fd7d921de4af26c7609e129d831e67c6c6292aadbe2f3ffe49b9345b1305170e102db97442072af9db4948976c4e5334dda3e178588c9e55fa9f5e37d011e8ab7c7c92ae715c24ed178d7cffb7f2d09e81f7397c0241e8b8a36691e6cf2c0f6b6666bc244a73541e6c78397348bbcdc4159cb000b8c1ee8cb57c46aadbf45dd62362aed2b3f236978f2649f0127ef07e4a1a770ad2b8ed59cc0da2616b5820b27599a64e78f29f403f1aab36afe9fc6b31609e7a647b8367cc62b0175169f3fad0c19e3200d4eab3e54e974626f93283aef402ed407fc701224b7c5f668fe66809dfac93ae23c659595db7ad9755fb45c5693eb2e9bf1ea96e455baa2aaabd3c6653413dd0bd13075a2eeafbb11a172d783b4fc257a87221b27f503e137056938e32d314935bb825501bc545ee32f1743c4cebad4d8bbdf43f9938a8e87638af8de65c5c868a9e94d72f3db20755e706ad4d086c25742e765e7380118f222be1be439202238f8325188f05781b07de76fd65242a63a487ccefbc49bc088f4aa5ff76df8c710e09c7ba508170b6e7255ef429219d119be9421d71c8b99ad925a289b151451d5e1b6720aa4d26e0ad535edae06ca7f7ff5008c0e246e51dd52a54b0e77e8e15dc04fc162f19bc90c1baea45e9480191276eb447a663778b917c036f6a55919090e9bd356684966e46e9bc4578ababcf23da7814ccd25b12fa64f0013d268d22cc46c9306b1adfffb534aabfb9dea6601407c708c7845dd7d09a1b75f03c2cf1589ec9dd02c39b148579406bd0c9b290a7b7f2a28f8ada360a6d190ca34465cab8af862dd9495b7ea13b86f309d4994107715e03e60e376b603ee4843f6aed0b4c4b9f047101032ff6f8e20ae8e15021538ddcde5cea287d2215fe94b6e976218eae63163853a5fa5bb42849e0ef38090f540457188851829f9291cb96d792e9468900cf8a7180ac7b67b799c33d6396f606beddb2911c42f008c9b58704b71b4c0dbc70fa659f90eba94fe160f8375ff458ba785cc9f5a0fea7de4ce4cbfc03c7beedea81a675e67c1fb62dd675285a8deab5bad7d7effe9f096f55ebc7249e5e640982bff372351f659650afb79af8a634132be0827c39e3b0156c5debef8b4ac7ed05901dbb571a54491f78dd7cacc869b11559622a2afaed7320087467e6570111505a2d1230315022823b562e24d9520ddb797373f63bdd91ea3447a546640ecb8cfed1cf51829db71fd3f1b2957d7e0e0e54af2483768a7724ee0d84abd988ddf89392d85b7ea6523b705426f1ef72de0c5ee13c1c330b421ea64d75c2a7a42b2394ca9fa779a63fdec3f2fd1717bce7845f9c00b2d85d25fb2bc550e32a2b2f4de33aac142167062ee9b1685ba318fd68cab67e1eeb8198b6c0ed693559cc130af9cd80dcd65d9c076e71dd97ed09dc6fa33b314f1c1e99778f2b928665f50b60080ec89d51edd44fc293bf13ee6724ebd99501476f64168dcf3dcd66fda24a42459d134df4ddf5feb46f7d06ea0f1f936917a94cc32db3b3651a7e1d86759f2799efc07114a732fbcbb4338bb0df15de22a5401c9521515fa8c878fa7b929278e64973293ad69d5bc8eab7c95e2b1783014cb99ffbae03b75bf0f30b34474b10d1ffb3b9fcc6f647ee909e2c63cc2b6d837dd8d2b887b2f57fe61edfa165a0b755aa6fdd57ca0e4be33f8e7d3405a81121cc35ffe65e2a6f39b0fe4962a6c1589562cbf7abca680eec8be6b47106f97c380bb7de2a100bbd085fe2f6fa063f25cc70b0d9d313db79a5f8f678896e232b835b40207f681932df015b2410fdd956d133e7bca6c3b85ca4e2b2989d24c2cdf11451b8a61ba36b4479af0b11aae82f516935fce0af558785f68dc1cfb81a971c3b4e11e5d31aeabaa06344c5c7e99139eefe156c795b9a289d650bf84c3066ff89ee6f7a740d1eb2f04291ffba51c5d1a4ea5f723b72010733c12f2e8ebe72fb628366e94042fb47a865f2913b30a7a0bca3d3e444bd7c94c8adbb64e55c9472fc1abea77fe70ebc5686f52d752c858a95ae1a22db19ee5bae0af831bf411a3ac9a0abbae9a442939885f28bff8296e2e12db88dad7dfe60ec567bb760a525f7c9e6428222ff460c6127b04d4eff9d1f006726847c5b8c113f51c269d8028e16f88ce3d5152271b71bcbae2cb481b7f61302c9c6af46ed25cc2872e0f88238f2d1e6c019ccbed42205d5dcb3bc72a5f8ad28732fac3a8d1cbcc552240f13a2d5cf88217e89661674ff2be78dd2b314549d18146f81da895c9838504ea2278cdc7b3e0a3405f0dab5bb23daf103ac3875b817304d4eb3cfb2721430f914a62b6ae2ec59c388c9313ed4aaced168c0f4101ea08834ef3ef75ab4bf4001a0dea9bf4a0966f1a7f8229702d62431040cf684437d3f55da6bb2b2ffd237c433534f2adaa2433b843ab2b6d498768ad4282763adf2db7248456d2d4b51e42d938283e3ac7129568164c9ff53f78ab2f2717725bb73e309787aede69a8d8b8c78ac730af7e31fbe3771cb62300ef3381a8f582876d5e4add36115b14598ffa3c4c5b3842c12f927f11e80ae24158b19a241179bced9928a71db9b6008ca46d3ad38aab1b07b52932b5932dcffa3cf585334d01386995b455a030c1f7b77b545b10e467fa4cd878c88b4a99ab7bc594e280908c0b437e4ddec5295cd6843b0ffb3c19d4cc770bd4be0aa0839517d35ebd1440794a0dfdd0919105f37bc966a76fc0fdd3f5e20865b5fc9f9a7bdf98517eb321888bd6f65e04d3210cffc0ede70617b0c8062a2e7a362e92ea30591d1f2160924e4153a248ebd8531f67803b70549472389f714ec2bc5438d15934de31f5e4b23408770656e140df9929d0f6c701f86e473406a1b52f08727346d8fbb00a8fe3718b90205fac825dd796d2840b27924ca11d91290de5215f4ae473824ff366bb894b1d490a695ef8f6d049fccebced848d182016bc579c7e7fc97c90785d34a57bb28d6ffdeeeb77a722ec21d976ad15bd8a07a7e6067dbba27db199469d768f469827e9436c375da75c32a9d41c050fbeab77441a18cc074ab9345076d7269ca3a753a9069867dc6c50ea39144ff8419c71cc25e666f2f854e53a4244d2a00647a4772900825e92681e01e48274f781e83c6c7936bd127e7dbe3c70fd21ca9e0b49792e02667229b90c7469ae6a8416417d06efdbd47feb4069136d52fc64d57323a7f59cb6acc9e31d4e34f83fe080a7d49ee720d5636a50c78c140608d061b37e07fcfe5bea33a2716a553ee53f81901cb0c3d9a258adcb201e3b314daa0987814a494e913cf434ff02b65b871ca4f5515db2b220b6fded3649f42bf6d45fdf455651ae43057be728a2345703256454f9e38852740ba19aa81220a2826b309c2be852841c18d9d0fb0cacd593f8afd107c8b9685454423fe8b4e444f92e7eccac44a0ec38d28208d65ea28b4a61d2b7ab5d7cdcbc2c94ac668ce0bf479cf97a0506807b8697b3ef0b618f9d55b70801947ceff28cccf83ee4e396c60205838c2bbab957fce76e5502f94c6b3a3a9f6a82554eed0d06f5bfd1dfd227c3aafd604f7bd6806cd972670ad0bbdc12fa37cb562b0cab99554645c3b5a0b2ac60690c7dcbfdebf4f7706910b5731a1eb89867ddad81322deed563fb8e89769e788ec3e3bef8afb2f677154b5c8e90c6bfe3a8f8cf0d06a2c90e4d68dd34ab403a50ac6d58b394f3ff5027be2d10f524651b93e5e70b81b6b579c2c023523fe6e696f0e41a4335d4d2e2386c2c1d4835cf0d4d2e54f537a67c62be447d5b9f3b4e82faef51d222c74c4b1289e483a0317dbc96edc200f888b6524b8466d700bfefdc84451a5a6bc733d3b7998866566d5d5a8381aced87f9423931a1a4a82c14e4fda1287dc05c2aea7454708eb8b2cc12c42e0470d5d2230431288952702392d6de47be2c5be754ea7246aa0bf3211f04466e2d74623d72652d58a24c158e7d1942dc437f2c8e092bbe6446a83814aa2d49a578f601bbfe72742fa680b294e5bcc4e2e10cb0e7a457a7e1d7643df3fbb5ba0cc9d299cc2e9d37e129b9af8bf49c33064fed6bc3b36cad2b9c9dd6738cc1e1244b547988f85d4f17b3d23419c686189a9ae1e5676ce958ea2c1562387e6877b3a0a8f3e58d829d0356a75e6bf33e568f9878a286749bb061c0fad9e3bbdf44d457a204f2d9c53a825c7d107974905d01ed3e7143fe049e7aedb9beda252444d668ce6dcf7668cd7bc9b92be9c29df9856cd331099fd212343d4d7a3b25c4b60569e1e614b16d2a5c0855d2b2e14adf7073a45c0da5a50d07862bddbb85658e89a43b081713e996d9d38aca3bbe187f4c75aef0e8d4265539b931ea6b45861ad6593372b95b0169a248dc6f3b1a2dba755f324dfea26cc77729f2ecedcf842747372ff9bdee9a1778c1a98c009ef9160988a05305a5a00542b1e495c2852c6789325c980418f9b170e13c5083d4f5cd5ff049406d8068c760cd26ed52d25fedf5471c131355414d5479b68c00b00d2b5b719857a5dc0497e85fe538252bd6e74e5ea57f444f82e8193ff5a61a1d0b8cb22c0b36f8f229ecf9af6d7335df902442e8f8c028f977c65f9e40f8a5c1bc1429f0ab0342a159a139a8e70261b8d0eb28d9610bd786029056b299ecb68aa7bea5573b04ad61fc7fb3418cf5042f9de1cc33749de4c4f7f1916e5d2b9dab62e9d3a4fea6cf4be7a030623ae13798199c00f96236e92a0d57f6de615efe4f43274254198f9ca3"}, @NL80211_BAND_5GHZ={0x93, 0x1, "3b4ede5cbfe534057103d49451c99a167fc3adcbe57393174ea861e0c183b4cbab05e468437eeaddc66ad3f8a88ec77213dbc708ab095feba230d65ef8191a50fab01d9a4655f1043fdff4976de17fbad20e9641ce01f803b86bfd2324b9b6aa87b66b19f52e0a65864314e6c1a20f702cc15edd363cca6832b0fcae85b7156932dbff30d807a6942e5541419fcce3"}, @NL80211_BAND_6GHZ={0xc2, 0x3, "24ce602c115262f2740078770d386fb5d2e39191c43e5cf8e10652f59f0e5f84a17ce77f73376351518c7da896ce7b16475b2ddd729c7fdc31520669958d9fce0ba5b89be96272df4a2d3851c1ef3852a112cd1c3818626ae98e23a3d5929e08d42a6cd6bc3d429544599d83c2064890233a2e400acd2c5f2f03b271862d4ecf644142aa1610dc1b7ca7559be5513770207cab2a373f3ab34c4ef08ac48431ddf26ed2b1ecc00db2d97832b899f59e61de7b1846a49a79a7d588556b286b"}, @NL80211_BAND_6GHZ={0xab, 0x3, "aba76bc05fce6c8a5735de79fefbb5f2528276e5ce45b74881cc74a29581100b26495697a637d1f65829e71092d5cf812c626d8fc108983d27a95e2021471314961da20ec5b9355899a9ed73db38e2b66e5fa6dba9010129843994e04d2a896d965c27bcdd192b7dcc875dbe2a20c137025b51a347f7a69ab42280a8217d5320075e962e49a488e5fab9cf88c7cbcdb213afc1101f43d2fa0dd61828fda5546e75da520a51ecef"}, @NL80211_BAND_6GHZ={0x6e, 0x3, "e002f2d84c94f52f310f272a81ab9fcb28e8903d8a806eeb2508e20e68f98243012606a107a24b79a84500fdcf25dc6ec64cf611d86f9ded2e8688a360852a3f2958fdbf44b6ec13377782fbc037f27a6e18bb16fa74aaa765c3a349842a782e7e14f47b40f8355a754e"}, @NL80211_BAND_6GHZ={0x11, 0x3, "15495e533344f99a99f0bc2de9"}]}]}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x24, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0xc, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xfff}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x748, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x41c, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCAN_SUPP_RATES={0x3e4, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4d, 0x1, "fe6211cfdf44dc2578f35728f7df0475a2361198bae0337d8beb0b8f3619add2d23311a4e18febd4455cf55260752a3c9ee581acd9a6f6a697f3fbf9065a2cbc66b1c1f18f9d70ad37"}, @NL80211_BAND_2GHZ={0x6c, 0x0, "14e7ed78b2f906ef3521c6ee3ce3840e7442592b11d25b1b42695a55abff143a01dafa45b1bb3a8844505b2da9ae2289435aa4ae5ad64ad198538eb970282b04575c75ddb01133826f933bceb840819d8ee791488a24b5415ec603615e25343becd1ca5d92d1e4a1"}, @NL80211_BAND_2GHZ={0xc8, 0x0, "1c99d131300eff7d2bb5eebc685703cd329a75efea52fb0be379cd5576ea21d143d0297752a5499c0a840940c443fbbdd615d814c4019c449f16c3ba506f57147fd4a140a21151ee512bf8051ccf62c942c60457c31c472878eec998532c39de653eab504b3713c23f19c75ed81595fccc76d48faf4d3d21ae1649926f7db68963d17bdfe5dc28478dc8774fb9704e190eb9c3ebaf564ad689573f36ffd0f4aeafbf2a2506304bac07dc085e1f6c43ab595f607f94451aee461cd6bbd33b579ed860cef6"}, @NL80211_BAND_2GHZ={0xc0, 0x0, "34e31c841539ecac09b245c9b63de4b2cb1a978fe076ca33a7a2d51e23b00f02a74c01021aaf52590c2bd5bfce12c716c788062cba5ce479f2d8e502d514cda5d94f3d218543db170e7cd995d2a3c6afdf67eae76cf7487393aa4a5fa12b4307951f628c337f2477152311ec9606c9f394fdcd378b779cf506bc73dd4c490200ebb42acee7576d0a2f28eab4149b49131aac18425655d2715088e544a98b175466b803321c8792f7c10be39fc0ca57de4889498bc5617e48959d5afd"}, @NL80211_BAND_2GHZ={0xe7, 0x0, "1a03d128be13b284989506aae172c4ff9e6e1cf77b57b725fd7f358eb3aed0338d27c7d3b3256160369feb2bdf8467f36aaea35d582b3194903827aada1a6233b0259bcdc814ffb378b705face8c5327de158a7066a912bb74375954ad92e9cf42942cf0dfde1a941b871829a045236e3b3ee59fbdc69c6657e791292d0a7f22ddb12bce96e554ed1d96bd109c11f6347ce7d0a8cc1f71b32a346b1d745f036e215b1097fca0cf0988fa71d4aeb39ad0ed1bccb51cb25ea66b9b104b4727ba975f2c5cc0b288c7d11a05af31eb5fc39d21b29303f13e3c5f37e9313f5038cf83041b0f"}, @NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_5GHZ={0xad, 0x1, "dca324046057bc6e14b02c3bca4f611f0dcd45499c77565d599ff7423341c1132452721750fc5f545495e98457d5da78e0ce00385fbe80ae7b4244a7ae7c7d47245fc6062c115f76ac9749612b45a6e34009ffab6fd42cbae1e2ce5ad5c023add2b066affe9f43f3e490a0fe93c345dc0d982d2f98292994c212be0ee2abedc8e8a03742dcaf0a0321c466341f06a8a343da7ee93ffe1e4530ab72d5d84604c5535d3550042e65dc5e"}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x28, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x24, 0x0, "bc54d6d1b77de17250cf3f7a9afd01d2dacba343a427acaa80d655ff9cd308ca"}]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xff}]}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x234, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DST_MAC={0xa, 0x3, @device_b}, @NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0xbf, 0xa, "16f50a8df8ee2f9fb96b701358fc84f2aa9a7c0d92949a050c69d7a428d76de07f00473204bde35eec4458bde6917e13d037eb4044342c753df339ca845a2c883e09a985cd6af086902325560bd00e0994c0ebd0bf03e2364a577c4d9824d36a594b5814b8098e302cccce612ab869ca15df76f9572d9406c7d5828e6d1251c88c7a974be00688447a7cb425abefe14e9241484dc2917c215510670af601106a3ac0af9213a46e9c0df17ddc416b30b3d669d31caff3a9377578f9"}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0x59, 0x6, "151e6d3d2f20f8d42843018666679246eed63520e2b90fbc2e2af1b2b9e5375e2c40d64ac5fac43adab9a888e5ab90351af864dce2e1328e72efe71f268d927e429101b68dcdf92ae88f4ec38e8db3e64b60270158"}, @NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0x2}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @empty}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0xf7, 0x6, "27358cc1db35134c1a10927a2c787bbd18a119706f584f2ed6e61d2ba4f8ca96f0863dbbc3978cbf283be8d5063a748bac33ae46533049e5760f78d6a5adbfd96f5bdca55592e81b8587226319289bfd72166bd88115c3690d21aa3b1841b9583aedd28bcd66a65d76feee21ba7e68137bb414e32b9e5d91d7e9f7c93fd8a0811c16941c5577bd028421dbd7ba87afa60d9cedb06e251196a5c3a8dcd2a07be8db28f7a25c0c13aaf514b231820c2d900157db2baffb2aa504fcb9e10eaba2aff47106a1bcbd06fcc56060dcf3683d9eb9c3f8a6a72adc3ca7f0d1abe0a7348fc4c2f4168403ecabf1b135cd8783e0b2bc094b"}]}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xec, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0xd6, 0x8, {0x9, 0x7fff, "3ffbf1549beaba697a86c9e8f38adc383fd6a0e25215d005231ff062f4f052fa893de7f559bb7fad81c9b633d605a6f3dffbc08baaca46dbe36183a20c71aab929b01384b3123511e862b88be0477714df562ffdfd5695e6fa554d66df678e7fad9205722db755a5af06fbcc5911410f8b38d1c0e4f235321d7ca7a8faac7623f7fd6aafb8f0bfd1095a98d9e465eab47c756ec7a61a383bf00d9e1bd671d868506a6a950af424988e4141f5b8b9c786aa452703cb0dfe8d6bed51be4a5e2f01b317ff6708b127f7c6ac"}}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @multicast1}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x3ff}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x1200, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x18, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @private=0xa010100}, @NL80211_WOWLAN_TCP_DST_MAC={0xa, 0x3, @broadcast}]}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x11dc, 0x4, 0x0, 0x1, [{0x11d8, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7}, @NL80211_PKTPAT_PATTERN={0x102, 0x2, "9a5122d580a4f8a37a39467bf08472eaa5cbd4bc6baa2fbdbf09e0a74f47b520a7efc1e97de3188baa83e66e65f8e2f1b88cc8a366095b03cf847658c280efb23fe93bdc9de05f3dd45fe926812cf9f532b758c2352c816f9f6c56a5c3bce072790ad832246f34cfc036c44315ceebefd1d39386ccbcbee71814153b1aa82df47e4da76c509253da0f044ad8db56907dfcf20c00e72692e04648bbdda24811b8da34172b31a33e3cf563709a820f8d3062b03722da025f590a2e696a8f6454e51bfe23feb01dc9ab1bbc806e297ce8872e2e8cfa3783cb0a467389e7f1a609b7a07264cf00f7d58069371957474e177c9071711c105960d1e93fad35d2aa"}, @NL80211_PKTPAT_PATTERN={0x1004, 0x2, "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"}, @NL80211_PKTPAT_PATTERN={0xc1, 0x2, "3a35b3421a15a8418bb23d7a3ed74588251b9c3d75916b9c006f4c187e99f2358491d2c4ccc460ea490dd678c52ecb5f9ddb8391bd31fa980fb488588c6e26e6cedccd510ed63234afb3cbc8864b21392eea87ac2271179d9b6dac43923b8839623a13ef1f95654b19de9652aa060f82ee639b26355d556704e7625b4d45820d47904f6259c1ccc74705388861c74781431e2284eb9be79acfe4f73c1ebc9ff3a433ed217325d9074d6a8e1d062b381e69175aa4a7fb4b145118aa250d"}]}]}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x3c8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x1d8, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0x97, 0x8, {0x6, 0x3, "6b11d441e7d62bd28ae466303f73bbb3d193f7469631b1dd817087107abc01ba5c0fcc7be59a9d90cd65f650ceab11fc84003f7b219a0041d250ede2bbc21c7bfa9aff0881d69fa54347c1c9650e0275bb8ae628175970bff125303ffcd45beac8566a07df78af6f3a916de3e4db4d152c0d5e88a6d13d47bacf10611d1a4fa3866c4a70264933184ac426"}}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @rand_addr=0x9}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @multicast1}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0x3c, 0x8, {0xffff, 0x5, "f053b09e8060adb51abe0283379462dddc90c18a0391c9ea88761314449ddd3da9299803d18534f11ac1ce731d7ad4c5"}}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @multicast2}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0xe8, 0x6, "5c896055883a9cf70b340cf2bb0d9ddcc50799dfe00969d86f54dfdd2b4b3c0d0f6ffcb1c692412e89262057f6b1899fc2f90291603c1c29ee1b70760f10fd6c67f586e96bc01549ab2b45c64c90770c5f8747722548c369b674f528f838da9228385c67aaeff4add0f0c508442e56b8f703858dabb2b7117d54780a03e7ff97b3eb877f475220589d11c92c75c62126fff0f656b7c09c02e5a983cfe0eaac9f92acbb3f86dc9789a4e3264ecf55f84a383965a3ae2d93def53260476eb5a019afd5d43839b752e36ddd0c6618557a51870a078828e4bb1b36eaa299dba0a26b24f54e32"}]}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x1d0, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_PAYLOAD={0x27, 0x6, "55b5e804d073e2d9ac588a16a4e47f8ce5cf533d1e56279c8e732458d27c8d35d93021"}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @private=0xa010101}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0x38, 0x6, "4903ff30205e35b45e3ec00d0b2d46be4516e379e74237f3cf5f7fb5d5ea5b2bc97f7959402c0dcfa27fbdc197af845a8afec028"}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x726f, 0xa884, 0xfffffe01}}, @NL80211_WOWLAN_TCP_WAKE_MASK={0x4d, 0xb, "e9c35bd5e8921462bc986e47964bc337baf62ede2f23c595cc37fb75f69632e23702277bd4bdc2a66fbb0da6553f8f5d6e284a266d1098ba074cadf4f089d645ec4eb4248578aeb175"}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @multicast1}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @local}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @loopback}, @NL80211_WOWLAN_TCP_WAKE_MASK={0xea, 0xb, "b18a8d597ea471aa3dbdbcbac77cba7c6e71d3076d1050f1b191106bec0fc9a65c4b43102bdbba26ab4759c1a5f975ac638dc77095ee5d2b8d5f032890978718ef3e11a4b97f32a8f4dbb4595cc4cc103f858aa988f4de5bf8724ea21e1186ad28c9242fbbe9505982dc7f4bc1920b0d124246a4a93924df6f9a3273bc8051ba15504b601ac25d8c5b9d5db71e3a6a072900e32043bbaa674b2accff936569007c1a5ff1f9fa715cf81431c4763d3555a11b370533d1e5f98f80c9b11e58b357600de3e53bf42bbf9ad1f4537f6d9a3f599c99abf84f740c9855cea718755044343c2d5fee52"}]}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}]}]}, 0x5410}}, 0x100048e1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 745.160654] mac80211_hwsim hwsim17 wlan1: left promiscuous mode ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r5, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xfffffffc, 0x18}}}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x7}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x7f}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xfb}]}, 0x48}}, 0x4140) 11:58:47 executing program 7: msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/79) (fail_nth: 8) 11:58:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x74, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:58:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x6000000, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:58:47 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 48) tgkill(r0, r1, 0xb) [ 745.181930] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 745.205621] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 11:58:47 executing program 7: msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/79) (fail_nth: 9) 11:58:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x900, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 11:58:47 executing program 7: msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/79) (fail_nth: 10) 11:58:47 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 49) tgkill(r0, r1, 0xb) 11:58:47 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0xe, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 11:58:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x180, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 745.303270] FAULT_INJECTION: forcing a failure. [ 745.303270] name failslab, interval 1, probability 0, space 0, times 0 [ 745.304221] CPU: 1 UID: 0 PID: 7035 Comm: syz-executor.7 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 745.304237] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 745.304244] Call Trace: [ 745.304249] [ 745.304254] dump_stack_lvl+0xfa/0x120 [ 745.304279] should_fail_ex+0x4d7/0x5e0 [ 745.304301] ? __anon_vma_prepare+0x2ee/0x590 [ 745.304320] should_failslab+0xc2/0x120 [ 745.304334] kmem_cache_alloc_noprof+0x5f/0x3d0 [ 745.304359] __anon_vma_prepare+0x2ee/0x590 [ 745.304379] __vmf_anon_prepare+0x11f/0x250 [ 745.304399] __handle_mm_fault+0x13ad/0x30f0 [ 745.304416] ? mt_find+0x64c/0x870 [ 745.304435] ? __pfx_mt_find+0x10/0x10 [ 745.304453] ? __pfx___handle_mm_fault+0x10/0x10 [ 745.304482] ? find_vma+0xbf/0x140 [ 745.304496] ? __pfx_find_vma+0x10/0x10 [ 745.304514] handle_mm_fault+0x2c3/0x900 [ 745.304531] ? access_error+0x17d/0x380 [ 745.304544] ? lock_mm_and_find_vma+0xaa/0x6f0 [ 745.304560] do_user_addr_fault+0x395/0xeb0 [ 745.304578] exc_page_fault+0xb0/0x180 [ 745.304601] asm_exc_page_fault+0x26/0x30 [ 745.304614] RIP: 0010:rep_movs_alternative+0x54/0x90 [ 745.304630] Code: 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 eb 05 e9 9f 9c 03 00 48 8b 06 <48> 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 c7 48 01 c6 48 29 [ 745.304641] RSP: 0018:ffff8880421ffd98 EFLAGS: 00050202 [ 745.304652] RAX: 00000000798e2651 RBX: 0000000000000078 RCX: 0000000000000078 [ 745.304659] RDX: ffffed100843ffd6 RSI: ffff8880421ffe38 RDI: 0000000020000280 [ 745.304667] RBP: 0000000020000280 R08: 0000000000000000 R09: ffffed100843ffd5 [ 745.304674] R10: ffff8880421ffeaf R11: 0000000000000001 R12: ffff8880421ffe38 [ 745.304682] R13: 00000000200002f8 R14: 00007ffffffff000 R15: 0000000000000000 [ 745.304702] _copy_to_user+0xbe/0xd0 [ 745.304717] ksys_msgctl.constprop.0+0x1f8/0x320 [ 745.304735] ? __pfx_ksys_msgctl.constprop.0+0x10/0x10 [ 745.304751] ? __fget_files+0x20d/0x3b0 [ 745.304790] do_syscall_64+0xbf/0x360 [ 745.304809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.304820] RIP: 0033:0x7f7209919b19 [ 745.304829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 745.304840] RSP: 002b:00007f7206e8f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000047 [ 745.304851] RAX: ffffffffffffffda RBX: 00007f7209a2cf60 RCX: 00007f7209919b19 [ 745.304858] RDX: 0000000020000280 RSI: 000000000000000b RDI: 0000000000000000 [ 745.304865] RBP: 00007f7206e8f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 745.304872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 745.304879] R13: 00007ffd05ee277f R14: 00007f7206e8f300 R15: 0000000000022000 [ 745.304899] [ 745.349077] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 745.378954] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 745.386079] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 745.405619] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 11:58:58 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 50) tgkill(r0, r1, 0xb) 11:58:58 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0xf, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 11:58:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x6, 0x0, 0xff, 0x800}, {0x1, 0x0, 0x7f}]}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r5, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x8, {0x13, 0x7, 0x3ff, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x10) 11:58:58 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 11:58:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0xf00, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 11:58:58 executing program 7: msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/79) (fail_nth: 11) 11:58:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x33fe0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:58:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x7000000, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:58:58 executing program 7: msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/79) (fail_nth: 12) [ 756.230449] FAULT_INJECTION: forcing a failure. [ 756.230449] name failslab, interval 1, probability 0, space 0, times 0 [ 756.231423] CPU: 1 UID: 0 PID: 7058 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 756.231439] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 756.231446] Call Trace: [ 756.231451] [ 756.231456] dump_stack_lvl+0xfa/0x120 [ 756.231480] should_fail_ex+0x4d7/0x5e0 [ 756.231503] ? __proc_create+0x306/0x920 [ 756.231519] should_failslab+0xc2/0x120 [ 756.231535] kmem_cache_alloc_noprof+0x5f/0x3d0 [ 756.231554] ? lock_release+0xc8/0x290 [ 756.231573] __proc_create+0x306/0x920 [ 756.231590] ? __pfx___proc_create+0x10/0x10 [ 756.231614] ? mark_held_locks+0x49/0x80 [ 756.231631] proc_create_reg+0xb6/0x180 [ 756.231651] proc_create_net_data+0x8f/0x1c0 [ 756.231668] ? __pfx_proc_create_net_data+0x10/0x10 [ 756.231690] ? __pfx_netlink_net_init+0x10/0x10 [ 756.231711] netlink_net_init+0x52/0x80 [ 756.231729] ops_init+0x1e1/0x650 [ 756.231748] setup_net+0x10d/0x320 [ 756.231761] ? lockdep_init_map_type+0x4b/0x240 [ 756.231774] ? __pfx_setup_net+0x10/0x10 [ 756.231791] ? debug_mutex_init+0x37/0x70 [ 756.231811] copy_net_ns+0x2e3/0x650 [ 756.231829] create_new_namespaces+0x3f6/0xab0 [ 756.231852] copy_namespaces+0x45c/0x580 [ 756.231870] copy_process+0x26d5/0x73e0 [ 756.231883] ? __pfx_perf_trace_lock+0x10/0x10 [ 756.231908] ? __pfx_copy_process+0x10/0x10 [ 756.231919] ? __might_fault+0xe0/0x190 [ 756.231938] ? _copy_from_user+0x5b/0xd0 [ 756.231955] kernel_clone+0xea/0x7f0 [ 756.231965] ? get_pid_task+0xfd/0x250 [ 756.231985] ? __pfx_kernel_clone+0x10/0x10 [ 756.231995] ? perf_trace_lock+0xb5/0x5d0 [ 756.232014] ? find_held_lock+0x2b/0x80 [ 756.232031] ? ksys_write+0x121/0x240 [ 756.232043] ? lock_is_held_type+0x9e/0x120 [ 756.232063] __do_sys_clone3+0x1f5/0x280 [ 756.232075] ? __pfx___do_sys_clone3+0x10/0x10 [ 756.232099] ? __fget_files+0x20d/0x3b0 [ 756.232123] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 756.232143] ? fput+0x6a/0x100 [ 756.232157] ? ksys_write+0x1a3/0x240 [ 756.232168] ? __pfx_ksys_write+0x10/0x10 [ 756.232187] do_syscall_64+0xbf/0x360 [ 756.232207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.232220] RIP: 0033:0x7ffb744edb19 [ 756.232230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 756.232241] RSP: 002b:00007ffb71a63188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 756.232253] RAX: ffffffffffffffda RBX: 00007ffb74600f60 RCX: 00007ffb744edb19 [ 756.232261] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 756.232268] RBP: 00007ffb71a631d0 R08: 0000000000000000 R09: 0000000000000000 [ 756.232275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 756.232282] R13: 00007ffeb487a35f R14: 00007ffb71a63300 R15: 0000000000022000 [ 756.232302] [ 756.270398] FAULT_INJECTION: forcing a failure. [ 756.270398] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 756.271523] CPU: 1 UID: 0 PID: 7067 Comm: syz-executor.7 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 756.271539] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 756.271546] Call Trace: [ 756.271550] [ 756.271554] dump_stack_lvl+0xfa/0x120 [ 756.271576] should_fail_ex+0x4d7/0x5e0 [ 756.271601] should_fail_alloc_page+0xe0/0x110 [ 756.271616] prepare_alloc_pages+0x1af/0x500 [ 756.271631] ? __is_insn_slot_addr+0x140/0x290 [ 756.271652] __alloc_frozen_pages_noprof+0x17f/0x1f10 [ 756.271671] ? unwind_get_return_address+0x59/0xa0 [ 756.271692] ? perf_trace_lock_acquire+0xc9/0x700 [ 756.271706] ? perf_trace_lock+0xb5/0x5d0 [ 756.271723] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 756.271748] ? perf_trace_lock_acquire+0xc9/0x700 [ 756.271763] ? perf_trace_lock+0xb5/0x5d0 [ 756.271778] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 756.271794] ? policy_nodemask+0xeb/0x4e0 [ 756.271814] alloc_pages_mpol+0xed/0x340 [ 756.271830] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 756.271846] ? lock_release+0xc8/0x290 [ 756.271858] ? find_held_lock+0x2b/0x80 [ 756.271875] ? get_vma_policy+0x23b/0x350 [ 756.271895] vma_alloc_folio_noprof+0xe9/0x440 [ 756.271913] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 756.271938] __handle_mm_fault+0x142c/0x30f0 [ 756.271956] ? mt_find+0x64c/0x870 [ 756.271974] ? __pfx_mt_find+0x10/0x10 [ 756.271992] ? __pfx___handle_mm_fault+0x10/0x10 [ 756.272022] ? find_vma+0xbf/0x140 [ 756.272035] ? __pfx_find_vma+0x10/0x10 [ 756.272053] handle_mm_fault+0x2c3/0x900 [ 756.272071] ? access_error+0x17d/0x380 [ 756.272082] ? lock_mm_and_find_vma+0xaa/0x6f0 [ 756.272098] do_user_addr_fault+0x395/0xeb0 [ 756.272116] exc_page_fault+0xb0/0x180 [ 756.272134] asm_exc_page_fault+0x26/0x30 [ 756.272146] RIP: 0010:rep_movs_alternative+0x54/0x90 [ 756.272161] Code: 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 eb 05 e9 9f 9c 03 00 48 8b 06 <48> 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 c7 48 01 c6 48 29 [ 756.272173] RSP: 0018:ffff888017ecfd98 EFLAGS: 00050202 [ 756.272182] RAX: 00000000798e2651 RBX: 0000000000000078 RCX: 0000000000000078 [ 756.272190] RDX: ffffed1002fd9fd6 RSI: ffff888017ecfe38 RDI: 0000000020000280 [ 756.272197] RBP: 0000000020000280 R08: 0000000000000000 R09: ffffed1002fd9fd5 [ 756.272205] R10: ffff888017ecfeaf R11: 0000000000000001 R12: ffff888017ecfe38 [ 756.272212] R13: 00000000200002f8 R14: 00007ffffffff000 R15: 0000000000000000 [ 756.272232] _copy_to_user+0xbe/0xd0 [ 756.272247] ksys_msgctl.constprop.0+0x1f8/0x320 [ 756.272264] ? __pfx_ksys_msgctl.constprop.0+0x10/0x10 [ 756.272281] ? __fget_files+0x20d/0x3b0 [ 756.272319] do_syscall_64+0xbf/0x360 [ 756.272338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.272350] RIP: 0033:0x7f7209919b19 [ 756.272358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 756.272369] RSP: 002b:00007f7206e8f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000047 [ 756.272380] RAX: ffffffffffffffda RBX: 00007f7209a2cf60 RCX: 00007f7209919b19 [ 756.272387] RDX: 0000000020000280 RSI: 000000000000000b RDI: 0000000000000000 [ 756.272394] RBP: 00007f7206e8f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 756.272401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 756.272408] R13: 00007ffd05ee277f R14: 00007f7206e8f300 R15: 0000000000022000 [ 756.272428] [ 756.329901] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 756.356054] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 11:58:58 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 51) tgkill(r0, r1, 0xb) [ 756.439254] FAULT_INJECTION: forcing a failure. [ 756.439254] name failslab, interval 1, probability 0, space 0, times 0 [ 756.440191] CPU: 1 UID: 0 PID: 7081 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 756.440207] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 756.440215] Call Trace: [ 756.440220] [ 756.440225] dump_stack_lvl+0xfa/0x120 [ 756.440253] should_fail_ex+0x4d7/0x5e0 [ 756.440275] ? __proc_create+0x306/0x920 [ 756.440292] should_failslab+0xc2/0x120 [ 756.440307] kmem_cache_alloc_noprof+0x5f/0x3d0 [ 756.440325] ? lock_release+0xc8/0x290 [ 756.440345] __proc_create+0x306/0x920 [ 756.440361] ? __pfx___proc_create+0x10/0x10 [ 756.440382] ? mark_held_locks+0x49/0x80 [ 756.440398] proc_create_reg+0xb6/0x180 [ 756.440418] proc_create_net_data+0x8f/0x1c0 [ 756.440435] ? __pfx_proc_create_net_data+0x10/0x10 [ 756.440457] ? __pfx_netlink_net_init+0x10/0x10 [ 756.440477] netlink_net_init+0x52/0x80 [ 756.440496] ops_init+0x1e1/0x650 [ 756.440514] setup_net+0x10d/0x320 [ 756.440527] ? lockdep_init_map_type+0x4b/0x240 [ 756.440541] ? __pfx_setup_net+0x10/0x10 [ 756.440557] ? debug_mutex_init+0x37/0x70 [ 756.440577] copy_net_ns+0x2e3/0x650 [ 756.440595] create_new_namespaces+0x3f6/0xab0 [ 756.440618] copy_namespaces+0x45c/0x580 [ 756.440639] copy_process+0x26d5/0x73e0 [ 756.440651] ? __pfx_perf_trace_lock+0x10/0x10 [ 756.440675] ? __pfx_copy_process+0x10/0x10 [ 756.440687] ? __might_fault+0xe0/0x190 [ 756.440706] ? _copy_from_user+0x5b/0xd0 [ 756.440723] kernel_clone+0xea/0x7f0 [ 756.440733] ? get_pid_task+0xfd/0x250 [ 756.440752] ? __pfx_kernel_clone+0x10/0x10 [ 756.440762] ? perf_trace_lock+0xb5/0x5d0 [ 756.440781] ? find_held_lock+0x2b/0x80 [ 756.440798] ? ksys_write+0x121/0x240 [ 756.440810] ? lock_is_held_type+0x9e/0x120 [ 756.440830] __do_sys_clone3+0x1f5/0x280 [ 756.440842] ? __pfx___do_sys_clone3+0x10/0x10 [ 756.440866] ? __fget_files+0x20d/0x3b0 [ 756.440890] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 756.440910] ? fput+0x6a/0x100 [ 756.440923] ? ksys_write+0x1a3/0x240 [ 756.440935] ? __pfx_ksys_write+0x10/0x10 [ 756.440953] do_syscall_64+0xbf/0x360 [ 756.440973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.440986] RIP: 0033:0x7ffb744edb19 [ 756.440995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 756.441007] RSP: 002b:00007ffb71a63188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 756.441018] RAX: ffffffffffffffda RBX: 00007ffb74600f60 RCX: 00007ffb744edb19 [ 756.441026] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 756.441033] RBP: 00007ffb71a631d0 R08: 0000000000000000 R09: 0000000000000000 [ 756.441040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 756.441047] R13: 00007ffeb487a35f R14: 00007ffb71a63300 R15: 0000000000022000 [ 756.441067] 11:59:07 executing program 7: msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/79) (fail_nth: 13) 11:59:07 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 52) tgkill(r0, r1, 0xb) 11:59:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4004000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r7, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200080c4}, 0x40040) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:59:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0xfffffdef, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:59:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x1101, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 11:59:07 executing program 6: keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000000)='\x00', &(0x7f0000000040)) r0 = request_key(&(0x7f0000000080)='encrypted\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)='\x00', 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0}, &(0x7f0000000180)=""/239, 0xef, &(0x7f00000012c0)={&(0x7f0000000280)={'cmac-aes-ce\x00'}, &(0x7f00000002c0)="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", 0x1000}) r1 = add_key$fscrypt_v1(&(0x7f0000001300), &(0x7f0000001340)={'fscrypt:', @desc2}, &(0x7f0000001380)={0x0, "93c080c50fbff38b30a3335229b74ef9b2bc0aa62c80fe1117e5bf31a8740379e93d7177217ca97d5515a5ad51580cc2a062602b7bee5fc8b63b229608ae8435", 0x3f}, 0x48, 0xfffffffffffffffc) keyctl$get_security(0x11, r1, &(0x7f0000001400)=""/244, 0xf4) r2 = add_key$fscrypt_v1(&(0x7f0000001500), &(0x7f0000001540)={'fscrypt:', @auto=[0x32, 0x34, 0x39, 0x61, 0x66, 0x3, 0x31, 0x34, 0x31, 0x5f, 0x37, 0x31, 0x32, 0x0, 0x37, 0x39]}, &(0x7f0000001580)={0x0, "801e4b6533d5f8cb2db9172e4e2b68d455253fa2065fa8c18cad525a50ebce5b698db6621edb1af203be94a18a59f4a427eb9a1b1fa1e4733b27faeb4bd7fc85", 0x2d}, 0x48, r1) r3 = add_key$fscrypt_v1(&(0x7f0000001600), &(0x7f0000001640)={'fscrypt:', @desc1}, &(0x7f0000001680)={0x0, "b0a444bed2763b8c727497c2ae184b1e78edf9894b5b6414c8a598060230abc6cfe351ac7ae718dcd839fa7c7802ba5559a4384e7c814af453ed06586ff6047a", 0x3d}, 0x48, r0) keyctl$set_timeout(0xf, r3, 0xd081) add_key$user(&(0x7f0000001700), &(0x7f0000001740)={'syz', 0x1}, &(0x7f0000001780)="6394900a7b251f29184cb0e4c5770352d199e60bf8ebf392f94eb065d2e4d61360358977068154f8f9be62889037282a2aeb7b85cbe653d4a2e85970942202788cea99ffe1a1fba3a0cfd5ddebbaf6f24b73caf3977a787ff59d2f54bf8fde6a1c7c21fab059dd758e2a321404325f665687c32602097b4391b29a0a1478f038f3", 0x81, r0) r4 = add_key$fscrypt_v1(&(0x7f0000001840), &(0x7f0000001880)={'fscrypt:', @desc2}, &(0x7f00000018c0)={0x0, "ce5527dccb908a29b67b1754bde45d770e3c79450b86f99e771c0276500aa9edeab0c770885f4a32eadd4cd55e3f071fd8f22eee661410ad1110e415d2223428", 0x26}, 0x48, r3) r5 = add_key$user(&(0x7f0000001940), &(0x7f0000001980)={'syz', 0x2}, &(0x7f00000019c0)="deededd7e83040c9b4019b0b7e740e55fcea42ae646ae3ad650650ff2387d4ba88e95f2df5670e7948ec9c40a6c2c906f96b2454abde5b876e58166e81581666a0f57bdfc1e46a2c38bda93be4d6c8313fc6d314e81ef2fe3622a9a5c2488d8eedd67ee190f1c682d11b3f1e0afa520c8dfba63e9975b8e625f65058938f317aacd38cb247eee706a0756e01a02fbab991aded2c55", 0x95, r3) keyctl$KEYCTL_MOVE(0x1e, r5, r2, r4, 0x0) r6 = request_key(&(0x7f0000001a80)='syzkaller\x00', &(0x7f0000001ac0)={'syz', 0x3}, &(0x7f0000001b00)='^@]$#+&!((\x00', 0xffffffffffffffff) keyctl$unlink(0x9, r6, r0) r7 = add_key$fscrypt_v1(&(0x7f0000001b40), &(0x7f0000001b80)={'fscrypt:', @desc2}, &(0x7f0000001bc0)={0x0, "e6d21651ae2cccb2f55750fa1d1f74c1ce54f2cab9ff2499666a94574acda3c35307325af8ca1ed9e1eab2d35d99d584878678d798f0e9a618ab028dcddc58dd", 0x32}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000001c40), &(0x7f0000001c80)={'fscrypt:', @desc2}, &(0x7f0000001cc0)={0x0, "82726ddfaa048294d5ebda6163d4451dbf10ec7f59f7d8eb03357b2bbe092e7f21c474f0fee3c6eea709c4326765ebb6bb7257e17620fc42a7f144576abbdf18", 0x3c}, 0x48, r0) r8 = add_key$fscrypt_v1(&(0x7f0000001d40), &(0x7f0000001d80)={'fscrypt:', @desc4}, &(0x7f0000001dc0)={0x0, "f1b9d71718d1cf3e9c5d4817eda0d566d2837472767583889f2449efd55805315df53172e3509598b3e4ab52880b451c1c524e9ef31d85769382c3295bf7b1a8", 0x3b}, 0x48, r3) r9 = add_key$fscrypt_v1(&(0x7f0000001e40), &(0x7f0000001e80)={'fscrypt:', @desc2}, &(0x7f0000001ec0)={0x0, "1142c362b4fda4f5d899eb759b9d9ae47cf36f7b3ced234ef1cf580a1c095e8e2cf970e6205031f55bc148499df410e6c20a82cd357c76ea0aaca5ce86cc9dc5", 0x1a}, 0x48, r7) r10 = request_key(&(0x7f0000001f40)='asymmetric\x00', &(0x7f0000001f80)={'syz', 0x3}, &(0x7f0000001fc0)='\x00', r2) keyctl$KEYCTL_MOVE(0x1e, r8, r9, r10, 0x1) 11:59:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x9000000, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:59:07 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x11, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) [ 765.376285] FAULT_INJECTION: forcing a failure. [ 765.376285] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 765.377749] CPU: 0 UID: 0 PID: 7099 Comm: syz-executor.7 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 765.377769] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 765.377778] Call Trace: [ 765.377784] [ 765.377789] dump_stack_lvl+0xfa/0x120 [ 765.377817] should_fail_ex+0x4d7/0x5e0 [ 765.377846] _copy_to_user+0x32/0xd0 [ 765.377864] simple_read_from_buffer+0xe0/0x180 [ 765.377889] proc_fail_nth_read+0x18a/0x240 [ 765.377907] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 765.377923] ? security_file_permission+0x22/0x90 [ 765.377946] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 765.377962] vfs_read+0x1eb/0xbe0 [ 765.377981] ? __pfx_vfs_read+0x10/0x10 [ 765.377997] ? lock_release+0xc8/0x290 [ 765.378018] ? __fget_files+0x20d/0x3b0 [ 765.378051] ksys_read+0x121/0x240 [ 765.378064] ? __pfx_ksys_read+0x10/0x10 [ 765.378087] do_syscall_64+0xbf/0x360 [ 765.378111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.378126] RIP: 0033:0x7f72098cc69c [ 765.378138] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 765.378151] RSP: 002b:00007f7206e8f170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 765.378165] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f72098cc69c [ 765.378175] RDX: 000000000000000f RSI: 00007f7206e8f1e0 RDI: 0000000000000003 [ 765.378184] RBP: 00007f7206e8f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 765.378197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 765.378206] R13: 00007ffd05ee277f R14: 00007f7206e8f300 R15: 0000000000022000 [ 765.378242] [ 765.425962] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 765.432980] FAULT_INJECTION: forcing a failure. [ 765.432980] name failslab, interval 1, probability 0, space 0, times 0 [ 765.434055] CPU: 0 UID: 0 PID: 7102 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 765.434073] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 765.434082] Call Trace: [ 765.434087] [ 765.434093] dump_stack_lvl+0xfa/0x120 [ 765.434120] should_fail_ex+0x4d7/0x5e0 [ 765.434146] ? ops_init+0x77/0x650 [ 765.434162] should_failslab+0xc2/0x120 [ 765.434180] __kmalloc_noprof+0xb4/0x4b0 [ 765.434209] ops_init+0x77/0x650 [ 765.434238] setup_net+0x10d/0x320 [ 765.434253] ? lockdep_init_map_type+0x4b/0x240 [ 765.434271] ? __pfx_setup_net+0x10/0x10 [ 765.434290] ? debug_mutex_init+0x37/0x70 [ 765.434315] copy_net_ns+0x2e3/0x650 [ 765.434335] create_new_namespaces+0x3f6/0xab0 [ 765.434362] copy_namespaces+0x45c/0x580 [ 765.434384] copy_process+0x26d5/0x73e0 [ 765.434398] ? __pfx_perf_trace_lock+0x10/0x10 [ 765.434427] ? __pfx_copy_process+0x10/0x10 [ 765.434441] ? __might_fault+0xe0/0x190 [ 765.434462] ? _copy_from_user+0x5b/0xd0 [ 765.434482] kernel_clone+0xea/0x7f0 [ 765.434495] ? get_pid_task+0xfd/0x250 [ 765.434517] ? __pfx_kernel_clone+0x10/0x10 [ 765.434529] ? perf_trace_lock+0xb5/0x5d0 [ 765.434552] ? find_held_lock+0x2b/0x80 [ 765.434571] ? ksys_write+0x121/0x240 [ 765.434585] ? lock_is_held_type+0x9e/0x120 [ 765.434613] __do_sys_clone3+0x1f5/0x280 [ 765.434627] ? __pfx___do_sys_clone3+0x10/0x10 [ 765.434655] ? __fget_files+0x20d/0x3b0 [ 765.434683] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 765.434706] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 765.434729] ? ksys_write+0x1a3/0x240 [ 765.434742] ? __pfx_ksys_write+0x10/0x10 [ 765.434764] do_syscall_64+0xbf/0x360 [ 765.434788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.434802] RIP: 0033:0x7ffb744edb19 [ 765.434813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 765.434827] RSP: 002b:00007ffb71a63188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 765.434841] RAX: ffffffffffffffda RBX: 00007ffb74600f60 RCX: 00007ffb744edb19 [ 765.434850] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 765.434859] RBP: 00007ffb71a631d0 R08: 0000000000000000 R09: 0000000000000000 [ 765.434867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 765.434875] R13: 00007ffeb487a35f R14: 00007ffb71a63300 R15: 0000000000022000 [ 765.434899] 11:59:07 executing program 7: msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/79) [ 765.480866] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 11:59:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x2, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 765.545864] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode 11:59:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0xf000000, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 765.577470] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 11:59:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r5, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x27}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x40491) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r9, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)={0x86c, r10, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_TX_RATES={0x3e4, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8001, 0x40, 0xcc9, 0x5, 0x0, 0x42, 0x834c]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7, 0x3, 0x73, 0xde, 0x8, 0x0, 0x200]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x9, 0x9, 0x24, 0x4, 0x29, 0x3, 0x2, 0x24, 0xb, 0x60, 0x24, 0x1, 0x10, 0xb, 0x6, 0xb, 0x3, 0x12, 0x60, 0x4, 0xc, 0x1, 0x3, 0xc, 0x9, 0x2, 0x16, 0x11, 0x12, 0x48, 0x1]}]}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_60GHZ={0xa0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x2, 0xad, 0x5, 0x3, 0x800, 0x6, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1, 0x63, 0x80, 0x8000, 0x3ff, 0x8, 0x76a]}}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x7, 0x9}, {0x1, 0x4}, {}, {0x2, 0x2}, {0x3, 0x4}, {0x3, 0xa}, {0x1, 0xa}, {0x6, 0xa}, {0x6}, {0x4, 0xa}, {0x5, 0x2}, {0x0, 0x8}, {0x4, 0x5}, {0x2, 0x4}, {0x6, 0x7}, {0x2, 0x9}, {0x0, 0x4}, {0x3, 0x4}, {0x1, 0x5}, {0x0, 0x2}, {0x1, 0x4}, {0x2, 0x6}, {0x4, 0x2}, {0x2, 0x9}, {0x0, 0x2}, {0x7, 0x3}, {0x3}, {0x4, 0xa}, {0x6, 0x6}, {0x5, 0xa}, {0x4, 0x2}, {0x6, 0x4}, {0x2, 0x5}, {0x7, 0x6}, {0x6, 0x7}, {0x4, 0x9}, {0x1, 0x2}, {0x5, 0xa}, {0x2, 0x7}, {0x0, 0x3}, {0x6}, {0x7, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x74, 0x81, 0x1ff, 0xff00, 0x2, 0x80, 0xffff, 0x7]}}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x0, 0x8}, {0x4, 0x8}, {0x3, 0xa}, {0x5, 0xa}, {0x6, 0x2}, {0x2, 0x3}, {0x4, 0x1}, {0x4, 0x6}, {0x6, 0x3}, {0x1, 0x1}, {0x1, 0x6}, {0x1, 0x5}, {0x5, 0x9}, {0x1, 0x2}, {0x0, 0x4}, {0x7, 0x4}, {0x4, 0x3}, {0x6}, {0x1, 0x7}, {0x1}, {0x0, 0x7}, {0x5, 0x3}, {0x0, 0x8}, {0x2, 0x7}, {0x3, 0x1}, {0x0, 0x9}, {0x4, 0x8}, {0x6, 0x2}, {0x4, 0x4}, {0x7, 0x2}, {0x0, 0x3}, {0x2}, {0x1, 0xa}, {0x4, 0x7}, {0x0, 0x3}, {0x1, 0x6}]}]}, @NL80211_BAND_5GHZ={0xd4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x47, 0x2, [{0x4, 0x8}, {0x0, 0xa}, {0x3, 0x7}, {0x5, 0x3}, {0x5, 0x5}, {0x0, 0x6}, {0x7}, {0x6, 0x5}, {0x2, 0x2}, {0x4}, {0x0, 0x4}, {0x5, 0x1}, {0x4, 0x6}, {0x6, 0x9}, {0x6, 0x5}, {0x2, 0x2}, {0x0, 0x8}, {0x2, 0x8}, {0x3, 0x3}, {0x1, 0x6}, {0x4, 0x5}, {0x0, 0x9}, {0x3, 0x8}, {0x1, 0x3}, {0x4, 0xa}, {0x5, 0x1}, {0x7, 0x5}, {0x0, 0x7}, {0x5, 0x9}, {0x7, 0x4}, {0x1}, {0x2}, {0x7, 0x2}, {0x0, 0x4}, {0x0, 0xa}, {0x1, 0x2}, {0x2, 0x2}, {0x2, 0xa}, {0x2, 0x3}, {0x0, 0x9}, {0x4}, {0x1, 0x8}, {0x2, 0x5}, {0x0, 0x9}, {0x7, 0x5}, {0x6, 0x1}, {0x0, 0x6}, {0x6, 0x7}, {0x0, 0x1}, {0x3, 0xa}, {0x0, 0x3}, {0x5, 0x8}, {0x1, 0xa}, {0x3, 0x3}, {0x7, 0xa}, {0x7, 0x3}, {0x5, 0x6}, {0x3, 0x3}, {0x5}, {0x1, 0x3}, {0x5, 0x1}, {0x6}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0x4}, {0x1, 0x6}, {0x4}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x0, 0x3, 0x3, 0xfffc, 0x5, 0xef0b, 0x8]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x1, 0x4}, {0x5, 0x8}, {0x6, 0x5}, {0x2, 0x7}, {0x6, 0x8}, {0x5, 0x3}, {0x4}, {0x2, 0x6}, {0x7, 0x5}, {0x1, 0x6}, {0x7, 0x2}, {}, {0x3, 0xa}, {0x4, 0xa}, {0x0, 0x2}, {0x6, 0x5}, {0x7, 0x5}, {0x1, 0x1}, {0x6, 0x3}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x0, 0x3}, {0x6, 0xa}, {0x0, 0x3}, {}, {0x0, 0x3}, {0x0, 0x3}, {0x4, 0x8}, {0x7, 0x8}, {0x0, 0x7}, {0x1, 0x6}, {0x0, 0x5}, {0x4, 0x2}, {0x4, 0x6}, {0x1}, {0x7, 0x3}, {0x7, 0x5}, {0x4, 0x3}, {0x2, 0x2}]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x3, 0x16, 0xc, 0x12, 0x60, 0x30, 0x12, 0x30, 0x16, 0x12, 0x18, 0x43, 0x6c, 0xb]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x0, 0x3}, {0x1}, {0x5, 0xa}, {0x5, 0x2}, {0x0, 0x2}, {0x6}, {0x4, 0x8}, {0x3}, {0x6, 0x3}, {0x3, 0x2}, {0x7, 0x1}, {}, {0x5, 0x4}, {0x2, 0x4}, {0x0, 0x7}, {0x1, 0x1}, {}, {0x2, 0x7}, {0x4, 0x8}, {0x3, 0x9}, {0x0, 0x7}, {0x4, 0x5}, {0x0, 0x9}, {0x0, 0x5}, {0x1, 0x7}]}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x99, 0x2, 0x20, 0x8, 0x1, 0x6, 0x3d28, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x20, 0xfffd, 0x1, 0x9, 0x1, 0x2, 0x5]}}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x1, 0x9}, {0x5, 0x6}, {0x2, 0x1}, {0x6, 0x2}, {0x2}, {0x3, 0x1}, {0x1, 0x6}, {0x0, 0x6}, {0x1, 0x8}, {0x4, 0x9}, {0x5, 0x6}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x60, 0x3, 0xc, 0x36, 0xc, 0x7e, 0x18, 0x60, 0x30, 0xb, 0x36, 0x30, 0x36, 0x1b, 0xb, 0x4, 0x24, 0x6c, 0x6f, 0x16, 0x48, 0x6, 0x60, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x0, 0x4}, {0x7, 0xa}, {0x5, 0x1}, {0x0, 0x2}, {0x0, 0x3}, {0x3, 0x7}, {0x1, 0x1}, {0x0, 0x4}, {0x4, 0x5}, {0x3, 0x3}, {0x1, 0x8}, {0x6, 0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x8}, {0x5, 0x2}, {0x0, 0x6}, {0x1, 0x1}, {0x3}, {0x0, 0x3}, {0x3, 0x1}, {0x0, 0x4}, {0x6, 0x9}, {0x6, 0x9}, {0x6, 0x5}, {0x2, 0x2}, {0x6, 0x4}, {0x0, 0x2}, {0x4, 0x6}, {0x0, 0x6}, {0x3, 0xa}, {0x4, 0x1}, {0x1, 0x9}, {0x3, 0x5}, {0x4, 0x5}, {0x2, 0x5}, {0x6, 0x8}, {0x3, 0x2}, {0x0, 0x7}]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x4, 0x24, 0x1, 0x6c, 0x24, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6, 0x1, 0x80, 0x2, 0x5, 0x2, 0x9]}}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2f, 0x2, [{0x7, 0xa}, {0x6, 0x1}, {0x7, 0x4}, {0x2, 0x9}, {0x4, 0xa}, {0x5, 0x7}, {0x1, 0x6}, {0x1, 0xa}, {0x7, 0x5}, {0x1, 0x5}, {0x2, 0x7}, {0x0, 0xa}, {0x6, 0x9}, {0x5, 0x5}, {0x3, 0x3}, {0x1, 0x1}, {0x3, 0x2}, {0x3, 0x4}, {0x5, 0x3}, {0x4, 0x7}, {0x0, 0x1}, {0x1, 0x9}, {0x7, 0x6}, {0x7, 0x6}, {0x5}, {0x3, 0x3}, {0x6, 0x3}, {0x0, 0x3}, {0x6, 0x9}, {0x5, 0x7}, {0x7, 0xa}, {0x1, 0xa}, {0x4, 0x3}, {0x2, 0x3}, {0x3, 0x2}, {0x1, 0x5}, {0x6, 0x7}, {0x2, 0x3}, {0x5, 0x2}, {0x1, 0x4}, {0x6, 0x3}, {0x5, 0x7}, {0x5, 0xa}]}]}, @NL80211_BAND_5GHZ={0xcc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x18, 0x6, 0x4, 0x6, 0x6, 0x37, 0x1b, 0x24, 0x5, 0x6, 0x18, 0x6c, 0x6, 0x2, 0x1b, 0x2, 0x3, 0x18, 0x4, 0x6c, 0x4, 0x9, 0x5, 0x3, 0xb, 0x3, 0xb, 0x18, 0x6]}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x1, 0x2}, {0x4}, {0x0, 0x2}, {0x5, 0x4}, {0x3, 0x4}, {0x1, 0x9}, {0x5, 0x2}, {0x4, 0x3}, {0x1, 0x5}, {0x0, 0xa}, {0x1, 0x8}, {0x2, 0x5}, {0x3}, {0x5, 0x5}, {0x0, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x5}, {0x0, 0x1}, {0x5, 0xa}, {0x6, 0x3}, {0x6, 0x9}, {0x3, 0x7}, {0x2, 0xa}, {0x0, 0x5}, {0x4, 0x9}, {0x0, 0x3}, {0x1, 0x1}, {0x2, 0x6}, {0x0, 0x3}, {0x7, 0x9}, {0x7, 0x5}, {0x3}, {0x5, 0x2}, {0x7, 0x2}, {0x1}, {0x5, 0x4}, {0x3, 0x2}, {0x2, 0x4}, {0x1, 0x5}, {0x5, 0x7}, {0x0, 0x5}]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x9, 0x6c, 0x3, 0x12, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0x8, 0x0, 0x5, 0x2, 0x5, 0x4]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x1d, 0x12, 0x30, 0x48, 0x6c, 0x48, 0x6, 0xb, 0x1, 0x1, 0x24, 0x24, 0x9, 0x6c, 0x36, 0x9, 0x24, 0x4, 0x48]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x6c, 0x36, 0x1, 0x30, 0x9, 0xc, 0x60, 0x18, 0x36, 0x1b, 0x24, 0xc, 0x9, 0xb, 0x6, 0x1c, 0x3a, 0x9, 0x1, 0x50, 0x5, 0xc, 0x0, 0x3, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xa9a1, 0x3, 0x3, 0x8, 0x2, 0x1, 0x4c]}}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff7, 0x7, 0x8294, 0x5, 0x3, 0xf149, 0x20, 0x20]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x3, 0x1b, 0x30, 0x24, 0x1, 0x12, 0x2, 0x69, 0x1, 0x1, 0x18, 0x39, 0x48, 0x9, 0x6, 0x4, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xbf5d, 0xa6c5, 0x6, 0xd6a3, 0x7fff, 0x4, 0x7ff, 0x5]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x300, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x6}, {0x7}, {0x7, 0x1}, {0x7, 0xa}, {0x0, 0x5}, {0x0, 0x4}, {0x1, 0x1}, {0x2, 0x5}, {0x3}, {0x3, 0x6}, {0x2, 0x1}, {0x5, 0x2}, {0x1, 0x1}, {0x1, 0x3}, {0x3, 0x8}, {0x3, 0x5}, {0x1, 0x8}, {0x0, 0x3}]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x18, 0x18, 0x6, 0x6, 0x3, 0x24, 0x1, 0x36, 0x6, 0xc, 0x1b]}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x0, 0x1}, {0x2, 0x5}, {0x1, 0xa}, {0x6, 0x1}, {0x1, 0x5}, {0x4, 0x3}, {0x3, 0x7}, {0x0, 0x5}, {0x1, 0xa}, {0x0, 0x8}, {0x1, 0x2}, {0x4, 0x1}, {}, {0x5, 0x9}, {0x3, 0x2}, {0x4, 0x4}, {0x6, 0xa}, {0x7, 0x5}, {0x1, 0x8}]}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x4, 0x4}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x8}, {0x1, 0x2}, {0x7, 0x4}, {0x3, 0x5}, {0x4, 0x2}, {0x0, 0x7}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x8}, {0x2, 0x1}, {0x5, 0x7}, {0x6, 0x8}, {0x1, 0x4}, {0x6, 0x3}, {0x1, 0x5}, {0x4, 0x3}, {0x0, 0x6}, {0x7, 0x5}, {0x0, 0x2}, {0x1, 0x3}, {0x1, 0x2}, {0x4}, {0x5}, {0x1, 0x2}, {0x3, 0x5}, {0x5, 0x9}, {0x1, 0x7}, {0x7, 0x6}, {0x2, 0x6}, {0x5, 0x9}, {0x4, 0x4}, {0x6, 0x5}, {0x2, 0xa}, {0x6, 0x8}, {0x0, 0x4}, {0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7ff, 0x6, 0x1000, 0x7, 0x6, 0x6, 0x1]}}]}, @NL80211_BAND_2GHZ={0xd4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x60, 0x18, 0x4, 0x0, 0x1b, 0x2, 0x1b, 0x12, 0x9, 0x18, 0x60, 0xb, 0x36, 0x9, 0x4]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x60, 0x6, 0x1, 0x48, 0x18, 0x4, 0x9, 0x36, 0x36, 0x2, 0x1b, 0x18, 0x3, 0x4, 0x18, 0x48, 0x16, 0x30, 0x60, 0xb]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x4, 0x12, 0x2d, 0x30, 0x16, 0xb, 0xf1b0167ae87c2e4b, 0x3, 0x48, 0x18, 0x6c, 0x24, 0x12, 0x30, 0x24, 0x36, 0x6, 0x0, 0x6c, 0x1f, 0x6]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x3}, {0x2, 0x1}, {0x3}, {0x6, 0x7}, {0x1}, {0x7, 0x1}, {0x2, 0x8}, {0x2, 0x9}, {0x5, 0x7}, {0x0, 0xa}, {0x1, 0x8}, {0x6, 0x8}, {0x6, 0x9}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x8}, {0x7, 0x2}, {0x2, 0x5}, {0x1, 0x1}, {0x5, 0xa}, {0x0, 0x4}, {0x3, 0xa}, {0x2, 0x5}, {0x3}, {0x4, 0x2}, {0x0, 0x1}, {0x5, 0x9}]}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x2, 0x6}, {0x4, 0x5}, {0x6, 0x2}, {0x7, 0x6}, {0x0, 0x4}, {0x4}, {0x1, 0x3}, {0x0, 0x1}, {0x4, 0x9}, {0x0, 0x8}, {0x2, 0x8}, {0x7, 0x6}, {}, {0x2, 0x6}, {0x1, 0x1}, {0x5, 0x5}, {0x2, 0x7}, {0x1, 0x8}, {0x7, 0x2}, {0x4, 0x1}, {0x1, 0x8}, {0x6, 0xa}, {0x2, 0x2}, {0x0, 0x8}, {0x1, 0x8}, {0x4, 0x9}, {0x0, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1, 0xfff8, 0x0, 0x6, 0x8, 0xffee, 0x1f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f, 0x62c, 0x0, 0x1, 0x8795, 0x26bc, 0x4, 0xfffd]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x3, 0x2, 0x36, 0x74, 0x6, 0x1, 0x1, 0x4, 0x7]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0xb4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x60, 0xb, 0x5, 0x6c, 0x5, 0x36, 0x24, 0x4, 0x36, 0x36, 0x18, 0x18, 0x36, 0x6, 0x60, 0x6c, 0xb, 0x24, 0x0, 0x1b, 0x6c, 0x70cb6c9c5e884de8, 0x6, 0x2, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7ff, 0x3ff, 0x0, 0x0, 0x5, 0x2, 0x6]}}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x2, 0xa}, {0x4, 0x6}, {0x2, 0x4}, {0x1, 0x5}, {0x6, 0x8}, {0x5}, {0x1, 0x3}, {0x2}, {0x7, 0x2}, {0x3, 0x3}, {0x1, 0x5}, {0x3, 0x2}, {0x7, 0x4}, {0x6, 0x3}, {0x4, 0x7}, {0x4, 0xa}, {0x0, 0x7}, {0x0, 0x5}, {0x4}, {0x3, 0x8}, {0x1, 0x8}, {0x5, 0xa}, {0x6, 0x5}, {0x1, 0x8}, {0x2, 0x9}, {0x1, 0x8}, {0x4, 0x6}, {0x6, 0x1}, {0x1, 0x2}, {0x3, 0x4}, {0x3}, {0x2, 0x8}, {0x6, 0x3}, {0x4, 0x8}, {}, {0x3, 0x1}, {0x1, 0x6}, {0x5, 0x5}, {}, {0x5}, {0x5, 0x9}, {0x3, 0x3}]}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x1, 0xa}, {0x7, 0x4}, {0x1, 0x8}, {0x3, 0x7}, {0x5, 0x6}, {0x6}, {0x5, 0x2}, {0x7, 0x4}, {0x7, 0x6}, {0x7, 0x3}, {0x4, 0x9}, {0x7, 0x8}, {0x2}, {0x7, 0x7}, {0x6, 0x2}, {0x1, 0x2}, {0x2, 0x2}]}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x4, 0x9}, {}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x2}, {0x6, 0x6}, {0x0, 0x9}, {0x4, 0x8}, {0x4, 0x7}, {0x4, 0x1}, {0x0, 0x7}, {0x1, 0x5}, {0x6, 0x9}, {0x2}, {0x0, 0x2}, {0x3}, {0x4, 0x6}, {0x1, 0xa}, {0x1, 0x8}, {0x3, 0x8}, {0x5, 0x1}, {0x6, 0x3}, {0x1}, {0x2, 0x8}, {0x1, 0x6}, {0x4, 0x4}, {0x5, 0x4}, {0x2, 0x9}, {0x7, 0x4}, {0x4, 0x8}, {0x2, 0xa}, {0x1}, {0x7, 0x6}, {0x3, 0x8}, {0x3, 0x3}, {0x7}, {0x3, 0x5}, {0x1, 0x5}, {0x5, 0x6}, {0x2, 0x4}, {0x1}, {0x0, 0x9}, {0x0, 0xa}, {0x0, 0x5}, {0x0, 0x5}]}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x2, 0x3}, {0x6, 0x6}, {0x2, 0x8}, {0x1, 0x4}, {0x1, 0x4}, {0x5, 0x3}, {0x7}, {0x6, 0x9}, {0x6, 0x5}, {0x2}, {0x4}, {0x5, 0x5}, {0x7, 0x7}, {0x3, 0x6}, {0x2, 0x1}, {0x3, 0x2}, {0x3, 0x8}, {0x4, 0x5}, {0x1, 0x6}, {0x0, 0x3}, {0x1, 0xa}, {0x6, 0x6}, {0x1, 0x5}, {0x2, 0x5}, {0x2, 0x8}, {0x5, 0xa}, {0x7, 0x2}, {0x5, 0x4}]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0xf, 0x60, 0x30, 0x48, 0x1b, 0x60, 0x0, 0x1, 0x3, 0x18, 0x1b, 0x60, 0x6, 0x19, 0x3, 0x48, 0x18, 0x60, 0xc, 0x10, 0x18, 0x1, 0x18]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x24, 0x36, 0x1, 0x2, 0x4, 0x6, 0x18, 0x60, 0x13, 0x6, 0x36, 0x48, 0x0, 0x66, 0x48]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x60, 0x30, 0x16, 0x6c, 0x36, 0x60, 0xb, 0x6c, 0x0, 0x9, 0x48, 0x60, 0xc, 0x3, 0x16, 0x36, 0x4, 0x48, 0x6c, 0x30, 0x30, 0x9, 0x2, 0x1, 0x16, 0x4, 0x6, 0x2, 0x12]}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x6, 0x1}, {}, {0x6, 0x9}, {0x0, 0x6}, {0x3, 0x2}, {0x3, 0x1}, {0x4, 0x5}, {0x5, 0x4}, {0x2, 0x1}, {0x0, 0x8}, {0x6, 0x1}, {0x6}, {0x2, 0x6}, {0x7, 0x4}, {0x1, 0x8}, {0x5, 0x3}, {0x7, 0x7}, {0x7, 0x5}, {0x1, 0xa}, {0x0, 0x6}, {0x0, 0x9}, {0x0, 0x9}, {0x6, 0x6}, {0x3, 0x4}, {0x7, 0x4}, {0x1, 0x8}, {0x1, 0x9}, {0x6, 0x7}, {0x6, 0x4}, {0x0, 0x1}, {0x0, 0x4}, {0x1, 0x5}, {0x1, 0x6}, {0x2, 0x2}, {0x3}, {0x5, 0x3}, {}, {0x0, 0x4}, {0x0, 0x1}, {0x4, 0x1}]}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xc, 0x2, [{0x1, 0x2}, {0x1, 0x5}, {0x4, 0xa}, {0x2, 0x8}, {0x7, 0x9}, {0x0, 0x2}, {0x0, 0x7}, {0x7, 0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0xe22757175e2ce9be}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x48, 0x6c, 0x16, 0x3, 0x9]}]}]}, @NL80211_ATTR_TX_RATES={0x16c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xb8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x9, 0x18, 0xc, 0x2, 0x16, 0x3, 0x48, 0x48, 0x70, 0x2, 0x3, 0x18, 0x50, 0xc, 0x24, 0x6c, 0xbfd33159cdaa986, 0x1, 0x16, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x43, 0x1, 0x5, 0x8001, 0x7, 0x800, 0x1c5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xdf, 0xffff, 0x64b, 0x8, 0x3, 0x4, 0x2, 0x3]}}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x3, 0x9}, {0x6, 0x9}, {0x2, 0x2}, {0x5, 0x8}, {0x2, 0x6}, {0x0, 0x8}, {0x3}, {0x3, 0x8}, {0x5, 0x9}, {0x0, 0x7}, {0x3, 0x3}, {0x3, 0x2}, {0x7, 0x8}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x1}, {0x1, 0x7}, {0x1, 0x8}, {0x2, 0x3}, {0x0, 0x2}, {0x4}, {0x1, 0x7}, {0x5, 0x1}, {0x5, 0x5}, {0x7, 0x6}, {0x3, 0x5}, {0x6, 0x9}, {0x2, 0x5}, {0x5}, {0x5, 0x7}, {0x0, 0x4}, {0x3, 0x7}, {0x4, 0x6}, {0x2, 0x8}, {0x3, 0x8}, {0x3, 0x6}, {0x6, 0x3}, {0x0, 0xa}, {0x6, 0x6}, {0x1, 0xa}, {0x2, 0x4}, {0x0, 0x3}, {0x1}, {0x3, 0x8}, {0x5, 0x9}, {0x1, 0x3}, {0x5, 0x2}, {0x6, 0x2}, {0x6}, {0x1, 0x9}, {0x1, 0x6}, {0x5, 0x8}, {0x4, 0x4}, {0x2, 0x5}, {0x4, 0x6}, {0x3}, {0x3, 0x3}, {0x7, 0x9}, {0x0, 0xa}, {0x1, 0xa}, {0x3, 0x3}, {0x0, 0x3}, {0x7, 0x1}, {0x1, 0x5}, {0x0, 0x4}, {0x0, 0x6}, {0x3}, {0x4, 0x4}, {0x4, 0x8}, {0x1, 0x3}, {0x0, 0x3}, {0x5, 0xa}]}]}, @NL80211_BAND_6GHZ={0xb0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x5}, {0x5, 0x5}, {0x1, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x0, 0x5}, {0x5, 0x7}, {0x3, 0x5}, {0x0, 0x9}, {0x7, 0xa}, {0x2}, {0x0, 0x2}, {0x1, 0xa}, {0x1, 0x6}, {0x2, 0x7}, {0x3, 0x1}, {0x0, 0x7}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x6, 0x9}, {0x4, 0x2}, {0x7, 0xa}, {0x3, 0x9}, {0x1, 0xa}, {0x0, 0x4}, {0x5, 0x5}, {0x0, 0x5}, {0x6}, {0x0, 0x7}, {0x0, 0x5}, {0x0, 0x9}, {0x0, 0x7}, {0x2, 0x9}, {0x3, 0x4}, {0x5, 0x2}, {0x1, 0x2}, {0x1, 0x2}, {0x4, 0x3}, {0x7, 0x6}, {0x6}, {0x6, 0x7}, {0x0, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x1, 0x4, 0x400, 0x6, 0x80, 0x20, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7e0, 0xea1, 0x400, 0xe18c, 0x7ff, 0x2, 0x8]}}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x7, 0x5}, {0x0, 0xa}, {0x5, 0x2}, {0x6, 0xa}, {0x3, 0x5}, {0x7}, {0x6}, {0x7}, {0x6, 0x5}, {0x0, 0x7}, {0x6, 0x9}, {0x5, 0x7}, {0x7, 0x1}, {0x1}, {0x6, 0x8}, {0x6, 0x6}, {0x5, 0x6}, {0x2, 0x4}, {0x5, 0x8}, {0x5, 0x4}, {0x4, 0x4}, {0x4, 0x6}, {0x4, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x2, 0x8}, {0x6, 0x2}, {0x0, 0x2}, {0x6}, {0x7, 0xa}, {0x0, 0x3}, {0x4, 0x2}, {0x5, 0x1}, {0x6, 0x6}, {0x3, 0x4}, {0x0, 0x9}, {0x0, 0x9}, {0x1, 0x7}, {0x6, 0xa}, {0x3, 0x8}, {0x7, 0x3}, {0x4, 0x8}, {0x1, 0x7}, {0x0, 0x9}, {0x5, 0x5}, {0x5, 0x7}, {0x2, 0x4}, {0x5, 0x8}, {0x0, 0x2}, {}, {0x1}, {0x1, 0x6}, {0x5, 0x2}, {0x1, 0x8}, {0x2, 0x6}, {0x7, 0x7}, {0x1, 0x7}, {0x7, 0x1}, {0x4, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x86c}, 0x1, 0x0, 0x0, 0x24002000}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r10, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x5, 0x24}}}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x800, 0x3, 0x7, 0x0, {0x81, 0x1, 0x0, 0x7, 0x0, 0x0, 0x1, 0x3}, 0x1, 0x6, 0x4}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x20000081) 11:59:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0xf000, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 11:59:07 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 53) tgkill(r0, r1, 0xb) 11:59:07 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x69) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000140)=@v1={0x1000000, [{0x0, 0x3}]}, 0xc, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x1) 11:59:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0140000000000000d600008163ad6900001986d372a8d9280800", @ANYRES32=r3, @ANYBLOB="080026006c0900000800b70000000000"], 0x2c}}, 0x0) 11:59:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x9effffff, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:59:07 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x12, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 11:59:07 executing program 7: msgctl$MSG_STAT(0x0, 0x2, &(0x7f0000000280)=""/79) 11:59:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x3, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:59:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0xff00, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) [ 765.851361] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 765.893984] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 11:59:19 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 54) tgkill(r0, r1, 0xb) 11:59:19 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x13, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 11:59:19 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x12, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 11:59:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x30000, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 11:59:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0xed000000, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:59:19 executing program 7: msgctl$MSG_STAT(0x0, 0x3, &(0x7f0000000280)=""/79) 11:59:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x3c, r1, 0x1, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x3c}}, 0x0) 11:59:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x7, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 776.926838] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode 11:59:19 executing program 7: msgctl$MSG_STAT(0x0, 0xc, &(0x7f0000000280)=""/79) [ 776.950451] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 776.963370] FAULT_INJECTION: forcing a failure. [ 776.963370] name failslab, interval 1, probability 0, space 0, times 0 [ 776.964306] CPU: 0 UID: 0 PID: 7182 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 776.964322] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 776.964330] Call Trace: [ 776.964334] [ 776.964339] dump_stack_lvl+0xfa/0x120 [ 776.964366] should_fail_ex+0x4d7/0x5e0 [ 776.964390] should_failslab+0xc2/0x120 [ 776.964405] kmem_cache_alloc_lru_noprof+0x73/0x3c0 [ 776.964427] ? sock_alloc_inode+0x27/0x1d0 [ 776.964443] ? perf_trace_lock_acquire+0xc9/0x700 [ 776.964462] sock_alloc_inode+0x27/0x1d0 [ 776.964476] ? __pfx_sock_alloc_inode+0x10/0x10 [ 776.964490] alloc_inode+0x67/0x250 [ 776.964506] sock_alloc+0x40/0x270 [ 776.964522] sock_create_lite+0x83/0x120 [ 776.964538] __netlink_kernel_create+0xba/0x7c0 [ 776.964555] ? __pfx___netlink_kernel_create+0x10/0x10 [ 776.964571] ? __pfx_perf_trace_lock+0x10/0x10 [ 776.964588] rtnetlink_net_init+0xb9/0x150 [ 776.964611] ? __pfx_rtnetlink_net_init+0x10/0x10 [ 776.964629] ? lockdep_init_map_type+0x4b/0x240 [ 776.964643] ? __pfx_rtnetlink_rcv+0x10/0x10 [ 776.964659] ? __pfx_rtnetlink_bind+0x10/0x10 [ 776.964677] ? lockdep_init_map_type+0x4b/0x240 [ 776.964691] ? __pfx_netlink_tap_init_net+0x10/0x10 [ 776.964702] ? debug_mutex_init+0x37/0x70 [ 776.964721] ? __pfx_rtnetlink_net_init+0x10/0x10 [ 776.964738] ops_init+0x1e1/0x650 [ 776.964757] setup_net+0x10d/0x320 [ 776.964769] ? lockdep_init_map_type+0x4b/0x240 [ 776.964783] ? __pfx_setup_net+0x10/0x10 [ 776.964799] ? debug_mutex_init+0x37/0x70 [ 776.964819] copy_net_ns+0x2e3/0x650 [ 776.964837] create_new_namespaces+0x3f6/0xab0 [ 776.964861] copy_namespaces+0x45c/0x580 [ 776.964879] copy_process+0x26d5/0x73e0 [ 776.964891] ? __pfx_perf_trace_lock+0x10/0x10 [ 776.964915] ? __pfx_copy_process+0x10/0x10 [ 776.964926] ? __might_fault+0xe0/0x190 [ 776.964945] ? _copy_from_user+0x5b/0xd0 [ 776.964962] kernel_clone+0xea/0x7f0 [ 776.964973] ? get_pid_task+0xfd/0x250 [ 776.964992] ? __pfx_kernel_clone+0x10/0x10 [ 776.965002] ? perf_trace_lock+0xb5/0x5d0 [ 776.965021] ? find_held_lock+0x2b/0x80 [ 776.965038] ? ksys_write+0x121/0x240 [ 776.965050] ? lock_is_held_type+0x9e/0x120 [ 776.965071] __do_sys_clone3+0x1f5/0x280 [ 776.965082] ? __pfx___do_sys_clone3+0x10/0x10 [ 776.965106] ? __fget_files+0x20d/0x3b0 [ 776.965129] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 776.965149] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 776.965169] ? ksys_write+0x1a3/0x240 [ 776.965180] ? __pfx_ksys_write+0x10/0x10 [ 776.965199] do_syscall_64+0xbf/0x360 [ 776.965219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.965232] RIP: 0033:0x7ffb744edb19 [ 776.965241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 776.965253] RSP: 002b:00007ffb71a63188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 776.965265] RAX: ffffffffffffffda RBX: 00007ffb74600f60 RCX: 00007ffb744edb19 [ 776.965273] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 776.965280] RBP: 00007ffb71a631d0 R08: 0000000000000000 R09: 0000000000000000 [ 776.965287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 776.965294] R13: 00007ffeb487a35f R14: 00007ffb71a63300 R15: 0000000000022000 [ 776.965314] [ 776.970329] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 777.013406] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 777.014499] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 11:59:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x5d}}}}, [@NL80211_ATTR_BSS_SELECT={0x30, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x7}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x10001}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x50}, 0x8080) 11:59:19 executing program 7: msgctl$MSG_STAT(0x0, 0xd, &(0x7f0000000280)=""/79) 11:59:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x9, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:59:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0xf0ffffff, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:59:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x80000, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 11:59:19 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x14, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) [ 777.178933] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 777.189694] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 777.204164] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 11:59:30 executing program 7: read$ptp(0xffffffffffffffff, &(0x7f0000000000)=""/161, 0xa1) 11:59:30 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x16, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 11:59:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0xf0ffff, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 11:59:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x66, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:59:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0xfffff000, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:59:30 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x3c, r1, 0x1, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x3c}}, 0x0) 11:59:30 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 55) tgkill(r0, r1, 0xb) [ 787.932328] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode 11:59:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0xffffff7f, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 787.983820] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 788.009567] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode 11:59:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0xffffff9e, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 788.069956] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 11:59:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x1000000, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 11:59:30 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x14, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 11:59:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x74, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:59:30 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 56) tgkill(r0, r1, 0xb) 11:59:30 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x17, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) [ 788.179586] FAULT_INJECTION: forcing a failure. [ 788.179586] name failslab, interval 1, probability 0, space 0, times 0 [ 788.179946] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 788.180834] CPU: 0 UID: 0 PID: 7254 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 788.180854] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 788.180863] Call Trace: [ 788.180868] [ 788.180873] dump_stack_lvl+0xfa/0x120 [ 788.180901] should_fail_ex+0x4d7/0x5e0 [ 788.180926] ? security_inode_alloc+0x3e/0x130 [ 788.180943] should_failslab+0xc2/0x120 [ 788.180959] kmem_cache_alloc_noprof+0x5f/0x3d0 [ 788.180982] ? lockdep_init_map_type+0x4b/0x240 [ 788.181004] security_inode_alloc+0x3e/0x130 [ 788.181021] inode_init_always_gfp+0xc94/0xff0 [ 788.181040] alloc_inode+0x8d/0x250 [ 788.181057] sock_alloc+0x40/0x270 [ 788.181076] sock_create_lite+0x83/0x120 [ 788.181096] __netlink_kernel_create+0xba/0x7c0 [ 788.181114] ? __pfx___netlink_kernel_create+0x10/0x10 [ 788.181133] ? __pfx_perf_trace_lock+0x10/0x10 [ 788.181153] rtnetlink_net_init+0xb9/0x150 [ 788.181174] ? __pfx_rtnetlink_net_init+0x10/0x10 [ 788.181195] ? lockdep_init_map_type+0x4b/0x240 [ 788.181210] ? __pfx_rtnetlink_rcv+0x10/0x10 [ 788.181228] ? __pfx_rtnetlink_bind+0x10/0x10 [ 788.181249] ? lockdep_init_map_type+0x4b/0x240 [ 788.181264] ? __pfx_netlink_tap_init_net+0x10/0x10 [ 788.181277] ? debug_mutex_init+0x37/0x70 [ 788.181300] ? __pfx_rtnetlink_net_init+0x10/0x10 [ 788.181319] ops_init+0x1e1/0x650 [ 788.181340] setup_net+0x10d/0x320 [ 788.181354] ? lockdep_init_map_type+0x4b/0x240 [ 788.181370] ? __pfx_setup_net+0x10/0x10 [ 788.181388] ? debug_mutex_init+0x37/0x70 [ 788.181411] copy_net_ns+0x2e3/0x650 [ 788.181430] create_new_namespaces+0x3f6/0xab0 [ 788.181457] copy_namespaces+0x45c/0x580 [ 788.181477] copy_process+0x26d5/0x73e0 [ 788.181492] ? __pfx_perf_trace_lock+0x10/0x10 [ 788.181519] ? __pfx_copy_process+0x10/0x10 [ 788.181532] ? __might_fault+0xe0/0x190 [ 788.181553] ? _copy_from_user+0x5b/0xd0 [ 788.181573] kernel_clone+0xea/0x7f0 [ 788.181584] ? get_pid_task+0xfd/0x250 [ 788.181612] ? __pfx_kernel_clone+0x10/0x10 [ 788.181623] ? perf_trace_lock+0xb5/0x5d0 [ 788.181645] ? find_held_lock+0x2b/0x80 [ 788.181663] ? ksys_write+0x121/0x240 [ 788.181677] ? lock_is_held_type+0x9e/0x120 [ 788.181700] __do_sys_clone3+0x1f5/0x280 [ 788.181714] ? __pfx___do_sys_clone3+0x10/0x10 [ 788.181741] ? __fget_files+0x20d/0x3b0 [ 788.181767] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 788.181789] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 788.181812] ? ksys_write+0x1a3/0x240 [ 788.181825] ? __pfx_ksys_write+0x10/0x10 [ 788.181846] do_syscall_64+0xbf/0x360 [ 788.181869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.181884] RIP: 0033:0x7ffb744edb19 [ 788.181894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 788.181907] RSP: 002b:00007ffb71a63188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 788.181920] RAX: ffffffffffffffda RBX: 00007ffb74600f60 RCX: 00007ffb744edb19 [ 788.181929] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 788.181937] RBP: 00007ffb71a631d0 R08: 0000000000000000 R09: 0000000000000000 [ 788.181947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 788.181955] R13: 00007ffeb487a35f R14: 00007ffb71a63300 R15: 0000000000022000 [ 788.181977] 11:59:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0xfffffff0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 788.215718] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 788.220179] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 788.228393] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 788.231971] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode 11:59:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x2000000, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 11:59:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 788.245483] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 11:59:30 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 57) tgkill(r0, r1, 0xb) 11:59:40 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 58) tgkill(r0, r1, 0xb) 11:59:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x3000000, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 11:59:40 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x18, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 11:59:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0xffffffff, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:59:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x2, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:59:40 executing program 7: mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x41) msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000280)=""/79) r0 = msgget$private(0x0, 0x408) msgsnd(r0, &(0x7f0000000000)={0x0, "ba7d94676e78410a38f1a2d6f04d02de587b927022cb4f454a019359e23dc17f43be02db20a2d77d76db0eb6f59e086468443b36720ebe279e8750393b4e7452fc79f3f424ba2466de0a36210981fd312a929877015d4d13be908043a4ce47e78523f4c71d394eb601b83552a8d913bd5b5d3d93dd2057f17c15cd4ededa54ba5b1c9870df3da8a71a02f8b5057c69966673e5f19a4a36"}, 0x9f, 0x0) msgctl$IPC_RMID(0xffffffffffffffff, 0x0) r1 = msgget(0x2, 0x200) msgrcv(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007dba4e57a264eaaf00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007a68af5fe28f7ce55e3a8b5180caf830ccd9620d512919cb8374e7df9fed3a88728eafcb902d1e6b2aaba3ef98e4531f7e481fb589de4d633b1ba956aaa7d607a649c49bdfc7f309a8f0e886d2db9e29598a14ece665bba13f3fa9031dd25f2ebf1c837615114f6e4957b6514b8b97417622c7775175fc73df9934465744eff0d30e7e8f15d4ae864d615061c8c231d9d5d97cae92acd1c36366b87a838152e31eea8817d77c164bf951e76d62152d4895"], 0x103, 0x3, 0x3000) msgsnd(r1, &(0x7f0000000280)={0x2}, 0x8, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setregid(r3, 0x0) msgrcv(r0, &(0x7f0000000140)={0x0, ""/144}, 0x98, 0x0, 0x1000) r4 = fork() ptrace(0x10, r4) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x8, 0x5, 0x9, 0x0, 0x1f, 0x14000, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x10001, 0x1, @perf_bp={&(0x7f0000000000), 0x1}, 0xb400, 0x0, 0x8, 0x0, 0xa4d, 0x3, 0x1, 0x0, 0x1}, r4, 0x8, 0xffffffffffffffff, 0x1) msgctl$IPC_SET(r1, 0x1, &(0x7f00000000c0)={{0x1, 0xee01, r3, 0xee01, 0xee00, 0xc1, 0x8}, 0x0, 0x0, 0x6, 0xfffffffffffffffc, 0x2, 0x80000001, 0xcd3, 0x3, 0x8a0e, 0x5, r4, 0xffffffffffffffff}) [ 797.968536] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode 11:59:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xd4, r2, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0x4}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0xfffffffb}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xb1a}, {0x6}, {0x8, 0x13, 0x8}, {0x5, 0x14, 0x1}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x44}, 0x40090) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000efffffff650000000800c982", @ANYRES32=r5, @ANYBLOB="280026006c0900000800b70000000000f377663379fe12aeaabc436d85cc0776619301b3ae9cdf9415f5de9fbc41bacad980f04837451c9f1f4e2d2a388e38ee5f527e603102c5384a76f1137fc6259d922714eb5bb2ac06c4cb789a1644810e8f1766c86237b77e949996514dffa2414c45feb1dddbded5f7d92443504ddd0674b432b7cefa08eec36b65b21a8f226287415c"], 0x2c}}, 0x0) r6 = openat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x80, 0x8, 0x11}, 0x18) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c003f08b0", @ANYRES16=r7, @ANYBLOB="00082bbd7000fbdbdf2517000000180005800c00028008000100030000000800010065746800100004800900010073797a3100000000", @ANYRESHEX], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0xc000) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r8) ioctl$FS_IOC_READ_VERITY_METADATA(r6, 0xc0286687, &(0x7f0000000280)={0x3, 0x9, 0x72, &(0x7f0000000400)=""/114}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r9 = creat(&(0x7f0000000340)='./file1\x00', 0x10) sendmsg$NL80211_CMD_GET_SURVEY(r9, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r3, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 11:59:40 executing program 6: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) close_range(r0, r1, 0x2) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = fork() ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x0, &(0x7f00000009c0)) r7 = fork() r8 = fork() ptrace(0x10, r8) ptrace$setregs(0xd, r8, 0x0, &(0x7f00000009c0)) ptrace(0x10, r8) ptrace$setregs(0xd, r7, 0x0, &(0x7f00000009c0)) kcmp(r6, r7, 0x6, r0, r0) getpeername(r5, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f00000000c0)=0x80) finit_module(r9, &(0x7f0000000100)='$+-', 0x1) [ 797.983886] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 797.991450] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode 11:59:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0xf, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 798.005950] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 11:59:40 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x80000, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) [ 798.050056] FAULT_INJECTION: forcing a failure. [ 798.050056] name failslab, interval 1, probability 0, space 0, times 0 [ 798.052072] CPU: 0 UID: 0 PID: 7297 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 798.052104] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 798.052118] Call Trace: [ 798.052127] [ 798.052136] dump_stack_lvl+0xfa/0x120 [ 798.052183] should_fail_ex+0x4d7/0x5e0 [ 798.052228] ? sk_prot_alloc+0x157/0x280 [ 798.052260] should_failslab+0xc2/0x120 [ 798.052289] __kmalloc_noprof+0xb4/0x4b0 [ 798.052325] ? __pfx_selinux_socket_post_create+0x10/0x10 [ 798.052375] sk_prot_alloc+0x157/0x280 [ 798.052411] sk_alloc+0x34/0xbd0 [ 798.052439] __netlink_create+0x5d/0x280 [ 798.052480] __netlink_kernel_create+0xea/0x7c0 [ 798.052511] ? __pfx___netlink_kernel_create+0x10/0x10 [ 798.052543] ? __pfx_perf_trace_lock+0x10/0x10 [ 798.052579] rtnetlink_net_init+0xb9/0x150 [ 798.052623] ? __pfx_rtnetlink_net_init+0x10/0x10 [ 798.052659] ? lockdep_init_map_type+0x4b/0x240 [ 798.052687] ? __pfx_rtnetlink_rcv+0x10/0x10 [ 798.052720] ? __pfx_rtnetlink_bind+0x10/0x10 [ 798.052756] ? lockdep_init_map_type+0x4b/0x240 [ 798.052784] ? __pfx_netlink_tap_init_net+0x10/0x10 [ 798.052805] ? debug_mutex_init+0x37/0x70 [ 798.052845] ? __pfx_rtnetlink_net_init+0x10/0x10 [ 798.052878] ops_init+0x1e1/0x650 [ 798.052914] setup_net+0x10d/0x320 [ 798.052939] ? lockdep_init_map_type+0x4b/0x240 [ 798.052967] ? __pfx_setup_net+0x10/0x10 [ 798.052999] ? debug_mutex_init+0x37/0x70 [ 798.053039] copy_net_ns+0x2e3/0x650 [ 798.053074] create_new_namespaces+0x3f6/0xab0 [ 798.053119] copy_namespaces+0x45c/0x580 [ 798.053156] copy_process+0x26d5/0x73e0 [ 798.053179] ? __pfx_perf_trace_lock+0x10/0x10 [ 798.053227] ? __pfx_copy_process+0x10/0x10 [ 798.053250] ? __might_fault+0xe0/0x190 [ 798.053287] ? _copy_from_user+0x5b/0xd0 [ 798.053320] kernel_clone+0xea/0x7f0 [ 798.053341] ? get_pid_task+0xfd/0x250 [ 798.053379] ? __pfx_kernel_clone+0x10/0x10 [ 798.053399] ? perf_trace_lock+0xb5/0x5d0 [ 798.053437] ? find_held_lock+0x2b/0x80 [ 798.053470] ? ksys_write+0x121/0x240 [ 798.053494] ? lock_is_held_type+0x9e/0x120 [ 798.053534] __do_sys_clone3+0x1f5/0x280 [ 798.053557] ? __pfx___do_sys_clone3+0x10/0x10 [ 798.053604] ? __fget_files+0x20d/0x3b0 [ 798.053652] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 798.053690] ? fput+0x6a/0x100 [ 798.053718] ? ksys_write+0x1a3/0x240 [ 798.053740] ? __pfx_ksys_write+0x10/0x10 [ 798.053778] do_syscall_64+0xbf/0x360 [ 798.053817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.053841] RIP: 0033:0x7ffb744edb19 [ 798.053860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 798.053882] RSP: 002b:00007ffb71a63188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 798.053905] RAX: ffffffffffffffda RBX: 00007ffb74600f60 RCX: 00007ffb744edb19 [ 798.053922] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 798.053936] RBP: 00007ffb71a631d0 R08: 0000000000000000 R09: 0000000000000000 [ 798.053950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 798.053963] R13: 00007ffeb487a35f R14: 00007ffb71a63300 R15: 0000000000022000 [ 798.054003] 11:59:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x4000000, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) [ 798.139923] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 798.171438] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 798.181184] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 798.205368] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 798.238201] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 798.317009] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 11:59:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:59:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x3, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:59:52 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1c, 0x3f}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2a}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x45}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x7e}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x200, 0x3c}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x40}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xbf}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x66}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x9}]}]}, 0x7c}}, 0x20048880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x28}}, 0x0) r5 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r2, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xc8}, @NL80211_ATTR_STA_VLAN={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000044}, 0x40010) r6 = msgget$private(0x0, 0x80) msgctl$MSG_STAT(r6, 0xb, &(0x7f0000000280)=""/79) 11:59:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0900000800b70000000000"], 0x2c}}, 0x0) r4 = signalfd(r0, &(0x7f0000000080)={[0xffffffffffffffff]}, 0x8) setsockopt$inet6_int(r4, 0x29, 0x10, &(0x7f00000000c0)=0x2, 0x4) 11:59:52 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x2, 0x6, @multicast}, 0x10) 11:59:52 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 59) tgkill(r0, r1, 0xb) 11:59:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x5000000, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 11:59:52 executing program 6: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ff9000/0x7000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xd) [ 809.986311] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 809.992254] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode [ 810.008129] mac80211_hwsim hwsim17 wlan1: left allmulticast mode [ 810.009071] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 810.031156] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 810.038021] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode 11:59:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x6000000, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) [ 810.058650] mac80211_hwsim hwsim17 wlan1: left allmulticast mode [ 810.059485] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 11:59:52 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000003686dee11022a9fcf8ec3c1fb83184cf4a5d67fb609c2b4e5b91d30bd95fa784fa3477b5f902490e36c2134fcbdd3e6c274ec1b418ee5e9bdd027bf2a1f7718b78347790a97c624b3437ba1aa4707ee33e314fc21fa0a60ecfc0a861e842714e3235a4781c2abd655190f7bae52a91d680d3f3ccc8c8e890d5828405011ae5", @ANYRES16=r1, @ANYBLOB="fbffffff00000000001501"], 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x7c, r1, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x20}, @NL80211_ATTR_SCAN_FREQUENCIES={0x44, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x9}, {0x8, 0x0, 0xbe00}, {0x8, 0x0, 0x6}, {0x8, 0x0, 0x6}, {0x8, 0x0, 0x3f}, {0x8, 0x0, 0xe7}, {0x8, 0x0, 0xffffff3b}, {0x8, 0x0, 0x80}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xe, 0xd6}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x3ff}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xff}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000801}, 0x20000814) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) 11:59:52 executing program 7: delete_module(&(0x7f0000000000)=',\x00', 0x200) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/79) 11:59:52 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x5, 0x6, @multicast}, 0x10) 11:59:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x22, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:59:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 11:59:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/raw6\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) fcntl$notify(r5, 0x402, 0x10) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x7, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3e}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040041) pread64(r4, &(0x7f0000000140)=""/217, 0xd9, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40081}, 0x20048080) [ 810.261260] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 810.278818] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.5'. [ 810.296835] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 11:59:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x7000000, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) [ 810.318083] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.5'. 11:59:52 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 60) tgkill(r0, r1, 0xb) 11:59:52 executing program 7: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x90, r0, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x381}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x145}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f3}]]}, 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x20000884) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r1, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0xc000) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/79) 11:59:52 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x7, 0x6, @multicast}, 0x10) 11:59:52 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x7fffffff, 0xffffffffffffffc1, 0x89}) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/raw6\x00') pread64(r2, &(0x7f0000000140)=""/217, 0xd9, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/raw6\x00') pread64(r3, &(0x7f0000000140)=""/217, 0xd9, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000240)='net/raw6\x00') perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xf7, 0xf1, 0x9, 0xe0, 0x0, 0x7ff, 0x20, 0xa, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffffff9, 0x4, @perf_bp={&(0x7f0000000080), 0x5}, 0x4000, 0xffff, 0x3, 0x1, 0x1, 0x96, 0x81, 0x0, 0xffffffdc, 0x0, 0x91e}, 0xffffffffffffffff, 0xb, r2, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) sendfile(r1, r0, 0x0, 0x3) 11:59:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x9000000, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 11:59:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x25, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 810.459521] FAULT_INJECTION: forcing a failure. [ 810.459521] name failslab, interval 1, probability 0, space 0, times 0 [ 810.460682] CPU: 0 UID: 0 PID: 7395 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 810.460700] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 810.460709] Call Trace: [ 810.460714] [ 810.460719] dump_stack_lvl+0xfa/0x120 [ 810.460750] should_fail_ex+0x4d7/0x5e0 [ 810.460778] ? security_sk_alloc+0x101/0x160 [ 810.460794] should_failslab+0xc2/0x120 [ 810.460811] __kmalloc_noprof+0xb4/0x4b0 [ 810.460832] ? __kasan_kmalloc+0x7f/0x90 [ 810.460848] ? trace_kmalloc+0x1f/0xb0 [ 810.460868] security_sk_alloc+0x101/0x160 [ 810.460885] sk_prot_alloc+0x20b/0x280 [ 810.460907] sk_alloc+0x34/0xbd0 [ 810.460923] __netlink_create+0x5d/0x280 [ 810.460947] __netlink_kernel_create+0xea/0x7c0 [ 810.460964] ? __pfx___netlink_kernel_create+0x10/0x10 [ 810.460982] ? __pfx_perf_trace_lock+0x10/0x10 [ 810.461003] rtnetlink_net_init+0xb9/0x150 [ 810.461025] ? __pfx_rtnetlink_net_init+0x10/0x10 [ 810.461046] ? lockdep_init_map_type+0x4b/0x240 [ 810.461063] ? __pfx_rtnetlink_rcv+0x10/0x10 [ 810.461081] ? __pfx_rtnetlink_bind+0x10/0x10 [ 810.461101] ? lockdep_init_map_type+0x4b/0x240 [ 810.461116] ? __pfx_netlink_tap_init_net+0x10/0x10 [ 810.461129] ? debug_mutex_init+0x37/0x70 [ 810.461151] ? __pfx_rtnetlink_net_init+0x10/0x10 [ 810.461170] ops_init+0x1e1/0x650 [ 810.461191] setup_net+0x10d/0x320 [ 810.461206] ? lockdep_init_map_type+0x4b/0x240 [ 810.461221] ? __pfx_setup_net+0x10/0x10 [ 810.461239] ? debug_mutex_init+0x37/0x70 [ 810.461262] copy_net_ns+0x2e3/0x650 [ 810.461282] create_new_namespaces+0x3f6/0xab0 [ 810.461308] copy_namespaces+0x45c/0x580 [ 810.461329] copy_process+0x26d5/0x73e0 [ 810.461343] ? __pfx_perf_trace_lock+0x10/0x10 [ 810.461370] ? __pfx_copy_process+0x10/0x10 [ 810.461383] ? __might_fault+0xe0/0x190 [ 810.461405] ? _copy_from_user+0x5b/0xd0 [ 810.461424] kernel_clone+0xea/0x7f0 [ 810.461436] ? get_pid_task+0xfd/0x250 [ 810.461458] ? __pfx_kernel_clone+0x10/0x10 [ 810.461469] ? perf_trace_lock+0xb5/0x5d0 [ 810.461490] ? find_held_lock+0x2b/0x80 [ 810.461509] ? ksys_write+0x121/0x240 [ 810.461523] ? lock_is_held_type+0x9e/0x120 [ 810.461545] __do_sys_clone3+0x1f5/0x280 [ 810.461558] ? __pfx___do_sys_clone3+0x10/0x10 [ 810.461585] ? __fget_files+0x20d/0x3b0 [ 810.461617] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 810.461639] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 810.461662] ? ksys_write+0x1a3/0x240 [ 810.461674] ? __pfx_ksys_write+0x10/0x10 [ 810.461695] do_syscall_64+0xbf/0x360 [ 810.461717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.461731] RIP: 0033:0x7ffb744edb19 [ 810.461742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 810.461755] RSP: 002b:00007ffb71a63188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 810.461768] RAX: ffffffffffffffda RBX: 00007ffb74600f60 RCX: 00007ffb744edb19 [ 810.461778] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 810.461786] RBP: 00007ffb71a631d0 R08: 0000000000000000 R09: 0000000000000000 [ 810.461794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 810.461802] R13: 00007ffeb487a35f R14: 00007ffb71a63300 R15: 0000000000022000 [ 810.461824] [ 810.491161] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 810.511960] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 810.527247] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 810.542051] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 11:59:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000228bd7000fbdbdf256b0000000c00990001000000600052f60a000600ffffffffffff00000a001a00ffffffffffff00000a000600ffffffffffff00000a001a0008021100000100000a000600ffffffffffff00000a001a0008021100000100000a001a000802110000010000"], 0x74}}, 0x20000040) [ 810.609574] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.5'. [ 810.633026] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.5'. 12:00:02 executing program 7: msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000000)=""/67) 12:00:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x5, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:00:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0xf000000, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:00:02 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 61) tgkill(r0, r1, 0xb) 12:00:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x66, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:00:02 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e) close_range(r1, r2, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, 0x1, 0x4, 0x3, 0x0, 0x0, {}, [@NFULA_CFG_NLBUFSIZ={0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}}, 0x0) 12:00:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0xffffffffffffffdd, r1, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip_vti0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5f1}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}]}]}, @TIPC_NLA_NODE={0x184, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "641637a715db4ecd13c4627701901fdb8cfdfceda98fc808cc6a4d146512323d"}}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "5852389d2a607b96d302d312036b0e6c3af9bbd0bcee6c354b32b219ec1e81ef6807"}}, @TIPC_NLA_NODE_ID={0xf5, 0x3, "ea08409fc782300e967c99b2de0d3fef8aad459cbe7cb0b99b531b24b84c548b3c44dac02175ce2b22f77d1d02e6f96682dccc0a2343759cf3224cdfbd3423be7fbc3a075bffdbad383b32100569c4a5ecb27c4fe3b907c7160e309f8a1497beaa9b11c42c72255cf4895fbaf9b9d1eb278deee76dfd3f7f75016ceeca50cac646284a4b208e7550e297e86870cb155812e640bb7fa40512a19ac21cf72ee39518ec6ddff187b9064535c12735eda39dfece6fbd1b212b11826ff4f94c0da75da11ed3049ca353dd4a273dfddfb4428cec8e5667d222beddcba97a0fb21f719ef198aabcf17d35be"}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x488d0}, 0x24004080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r4, @ANYBLOB="08dc15f2949f9b20a0001a6f6565dd32"], 0x2c}}, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r6 = dup(r5) bind$unix(r6, &(0x7f0000000000)=@abs, 0x6e) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r6) sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x8, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}}, 0x4040010) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r7, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0xfff}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x200400c4}, 0x0) 12:00:02 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x8, 0x6, @multicast}, 0x10) [ 820.550508] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 820.568872] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 820.583131] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 820.617039] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 820.637047] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 820.691161] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 12:00:12 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 62) tgkill(r0, r1, 0xb) 12:00:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:00:12 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x9, 0x6, @multicast}, 0x10) 12:00:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x74, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:00:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x6, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:00:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x11010000, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:00:12 executing program 7: r0 = msgget(0x2, 0x200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) msgrcv(r0, &(0x7f0000000100)=ANY=[@ANYRESDEC=r5, @ANYRESHEX=r4, @ANYRESOCT=r0, @ANYRES16, @ANYRES16, @ANYRES32, @ANYRESHEX=r2, @ANYRESOCT], 0x103, 0x3, 0x3000) msgctl$IPC_RMID(r0, 0x0) msgsnd(r0, &(0x7f0000000000)={0x2, "d7e6b0fc369b603b4d763aaf694dfc0a3fa50e0ee88d2b60b4384db48f00248697a64ef52302987c4838896014b2275e085ddfcd099e86f291f3ff341622fba082bc19a1e2709bf1d63af32bf46759d7be1a1c47befc8cad288f00e649beb628600a9bf60d0c8b5a2136f0a6e06eae4c6218781c24d014"}, 0x7f, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @none, 0x2}}}, 0x14) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/100) [ 830.068326] FAULT_INJECTION: forcing a failure. [ 830.068326] name failslab, interval 1, probability 0, space 0, times 0 [ 830.070021] CPU: 0 UID: 0 PID: 7461 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 830.070050] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 830.070064] Call Trace: [ 830.070072] [ 830.070080] dump_stack_lvl+0xfa/0x120 [ 830.070123] should_fail_ex+0x4d7/0x5e0 [ 830.070165] ? __netlink_kernel_create+0x17d/0x7c0 [ 830.070189] should_failslab+0xc2/0x120 [ 830.070215] __kmalloc_noprof+0xb4/0x4b0 [ 830.070251] ? __netlink_create+0x193/0x280 [ 830.070290] __netlink_kernel_create+0x17d/0x7c0 [ 830.070317] ? __pfx___netlink_kernel_create+0x10/0x10 [ 830.070348] ? __pfx_perf_trace_lock+0x10/0x10 [ 830.070382] rtnetlink_net_init+0xb9/0x150 [ 830.070417] ? __pfx_rtnetlink_net_init+0x10/0x10 [ 830.070451] ? lockdep_init_map_type+0x4b/0x240 [ 830.070477] ? __pfx_rtnetlink_rcv+0x10/0x10 12:00:12 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$smc(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x74, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x6}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r5}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x8000}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x25, 0xbe, "241f20ac3032257852d95285731cea6092a0191eb888815ce86c4daa332ba09559"}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x24004000}, 0x48000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xe74fdb9e5681a032}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x4, 0x6a}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x4008000) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r11 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r11, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)={0x6c, r10, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x4800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)={0x38, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "99fbe73fa257e98fd1288a183f0243f37accb6b5dce311f9"}]]}, 0x38}}, 0x0) [ 830.070507] ? __pfx_rtnetlink_bind+0x10/0x10 [ 830.070541] ? lockdep_init_map_type+0x4b/0x240 [ 830.070567] ? __pfx_netlink_tap_init_net+0x10/0x10 [ 830.070587] ? debug_mutex_init+0x37/0x70 [ 830.070631] ? __pfx_rtnetlink_net_init+0x10/0x10 [ 830.070662] ops_init+0x1e1/0x650 [ 830.070697] setup_net+0x10d/0x320 [ 830.070720] ? lockdep_init_map_type+0x4b/0x240 [ 830.070745] ? __pfx_setup_net+0x10/0x10 [ 830.070776] ? debug_mutex_init+0x37/0x70 [ 830.070813] copy_net_ns+0x2e3/0x650 [ 830.070846] create_new_namespaces+0x3f6/0xab0 [ 830.070887] copy_namespaces+0x45c/0x580 [ 830.070921] copy_process+0x26d5/0x73e0 [ 830.070943] ? __pfx_perf_trace_lock+0x10/0x10 [ 830.070987] ? __pfx_copy_process+0x10/0x10 [ 830.071008] ? __might_fault+0xe0/0x190 [ 830.071042] ? _copy_from_user+0x5b/0xd0 [ 830.071073] kernel_clone+0xea/0x7f0 [ 830.071093] ? get_pid_task+0xfd/0x250 [ 830.071128] ? __pfx_kernel_clone+0x10/0x10 [ 830.071147] ? perf_trace_lock+0xb5/0x5d0 [ 830.071195] ? find_held_lock+0x2b/0x80 [ 830.071227] ? ksys_write+0x121/0x240 [ 830.071248] ? lock_is_held_type+0x9e/0x120 [ 830.071285] __do_sys_clone3+0x1f5/0x280 [ 830.071306] ? __pfx___do_sys_clone3+0x10/0x10 [ 830.071350] ? __fget_files+0x20d/0x3b0 [ 830.071394] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 830.071429] ? fput+0x6a/0x100 [ 830.071455] ? ksys_write+0x1a3/0x240 [ 830.071475] ? __pfx_ksys_write+0x10/0x10 [ 830.071510] do_syscall_64+0xbf/0x360 [ 830.071546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.071569] RIP: 0033:0x7ffb744edb19 [ 830.071585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 830.071606] RSP: 002b:00007ffb71a63188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 830.071627] RAX: ffffffffffffffda RBX: 00007ffb74600f60 RCX: 00007ffb744edb19 [ 830.071642] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 830.071655] RBP: 00007ffb71a631d0 R08: 0000000000000000 R09: 0000000000000000 [ 830.071668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 830.071681] R13: 00007ffeb487a35f R14: 00007ffb71a63300 R15: 0000000000022000 [ 830.071718] [ 830.165261] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 830.188196] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 830.205243] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 830.221087] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 12:00:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x9effffff, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:00:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x300, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7, 0x3f}}}}, ["", "", "", "", ""]}, 0x28}}, 0x4000084) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:00:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x7, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:00:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x180, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:00:12 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0xa, 0x6, @multicast}, 0x10) 12:00:12 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 63) tgkill(r0, r1, 0xb) 12:00:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0xf0ffffff, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:00:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x8, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:00:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000008000300"/18, @ANYRES32=r4, @ANYBLOB="080026006c0900000800b70000000000"], 0x2c}}, 0x0) [ 830.544521] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 830.572049] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 830.626792] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode 12:00:12 executing program 6: r0 = getpgrp(0x0) r1 = gettid() r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/raw6\x00') pread64(r2, &(0x7f0000000140)=""/217, 0xd9, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x1f, 0x1f, 0x9, 0x75, 0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000000), 0xf}, 0x80102, 0x9, 0x0, 0x4, 0x0, 0x2, 0x83, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, r2, 0x2) clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r0, r1, 0xb) [ 830.658978] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 12:00:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x4000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:00:22 executing program 7: r0 = msgget(0x2, 0x200) msgrcv(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007dba4e57a264eaaf00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007a68af5fe28f7ce55e3a8b5180caf830ccd9620d512919cb8374e7df9fed3a88728eafcb902d1e6b2aaba3ef98e4531f7e481fb589de4d633b1ba956aaa7d607a649c49bdfc7f309a8f0e886d2db9e29598a14ece665bba13f3fa9031dd25f2ebf1c837615114f6e4957b6514b8b97417622c7775175fc73df9934465744eff0d30e7e8f15d4ae864d615061c8c231d9d5d97cae92acd1c36366b87a838152e31eea8817d77c164bf951e76d62152d4895"], 0x103, 0x3, 0x3000) msgsnd(r0, &(0x7f0000000280)={0x2}, 0x8, 0x0) r1 = msgget(0x2, 0x200) msgrcv(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007dba4e57a264eaaf00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007a68af5fe28f7ce55e3a8b5180caf830ccd9620d512919cb8374e7dfdfed3a88727e481fb589de4d633b1ba956aaa7d607a649c49bdfc7f309a8f0e886d2db9e29598a14ece665bba13f3fa9031dd25f2ebf1c837615114f6e4957b6514b8b97417622c7775175fc73df9934465744eff0d30e7e8f15d4ae864d615061c8c231d9d5d97cae92acd1c36366b87a838152e31eea8817d77c164bf951e76d62152d4895"], 0x103, 0x3, 0x3000) msgsnd(r1, &(0x7f0000000280)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000080)=""/72) 12:00:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x9, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:00:22 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0xc, 0x6, @multicast}, 0x10) 12:00:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0xff000000, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:00:22 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 64) tgkill(r0, r1, 0xb) 12:00:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x33fe0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:00:22 executing program 6: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setregid(r2, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x420081, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40820}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="f49720a9f1708326284ef046f3dd85adf1025f40f8b516001fe4b2ab28f25696143125699061588402c4b503939150725778c485a469a65ce6937a1435c1539c7b4ac5a2ed5f8c02048b7d5fd154eaae6543fe7a964a6a1afc86341cdf69b6d2679d95f00a03382690e9a935c96d15641d6feb03cb131f6e3e5b229d685a3b84ce57832ec215ca1e58a596ba63603e6e982b2ab7e1a59da784c45f9d69413f5c8aa79086b54d6729a1a30e188c5d1a02db1b72b6ee4ef82086ac1b746d2d5f2327bdc7142ca1fc17a57a76a231f043", 0xcf}, {&(0x7f0000000240)="5cc7351f8124c6ad6cd04204703b6ccd340f960f852235b98adaa9e47930e06a0ec7d501e973d63a8e58d5add0cea05334344c750cbbf9b4f06b5928a3fa0d651298858ae30a5d962f161339b7980093535295a01818a9ce009238ffbe3acd0a0f715264d80fd05bd5ad3d9887fd88118accebf2ea65b08a41d601c77c655e4de222c3a8d33adef2b2be", 0x8a}, {&(0x7f0000000000)="1a87d47d83c67e85ff27cd22138b323742f0d2683db73966edb191899a230ae3c32672e9b15f020cd3ea5c9d3d862f98b1845af901ae89", 0x37}, {&(0x7f0000000300)="b6079f0dc6970e1e077a0161d670696b1d6b1d6d9c05eb0c4d1fd27f40e05001308377dc8c54e242e0548299603149f6b842f741ccf94d0ea648077d35f42b21d72fbea4d3a04ab7afa3a22e107966d9ff99b5d364526664094b6b961e3c85b709b50420ee04564b7040f07d8963c488a5cd53814f2b22546dd42338ecd3294391f284388806990f4d15909b8f6dd6cadb967285c4ca59dbbe56889b5643c902b9387744f38c67ce44493fb56a0a377d515747e172bf5a2c79c4604bd59c7994ca05243b", 0xc4}, {&(0x7f0000000400)="fc7ff7d39247cffb89ce39a69b0b49291de6147538dc7ea5e4da784b05e2c84b74153bf89e0fbe69b267951d2c747c3a3beaf78e1b065ef2666471d2fedacb14fb4afde6603b8c81344115d9f3f875fc521c81104ccbf06defa0394a87246e6d88a23e29d5b7677039aa664ce5f2f07252", 0x71}], 0x5, &(0x7f0000000640)=[@rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, r2}}}, @rights={{0x18, 0x1, 0x1, [r3, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, 0xee01}}}, @rights={{0x30, 0x1, 0x1, [r0, r5, r1, r6, r1, r10, r11, r12]}}], 0xc8, 0x48080}, 0x2c004804) [ 840.526858] FAULT_INJECTION: forcing a failure. [ 840.526858] name failslab, interval 1, probability 0, space 0, times 0 [ 840.527934] CPU: 1 UID: 0 PID: 7543 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 840.527951] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 840.527959] Call Trace: [ 840.527964] [ 840.527969] dump_stack_lvl+0xfa/0x120 [ 840.527997] should_fail_ex+0x4d7/0x5e0 [ 840.528021] should_failslab+0xc2/0x120 [ 840.528037] kmem_cache_alloc_lru_noprof+0x73/0x3c0 [ 840.528059] ? sock_alloc_inode+0x27/0x1d0 [ 840.528081] sock_alloc_inode+0x27/0x1d0 [ 840.528095] ? __pfx_sock_alloc_inode+0x10/0x10 [ 840.528110] alloc_inode+0x67/0x250 [ 840.528126] sock_alloc+0x40/0x270 [ 840.528142] sock_create_lite+0x83/0x120 [ 840.528159] __netlink_kernel_create+0xba/0x7c0 [ 840.528177] ? __pfx___netlink_kernel_create+0x10/0x10 [ 840.528193] ? __pfx_perf_trace_lock+0x10/0x10 [ 840.528210] ? __pfx_genl_pernet_init+0x10/0x10 [ 840.528225] genl_pernet_init+0xbd/0x170 [ 840.528240] ? __pfx_genl_pernet_init+0x10/0x10 [ 840.528254] ? lockdep_init_map_type+0x4b/0x240 [ 840.528270] ? __pfx_genl_rcv+0x10/0x10 [ 840.528283] ? __pfx_genl_bind+0x10/0x10 [ 840.528295] ? __pfx_genl_unbind+0x10/0x10 [ 840.528307] ? __pfx_genl_release+0x10/0x10 [ 840.528322] ? __pfx_netlink_tap_init_net+0x10/0x10 [ 840.528333] ? debug_mutex_init+0x37/0x70 [ 840.528353] ops_init+0x1e1/0x650 [ 840.528373] setup_net+0x10d/0x320 [ 840.528385] ? lockdep_init_map_type+0x4b/0x240 [ 840.528399] ? __pfx_setup_net+0x10/0x10 [ 840.528415] ? debug_mutex_init+0x37/0x70 [ 840.528435] copy_net_ns+0x2e3/0x650 [ 840.528453] create_new_namespaces+0x3f6/0xab0 [ 840.528480] copy_namespaces+0x45c/0x580 [ 840.528499] copy_process+0x26d5/0x73e0 [ 840.528512] ? __pfx_perf_trace_lock+0x10/0x10 [ 840.528536] ? __pfx_copy_process+0x10/0x10 [ 840.528547] ? __might_fault+0xe0/0x190 [ 840.528567] ? _copy_from_user+0x5b/0xd0 [ 840.528584] kernel_clone+0xea/0x7f0 [ 840.528599] ? get_pid_task+0xfd/0x250 [ 840.528619] ? __pfx_kernel_clone+0x10/0x10 [ 840.528629] ? perf_trace_lock+0xb5/0x5d0 [ 840.528648] ? find_held_lock+0x2b/0x80 [ 840.528665] ? ksys_write+0x121/0x240 [ 840.528677] ? lock_is_held_type+0x9e/0x120 [ 840.528698] __do_sys_clone3+0x1f5/0x280 [ 840.528709] ? __pfx___do_sys_clone3+0x10/0x10 [ 840.528733] ? __fget_files+0x20d/0x3b0 [ 840.528756] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 840.528777] ? fput+0x6a/0x100 [ 840.528791] ? ksys_write+0x1a3/0x240 [ 840.528802] ? __pfx_ksys_write+0x10/0x10 [ 840.528821] do_syscall_64+0xbf/0x360 [ 840.528841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.528854] RIP: 0033:0x7ffb744edb19 [ 840.528863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 840.528875] RSP: 002b:00007ffb71a63188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 840.528887] RAX: ffffffffffffffda RBX: 00007ffb74600f60 RCX: 00007ffb744edb19 [ 840.528895] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 840.528902] RBP: 00007ffb71a631d0 R08: 0000000000000000 R09: 0000000000000000 [ 840.528909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 840.528916] R13: 00007ffeb487a35f R14: 00007ffb71a63300 R15: 0000000000022000 [ 840.528936] [ 840.572513] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode 12:00:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r7, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000180)={r4, 0x1, 0x6, @multicast}, 0x10) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r10 = socket$packet(0x11, 0x2, 0x300) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r10, 0x107, 0x1, &(0x7f0000000100)={r12, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r10, 0x107, 0x1, &(0x7f0000000180)={r9, 0x1, 0x6, @multicast}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001680)={&(0x7f00000014c0)={0x18c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x80d0}, 0x20048095) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 840.609671] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 12:00:22 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 65) tgkill(r0, r1, 0xb) [ 840.617749] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 840.622961] mac80211_hwsim hwsim14 wlan1: entered promiscuous mode [ 840.631370] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 840.632364] mac80211_hwsim hwsim14 wlan1: left promiscuous mode [ 840.646177] mac80211_hwsim hwsim14 wlan1: entered promiscuous mode 12:00:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0xfffff000, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) [ 840.661809] mac80211_hwsim hwsim14 wlan1: left promiscuous mode 12:00:22 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0xd, 0x6, @multicast}, 0x10) 12:00:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r4, 0x300, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x4001) 12:00:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0xfffffdef, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:00:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0xf, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 840.788361] FAULT_INJECTION: forcing a failure. [ 840.788361] name failslab, interval 1, probability 0, space 0, times 0 [ 840.789300] CPU: 1 UID: 0 PID: 7574 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 840.789317] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 840.789325] Call Trace: [ 840.789330] [ 840.789335] dump_stack_lvl+0xfa/0x120 [ 840.789364] should_fail_ex+0x4d7/0x5e0 [ 840.789388] ? __netlink_kernel_create+0x17d/0x7c0 [ 840.789402] should_failslab+0xc2/0x120 [ 840.789418] __kmalloc_noprof+0xb4/0x4b0 [ 840.789438] ? __netlink_create+0x193/0x280 [ 840.789460] __netlink_kernel_create+0x17d/0x7c0 [ 840.789475] ? __pfx___netlink_kernel_create+0x10/0x10 [ 840.789491] ? __pfx_perf_trace_lock+0x10/0x10 [ 840.789510] rtnetlink_net_init+0xb9/0x150 [ 840.789530] ? __pfx_rtnetlink_net_init+0x10/0x10 [ 840.789548] ? lockdep_init_map_type+0x4b/0x240 [ 840.789562] ? __pfx_rtnetlink_rcv+0x10/0x10 [ 840.789579] ? __pfx_rtnetlink_bind+0x10/0x10 [ 840.789601] ? lockdep_init_map_type+0x4b/0x240 [ 840.789615] ? __pfx_netlink_tap_init_net+0x10/0x10 [ 840.789626] ? debug_mutex_init+0x37/0x70 [ 840.789646] ? __pfx_rtnetlink_net_init+0x10/0x10 [ 840.789663] ops_init+0x1e1/0x650 [ 840.789682] setup_net+0x10d/0x320 [ 840.789694] ? lockdep_init_map_type+0x4b/0x240 [ 840.789708] ? __pfx_setup_net+0x10/0x10 [ 840.789724] ? debug_mutex_init+0x37/0x70 [ 840.789744] copy_net_ns+0x2e3/0x650 [ 840.789762] create_new_namespaces+0x3f6/0xab0 [ 840.789786] copy_namespaces+0x45c/0x580 [ 840.789803] copy_process+0x26d5/0x73e0 [ 840.789817] ? __pfx_perf_trace_lock+0x10/0x10 [ 840.789840] ? __pfx_copy_process+0x10/0x10 [ 840.789852] ? __might_fault+0xe0/0x190 [ 840.789871] ? _copy_from_user+0x5b/0xd0 [ 840.789889] kernel_clone+0xea/0x7f0 [ 840.789899] ? get_pid_task+0xfd/0x250 [ 840.789919] ? __pfx_kernel_clone+0x10/0x10 [ 840.789929] ? perf_trace_lock+0xb5/0x5d0 [ 840.789948] ? find_held_lock+0x2b/0x80 [ 840.789968] ? ksys_write+0x121/0x240 [ 840.789982] ? lock_is_held_type+0x9e/0x120 [ 840.790003] __do_sys_clone3+0x1f5/0x280 [ 840.790014] ? __pfx___do_sys_clone3+0x10/0x10 [ 840.790038] ? __fget_files+0x20d/0x3b0 [ 840.790062] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 840.790083] ? fput+0x6a/0x100 [ 840.790096] ? ksys_write+0x1a3/0x240 [ 840.790108] ? __pfx_ksys_write+0x10/0x10 [ 840.790127] do_syscall_64+0xbf/0x360 [ 840.790147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.790160] RIP: 0033:0x7ffb744edb19 [ 840.790169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 840.790181] RSP: 002b:00007ffb71a63188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 840.790192] RAX: ffffffffffffffda RBX: 00007ffb74600f60 RCX: 00007ffb744edb19 [ 840.790200] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 840.790207] RBP: 00007ffb71a631d0 R08: 0000000000000000 R09: 0000000000000000 [ 840.790215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 840.790222] R13: 00007ffeb487a35f R14: 00007ffb71a63300 R15: 0000000000022000 [ 840.790241] 12:00:22 executing program 7: msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/79) msgctl$MSG_STAT_ANY(0xffffffffffffffff, 0xd, &(0x7f0000000300)=""/4096) 12:00:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0xffffff7f, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) [ 840.884954] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode 12:00:23 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = signalfd4(r0, &(0x7f0000000040), 0x8, 0x80000) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)="143bdb0dd2339c8e5ca156c5ad6ebb39a1735028298ab37aebfcb525545b2c9f61bd23bbd0602d24ca2191b1a808ded3f050754ae9992b5d54c5b5aaaf5de3224ecea00dc2760a6bc0083bd2ed00b8159c81bcd26807498740e23d78502d51314937986e103e8ad4c68fc6b444ac3897d3359189dfcc6072fe848da9453d0c0a6caaa65ef17f641f46c217e2c30149db297a44661a7a900c76e7986539dcec5217fa173271b3b1154f5b4b35fe6412116babba", 0xb3}, {&(0x7f0000000280)="50d7ae522033b61192d90ef39170d89f21636309d5f2e18f8d6cea4de7429a18799a33817baeadcbe29cfb450a1871558c78f2836d370629fa5b0c6041a0541d6b09d7575ddcdf1737334d5274ed501c289342556ef1c5608d382a9206a6f49b75cd38fae6ced7094f3b1446f4cb730665583fdc7a53156ed011bd292be77487ef0a91f9e5e19d920791cd93d1056c3078eebc2801aa5329c8b1a6c3b28cc3349be91788b6291efb3b9dc073a54ff9bd9f80eea802b602d33409d00f5e2d79", 0xbf}, {&(0x7f00000000c0)="2440546cff576ba10474c2b3054f6721df2c8ee6309bcc364c6c98dcab6d2ec13f9864c3c4dd0d27e9174c893a65aad7582c71637df2692b0efa1c5bf496074e25341f28cbad917d2d2678fefbb096915010c341e75c30", 0x57}, {&(0x7f0000000400)="22ca767314897fbc09d235af35136cb1c384229de58aca1805fee0abc90af4917ea0284d0b8136d7e73eabb1326be4fc7297e773edf36c932c659fbbee083b45b523c4e01a943f92d9b4c89ec11515fab2e39d880c8010becb278a13c28e1b72139e78deec32032bc86cd54b996c8bd1779046e3953184c8f958b0d7c0d7edde37ff9f0b4ab9d2492bedb732dddcec81d185c05fc3f78b6e4d6398d934dd10109bced9ac388a7da4cd57112f7396c7f3cb2e8da74ba378b5f1fc74dd2b5cf17abeac4c31acbbe695d63e4413bd1a05ec795a52b5d8efc97b6a52c47df3", 0xdd}], 0x4, 0x7fffffff, 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x18d101, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000) [ 840.923101] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 840.952843] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 840.979360] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 12:00:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0xffffff9e, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:00:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x2, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:00:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0xb7, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:00:32 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 66) tgkill(r0, r1, 0xb) 12:00:32 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, r1, 0x504, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "95d7c6b3df38007de813e2565cbd2bca"}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "f7a06a99223b97b7d695432a9d"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ccbfc851e8"}]}, 0xfffffff4}, 0x1, 0x0, 0x0, 0x4041}, 0x24008814) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/79) msgsnd(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000055df07882400"], 0x8, 0x800) msgrcv(0xffffffffffffffff, &(0x7f0000000040)={0x0, ""/184}, 0xc0, 0x0, 0x0) 12:00:32 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x45c, 0x1, &(0x7f0000000240)=[{&(0x7f0000000180)="bdc39e169ed91457384b9b468cc7e2773194fcfbcdb58ec2e5437e9d1584bb43550bab63fd3d4dfc162340018b6c78f36cafbed3268b84f40556dfb57062cf95cfa7a6cccd72cbaeb2ed6d89e1a4d870e70a0d2962cc871cc89e8c0e403af04e456b076ff227c520362cfbf2713c256de814492404dc0fd43f057767f7f8e3c6e24131bff2db3fb67cb2dd9c5d978e8e7b6ff8efc37f2bdcc42068e3e73f2a680cc463", 0xa3, 0x7}], 0xa01000, &(0x7f0000000280)={[{@noacl}, {@journal_checksum}, {@auto_da_alloc}, {@journal_async_commit}, {@nodiscard}, {@jqfmt_vfsv1}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}, {@prjquota}], [{@subj_type={'subj_type', 0x3d, '/dev/sg#\x00'}}]}) open_tree(r0, &(0x7f00000003c0)='./file0\x00', 0x1000) r1 = getpid() gettid() syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x1, 0x40) ioctl$SG_SET_DEBUG(r2, 0x227e, 0x0) fork() getpgid(r1) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000001740)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x351002, 0xb) 12:00:32 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0xe, 0x6, @multicast}, 0x10) 12:00:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_TDLS_OPER(r4, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, r5, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x5f}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}}, 0x20000010) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 849.947716] FAULT_INJECTION: forcing a failure. [ 849.947716] name failslab, interval 1, probability 0, space 0, times 0 [ 849.948923] CPU: 1 UID: 0 PID: 7621 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 849.948941] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 849.948949] Call Trace: [ 849.948954] [ 849.948959] dump_stack_lvl+0xfa/0x120 [ 849.948988] should_fail_ex+0x4d7/0x5e0 [ 849.949013] ? security_inode_alloc+0x3e/0x130 [ 849.949029] should_failslab+0xc2/0x120 [ 849.949045] kmem_cache_alloc_noprof+0x5f/0x3d0 [ 849.949066] ? lockdep_init_map_type+0x4b/0x240 [ 849.949089] security_inode_alloc+0x3e/0x130 [ 849.949106] inode_init_always_gfp+0xc94/0xff0 [ 849.949125] alloc_inode+0x8d/0x250 [ 849.949142] sock_alloc+0x40/0x270 [ 849.949161] sock_create_lite+0x83/0x120 [ 849.949179] __netlink_kernel_create+0xba/0x7c0 [ 849.949197] ? __pfx___netlink_kernel_create+0x10/0x10 [ 849.949215] ? __pfx_perf_trace_lock+0x10/0x10 [ 849.949233] ? __pfx_genl_pernet_init+0x10/0x10 [ 849.949249] genl_pernet_init+0xbd/0x170 [ 849.949266] ? __pfx_genl_pernet_init+0x10/0x10 [ 849.949281] ? lockdep_init_map_type+0x4b/0x240 [ 849.949296] ? __pfx_genl_rcv+0x10/0x10 [ 849.949309] ? __pfx_genl_bind+0x10/0x10 [ 849.949323] ? __pfx_genl_unbind+0x10/0x10 [ 849.949336] ? __pfx_genl_release+0x10/0x10 [ 849.949352] ? __pfx_netlink_tap_init_net+0x10/0x10 [ 849.949364] ? debug_mutex_init+0x37/0x70 [ 849.949385] ops_init+0x1e1/0x650 [ 849.949406] setup_net+0x10d/0x320 [ 849.949419] ? lockdep_init_map_type+0x4b/0x240 [ 849.949434] ? __pfx_setup_net+0x10/0x10 [ 849.949451] ? debug_mutex_init+0x37/0x70 [ 849.949473] copy_net_ns+0x2e3/0x650 [ 849.949493] create_new_namespaces+0x3f6/0xab0 [ 849.949518] copy_namespaces+0x45c/0x580 [ 849.949538] copy_process+0x26d5/0x73e0 [ 849.949552] ? __pfx_perf_trace_lock+0x10/0x10 [ 849.949577] ? __pfx_copy_process+0x10/0x10 [ 849.949589] ? __might_fault+0xe0/0x190 [ 849.949614] ? _copy_from_user+0x5b/0xd0 [ 849.949632] kernel_clone+0xea/0x7f0 [ 849.949644] ? get_pid_task+0xfd/0x250 [ 849.949665] ? __pfx_kernel_clone+0x10/0x10 [ 849.949676] ? perf_trace_lock+0xb5/0x5d0 [ 849.949696] ? find_held_lock+0x2b/0x80 [ 849.949701] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 849.949714] ? ksys_write+0x121/0x240 [ 849.949728] ? lock_is_held_type+0x9e/0x120 [ 849.949752] __do_sys_clone3+0x1f5/0x280 [ 849.949765] ? __pfx___do_sys_clone3+0x10/0x10 [ 849.949790] ? __fget_files+0x20d/0x3b0 [ 849.949815] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 849.949838] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 849.949867] ? ksys_write+0x1a3/0x240 [ 849.949882] ? __pfx_ksys_write+0x10/0x10 [ 849.949909] do_syscall_64+0xbf/0x360 [ 849.949938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.949957] RIP: 0033:0x7ffb744edb19 [ 849.949970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 849.949987] RSP: 002b:00007ffb71a63188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 849.950004] RAX: ffffffffffffffda RBX: 00007ffb74600f60 RCX: 00007ffb744edb19 [ 849.950015] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 849.950025] RBP: 00007ffb71a631d0 R08: 0000000000000000 R09: 0000000000000000 [ 849.950035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 849.950045] R13: 00007ffeb487a35f R14: 00007ffb71a63300 R15: 0000000000022000 [ 849.950073] 12:00:32 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') pread64(r0, &(0x7f00000002c0)=""/178, 0xb2, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) 12:00:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0xf0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 850.066511] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 12:00:32 executing program 7: r0 = msgget$private(0x0, 0x40) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000000)=""/74) 12:00:32 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 67) tgkill(r0, r1, 0xb) [ 850.079526] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 850.097373] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 12:00:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0xfffffff0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:00:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x3, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:00:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:00:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0xffffffff, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:00:42 executing program 7: r0 = msgget(0x1, 0x1) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/104) msgsnd(r0, &(0x7f0000000100)={0x1, "7986fbdbfef22aca6e5fbe1ffe824785f7c22e601b584a2f7922c48a60b7da1b3ed1b34032e5533c599623dac703bde4d218bea92db07becfc1983ac9da594a1d01c5d9bb7754ee1ff7820c70f42d60ef40cb39f7d996ae0657fe4d058ba188f84cf35de15a1d4e7461ad577a96504830b6c4ce5a40900bd1e9af0bd3fc9298ee1f91efb5a1e8583344aa012ae86855dd48930e900ef859caddf02e053d030701ebdd52fb22d1dbfbbc638e1bf5a5c5ce9ddcac3b72de841279a85215306d7c6ee2a12e39c8e43afbaa461ecabfda654b9c37a17ab99eed4bb4440ea5df46b91721d0db806c13549b6b3"}, 0xf2, 0x0) 12:00:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x7, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:00:42 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0xf, 0x6, @multicast}, 0x10) 12:00:42 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 68) tgkill(r0, r1, 0xb) 12:00:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x300, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:00:42 executing program 6: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000040)={0xfffffffffffffd8a, 0x0, 0xffffffa5}) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000000)=0x74) 12:00:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1f, 0x2, 0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000240)="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") socket$packet(0x11, 0x2, 0x300) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000005c0)={r7, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0xa8, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xb1}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0xc800}, 0x4004001) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1040000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r8, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="200000000000000000006600000008000300", @ANYRES32=0x0, @ANYBLOB="a6090300000000007c000000"], 0x28}, 0x1, 0x0, 0x0, 0xc800}, 0x28044140) [ 860.615894] program syz-executor.6 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 860.620147] FAULT_INJECTION: forcing a failure. [ 860.620147] name failslab, interval 1, probability 0, space 0, times 0 [ 860.621082] CPU: 1 UID: 0 PID: 7669 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 860.621099] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 860.621109] Call Trace: [ 860.621116] [ 860.621121] dump_stack_lvl+0xfa/0x120 [ 860.621148] should_fail_ex+0x4d7/0x5e0 [ 860.621176] ? sk_prot_alloc+0x157/0x280 [ 860.621194] should_failslab+0xc2/0x120 [ 860.621210] __kmalloc_noprof+0xb4/0x4b0 [ 860.621230] ? __pfx_selinux_socket_post_create+0x10/0x10 [ 860.621257] sk_prot_alloc+0x157/0x280 [ 860.621275] sk_alloc+0x34/0xbd0 [ 860.621295] __netlink_create+0x5d/0x280 [ 860.621317] __netlink_kernel_create+0xea/0x7c0 [ 860.621333] ? __pfx___netlink_kernel_create+0x10/0x10 [ 860.621349] ? __pfx_perf_trace_lock+0x10/0x10 [ 860.621367] ? __pfx_genl_pernet_init+0x10/0x10 [ 860.621383] genl_pernet_init+0xbd/0x170 [ 860.621399] ? __pfx_genl_pernet_init+0x10/0x10 [ 860.621414] ? lockdep_init_map_type+0x4b/0x240 [ 860.621430] ? __pfx_genl_rcv+0x10/0x10 [ 860.621444] ? __pfx_genl_bind+0x10/0x10 [ 860.621458] ? __pfx_genl_unbind+0x10/0x10 [ 860.621471] ? __pfx_genl_release+0x10/0x10 [ 860.621487] ? __pfx_netlink_tap_init_net+0x10/0x10 [ 860.621499] ? debug_mutex_init+0x37/0x70 [ 860.621521] ops_init+0x1e1/0x650 [ 860.621541] setup_net+0x10d/0x320 [ 860.621555] ? lockdep_init_map_type+0x4b/0x240 [ 860.621569] ? __pfx_setup_net+0x10/0x10 [ 860.621586] ? debug_mutex_init+0x37/0x70 [ 860.621611] copy_net_ns+0x2e3/0x650 [ 860.621629] create_new_namespaces+0x3f6/0xab0 [ 860.621653] copy_namespaces+0x45c/0x580 [ 860.621671] copy_process+0x26d5/0x73e0 [ 860.621684] ? __pfx_perf_trace_lock+0x10/0x10 [ 860.621709] ? __pfx_copy_process+0x10/0x10 [ 860.621722] ? __might_fault+0xe0/0x190 [ 860.621743] ? _copy_from_user+0x5b/0xd0 [ 860.621762] kernel_clone+0xea/0x7f0 [ 860.621773] ? get_pid_task+0xfd/0x250 [ 860.621794] ? __pfx_kernel_clone+0x10/0x10 [ 860.621805] ? perf_trace_lock+0xb5/0x5d0 [ 860.621824] ? find_held_lock+0x2b/0x80 [ 860.621843] ? ksys_write+0x121/0x240 [ 860.621856] ? lock_is_held_type+0x9e/0x120 [ 860.621879] __do_sys_clone3+0x1f5/0x280 [ 860.621892] ? __pfx___do_sys_clone3+0x10/0x10 [ 860.621916] ? __fget_files+0x20d/0x3b0 [ 860.621940] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 860.621961] ? fput+0x6a/0x100 [ 860.621975] ? ksys_write+0x1a3/0x240 [ 860.621987] ? __pfx_ksys_write+0x10/0x10 [ 860.622007] do_syscall_64+0xbf/0x360 [ 860.622029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.622043] RIP: 0033:0x7ffb744edb19 [ 860.622053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 860.622067] RSP: 002b:00007ffb71a63188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 860.622080] RAX: ffffffffffffffda RBX: 00007ffb74600f60 RCX: 00007ffb744edb19 [ 860.622090] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 860.622098] RBP: 00007ffb71a631d0 R08: 0000000000000000 R09: 0000000000000000 [ 860.622107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 860.622115] R13: 00007ffeb487a35f R14: 00007ffb71a63300 R15: 0000000000022000 [ 860.622137] [ 860.648372] program syz-executor.6 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 860.675237] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 860.725345] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 12:00:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="0f000000", @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:00:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x500, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:00:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x9, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:00:42 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 69) tgkill(r0, r1, 0xb) 12:00:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:00:43 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x11, 0x6, @multicast}, 0x10) 12:00:43 executing program 6: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1}, './cgroup/cgroup.procs\x00'}) r4 = accept(r3, &(0x7f00000006c0)=@in6={0xa, 0x0, 0x0, @private2}, &(0x7f0000000400)=0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0x190, r7, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xfffffffa, 0x3f}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x40}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x3}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_TX_RATES={0x134, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffd, 0x9, 0x1d, 0x3, 0x0, 0x0, 0x3, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1f, 0x2, [{}, {0x2, 0x9}, {0x7, 0x1}, {0x3, 0x9}, {0x5, 0xd}, {0x4, 0x1}, {0x0, 0x4}, {0x2, 0x1}, {0x7, 0x7}, {0x4}, {0x4, 0x2}, {0x5, 0x9}, {0x6, 0x2}, {0x6, 0x7}, {0x0, 0x7}, {0x4}, {0x0, 0x1}, {0x0, 0xa}, {0x6, 0x4}, {0x6, 0x6}, {0x0, 0x4}, {0x1, 0xa}, {0x4, 0x2}, {0x1, 0x6}, {0x3, 0x1}, {0x0, 0x7}, {0x4, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x98, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0x7, 0x9, 0x6, 0x2, 0x4, 0x1b31]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x2, 0x1, 0x34, 0x3, 0x1, 0x4, 0x4, 0x2, 0x6c, 0x0, 0x1b, 0x2, 0x1b, 0x24, 0x36, 0x1b, 0x18, 0x4, 0x60, 0x5e, 0x36, 0x56, 0xc, 0x12, 0x14, 0x16, 0x30, 0x9, 0x3, 0x16]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7, 0xa5ae, 0x100, 0x8, 0x1, 0xfffd, 0x1000]}}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x0, 0x3}, {}, {0x4, 0x8}, {0x1, 0x3}, {0x0, 0x4}, {0x0, 0x6}, {0x4, 0x4}, {0x5, 0x6}, {0x1, 0xa}, {0x6, 0xa}, {0x3, 0x9}, {0x0, 0x2}, {0x6, 0x8}, {0x6, 0x7}, {0x0, 0x5}, {0x4, 0x2}, {0x7, 0x7}, {0x7, 0xa}, {0x1}, {0x4, 0x8}, {0x0, 0x4}, {0x0, 0xa}, {0x2, 0x5}, {0x1, 0x6}, {0x0, 0x9}, {0x1, 0x3}, {0x0, 0x9}, {0x4, 0x6}, {0x2, 0x4}, {0x1, 0x6}, {0x6, 0x3}, {0x1, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x6]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x12, 0x30, 0x6c, 0x5, 0x2, 0x60, 0x2, 0x48, 0x9, 0x36, 0x18, 0x4, 0x65, 0x9, 0x2, 0x24, 0x24, 0x12, 0x6c, 0x1b, 0x24, 0x18, 0x9, 0x2, 0x1, 0x2, 0x6c, 0x0, 0x16, 0xc, 0x5, 0x24]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1, 0x18, 0x5, 0x16, 0x48, 0x18, 0x2, 0x5, 0xb]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x9, 0xa, 0x36, 0x6c, 0x24, 0xc]}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x29080a}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r0, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1f, 0x3d}}}}, [@NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x1, 0x6}, {0x0, 0x1}, {0x7, 0x2}, {0x2, 0x3}, {0x1f, 0x7}, {0x9, 0x6}], "9ec49a7c153ee482"}}]}, 0x40}, 0x1, 0x0, 0x0, 0x6b695bc7d61bf1de}, 0x4004005) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$binfmt_aout(r9, &(0x7f0000000080)={{0x2d}}, 0x20) r10 = open_tree(r3, &(0x7f0000000640)='./cgroup/cgroup.procs\x00', 0x80001) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r3) sendmsg$NL80211_CMD_GET_REG(r10, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r11, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2e}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4024811}, 0x10) [ 860.899260] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 860.912878] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 12:00:43 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x12, 0x6, @multicast}, 0x10) 12:00:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB='\"\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:00:43 executing program 6: syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004500001c010099c4aa0000907800000000"], 0x0) syz_emit_ethernet(0x114, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @random="dc2049affffe", @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@mpls_uc={0x8847, {[{0x37e}, {0x1}, {0x1, 0x0, 0x1}, {0x101, 0x0, 0x1}, {0x6}, {0x8}, {0xaf8a}, {}, {0x1ff}], @llc={@llc={0x4, 0xaa, "66c4", "776a9bbda69eb34f851177dc52eb1806ab6b3bfaea7348c1c1c4b35f1c941bb0d32022d3f1e627f17ffe43bf096e6404064de4b03ca58d8b169a1b92036b6a0130bc17ca87a32c6be80e66c6f972aad1c6acab45bd7abbf505cb86dd963ef8bbdde858b5d01dfc4dec9840d05cd7456a5a29fd0d55cb8b0249f80755e56267eda6a5c531da0e88c01cfcaadeacf7ce908282dee852fb109ad87dd662cd6e535022f5505f23474539ed205cb924f183f48371d0841efe2d44b0afb71b0096039bff0936e3b7d34867c1c681d03c2fb01ac4311b55d10cd2e2bd79"}}}}}}, &(0x7f0000000180)={0x1, 0x4, [0x18d, 0x610, 0x17c, 0x344]}) 12:00:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000040aa683aef2779d7dfbd618dc58934c12194f30c738094a264745599b490ddd5808be8cf3deaf2a2dc6bb908cdc377e36d302ae296203834687a9d4bdba6dd53dec78da2dab216237e", @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0900000800b70000000000"], 0x2c}}, 0x0) 12:00:43 executing program 7: msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/79) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/175) r0 = msgget(0x2, 0x200) msgctl$IPC_RMID(r0, 0x0) msgrcv(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007dba4e57a264eaaf00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007a68af5fe28f7ce55e3a8b5180caf830ccd9620d512919cb8374e7df9fed3a88728eafcb902d1e6b2aaba3ef98e4531f7e481fb589de4d633b1ba956aaa7d607a649c49bdfc7f309a8f0e886d2db9e29598a14ece665bba13f3fa9031dd25f2ebf1c837615114f6e4957b6514b8b97417622c7775175fc73df9934465744eff0d30e7e8f15d4ae864d615061c8c231d9d5d97cae92acd1c36366b87a838152e31eea8817d77c164bf951e76d62152d4895"], 0x103, 0x1, 0x3000) msgget(0x1, 0xa0) msgsnd(r0, &(0x7f0000000280)={0x2}, 0x8, 0x0) msgget$private(0x0, 0x1) r1 = msgget(0x2, 0x200) msgrcv(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007dba4e57a264eaaf00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007a68af5fe28f7ce55e3a8b5180caf830ccd9620d512919cb8374e7df9fed3a88728eafcb902d1e6b2aaba3ef98e4531f7e481fb589de4d633b1ba956aaa7d607a649c49bdfc7f309a8f0e886d2db9e29598a14ece665bba13f3fa9031dd25f2ebf1c837615114f6e4957b6514b8b97417622c7775175fc73df9934465744eff0d30e7e8f15d4ae864d615061c8c231d9d5d97cae92acd1c36366b87a838152e31eea8817d77c164bf951e76d62152d4895"], 0x103, 0x3, 0x3000) msgsnd(r1, &(0x7f0000000280)={0x2}, 0x8, 0x0) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f00000000c0)=""/177) 12:00:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x66, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:00:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x600, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 861.139294] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.3'. 12:00:43 executing program 6: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380), &(0x7f00000003c0), 0x2, 0x1) [ 861.195534] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 861.208573] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.3'. 12:00:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x45000050}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8851}, 0x800) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 861.260289] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 12:00:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB='%\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) [ 861.315808] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode 12:00:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x74, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 861.340948] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 861.351124] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.3'. [ 861.369736] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.3'. 12:00:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="597b7f1b6fa8f8fc71cebbd3012f6602d96496a7b8d5acae8bcc67397ebf5cbb6d4dd23a28efdd4849773becfd9b28ac5d8992071d4d5343de86c104effc942600c94da4c90706f904b9bc6373f7ad30366ab3705a876fc90b2934e76a43ef5e57755be120d2646f283b97bbd8410f3fca6b3ac41de8b941d6f22f169c298c48c022827b0abbfe6527bcdd4c92785bd1b7cd0061d8a43382f829982115e6462b15bef046c2537d30156f93672409e9c1fdab78e52094811a06210add6380a7", @ANYRES16, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r2, @ANYBLOB="080026006c0900000800b70000000000"], 0x2c}}, 0x0) 12:00:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB='3\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:00:53 executing program 7: msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/79) 12:00:53 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 70) tgkill(r0, r1, 0xb) 12:00:53 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x13, 0x6, @multicast}, 0x10) 12:00:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x700, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:00:53 executing program 6: r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000040)={0x7, 'bond_slave_0\x00', {0xffff}, 0x5}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0xffffffffffffffff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x29, 0x0, &(0x7f00000023c0)=0x24) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000100)={r8, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000180)={r5, 0x1, 0x6, @multicast}, 0x10) r9 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x300000c, r9) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@remote, @dev={0xfe, 0x80, '\x00', 0x1a}, @rand_addr=' \x01\x00', 0x23, 0x40, 0x1, 0x0, 0x1f, 0xc0, r5}) 12:00:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:00:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)={0x350, r7, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x2, 0x4a}}}}, [@NL80211_ATTR_TX_RATES={0x324, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xcc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x16, 0x4, 0x18, 0x30, 0x7e, 0x18, 0x5, 0x12, 0x36, 0x30, 0x9, 0x4, 0x30, 0x16, 0x36, 0x6c, 0x0, 0x12, 0x1b, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4aa, 0x40, 0x800, 0xff, 0x8000, 0x0, 0x8]}}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x6, 0xa}, {0x5, 0x9}, {0x4, 0x2}, {0x7}, {0x5, 0x7}, {0x1, 0x7}, {0x4, 0x4}, {0x4, 0x1}, {0x7, 0x4}, {0x1, 0x7}, {0x4, 0x9}, {0x7, 0x2}, {0x6, 0x4}, {0x0, 0x9}, {0x5}, {0x0, 0x3}, {0x3, 0x2}, {0x1, 0x8}, {0x3, 0x2}, {0x5, 0xa}, {0x1, 0x7}, {0x4, 0x6}, {0x5, 0x8}, {0x2, 0x9}, {0x2, 0x4}, {0x1, 0x6}, {0x0, 0x9}, {0x7, 0x1}, {0x7, 0x8}, {0x7}, {0x0, 0x6}, {0x6, 0x5}, {0x7, 0x5}, {0x6}, {0x4, 0x2}, {0x2}, {0x3, 0x1}, {0x3, 0x2}, {0x7, 0x8}, {0x0, 0x8}, {0x1, 0x6}, {0x6}, {0x6, 0x1}, {0x7, 0x8}, {0x0, 0x3}, {0x0, 0x6}, {0x1, 0x2}, {0x0, 0x8}, {0x2, 0x7}, {0x0, 0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x7}, {0x6, 0x6}, {0x4, 0x6}, {0x4, 0x1}, {0x2, 0x4}, {0x0, 0x9}, {0x3, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xf001, 0x81, 0x8001, 0x8, 0x9, 0x36c, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8, 0xe9, 0x9, 0x1f, 0x5, 0x9, 0x7]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1, 0x6, 0x5, 0xc, 0x48, 0x2, 0x30, 0x5, 0x60, 0x4, 0x30, 0x6c, 0x9, 0x3, 0x3, 0x16, 0x2, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3f, 0x0, 0x34a1, 0x9, 0x200, 0x5, 0xffff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0xa0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x48, 0x6, 0x6, 0x48, 0x2, 0x5, 0x4e, 0x30, 0x48, 0x18, 0x12, 0x2, 0x24, 0x6, 0xb, 0x6, 0x6, 0x0]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x4, 0x5}, {0x4, 0x6}, {0x3, 0x9}, {0x1, 0x1}, {0x0, 0xa}, {0x6, 0x5}, {0x2, 0x5}, {0x2, 0xa}, {0x1, 0x8}, {0x5, 0x3}, {0x3}, {0x1, 0x6}, {0x7, 0x8}, {0x5}, {0x6, 0x6}, {0x2, 0x3}, {0x3, 0x1}, {0x1, 0x2}, {0x0, 0x7}, {0x2, 0xa}, {0x1, 0x7}, {0x2}, {0x0, 0x4}, {0x1, 0xa}, {0x7}, {0x0, 0x9}, {0x6, 0x5}, {0x5, 0x2}, {0x2, 0x7}, {0x0, 0x8}, {0x6, 0x9}, {0x1, 0x1}, {0x0, 0x8}, {}, {0x1, 0xa}, {0x7, 0x5}, {0x1, 0x3}, {0x0, 0x6}, {0x2, 0x5}, {0x3, 0x3}, {0x1, 0x9}, {0x1, 0x6}]}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x1, 0x4}, {0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x6}, {0x6, 0x4}, {0x0, 0x2}, {0x1, 0x1}, {0x2, 0x7}, {0x5, 0x2}, {0x0, 0x2}, {0x6, 0x7}, {0x2, 0x8}, {0x4, 0x9}, {0x5, 0x8}, {0x7, 0xa}, {0x6, 0x1}, {0x6, 0xa}, {0x5, 0x6}, {0x5, 0x8}, {0x0, 0x1}, {0x2, 0x4}, {0x0, 0x1}, {0x3, 0xa}, {0x3, 0x5}, {0x5, 0x5}, {0x7, 0x2}, {0x4, 0xa}, {0x1, 0x3}, {0x0, 0x3}, {0x7, 0x8}]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x1, 0x60, 0x1, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x5, 0x9, 0x9, 0x9a08, 0x6, 0x7, 0x3ff]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3c, 0x2, [{0x0, 0x3}, {0x2, 0x8}, {0x1, 0x4}, {0x1, 0x2}, {0x5, 0x5}, {0x7, 0x8}, {0x2, 0x6}, {0x6}, {0x6, 0x4}, {0x7, 0xa}, {0x6}, {0x4, 0x1}, {0x1, 0x8}, {0x3}, {0x5, 0x3}, {0x3, 0x9}, {0x7, 0x9}, {0x4, 0x3}, {0x5, 0x6}, {0x4, 0x5}, {0x1, 0x6}, {0x7, 0x5}, {0x5, 0x3}, {0x6, 0x2}, {0x5}, {0x6, 0x3}, {0x3, 0x5}, {0x1, 0x7}, {0x3, 0x5}, {0x3, 0x6}, {0x4, 0x4}, {0x6, 0x5}, {0x0, 0x7}, {0x2, 0x7}, {0x3, 0x4}, {0x0, 0x9}, {0x4, 0x2}, {0x1, 0x7}, {0x6, 0x4}, {0x6, 0x8}, {0x0, 0x3}, {0x6, 0x8}, {0x4, 0x3}, {0x3, 0x7}, {0x2, 0x5}, {0x5, 0x3}, {}, {0x4, 0x7}, {0x4, 0x1}, {0x2, 0x5}, {0x1, 0x7}, {0x0, 0x2}, {0x3, 0x7}, {0x6, 0x5}, {0x0, 0x6}, {0x7, 0x5}]}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1, 0x69, 0x4, 0xffe1, 0x0, 0x5, 0x103]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x6, 0x36, 0x5, 0x24, 0x1b, 0x6c, 0x60, 0x1, 0x0, 0x16, 0x48, 0xc, 0x1, 0xc, 0x16, 0x9, 0x16, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7, 0xffff, 0x6, 0x200, 0x5, 0x401, 0x7f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2238, 0x2, 0x6, 0x7ff, 0xfff, 0xa43, 0x40, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xde, 0xf1, 0x8, 0x4, 0x52d, 0xfffa, 0x2]}}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0xe, 0xb, 0x24, 0x5, 0x36, 0x60, 0xb, 0xb]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1b, 0x1, 0x1, 0x4, 0x1b]}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x3, 0x6}, {0x1, 0x5}, {0x1, 0x6}, {0x4, 0x7}, {0x7, 0x2}, {0x6, 0x6}, {0x5, 0x1}, {0x2, 0x13}, {0x1, 0x1}, {0x0, 0x8}, {0x4, 0x4}, {0x1, 0xa}, {0x6}]}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x30, 0x3, 0x5, 0x36, 0x6, 0x1, 0x24, 0x2, 0x0, 0x12, 0x6c, 0x16, 0x1, 0x12, 0x5, 0x1, 0x1b, 0x9, 0x24, 0x3, 0x6c, 0x4, 0x18, 0x16, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x8, 0x38, 0x3f, 0x9, 0xd4, 0xc3, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x800, 0x0, 0x1, 0x6, 0xcdf, 0x0, 0x400]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2, 0x2, 0x4, 0x94, 0x4, 0x3, 0x101]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x0, 0x36, 0x0, 0x2, 0x18, 0x6, 0x60, 0x2, 0x5, 0x48, 0x30, 0x4, 0x36, 0x1, 0xb, 0x16, 0x6c, 0x9, 0x48, 0xb, 0x12]}]}, @NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x30, 0x6, 0x16, 0x6c, 0x24]}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x9, 0x16, 0x16, 0x9, 0x48, 0xe, 0x18, 0xc, 0xb, 0xb, 0x12, 0x2, 0x24, 0x60, 0x9, 0x3, 0x1b, 0x36, 0x24, 0x6c, 0x1b, 0x30, 0x12, 0x48, 0x6c, 0x18, 0x5, 0x2, 0xc, 0x9, 0x0, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x350}, 0x1, 0x0, 0x0, 0x4004}, 0x48010) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_TX_TS(r11, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r12, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1, 0x74}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xe}]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x20004000) [ 871.538973] FAULT_INJECTION: forcing a failure. [ 871.538973] name failslab, interval 1, probability 0, space 0, times 0 [ 871.540735] CPU: 0 UID: 0 PID: 7771 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 871.540765] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 871.540778] Call Trace: [ 871.540786] [ 871.540795] dump_stack_lvl+0xfa/0x120 [ 871.540835] should_fail_ex+0x4d7/0x5e0 [ 871.540876] ? security_sk_alloc+0x101/0x160 [ 871.540901] should_failslab+0xc2/0x120 [ 871.540927] __kmalloc_noprof+0xb4/0x4b0 [ 871.540959] ? __kasan_kmalloc+0x7f/0x90 [ 871.540984] ? trace_kmalloc+0x1f/0xb0 [ 871.541016] security_sk_alloc+0x101/0x160 [ 871.541045] sk_prot_alloc+0x20b/0x280 [ 871.541080] sk_alloc+0x34/0xbd0 [ 871.541106] __netlink_create+0x5d/0x280 [ 871.541143] __netlink_kernel_create+0xea/0x7c0 [ 871.541170] ? __pfx___netlink_kernel_create+0x10/0x10 [ 871.541200] ? __pfx_perf_trace_lock+0x10/0x10 [ 871.541230] ? __pfx_genl_pernet_init+0x10/0x10 [ 871.541257] genl_pernet_init+0xbd/0x170 [ 871.541284] ? __pfx_genl_pernet_init+0x10/0x10 [ 871.541310] ? lockdep_init_map_type+0x4b/0x240 [ 871.541336] ? __pfx_genl_rcv+0x10/0x10 [ 871.541359] ? __pfx_genl_bind+0x10/0x10 [ 871.541382] ? __pfx_genl_unbind+0x10/0x10 [ 871.541405] ? __pfx_genl_release+0x10/0x10 [ 871.541432] ? __pfx_netlink_tap_init_net+0x10/0x10 [ 871.541452] ? debug_mutex_init+0x37/0x70 [ 871.541489] ops_init+0x1e1/0x650 [ 871.541523] setup_net+0x10d/0x320 [ 871.541546] ? lockdep_init_map_type+0x4b/0x240 [ 871.541578] ? __pfx_setup_net+0x10/0x10 [ 871.541614] ? debug_mutex_init+0x37/0x70 [ 871.541652] copy_net_ns+0x2e3/0x650 [ 871.541685] create_new_namespaces+0x3f6/0xab0 [ 871.541727] copy_namespaces+0x45c/0x580 [ 871.541760] copy_process+0x26d5/0x73e0 [ 871.541782] ? __pfx_perf_trace_lock+0x10/0x10 [ 871.541826] ? __pfx_copy_process+0x10/0x10 [ 871.541848] ? __might_fault+0xe0/0x190 [ 871.541881] ? _copy_from_user+0x5b/0xd0 [ 871.541913] kernel_clone+0xea/0x7f0 [ 871.541932] ? get_pid_task+0xfd/0x250 [ 871.541972] ? __pfx_kernel_clone+0x10/0x10 [ 871.541991] ? perf_trace_lock+0xb5/0x5d0 [ 871.542026] ? find_held_lock+0x2b/0x80 [ 871.542057] ? ksys_write+0x121/0x240 [ 871.542079] ? lock_is_held_type+0x9e/0x120 [ 871.542116] __do_sys_clone3+0x1f5/0x280 [ 871.542137] ? __pfx___do_sys_clone3+0x10/0x10 [ 871.542181] ? __fget_files+0x20d/0x3b0 [ 871.542225] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 871.542260] ? fput+0x6a/0x100 [ 871.542286] ? ksys_write+0x1a3/0x240 [ 871.542306] ? __pfx_ksys_write+0x10/0x10 [ 871.542341] do_syscall_64+0xbf/0x360 [ 871.542377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.542400] RIP: 0033:0x7ffb744edb19 [ 871.542417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 871.542438] RSP: 002b:00007ffb71a63188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 871.542459] RAX: ffffffffffffffda RBX: 00007ffb74600f60 RCX: 00007ffb744edb19 [ 871.542474] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 871.542487] RBP: 00007ffb71a631d0 R08: 0000000000000000 R09: 0000000000000000 [ 871.542500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 871.542513] R13: 00007ffeb487a35f R14: 00007ffb71a63300 R15: 0000000000022000 [ 871.542550] [ 871.662128] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 871.682678] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 871.696422] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 871.717906] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 871.787065] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 871.821193] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 871.834201] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 871.837374] mac80211_hwsim hwsim11 wlan1: left promiscuous mode 12:01:04 executing program 7: msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000000)=""/89) msgrcv(0xffffffffffffffff, &(0x7f0000000080)={0x0, ""/59}, 0x43, 0x0, 0x1800) 12:01:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=';\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:01:04 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x200, 0x40080) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x108) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r1 = io_uring_setup(0x3e96, &(0x7f0000000140)={0x0, 0x66eb, 0x8, 0x8000000, 0x1ca}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000100)={0x9, 0x4, 0x20, 0x7, "e524d2422f85451a67a318d8c64f29550c23517981ab53597dbf06a158961a0b"}) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x3}}) creat(&(0x7f0000000000)='./file0\x00', 0x100) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r2) fchown(0xffffffffffffffff, r2, 0x0) 12:01:04 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x14, 0x6, @multicast}, 0x10) 12:01:04 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 71) tgkill(r0, r1, 0xb) 12:01:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x900, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:01:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x7c, r6, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:01:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x2, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 882.050933] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 882.060677] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 882.085393] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 882.096108] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 882.118746] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 882.120119] Bluetooth: hci1: Opcode 0x0406 failed: -4 12:01:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0xf00, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:01:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB='f\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) [ 882.179265] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 882.192379] Bluetooth: hci0: Opcode 0x0406 failed: -4 12:01:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x3, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:01:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x1}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x3b, 0xa3, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40840}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x28}}, 0x0) 12:01:04 executing program 7: r0 = msgget(0x2, 0x581) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000000)=""/47) msgctl$MSG_STAT_ANY(0xffffffffffffffff, 0xd, &(0x7f0000000080)=""/236) r1 = msgget(0x0, 0x2) msgctl$IPC_RMID(r1, 0x0) [ 882.214273] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 882.222218] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 882.245677] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 882.248217] Bluetooth: hci3: Opcode 0x0406 failed: -4 12:01:04 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x16, 0x6, @multicast}, 0x10) [ 882.268257] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 882.286037] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 882.294249] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 882.307464] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 882.328183] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 882.339420] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 882.356061] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 882.362783] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 882.421426] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 882.434512] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 882.463085] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 882.475090] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 882.485149] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 882.488330] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 882.493365] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 882.502007] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 882.503005] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 882.506427] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 882.510997] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 882.512960] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 884.483815] Bluetooth: hci0: command 0x0406 tx timeout [ 884.485196] Bluetooth: hci1: command 0x0406 tx timeout [ 884.547720] Bluetooth: hci6: command 0x0406 tx timeout [ 884.548926] Bluetooth: hci7: command 0x0406 tx timeout [ 884.550061] Bluetooth: hci4: command 0x0406 tx timeout [ 884.551340] Bluetooth: hci5: command 0x0406 tx timeout [ 884.552491] Bluetooth: hci3: command 0x0406 tx timeout [ 884.553621] Bluetooth: hci2: command 0x0406 tx timeout [ 886.531700] Bluetooth: hci1: command 0x0406 tx timeout [ 886.532702] Bluetooth: hci0: command 0x0406 tx timeout [ 886.595756] Bluetooth: hci2: command 0x0406 tx timeout [ 886.596532] Bluetooth: hci3: command 0x0406 tx timeout [ 886.597325] Bluetooth: hci6: command 0x0406 tx timeout [ 886.598087] Bluetooth: hci5: command 0x0406 tx timeout [ 886.598846] Bluetooth: hci4: command 0x0406 tx timeout [ 886.599575] Bluetooth: hci7: command 0x0406 tx timeout 12:01:15 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000088}, 0x0) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/79) 12:01:15 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x200, 0x40080) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x108) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r1 = io_uring_setup(0x3e96, &(0x7f0000000140)={0x0, 0x66eb, 0x8, 0x8000000, 0x1ca}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000100)={0x9, 0x4, 0x20, 0x7, "e524d2422f85451a67a318d8c64f29550c23517981ab53597dbf06a158961a0b"}) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x3}}) creat(&(0x7f0000000000)='./file0\x00', 0x100) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r2) fchown(0xffffffffffffffff, r2, 0x0) 12:01:15 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x17, 0x6, @multicast}, 0x10) 12:01:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:01:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x205, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4000105) 12:01:15 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 72) tgkill(r0, r1, 0xb) 12:01:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:01:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0xb700, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 893.456132] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 893.472903] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 12:01:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x48, 0x0, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private0}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x4044001}, 0x20000080) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/partitions\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x9c, r1, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x71}}}}, [@crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x5b, 0x115, "42cec227fbf4f72e8239300a5a383aa845e69e8fa4f3e424986b6e82155a7036bb0d4e0326a175b308a07631ea7e9d1c2924dea1646703e56bf353996acca634038f3adbf2088bf544a1a89b7b6e292387c855449170b2"}], @NL80211_ATTR_HIDDEN_SSID={0x8}, @NL80211_ATTR_HE_BSS_COLOR={0x14, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3f}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_TWT_RESPONDER={0x4}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) [ 893.489679] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 893.510022] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 893.528409] FAULT_INJECTION: forcing a failure. [ 893.528409] name failslab, interval 1, probability 0, space 0, times 0 [ 893.529376] CPU: 0 UID: 0 PID: 7880 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 893.529394] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 893.529403] Call Trace: [ 893.529408] [ 893.529414] dump_stack_lvl+0xfa/0x120 [ 893.529439] should_fail_ex+0x4d7/0x5e0 [ 893.529463] ? __netlink_kernel_create+0x17d/0x7c0 [ 893.529478] should_failslab+0xc2/0x120 [ 893.529493] __kmalloc_noprof+0xb4/0x4b0 [ 893.529514] ? __netlink_create+0x193/0x280 [ 893.529536] __netlink_kernel_create+0x17d/0x7c0 [ 893.529551] ? __pfx___netlink_kernel_create+0x10/0x10 [ 893.529568] ? __pfx_perf_trace_lock+0x10/0x10 [ 893.529586] ? __pfx_genl_pernet_init+0x10/0x10 [ 893.529605] genl_pernet_init+0xbd/0x170 [ 893.529620] ? __pfx_genl_pernet_init+0x10/0x10 [ 893.529634] ? lockdep_init_map_type+0x4b/0x240 [ 893.529650] ? __pfx_genl_rcv+0x10/0x10 [ 893.529663] ? __pfx_genl_bind+0x10/0x10 [ 893.529676] ? __pfx_genl_unbind+0x10/0x10 [ 893.529689] ? __pfx_genl_release+0x10/0x10 [ 893.529703] ? __pfx_netlink_tap_init_net+0x10/0x10 [ 893.529715] ? debug_mutex_init+0x37/0x70 [ 893.529735] ops_init+0x1e1/0x650 [ 893.529756] setup_net+0x10d/0x320 [ 893.529768] ? lockdep_init_map_type+0x4b/0x240 [ 893.529783] ? __pfx_setup_net+0x10/0x10 [ 893.529799] ? debug_mutex_init+0x37/0x70 [ 893.529820] copy_net_ns+0x2e3/0x650 [ 893.529838] create_new_namespaces+0x3f6/0xab0 [ 893.529862] copy_namespaces+0x45c/0x580 [ 893.529881] copy_process+0x26d5/0x73e0 [ 893.529894] ? __pfx_perf_trace_lock+0x10/0x10 [ 893.529918] ? __pfx_copy_process+0x10/0x10 [ 893.529930] ? __might_fault+0xe0/0x190 [ 893.529950] ? _copy_from_user+0x5b/0xd0 [ 893.529968] kernel_clone+0xea/0x7f0 [ 893.529979] ? get_pid_task+0xfd/0x250 [ 893.529999] ? __pfx_kernel_clone+0x10/0x10 [ 893.530009] ? perf_trace_lock+0xb5/0x5d0 [ 893.530029] ? find_held_lock+0x2b/0x80 [ 893.530046] ? ksys_write+0x121/0x240 [ 893.530059] ? lock_is_held_type+0x9e/0x120 [ 893.530080] __do_sys_clone3+0x1f5/0x280 [ 893.530092] ? __pfx___do_sys_clone3+0x10/0x10 [ 893.530116] ? __fget_files+0x20d/0x3b0 [ 893.530141] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 893.530162] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 893.530182] ? ksys_write+0x1a3/0x240 [ 893.530194] ? __pfx_ksys_write+0x10/0x10 [ 893.530213] do_syscall_64+0xbf/0x360 [ 893.530234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.530247] RIP: 0033:0x7ffb744edb19 [ 893.530257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 893.530268] RSP: 002b:00007ffb71a63188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 893.530281] RAX: ffffffffffffffda RBX: 00007ffb74600f60 RCX: 00007ffb744edb19 [ 893.530289] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 893.530296] RBP: 00007ffb71a631d0 R08: 0000000000000000 R09: 0000000000000000 [ 893.530303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 893.530310] R13: 00007ffeb487a35f R14: 00007ffb71a63300 R15: 0000000000022000 [ 893.530331] 12:01:15 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x18, 0x6, @multicast}, 0x10) [ 893.617366] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 893.618160] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 893.618824] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 893.619431] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 893.629071] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 893.634635] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 893.644953] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 893.645576] Bluetooth: hci6: Opcode 0x0c1a failed: -4 12:01:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x5, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:01:15 executing program 7: msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/79) msgget$private(0x0, 0x55) 12:01:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0xf000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:01:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="80010000", @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:01:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) readahead(r0, 0x32, 0x4) [ 893.693315] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 893.718980] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 12:01:15 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 73) tgkill(r0, r1, 0xb) 12:01:15 executing program 6: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r0, 0x4, 0x70bd27, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x5ab71de975dffd03}, 0x44) [ 895.619762] Bluetooth: hci2: command 0x0406 tx timeout [ 895.620870] Bluetooth: hci0: command 0x0406 tx timeout [ 895.621908] Bluetooth: hci1: command 0x0406 tx timeout [ 895.685867] Bluetooth: hci6: command 0x0406 tx timeout [ 895.686977] Bluetooth: hci7: command 0x0406 tx timeout [ 895.688007] Bluetooth: hci4: command 0x0406 tx timeout [ 895.689027] Bluetooth: hci5: command 0x0406 tx timeout [ 895.690027] Bluetooth: hci3: command 0x0406 tx timeout 12:01:24 executing program 7: msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/79) r0 = msgget(0x2, 0x200) msgrcv(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007dba4e57a264eaaf00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007a68af5fe28f7ce55e3a8b5180caf830ccd9620d512919cb8374e7df9fed3a88728eafcb902d1e6b2aaba3ef98e4531f7e481fb589de4d633b1ba956aaa7d607a649c49bdfc7f309a8f0e886d2db9e29598a14ece665bba13f3fa9031dd25f2ebf1c837615114f6e4957b6514b8b97417622c7775175fc73df9934465744eff0d30e7e8f15d4ae864d615061c8c231d9d5d97cae92acd1c36366b87a838152e31eea8817d77c164bf951e76d62152d4895"], 0x103, 0x3, 0x3000) msgsnd(r0, &(0x7f0000000280)={0x2}, 0x8, 0x0) r1 = msgget(0x2, 0x200) msgrcv(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007dba4e57a264eaaf00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007a68af5fe28f7ce55e3a8b5180caf830ccd9620d512919cb8374e7df9fed3a88728eafcb902d1e6b2aaba3ef98e4531f7e481fb589de4d633b1ba956aaa7d607a649c49bdfc7f309a8f0e886d2db9e29598a14ece665bba13f3fa9031dd25f2ebf1c837615114f6e4957b6514b8b97417622c7775175fc73df9934465744eff0d30e7e8f15d4ae864d615061c8c231d9d5d97cae92acd1c36366b87a838152e31eea8817d77c164bf951e76d62152d4895"], 0x103, 0x3, 0x3000) msgrcv(r0, &(0x7f0000000080)={0x0, ""/218}, 0xe2, 0x1, 0x3800) msgsnd(r1, &(0x7f0000000280)={0x2}, 0x8, 0x0) msgrcv(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000300"/54], 0x3a, 0x3, 0x1000) msgsnd(r0, &(0x7f0000000000)={0x3, "c3946faa3b3d30790c19c1f8f7f5e82c26bc2d1e463da749142030f9a90c88846d6b431f8426"}, 0x2e, 0x0) 12:01:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x6, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:01:24 executing program 6: stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) chown(&(0x7f0000000300)='./file0\x00', r2, r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r8) fchown(r3, r8, r0) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x391080, 0x0) recvmsg$unix(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)=""/134, 0x86}], 0x1}, 0x12040) r10 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x7f, 0x40, 0x5, 0xfd, 0x0, 0x1, 0x80000, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000040), 0x8}, 0x2000, 0x4, 0xbf9, 0x9, 0xfffffffffffeffff, 0x7, 0xf640, 0x0, 0xef87, 0x0, 0x84f}, 0x0, 0xe, r10, 0x8) syz_io_uring_setup(0x2bdf, &(0x7f0000000180)={0x0, 0x0, 0x6, 0x40000000}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000000c0)) 12:01:24 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 74) tgkill(r0, r1, 0xb) 12:01:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x30000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:01:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="e03f0300", @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:01:24 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0xe) 12:01:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="a84b8f05a3f9bc5ccfccc6f7837c541732ffb1ca7b880cf263bd70935827ebeb74c5324984666e35072e6b50e80f9fec3b79321737439d07dc8931d7fbf505806769dc9a92b7c756705968fed2ef38b9c90d67ba1297def41052b7707c5d66e97f3ef835164fbbaaadbff159cd4f35c3ec0c571c3848fd0ba756e67caffee1f11518dc4410948b4e9f8e6938c17c455913b44db0b3a76cb488c28d14f421ec4c6d2a0076cbb4d067c9d0ad684e89a69ee3dcffdca11d57560d2b809146e5ed73fb92f2170188", @ANYRES16=r6, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r8, @ANYBLOB="080026006c0900000800b70000000000"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_START_NAN(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r6, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x1) 12:01:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x7, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 902.231878] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 902.256028] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 902.263266] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode 12:01:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x80000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 902.279812] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 902.287121] FAULT_INJECTION: forcing a failure. [ 902.287121] name failslab, interval 1, probability 0, space 0, times 0 [ 902.288030] CPU: 0 UID: 0 PID: 7951 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 902.288046] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 902.288053] Call Trace: [ 902.288058] [ 902.288063] dump_stack_lvl+0xfa/0x120 [ 902.288090] should_fail_ex+0x4d7/0x5e0 [ 902.288115] ? ops_init+0x77/0x650 [ 902.288129] should_failslab+0xc2/0x120 [ 902.288145] __kmalloc_noprof+0xb4/0x4b0 [ 902.288162] ? __pfx_genl_release+0x10/0x10 [ 902.288180] ? __pfx_netlink_tap_init_net+0x10/0x10 [ 902.288191] ? debug_mutex_init+0x37/0x70 [ 902.288213] ops_init+0x77/0x650 [ 902.288243] setup_net+0x10d/0x320 [ 902.288255] ? lockdep_init_map_type+0x4b/0x240 [ 902.288270] ? __pfx_setup_net+0x10/0x10 [ 902.288286] ? debug_mutex_init+0x37/0x70 [ 902.288307] copy_net_ns+0x2e3/0x650 [ 902.288325] create_new_namespaces+0x3f6/0xab0 [ 902.288348] copy_namespaces+0x45c/0x580 [ 902.288366] copy_process+0x26d5/0x73e0 [ 902.288379] ? __pfx_perf_trace_lock+0x10/0x10 [ 902.288403] ? __pfx_copy_process+0x10/0x10 [ 902.288415] ? __might_fault+0xe0/0x190 [ 902.288433] ? _copy_from_user+0x5b/0xd0 [ 902.288451] kernel_clone+0xea/0x7f0 [ 902.288461] ? get_pid_task+0xfd/0x250 [ 902.288481] ? __pfx_kernel_clone+0x10/0x10 [ 902.288491] ? perf_trace_lock+0xb5/0x5d0 [ 902.288510] ? find_held_lock+0x2b/0x80 [ 902.288527] ? ksys_write+0x121/0x240 [ 902.288539] ? lock_is_held_type+0x9e/0x120 [ 902.288559] __do_sys_clone3+0x1f5/0x280 [ 902.288571] ? __pfx___do_sys_clone3+0x10/0x10 [ 902.288598] ? __fget_files+0x20d/0x3b0 [ 902.288623] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 902.288642] ? fput+0x6a/0x100 [ 902.288657] ? ksys_write+0x1a3/0x240 [ 902.288667] ? __pfx_ksys_write+0x10/0x10 [ 902.288686] do_syscall_64+0xbf/0x360 [ 902.288706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.288719] RIP: 0033:0x7ffb744edb19 [ 902.288729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 902.288740] RSP: 002b:00007ffb71a63188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 902.288752] RAX: ffffffffffffffda RBX: 00007ffb74600f60 RCX: 00007ffb744edb19 [ 902.288760] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 902.288768] RBP: 00007ffb71a631d0 R08: 0000000000000000 R09: 0000000000000000 [ 902.288774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 902.288781] R13: 00007ffeb487a35f R14: 00007ffb71a63300 R15: 0000000000022000 [ 902.288801] 12:01:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x8, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:01:24 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0xf) 12:01:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="effdffff", @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:01:24 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 75) tgkill(r0, r1, 0xb) [ 902.408248] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 902.431499] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 902.458219] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 902.477838] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 902.517178] FAULT_INJECTION: forcing a failure. [ 902.517178] name failslab, interval 1, probability 0, space 0, times 0 [ 902.518986] CPU: 1 UID: 0 PID: 7976 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 902.519018] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 902.519032] Call Trace: [ 902.519040] [ 902.519049] dump_stack_lvl+0xfa/0x120 [ 902.519091] should_fail_ex+0x4d7/0x5e0 [ 902.519134] ? __netlink_kernel_create+0x17d/0x7c0 [ 902.519160] should_failslab+0xc2/0x120 [ 902.519188] __kmalloc_noprof+0xb4/0x4b0 [ 902.519226] ? __netlink_create+0x193/0x280 [ 902.519267] __netlink_kernel_create+0x17d/0x7c0 [ 902.519297] ? __pfx___netlink_kernel_create+0x10/0x10 [ 902.519330] ? __pfx_perf_trace_lock+0x10/0x10 [ 902.519362] ? __pfx_genl_pernet_init+0x10/0x10 [ 902.519391] genl_pernet_init+0xbd/0x170 [ 902.519421] ? __pfx_genl_pernet_init+0x10/0x10 [ 902.519448] ? lockdep_init_map_type+0x4b/0x240 [ 902.519477] ? __pfx_genl_rcv+0x10/0x10 [ 902.519502] ? __pfx_genl_bind+0x10/0x10 [ 902.519527] ? __pfx_genl_unbind+0x10/0x10 [ 902.519552] ? __pfx_genl_release+0x10/0x10 [ 902.519581] ? __pfx_netlink_tap_init_net+0x10/0x10 [ 902.519610] ? debug_mutex_init+0x37/0x70 [ 902.519651] ops_init+0x1e1/0x650 [ 902.519687] setup_net+0x10d/0x320 [ 902.519712] ? lockdep_init_map_type+0x4b/0x240 [ 902.519740] ? __pfx_setup_net+0x10/0x10 [ 902.519773] ? debug_mutex_init+0x37/0x70 [ 902.519813] copy_net_ns+0x2e3/0x650 [ 902.519848] create_new_namespaces+0x3f6/0xab0 [ 902.519894] copy_namespaces+0x45c/0x580 [ 902.519929] copy_process+0x26d5/0x73e0 [ 902.519953] ? __pfx_perf_trace_lock+0x10/0x10 [ 902.520000] ? __pfx_copy_process+0x10/0x10 [ 902.520023] ? __might_fault+0xe0/0x190 [ 902.520060] ? _copy_from_user+0x5b/0xd0 [ 902.520093] kernel_clone+0xea/0x7f0 [ 902.520114] ? get_pid_task+0xfd/0x250 [ 902.520152] ? __pfx_kernel_clone+0x10/0x10 [ 902.520172] ? perf_trace_lock+0xb5/0x5d0 [ 902.520210] ? find_held_lock+0x2b/0x80 [ 902.520257] ? ksys_write+0x121/0x240 [ 902.520280] ? lock_is_held_type+0x9e/0x120 [ 902.520320] __do_sys_clone3+0x1f5/0x280 [ 902.520342] ? __pfx___do_sys_clone3+0x10/0x10 [ 902.520390] ? __fget_files+0x20d/0x3b0 [ 902.520437] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 902.520475] ? fput+0x6a/0x100 [ 902.520502] ? ksys_write+0x1a3/0x240 [ 902.520525] ? __pfx_ksys_write+0x10/0x10 [ 902.520562] do_syscall_64+0xbf/0x360 [ 902.520601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.520625] RIP: 0033:0x7ffb744edb19 [ 902.520643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 902.520665] RSP: 002b:00007ffb71a63188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 902.520687] RAX: ffffffffffffffda RBX: 00007ffb74600f60 RCX: 00007ffb744edb19 [ 902.520703] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 902.520718] RBP: 00007ffb71a631d0 R08: 0000000000000000 R09: 0000000000000000 [ 902.520732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 902.520746] R13: 00007ffeb487a35f R14: 00007ffb71a63300 R15: 0000000000022000 [ 902.520785] 12:01:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0xf0ffff, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:01:35 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 76) tgkill(r0, r1, 0xb) 12:01:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:01:35 executing program 6: perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0xb6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1f, 0x7ff}, 0x201, 0x0, 0x0, 0x7, 0x24a03730, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) fcntl$getflags(r1, 0x408) symlinkat(&(0x7f0000000040)='./file0/file0\x00', r0, &(0x7f0000000200)='./file0\x00') r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x602903, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setregid(r3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setregid(r5, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x2}, [{0x2, 0x3}], {0x4, 0x3}, [{0x8, 0x2, 0xee01}, {0x8, 0x1}, {0x8, 0x1, 0xffffffffffffffff}, {0x8, 0x5}, {0x8, 0x4, r3}, {0x8, 0x4}, {0x8, 0x2, 0xffffffffffffffff}, {0x8, 0x2, 0xee00}, {0x8, 0x2, r5}], {0x10, 0x6}, {0x20, 0x5}}, 0x74, 0x0) r6 = pidfd_getfd(r2, r2, 0x0) ioctl$TCSETAF(r6, 0x5408, &(0x7f0000000180)={0xfff9, 0x1, 0x7, 0x20, 0x10, "430db7624f910609"}) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x602903, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc018937e, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r7, @in_args={0x4}}, './file0/file0\x00'}) linkat(r0, &(0x7f00000005c0)='./file0/file0\x00', 0xffffffffffffffff, 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x8, 0x0) 12:01:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x9, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:01:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRESDEC=r0, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r2, @ANYBLOB="08000002f1ffc280b1b5c09cf60dffffb8af556af267770d3fff7207811bf3"], 0x2c}}, 0x0) 12:01:35 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6gre0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 12:01:35 executing program 7: msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/79) r0 = msgget(0x2, 0x200) r1 = msgget(0x2, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setregid(r3, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f00000000c0)={{0x0, 0x0, r3, 0xffffffffffffffff, 0xee00, 0x197, 0x7991}, 0x0, 0x0, 0xb5, 0x8000, 0x9, 0x9, 0x7ff, 0x9aaa, 0x0, 0x7, 0xffffffffffffffff}) r4 = msgget(0x2, 0x200) msgrcv(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007dba4e57a264eaaf00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007a68af5fe28f7ce55e3a8b5180caf830ccd9620d512919cb8374e7df9fed3a88728eafcb902d1e6b2aaba3ef98e4531f7e481fb589de4d633b1ba956aaa7d607a649c49bdfc7f309a8f0e886d2db9e29598a14ece665bba13f3fa9031dd25f2ebf1c837615114f6e4957b6514b8b97417622c7775175fc73df9934465744eff0d30e7e8f15d4ae864d615061c8c231d9d5d97cae92acd1c36366b87a838152e31eea8817d77c164bf951e76d62152d4895"], 0x103, 0x3, 0x3000) msgsnd(r4, &(0x7f0000000280)={0x2}, 0x8, 0x0) msgrcv(r4, &(0x7f0000000380)=ANY=[@ANYRES64=r0], 0x103, 0x2, 0x3000) msgrcv(r4, &(0x7f0000000140)={0x0, ""/223}, 0xe7, 0x3, 0x3800) r5 = msgget(0x2, 0x200) msgrcv(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007dba4e57a264eaaf00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007a68af5fe28f7ce55e3a8b5180caf830ccd9620d512919cb8374e7df9fed3a88728eafcb902d1e6b2aaba3ef98e4531f7e481fb589de4d633b1ba956aaa7d607a649c49bdfc7f309a8f0e886d2db9e29598a14ece665bba13f3fa9031dd25f2ebf1c837615114f6e4957b6514b8b97417622c7775175fc73df9934465744eff0d30e7e8f15d4ae864d615061c8c231d9d5d97cae92acd1c36366b87a838152e31eea8817d77c164bf951e76d62152d4895"], 0x103, 0x3, 0x3000) msgsnd(r5, &(0x7f0000000280)={0x2}, 0x8, 0x0) msgsnd(r5, &(0x7f0000000080)={0x3, "a4a9fbd89135b18611f2c6dbce2f18c0ad683af76ec7392e386d5e8568bd0fb9041d0899f53791f9b7399180a2c368b08f2b8250f65a"}, 0x3e, 0x0) msgsnd(r0, &(0x7f0000000280)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000000)=""/72) [ 913.645564] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 913.660244] tmpfs: Unknown parameter './file0/file0' 12:01:35 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r3, 0x0, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xd620}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000840) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x1c, r0, 0x1, 0x0, 0x10, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x20000040) 12:01:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c030000", @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:01:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0xf, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:01:36 executing program 6: ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x29, 0x84, 0x9d, 0x7ff, 0xf, @local, @loopback, 0x700, 0x1, 0x7, 0x79}}) r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0xbe42) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032abd7000fbf1df253700000008005700400000000800270002000000080026008f090000080027000100000005001801280000000800a100008000008049002ba05906f2ecb44ed50def38fa050018013400000005001901070000000800a10000800000"], 0x6c}}, 0x8800) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x6) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000100)={0x2, 0xffffffff, 0xa6, 0x4, 0x0, 0x8}) 12:01:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x1000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:01:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c040000", @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) [ 913.986067] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 12:01:36 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 77) tgkill(r0, r1, 0xb) [ 914.017862] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 914.041932] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 12:01:47 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 78) tgkill(r0, r1, 0xb) 12:01:47 executing program 7: r0 = msgget(0x2, 0x200) msgrcv(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007dba4e57a264eaaf00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007a68af5fe28f7ce55e3a8b5180caf830ccd9620d512919cb8374e7df9fed3a88728eafcb902d1e6b2aaba3ef98e4531f7e481fb589de4d633b1ba956aaa7d607a649c49bdfc7f309a8f0e886d2db9e29598a14ece665bba13f3fa9031dd25f2ebf1c837615114f6e4957b6514b8b97417622c7775175fc73df9934465744eff0d30e7e8f15d4ae864d615061c8c231d9d5d97cae92acd1c36366b87a838152e31eea8817d77c164bf951e76d62152d4895"], 0x103, 0x3, 0x3000) msgsnd(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="020087ff0000"], 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000000)=""/67) 12:01:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x2000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:01:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0xed, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:01:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) r4 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) getsockopt$sock_timeval(r4, 0x1, 0x43, &(0x7f0000000080), &(0x7f00000000c0)=0x10) 12:01:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c050000", @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:01:47 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/raw6\x00') pread64(r0, &(0x7f0000000140)=""/217, 0xd9, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2390, 0x0, 0x10000000, 0x0, 0x0, 0x7fffffff, 0x1}, 0x0, 0xffffffffffffffff, r0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r6, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000180)={r3, 0x1, 0x6, @multicast}, 0x10) 12:01:47 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/raw6\x00') pread64(r0, &(0x7f0000000140)=""/217, 0xd9, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x0, 0x20, 0xf7, 0xeb, 0xc, @dev={0xfe, 0x80, '\x00', 0x18}, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x700, 0x40, 0x8000, 0x5386}}) r2 = io_uring_setup(0x5298, &(0x7f0000000080)={0x0, 0x922c, 0x2, 0x5}) close_range(r2, 0xffffffffffffffff, 0x0) ppoll(0x0, 0xffffffffffffff03, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/raw6\x00') pread64(r3, &(0x7f0000000140)=""/217, 0xd9, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl2\x00', r1, 0x2f, 0x25, 0x8, 0xe4, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, @remote, 0x87, 0x1, 0x4, 0x2}}) [ 925.048476] FAULT_INJECTION: forcing a failure. [ 925.048476] name failslab, interval 1, probability 0, space 0, times 0 [ 925.049658] CPU: 1 UID: 0 PID: 8055 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 925.049677] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 925.049686] Call Trace: [ 925.049691] [ 925.049696] dump_stack_lvl+0xfa/0x120 [ 925.049724] should_fail_ex+0x4d7/0x5e0 [ 925.049750] ? security_inode_alloc+0x3e/0x130 [ 925.049767] should_failslab+0xc2/0x120 [ 925.049785] kmem_cache_alloc_noprof+0x5f/0x3d0 [ 925.049808] ? lockdep_init_map_type+0x4b/0x240 [ 925.049830] security_inode_alloc+0x3e/0x130 [ 925.049848] inode_init_always_gfp+0xc94/0xff0 [ 925.049867] alloc_inode+0x8d/0x250 [ 925.049885] sock_alloc+0x40/0x270 [ 925.049904] sock_create_lite+0x83/0x120 [ 925.049924] __netlink_kernel_create+0xba/0x7c0 [ 925.049943] ? __pfx___netlink_kernel_create+0x10/0x10 [ 925.049957] ? find_held_lock+0x2b/0x80 [ 925.049976] ? audit_net_init+0x190/0x440 [ 925.049998] ? lock_release+0xc8/0x290 [ 925.050012] ? lock_is_held_type+0x9e/0x120 [ 925.050035] audit_net_init+0x1ae/0x440 [ 925.050056] ? __pfx_audit_net_init+0x10/0x10 [ 925.050076] ? kasan_save_track+0x14/0x30 [ 925.050093] ? __pfx_audit_receive+0x10/0x10 [ 925.050106] ? __pfx_audit_multicast_bind+0x10/0x10 [ 925.050120] ? __pfx_audit_multicast_unbind+0x10/0x10 [ 925.050134] ? __kmalloc_noprof+0x215/0x4b0 [ 925.050153] ? __pfx_genl_release+0x10/0x10 [ 925.050171] ? lock_is_held_type+0x9e/0x120 [ 925.050192] ? __pfx_audit_net_init+0x10/0x10 [ 925.050212] ops_init+0x1e1/0x650 [ 925.050233] setup_net+0x10d/0x320 [ 925.050247] ? lockdep_init_map_type+0x4b/0x240 [ 925.050263] ? __pfx_setup_net+0x10/0x10 [ 925.050282] ? debug_mutex_init+0x37/0x70 [ 925.050305] copy_net_ns+0x2e3/0x650 [ 925.050325] create_new_namespaces+0x3f6/0xab0 [ 925.050352] copy_namespaces+0x45c/0x580 [ 925.050373] copy_process+0x26d5/0x73e0 [ 925.050388] ? __pfx_perf_trace_lock+0x10/0x10 [ 925.050416] ? __pfx_copy_process+0x10/0x10 [ 925.050429] ? __might_fault+0xe0/0x190 [ 925.050450] ? _copy_from_user+0x5b/0xd0 [ 925.050470] kernel_clone+0xea/0x7f0 [ 925.050482] ? get_pid_task+0xfd/0x250 [ 925.050504] ? __pfx_kernel_clone+0x10/0x10 [ 925.050516] ? perf_trace_lock+0xb5/0x5d0 [ 925.050538] ? find_held_lock+0x2b/0x80 [ 925.050558] ? ksys_write+0x121/0x240 [ 925.050571] ? lock_is_held_type+0x9e/0x120 [ 925.050599] __do_sys_clone3+0x1f5/0x280 [ 925.050612] ? __pfx___do_sys_clone3+0x10/0x10 [ 925.050639] ? __fget_files+0x20d/0x3b0 [ 925.050666] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 925.050688] ? fput+0x6a/0x100 [ 925.050704] ? ksys_write+0x1a3/0x240 [ 925.050716] ? __pfx_ksys_write+0x10/0x10 [ 925.050738] do_syscall_64+0xbf/0x360 [ 925.050761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.050776] RIP: 0033:0x7ffb744edb19 [ 925.050787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 925.050800] RSP: 002b:00007ffb71a63188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 925.050813] RAX: ffffffffffffffda RBX: 00007ffb74600f60 RCX: 00007ffb744edb19 [ 925.050823] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 925.050831] RBP: 00007ffb71a631d0 R08: 0000000000000000 R09: 0000000000000000 [ 925.050840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 925.050848] R13: 00007ffeb487a35f R14: 00007ffb71a63300 R15: 0000000000022000 [ 925.050871] [ 925.081465] audit: cannot initialize netlink socket in namespace 12:01:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c060000", @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:01:47 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 79) tgkill(r0, r1, 0xb) [ 925.208859] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode 12:01:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\a\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:01:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0xf0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 925.300907] FAULT_INJECTION: forcing a failure. [ 925.300907] name failslab, interval 1, probability 0, space 0, times 0 [ 925.301959] CPU: 1 UID: 0 PID: 8085 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 925.301976] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 925.301984] Call Trace: [ 925.301989] [ 925.301994] dump_stack_lvl+0xfa/0x120 [ 925.302018] should_fail_ex+0x4d7/0x5e0 [ 925.302042] ? security_inode_alloc+0x3e/0x130 [ 925.302057] should_failslab+0xc2/0x120 [ 925.302073] kmem_cache_alloc_noprof+0x5f/0x3d0 [ 925.302094] ? lockdep_init_map_type+0x4b/0x240 [ 925.302113] security_inode_alloc+0x3e/0x130 [ 925.302129] inode_init_always_gfp+0xc94/0xff0 [ 925.302145] alloc_inode+0x8d/0x250 [ 925.302161] sock_alloc+0x40/0x270 [ 925.302178] sock_create_lite+0x83/0x120 [ 925.302195] __netlink_kernel_create+0xba/0x7c0 [ 925.302211] ? __pfx___netlink_kernel_create+0x10/0x10 [ 925.302224] ? find_held_lock+0x2b/0x80 [ 925.302241] ? audit_net_init+0x190/0x440 [ 925.302260] ? lock_release+0xc8/0x290 [ 925.302274] ? lock_is_held_type+0x9e/0x120 [ 925.302296] audit_net_init+0x1ae/0x440 [ 925.302314] ? __pfx_audit_net_init+0x10/0x10 [ 925.302332] ? kasan_save_track+0x14/0x30 [ 925.302347] ? __pfx_audit_receive+0x10/0x10 [ 925.302358] ? __pfx_audit_multicast_bind+0x10/0x10 [ 925.302370] ? __pfx_audit_multicast_unbind+0x10/0x10 [ 925.302383] ? __kmalloc_noprof+0x215/0x4b0 [ 925.302399] ? __pfx_genl_release+0x10/0x10 [ 925.302415] ? lock_is_held_type+0x9e/0x120 [ 925.302433] ? __pfx_audit_net_init+0x10/0x10 [ 925.302450] ops_init+0x1e1/0x650 [ 925.302469] setup_net+0x10d/0x320 [ 925.302482] ? lockdep_init_map_type+0x4b/0x240 [ 925.302496] ? __pfx_setup_net+0x10/0x10 [ 925.302512] ? debug_mutex_init+0x37/0x70 [ 925.302532] copy_net_ns+0x2e3/0x650 [ 925.302550] create_new_namespaces+0x3f6/0xab0 [ 925.302573] copy_namespaces+0x45c/0x580 [ 925.302595] copy_process+0x26d5/0x73e0 [ 925.302608] ? __pfx_perf_trace_lock+0x10/0x10 [ 925.302632] ? __pfx_copy_process+0x10/0x10 [ 925.302644] ? __might_fault+0xe0/0x190 [ 925.302663] ? _copy_from_user+0x5b/0xd0 [ 925.302680] kernel_clone+0xea/0x7f0 [ 925.302690] ? get_pid_task+0xfd/0x250 [ 925.302710] ? __pfx_kernel_clone+0x10/0x10 [ 925.302720] ? perf_trace_lock+0xb5/0x5d0 [ 925.302739] ? find_held_lock+0x2b/0x80 [ 925.302755] ? ksys_write+0x121/0x240 [ 925.302768] ? lock_is_held_type+0x9e/0x120 [ 925.302787] __do_sys_clone3+0x1f5/0x280 [ 925.302798] ? __pfx___do_sys_clone3+0x10/0x10 [ 925.302822] ? __fget_files+0x20d/0x3b0 [ 925.302845] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 925.302864] ? fput+0x6a/0x100 [ 925.302878] ? ksys_write+0x1a3/0x240 [ 925.302889] ? __pfx_ksys_write+0x10/0x10 [ 925.302908] do_syscall_64+0xbf/0x360 [ 925.302928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.302940] RIP: 0033:0x7ffb744edb19 [ 925.302950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 925.302961] RSP: 002b:00007ffb71a63188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 925.302973] RAX: ffffffffffffffda RBX: 00007ffb74600f60 RCX: 00007ffb744edb19 [ 925.302981] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 925.302988] RBP: 00007ffb71a631d0 R08: 0000000000000000 R09: 0000000000000000 [ 925.302995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 925.303002] R13: 00007ffeb487a35f R14: 00007ffb71a63300 R15: 0000000000022000 [ 925.303022] [ 925.328967] audit: cannot initialize netlink socket in namespace 12:01:47 executing program 6: epoll_pwait2(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}, {}], 0x4, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000200)={[0x5]}, 0x8) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000100), 0x30500, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xc8}}, './file0\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x10280, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="09000000050000002e2f66696c653000"]) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000000)=ANY=[@ANYBLOB="2a986fef39586ccbb2f9beefee15976a4d895a45d5cdfb617a89a33a6901c0f393be99853b0cea4c49b5c0e3f164d887130bd4add78e00910c98f6227361877a7cc05aad8299"]) close_range(r2, r3, 0x0) 12:01:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:01:47 executing program 7: r0 = epoll_create(0x5f7) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f00000002c0)={0x0, 0x3, [0xd4e6, 0x0, 0xfffffffffffff000, 0x679ad255, 0x2, 0x7]}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/raw6\x00') r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x7f, 0x0, 0x0, 0xfe, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000380), 0x6}, 0x10029, 0x8, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r3 = fsopen(&(0x7f00000000c0)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000008000300", @ANYRES32=r8, @ANYBLOB="080026006c0900000800b70000000000"], 0x2c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) io_submit(0x0, 0x2, &(0x7f0000002480)=[&(0x7f0000001400)={0x0, 0x0, 0x0, 0x2, 0x9, r5, &(0x7f00000003c0)="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", 0x1000, 0x9, 0x0, 0x2, r9}, &(0x7f0000002440)={0x0, 0x0, 0x0, 0x3, 0x6, r2, &(0x7f0000001440)="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", 0x1000, 0x10000, 0x0, 0x3, r4}]) pread64(r1, &(0x7f0000000140)=""/217, 0xd9, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) ioctl$int_out(r10, 0x5460, &(0x7f0000000340)) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000080)) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000000)=""/79) syz_open_dev$vcsu(&(0x7f0000000100), 0x3, 0x84801) 12:01:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x3000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:01:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x4000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:01:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x20, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x6e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x4f, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x8010) [ 925.509021] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 12:01:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x300, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 925.617498] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 925.630452] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 12:01:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x5000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:01:56 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe1, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffb02d, 0x3ff}}, 0x0, 0x3, 0xffffffffffffffff, 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0xe, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) 12:01:56 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x40) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '\xbb\xbb\xbb\xbb\xbb\xbb'}, {0x20, '\xe5**\'[\f+!.'}], 0xa, "4d6d690b60665e885301d32a5c7828"}, 0x2b) readv(r5, &(0x7f0000000580)=[{&(0x7f0000000040)}, {&(0x7f0000000240)=""/135, 0x87}, {&(0x7f0000000080)=""/117, 0x75}, {&(0x7f0000000300)=""/229, 0xe5}, {&(0x7f0000000400)=""/158, 0x9e}, {&(0x7f00000001c0)=""/44, 0x2c}, {&(0x7f00000004c0)=""/140, 0x8c}], 0x7) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 12:01:56 executing program 7: r0 = msgget(0x2, 0x200) msgrcv(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007dba4e57a264eaaf00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007a68af5fe28f7ce55e3a8b5180caf830ccd9620d512919cb8374e7df9fed3a88728eafcb902d1e6b2aaba3ef98e4531f7e481fb589de4d633b1ba956aaa7d607a649c49bdfc7f309a8f0e886d2db9e29598a14ece665bba13f3fa9031dd25f2ebf1c837615114f6e4957b6514b8b97417622c7775175fc73df9934465744eff0d30e7e8f15d4ae864d615061c8c231d9d5d97cae92acd1c36366b87a838152e31eea8817d77c164bf951e76d62152d4895"], 0x103, 0x3, 0x3000) msgsnd(r0, &(0x7f0000000280)={0x2}, 0x8, 0x0) r1 = msgget(0x3, 0x41) msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000000)=""/79) 12:01:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0xfffffffffffffe45, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:01:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\b\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:01:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x500, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:01:56 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 80) tgkill(r0, r1, 0xb) 12:01:56 executing program 7: msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000000)=""/64) r0 = msgget$private(0x0, 0x6) msgsnd(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000000000001af2c3282dd223187f68a73c53ceb7746579882670aaf4356d384e66aa3261ea611dfeb002860ffd438977210e2c50a8ca423b4caedd24bf191d94b8ebd876a5c6f7fe1a0cf4d284759062c221d9fb5d6c0af30eeca50bac87a5ce5521cf08eaa5d283757e1d5b7d92d0c411a2aabc2b2e7c1db7cc570c0490f49879914b50715d6774beb609fb920fe3b02861d3ced0a72e52ec4340665d99b8991b1ce12bb1e5d0d5e4e766755b886b1884db7df09c3c4a79c5cfcdd23558de1816aeba5e3b9b2408a78601b66ec68f0e79e4bf3c79b88724fe53e5ac58e08cbc42874c27e585398ccfd4b9a74114bc9f98e6427f0170a41309387cac632a2913e72dbd88fe382cf48fa8d61937d9a92f36c4dbeb1dea8362b3f326ddfb62a79eeaa903160309978b64c42dd9d5f87ee9e930ee41ed391803ccb7ff09cd3043c11c4686f4e6b6924994c698e62bb9040e32355598f43dd2b98ffd9a76553172222fe2d93c8a69cd6f613c6b265902114e58d6781470edcc63440bc96100289832acde9d01"], 0x106, 0x0) r1 = msgget$private(0x0, 0x4) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f0000000240)=""/25) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r4) r6 = msgget$private(0x0, 0xf53f6620dc2ac10d) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setregid(r8, 0x0) r9 = fork() ptrace(0x10, r9) ptrace$setsig(0x4203, r9, 0x5, &(0x7f00000000c0)={0x1f, 0x101, 0xfffffffe}) msgctl$IPC_SET(r6, 0x1, &(0x7f0000000280)={{0x1, r4, r8, 0xee01, r5, 0x1, 0x40}, 0x0, 0x0, 0x8001, 0x3, 0xffffffff, 0x1, 0x1ff, 0x2, 0x1, 0x6, r9, r3}) r10 = getpgrp(0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f00000000c0)={{0x0, 0xee01, 0xee01, r4, 0xee00, 0x80, 0xd7}, 0x0, 0x0, 0x2744, 0xfffffffffffffffe, 0x3, 0x101, 0x9, 0xc7d, 0x36c, 0x3f, r10}) msgctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000040)=""/75) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000140)=""/193) 12:01:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x6000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 934.289893] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 934.309107] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 934.322418] FAULT_INJECTION: forcing a failure. [ 934.322418] name failslab, interval 1, probability 0, space 0, times 0 [ 934.323394] CPU: 0 UID: 0 PID: 8149 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 934.323411] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 934.323419] Call Trace: [ 934.323424] [ 934.323429] dump_stack_lvl+0xfa/0x120 [ 934.323456] should_fail_ex+0x4d7/0x5e0 [ 934.323480] ? sk_prot_alloc+0x157/0x280 [ 934.323502] should_failslab+0xc2/0x120 [ 934.323517] __kmalloc_noprof+0xb4/0x4b0 [ 934.323537] ? __pfx_selinux_socket_post_create+0x10/0x10 [ 934.323563] sk_prot_alloc+0x157/0x280 [ 934.323581] sk_alloc+0x34/0xbd0 [ 934.323599] __netlink_create+0x5d/0x280 [ 934.323621] __netlink_kernel_create+0xea/0x7c0 [ 934.323637] ? __pfx___netlink_kernel_create+0x10/0x10 [ 934.323649] ? find_held_lock+0x2b/0x80 [ 934.323669] ? audit_net_init+0x190/0x440 [ 934.323689] ? lock_release+0xc8/0x290 [ 934.323702] ? lock_is_held_type+0x9e/0x120 [ 934.323723] audit_net_init+0x1ae/0x440 [ 934.323741] ? __pfx_audit_net_init+0x10/0x10 [ 934.323759] ? kasan_save_track+0x14/0x30 [ 934.323774] ? __pfx_audit_receive+0x10/0x10 [ 934.323786] ? __pfx_audit_multicast_bind+0x10/0x10 [ 934.323799] ? __pfx_audit_multicast_unbind+0x10/0x10 [ 934.323811] ? __kmalloc_noprof+0x215/0x4b0 [ 934.323828] ? __pfx_genl_release+0x10/0x10 [ 934.323844] ? lock_is_held_type+0x9e/0x120 [ 934.323863] ? __pfx_audit_net_init+0x10/0x10 [ 934.323880] ops_init+0x1e1/0x650 [ 934.323899] setup_net+0x10d/0x320 [ 934.323912] ? lockdep_init_map_type+0x4b/0x240 [ 934.323926] ? __pfx_setup_net+0x10/0x10 [ 934.323942] ? debug_mutex_init+0x37/0x70 [ 934.323963] copy_net_ns+0x2e3/0x650 [ 934.323981] create_new_namespaces+0x3f6/0xab0 [ 934.324004] copy_namespaces+0x45c/0x580 [ 934.324022] copy_process+0x26d5/0x73e0 [ 934.324035] ? __pfx_perf_trace_lock+0x10/0x10 [ 934.324060] ? __pfx_copy_process+0x10/0x10 [ 934.324072] ? __might_fault+0xe0/0x190 [ 934.324091] ? _copy_from_user+0x5b/0xd0 [ 934.324108] kernel_clone+0xea/0x7f0 [ 934.324119] ? get_pid_task+0xfd/0x250 [ 934.324139] ? __pfx_kernel_clone+0x10/0x10 [ 934.324149] ? perf_trace_lock+0xb5/0x5d0 [ 934.324168] ? find_held_lock+0x2b/0x80 [ 934.324185] ? ksys_write+0x121/0x240 [ 934.324197] ? lock_is_held_type+0x9e/0x120 [ 934.324216] __do_sys_clone3+0x1f5/0x280 [ 934.324227] ? __pfx___do_sys_clone3+0x10/0x10 [ 934.324251] ? __fget_files+0x20d/0x3b0 [ 934.324275] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 934.324295] ? fput+0x6a/0x100 [ 934.324309] ? ksys_write+0x1a3/0x240 [ 934.324320] ? __pfx_ksys_write+0x10/0x10 [ 934.324339] do_syscall_64+0xbf/0x360 [ 934.324359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.324371] RIP: 0033:0x7ffb744edb19 [ 934.324381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 934.324392] RSP: 002b:00007ffb71a63188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 934.324404] RAX: ffffffffffffffda RBX: 00007ffb74600f60 RCX: 00007ffb744edb19 [ 934.324412] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 934.324419] RBP: 00007ffb71a631d0 R08: 0000000000000000 R09: 0000000000000000 [ 934.324426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 934.324433] R13: 00007ffeb487a35f R14: 00007ffb71a63300 R15: 0000000000022000 [ 934.324453] [ 934.349167] audit: cannot initialize netlink socket in namespace [ 934.371563] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 934.386773] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 12:01:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\t\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:02:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r7, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMK={0x14, 0xfe, "6d7fe77854461429f17ad9300c8fd155"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x40801) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:02:05 executing program 6: r0 = request_key(&(0x7f00000000c0)='syzkaller\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='\xaa\xaa\xaa\xaa\xaa', 0xfffffffffffffff9) keyctl$clear(0x7, r0) request_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\xaa\xaa\xaa\xaa\xaa', 0x0) syz_emit_ethernet(0xe5, &(0x7f0000000180)={@link_local, @remote, @val={@void}, {@mpls_mc={0x8848, {[{0x401, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x1ff, 0x0, 0x1}], @llc={@snap={0xab, 0xaa, "b04e", '5+/', 0x6006, "e24d7d530fa1b9e1cd590d24c7ef708cc5aae509d879b5b4b010188a73f75d657ef19794cdd1f9c3c085b1a7cfe526d73de76ae95115b3598667999245c0a04a02bb7a5863cfac80d7c23c78bce6cdd509b99389c6fc30fec941862fc4c7b1d7056cdfc712a026d179b2a0b4235b3c67bf64640b5d66ff41b80cfec3d1c0e912cc25baa2539c665e15a080bf43f47fcea53cbe136370f2d0d0c5cde3c4facc73a39f05f19c8cf55e0e701af60ded4293f202f28bca667f5048a8"}}}}}}, 0x0) 12:02:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x7000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:02:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x600, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:02:05 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = signalfd4(r2, &(0x7f0000000080)={[0x3]}, 0x8, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/raw6\x00') pread64(r6, &(0x7f0000000140)=""/217, 0xd9, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x0, &(0x7f00000001c0)={@private2={0xfc, 0x2, '\x00', 0x1}, r4}, 0x14) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r10, @ANYBLOB="170026006c0000000800b70000000000"], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 12:02:05 executing program 7: socketpair(0x22, 0xc, 0xffffff7f, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000013c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01000000010000e193e126736095fc9f5ba788336d942498c09fad12c1052ac6cd43e50a00"/49, @ANYRES32=r4, @ANYBLOB="080026006c0900000800b70000000000"], 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000001300)=ANY=[@ANYBLOB="41800000", @ANYRES16=0x0, @ANYBLOB="200028bd7000fedbdf257700000008000300", @ANYRES32=r8, @ANYBLOB="0c00990004000000390000000800ef00010000000500ee00000000000500ee00a00000000500ee00800000000800ef00000000000500ee00fe000000"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001480)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r9, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_PBSS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048000}, 0x20004011) sendto(r0, &(0x7f0000000300)="55f431f39a14cf1ccdf29c2d7256a771bcac47c8a0dae8e96625ba3607d41b799846352a4ba8eb526322328b8fb96fdcd61b49f8ab8b8980de90ded9a68bcab3caaa6bc348e808952c9e9f411fa05b07417d18adff65248718f202509acba9b758ce43c0d4407d614878174919ee373be6b2a3cb3b5aebc58fd75867aaf14beff5e2c99f7edb676b8a81e3215daf8850663d7895dbec3caf8af175bd89be047ad47d49e74a0312222fa7594337135cd99270f0a993c57135b12ea32dc0f5e01961a7d56f9c9173981a11a641ce9191545fd9b587eaed17a122cbfd6aef38d1f16faada8a7b65481b2b94ea498abc1af0ab8651f45dcff76ecbba3b4de7f45914cac51343941b3d2e6f20081bdc657347685ff6f901cdd3615f59c82c96748d1b4b1b2f2c459214b8418764040229083b0f6d7f4a4ad2e78f9c838cfebb9ead16804a1abc5995121bad1c3b907d510d7befb9ac03f9634cfc9ad7a777f33001ec80502a1ecdedc935382c7cb3b6b903140785120441fb2279ea97d23aef3642a4bfd480962f1658b20b2d1bbfaa447101b53229a7044bf78f078a6f90de27aba4782727b628f9154425cd5b194aa84ca23fefda08233fedc28c41893175e7688ef796fd3077d26507e2c398132a8dcfd2ab3c6ff1617a4167364c0df676a2e2a192545c3d070baffc4c2a42fece1efe167b20b845079cf6d7f39d0274e5999648a6cb2f3964c4564123d8b7dc6c1435e399a2dbb48de09b0e19adadf53858b8ef37fad5661d5740dc1abc867f9db15e6b66141ca847e1ef90171826255493979fd878c914c9626bcd30d022d5b0393d368bfa5fd313bc6a5e32ec70255b503d637020ac4718c97f19ef36051ace9ba1bd99c718cbf9b6d7305bf3638388d1339b5b3db05dad2d4e869b1c2361f35f1318c009cc2b22b9973642ea06c24b74f83cab20f6718f0ce0242da7cb8f31392eec2290d4261b4c802e37271df6e5f45fa57082b0ae49a1a1363aa48aa21fac224e409b62398a6398f4df3a2a4304757dc4b574dbeeccc8e6cbe91a6d6ba6fff348df0ae9372a43bb3aeec1e8cbbdd399d294c40802491abf267f4de13988427329b89774c2ffd6fa0870c60678d14d2d978b6f1277450079b51fc0ee7b86caac17c9ed81bf5434f963a7182775b76ea3cd15419f980e90fc1b250162b1e16e8343262a6d26e3c0d136886b1d0aca094d07fb9f3ef3ee50ebd97e3a084c8acf98a6c26719ae15eb2adf73b7629b8e5bb6edd9c9f45d5d0e6e19b7bff865ac900d4209db88fa2f94bcea09281bde00a0759362dbc625c034d444527e7b831358f0e7f65824f0d4dc097bfbd51ebfbf3226af3c4caea114e582b95bb3dad3afe809672b8286f1aa6b1a8bcd0dde7ad96151e222c132914fe216a421fafad588767632f7de1bdf39c457ed5658ab4c9251a36b6f06c112303f88e00749db32740975d8c26ecd2b4237dd4c67087f5620f0d06bbfb5c7ec9564deddcb09d93006a01fd8d3fb6073f28768b0022db6651d686b3f6c252a89cb0431458de917f594b6841eeece87a7340568f0b82775484a77b62a0e5564d1eb3a02f40f3f478a1effede6aad653cbd4895f05862b2f41a443bfcfa098ce360655c7459cf936ff4decc61d02f6723b3e4c9e8631dee44cf8442fe6bad2ef515d9b62ecbb2bfecb183ed7018ec2aed9e22a930731c2a3d7d351bc6108a39f3cb954f6f9b100efec5a61f0c0765417a858eb15ddadbe3763a5e28464a4dbe0331ef8f1b6a8f06fd1d9ec7a11ecefec544be618588e27bc464a80b22253ee50abec1ae8859421e8dc85c13ec6fb432ddd5eb16dbf08253fc026d3afe65a721d16cce46d17f0f2ab9e03433f110721ee514f2d59bd17f64ddea68365d54dafe92c3bd85351ca70985d6410b04b49555c54cc863f1f0675b5d4c82e8918e2f6d0d0c2f42be73d9a61fe8abea16fc2831864a8e54273ba15b718d74b967956bc4e99cc4d3f7ec575a7b50b505a88bc2258226bffb86f5dc36fee6ef0badc5ea28e81cc3b67c487948fc5ba7c88561128f9d3112ed2eb58d936c8d56546d2a0ccb59c2acd0312413a0f2ea66bf77ec82152b528e43469b0139c7e48114fc9896bb275b6c704cd9ca523e4f3b2258e402dd60fc8dbe3fbdec4cf6f724e80ddecb214ac89202b6bd609abd09e3b68a97a77de2588f695e45ab3e1a80eab707a13aae541c3e16bc873e3f8efa92f3ada68e164c881e66f3a24ce6c8400542662d239b33e3365d17bb712cbd5541cb65db3698f23f193c6a9aa75bc2bae087b20520b678d9455664769e1a82ade3e064b87b02113079f4093f0bcf082ee5b296024896fadc886c20d7c9446bdb9f7246a74b630402134fd41ab7cdac41e778fc6ade7ab23279c45465974b804a4f20fa9aae549c387342b20ebfddcda3d71a797ab75fae40e1422e12a9f6354c8c34cf1a8f497892689d2893e717bb371653b97169658580af029d063e713ea6b0f2e51bffca7f1c1554d36ab81f21c282399df602f7e33aa2bc89e26dd8fe8ae494f0e9f9a8cf6d71d275d2e7ae07e215a9c704c1ab3987a7eef47e54a9f3c09fe6be7cf2b533e2cd9be1887aa469dd22e94dfb5481583c0729d182b93a045707a651351bf8efe254cbe5fa374581656073e094c04157c3dd9185bcb925141edecce77637fe8c63e02146e6ca8a2cffd8d2461bea5c6eef774b631859b5bf3c62e6d318213dbbfda2244da04ca72ec411ecc721a5ee36b197486c8b144d93fd5cfc2d91c093c78a966bc4bbc0f4981322e0bf29f7bb50bb8b31c69ba4dfb6799dee06a1ac4d9a2c95087ddf7e2b83aa05f3ca2adf78e63d7650898fee5268604ccedf7b96fb9c458c35f8794d2d581db25eb8df34d7e732c2919d5cb3b46ad99b179aa08590390627c1621775da5654df41cefdb5537b6c4da2f68973da987ea18d965929ecfdc7caee8a05a81c8e84d58c8f55381a0090531a65bbeab8e3950f7bcd40c8b58de5fa46d7cdcfb031394f05752c5666c171f51b895694e45f752bfb0b9812a299d72d3be720eac3a60ec5e67e12249c0aca8aacb875165984cff38688d42226d48d567afdbfff11f5c48ed90406a36510f25ab9efcedcf9fc609f77c7fdbaa81d4ffe01d303d6d70884751ef15e58496d0cd10ae252d653927bf397992a2c18fbdabf9460c26abd0eac3c33f05f38a71a2298c5e04723e9f7131c4cab158de38af98d5a6b415d9aa45fd94939bdf6592e0619d0ab8fb4dd77a74eace96723d1105a8574905d2a815841e41482420023e11a4845e41c0dab16e2999e5c5e473df5d4096646dd912f11aed25aff0fbebf6dacca57e4b876e6b33f77caa87f2fa73615f536852dcb0c7b75cead71d048bbf030a284294596ce3b15de3fff7ec515d433546aee7104acc6652ee2ffcd335c3a31c621aa3bcaee8445f5845360c7587ed8566c2523297036a7a93181ed658a62eba7280db6ea03790d6ad00e2fff835775be40b417045e6f6ce4800c884f026bfae173be8c38faf5d7516c85294cd4bd5d2e17f1aced03437b5e49a383769af8632612acca8819f961830f4c218ce4a4cc56d6762cee42ae090fd37e40f3b4a51231e9d58f9ef187f14c06eb0a41bdd3c471de9c7c845ce09a97fdd6e112849c9b9c4c00452ce10ae63ffab63e9faa508622c625523781451cd663c93bc72d7b6c3492f63530099f5e7da1d695fb4af4f9d2b2c131e5def4659e3099dd5706ea08b7828338d235d6168d594df77081c21802149b9f1ffd231a579d3da4c2408211d64ae4524b9d1b77e2b53c29aa3113f51050275248596369d274d99b8ac7f8c1f2cc280fdc0d15462376825aa2e3605d228ee5cd771b3cb812effc6486b1054c8147a748fb53d38b57e0181f3ad8e99936c8a4995feef9cbbdcf8eb9c557af37f9d69d17f671c33701d71dd5ba5b184eee13d29bdc8dde783a9715ef96add70f8636954326eab34d70c7d128f91104932414fdac5697760d103d653343bebaa4cf543172c016d8e4223127f30a0e5f4c2ffd1e7af22b8d371a3049fee5a9dce94c130d493c3ea461697189471f4226f8b69fd443cfe4697897a76fccff19510eda8e42860f5d8633128797bdbe67616f7d57dfbdca3a87ca2b0fab5e2b519c0a6de620994a36dfbcb8b3fb74e2b8249b882d2885815d4bedc2e1b4fad917ddde5d05189e390b98eb247af3f942b0ededf877e9e30c5772d3e39546cb06932402d14bd47c9bb2311af8125ec17a5ae459a76fb8bbf5c1c8f27e57ad5b6b650aafbad1047f87d424ff4011204602342ff5942ef9b6883d197c7883c473501d36cf76ebdabcaf558b495848b70572ee1395503a4da9a1864797cd8d50103b650be606d2a126a75c6ec769a566b217f10be8ccc1012e760382273dd5b4ae8e0271756eccb79684fb9d00466651d6e38a7633cfc24ffb9bea47b444d7c28d0bb46458e28c1f634547e5a58f72a1a17ac2ddd2ed76fac6d2fff81e30e978ba324b02fdbb8d9d0c9ec510b7b4e14e3af87bd7ced08348682a8f53a61071ffb2a25e14593e7e52689f20bbb99fa987b045ce11b0912e36fe7d3d71271bbe585b002cb9a5608bb0bc28d26e003d219cc74cd8ab26276ceaf479becc98b825b711020c6ccaa49bc204490139bbb7ba71578c7f6a2b0fe2334cc8eb4df76429acab1dfb0622b1cc2ec5c3ad734ce2faee6766c07a594e5cb951d7ec0dae3944ad3dc6883aa4ecf783490d75119f87e59c8af914fe32bebb7bf105a1181c96e85f2c09b72905bf69d90790494a840e4bbb6ef996515f99316894146363d7975c45e884ba99fc6a650566d64f37b88c2600bb9e0047887dd038760abb54f5d2e4b5f5503577ad271ee9baddabd42a4f58ec72b8918722fac9f89f381bfc3ae80ed023e4d56523d1eddc8496def0bd1799b90f04c956daf902c2124cf8995360ff6676c996dcec3ed3a4465bf37083beb37c06c2719c36fd40398ae6a09c991fd88fb818e8e3191c4806252b497b754ca3aaa9d936a7e4e7dd21536194ef0c9d7ca54a7f6a5db73018807c5851d662726822ef6c0bd8fe9aabaf3b1d367156d239c5f4fa8ad34ba522d9450408f6f5b098162788bae1d204a5a3790ac6778fe7253107f003c4b913b32b03d53a90582db73e615039bccd24b9105134b9b5c317c2cf1b8c3055c84b73ee07e9afbccc104e61c8d6a85fea36b81eb6fd2de70545dc363c10a9f65e6b1ef6efd26982be9b4996cde66c1e346e384d6fce6fd3020004076a753a16f5efb2608d9ac52c429149e5b3ae5b0934e611d9687ede833594ea16b4c3692239670876076a229e18c61290e149a769ba5339aa87365411b17d276dbe51c56f57c48a4cc8400768518a5e138823f0b7b3ac64a030b48eff8bf73c565cf7ed8fd6634a35b0741d4e8eb6252cfb18811aeed56716fdb9c988e220cab3231c25a1498a5b57d81d8b46ae886ef112cda5b0fab880275303d0a1af2b77b92833f585867dd6a9fc8a44823f3a688ccd875a2ec49b570ff3ef1321f481da624c5c565c6e89538ed3fea7f6a8bdf62a35dbf689a42504c5c5e3f74de600bd7c2841014d3cd1ca012c3c0ecd6eeae2673f511edcb519e7000c80ea8619a6fa65a0751f61dd9e373fedb918f3e15dbb62f100c699b027584684f10e9cb39ee7326a7e38477399eb88bfb7a6970f5ba595b4c51af19009af8e70c2bf28710d7c07f126b15490d94ce488330a8e511a59aa265fe8e86a21cd2984d44c4250505a71f", 0x1000, 0x58, &(0x7f0000000040)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000000}, 0x80) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/79) 12:02:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0f0000", @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:02:05 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 81) tgkill(r0, r1, 0xb) 12:02:05 executing program 6: prctl$PR_GET_THP_DISABLE(0x2a) r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x4, 0x5, &(0x7f00000029c0)=[{&(0x7f0000000140)="0c9bbae73470f25e4c9eab577743437883857c4adbb457865834af768d2ac1a1403aaacec02aff3014b1a7411a82e00f577617e6e1c7e40d91b5f41553cfce259efaf72f75bc5f75b6b0c06ebc098de062979eab31d42a72fb0dd66b1bcb06943df3ece242387dc1632d22e02a237d36ca894982fb535cf3f00aab37b75bbf8e92acdc236cbcde8580150664", 0x8c, 0x200000000007}, {&(0x7f0000000800)="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", 0x1000}, {&(0x7f0000001800)="ad7517b30fe3766fe9f6d35c4bc3a1771a6116e90d08df1e694bcd457c4e2baf998d7f38540cf757035c736a8dc12d12167ef8ee103c45416014c3b0c5e48677f4f4b1422638308758b3b85edf5412dad8704110a0e2d4df1f7486c7f4693ccc867345b0f1c21b14636768931a8b521a71ce889ce4976faf3a07fe5d4b041e3490b228b472119cced17694631651fba66e37c4d35421cc5755ce952d7be022fb5da3111b640004e3cfe7a471bf694398e4dadfcd79d964fddb8137362c6d517e14563f17e31a17101c325b8d985f6f13b7e0a7175fc8e3bf851ff42928cebe1732031f7f6e", 0xe5, 0x1bc000000000000}, {&(0x7f0000001900)="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", 0x1000, 0x8004}, {&(0x7f0000002900)="d8a7c638cee30e6c254222072258b9b5fe5c9f0366ce3a3a6f46af12bcb7a5106a8abed574cc30c8ed735a2b651eb15a165e12b151d388e4d420e07dafb7ab0d364115fbd6b9ffaa56c39fb336ddc5a9c7be269628b7d618c8a3ccc223755b3a3726e37bdcbb20bb16c53ac581caad9b87986cfd4e0866915dcc8f51f5de452c6f03c77e2efed8081b57cbeebb96b15b1d1dcc61e41f7777f106ce576327779e6418a2ec6cc5e9b15ff6a6c4747e956fbed1cd78", 0xb4, 0x7fffffff}], 0x20, &(0x7f0000002a40)={[{@fat=@check_strict}, {@shortname_winnt}, {@shortname_winnt}], [{@context={'context', 0x3d, 'unconfined_u'}}]}) openat$incfs(r0, &(0x7f00000000c0)='.log\x00', 0x20000, 0x29) rename(&(0x7f0000002c00)='./file0\x00', 0xfffffffffffffffe) lsetxattr$trusted_overlay_upper(&(0x7f0000002c40)='./file0\x00', &(0x7f0000002c80), &(0x7f0000002cc0)={0x0, 0xfb, 0xd3, 0x5, 0x32, "893febf61c3f9e3a83ea875ebbf9e223", "b2b75540dd38d9eff2a8155bcd5d22e73b69f2637aa6509342c27703a097c1d170b7ab55cd43927183f7a053bfaa0858860f35b9e07d6e37d99a657b9dacaab32f4fa3c4d48bd2d51206ea0391e44c699e7560c2dc59e1628d51239e79f4a3df9b8dd7306f8f26fc760a63e261a19fcbac98d77251022985ecd1154b1c9692f35960bed8ef2a9146f7f836928698251d673ae3cf732453b3aad84761de956203880bc325688d017ee9b16eb31477993c5752d1a84d0b72c963acb0062eb8"}, 0xd3, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x91800, 0x3e, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000002301000000000123252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c110100000000000000000113000000002200170100000000011700080000000008007809140b2a3a08020000010000010100002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000730079007a006b0061006c006c006500720020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000470045004e00490053004f0049004d004100470045002000490053004f00200039003600360030005f004800460053002000460049004c004500530059005300540045004d002000430052004500410054004f005200200028004300290020003100390039003300200045002e0059004f0055004e004700440041004c004500660069006c0065003300200020002000200020002000200020002000200020002000200000660069006c0065003100200020002000200020002000200020002000200020002000200000660069006c0065003200200020002000200020002000200020002000200020002000200032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8800}, {&(0x7f0000010c00)="ff43443030310100"/32, 0x20, 0x9000}, {&(0x7f0000010d00)="0042454130310100"/32, 0x20, 0x9800}, {&(0x7f0000010e00)="004e535230320100"/32, 0x20, 0xa000}, {&(0x7f0000010f00)="0054454130310100"/32, 0x20, 0xa800}, {&(0x7f0000011000)="010002001a0000004db9f001200000000000000000000000084344524f4d000000000000000000000000000000000000000000000000000601000100020002000100000001000000083546363732343232303030303044454100000000000000", 0x60, 0x10000}, {&(0x7f0000011100)="0000000000000011004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000004f53544120436f6d7072657373656420556e69636f6465", 0x60, 0x100c0}, {&(0x7f0000011200)="0000000000000000000000000000000000000000000000007810e40709140b2a3a000000002a67656e69736f696d61676500"/64, 0x40, 0x10160}, {&(0x7f0000011300)="04000200e60000001faff0012100000001000000002a554446204c5620496e666f00000000000000000000000201000000000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084344524f4d000000000000", 0x80, 0x10800}, {&(0x7f0000011400)="000000000000000000000000000000000000000600"/32, 0x20, 0x108e0}, {&(0x7f0000011500)='\x00*genisoimage\x00'/32, 0x20, 0x10960}, {&(0x7f0000011600)="05000200ab000000e5acf001220000000200000001000000022b4e5352303200", 0x20, 0x11000}, {&(0x7f0000011700)="000000000000000000000000000000000000000000000000010000000101000021000000002a67656e69736f696d61676500"/64, 0x40, 0x110a0}, {&(0x7f0000011800)="060002004f0000006411ae012300000003000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084344524f4d000000000000", 0x60, 0x11800}, {&(0x7f0000011900)="000000000000000000000000000000000000000600080000002a4f5354412055444620436f6d706c69616e74000000000201030000000000001000000000000000000000000000000600000001000000002a67656e69736f696d616765000000", 0x60, 0x118c0}, {&(0x7f0000011a00)="0000000000000000000000000000000000100000400000000106010000000000", 0x20, 0x1}, {&(0x7f0000011b00)="07000200b10000006d0f0800240000000400"/32, 0x20, 0x12000}, {&(0x7f0000011c00)="08000200200000000000f0012500"/32, 0x20, 0x12800}, {&(0x7f0000011d00)="01000200fb000000993ef001300000000000000000000000084344524f4d000000000000000000000000000000000000000000000000000601000100020002000100000001000000083546363732343232303030303045313400000000000000", 0x60, 0x18000}, {&(0x7f0000011e00)="0000000000000011004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000004f53544120436f6d7072657373656420556e69636f6465", 0x60, 0x180c0}, {&(0x7f0000011f00)="0000000000000000000000000000000000000000000000007810e40709140b2a3a000000002a67656e69736f696d61676500"/64, 0x40, 0x18160}, {&(0x7f0000012000)="04000200f60000001faff0013100000001000000002a554446204c5620496e666f00000000000000000000000201000000000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084344524f4d000000000000", 0x80, 0x18800}, {&(0x7f0000012100)="000000000000000000000000000000000000000600"/32, 0x20, 0x188e0}, {&(0x7f0000012200)='\x00*genisoimage\x00'/32, 0x20, 0x18960}, {&(0x7f0000012300)="05000200bb000000e5acf001320000000200000001000000022b4e5352303200", 0x20, 0x19000}, {&(0x7f0000012400)="000000000000000000000000000000000000000000000000010000000101000021000000002a67656e69736f696d61676500"/64, 0x40, 0x190a0}, {&(0x7f0000012500)="060002005f0000006411ae013300000003000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084344524f4d000000000000", 0x60, 0x19800}, {&(0x7f0000012600)="000000000000000000000000000000000000000600080000002a4f5354412055444620436f6d706c69616e74000000000201030000000000001000000000000000000000000000000600000001000000002a67656e69736f696d616765000000", 0x60, 0x198c0}, {&(0x7f0000012700)="0000000000000000000000000000000000100000400000000106010000000000", 0x20, 0x199a0}, {&(0x7f0000012800)="07000200c10000006d0f0800340000000400"/32, 0x20, 0x1a000}, {&(0x7f0000012900)="08000200300000000000f0013500"/32, 0x20, 0x1a800}, {&(0x7f0000012a00)="090002008800000018af7600400000007810e40709140b2a3a0000000100000000000000000000000d01000000000000000000000000000000000000000000000000000000000000010000002e0000000000000021000000002a67656e69736f696d61676500000000000000000000000000000000000000060000000200000002010201020100"/160, 0xa0, 0x20000}, {&(0x7f0000012b00)="080002003c0000000000f0014100"/32, 0x20, 0x20800}, {&(0x7f0000012c00)="02000200ce00000001d7f0010001000000800000200000000080000030000000", 0x20, 0x80000}, {&(0x7f0000012d00)="0001020032000000e559f001000000007810e40709140b2a3a0000000300030001000000010000000000000000000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084344524f4d00"/128, 0x80, 0x80800}, {&(0x7f0000012e00)="00000000000000000000000000000006004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084344524f4d000000000000000000000000000000000000000000000000000600"/128, 0x80, 0x808e0}, {&(0x7f0000012f00)="0000000000000000000000000000000000080000020000000000000000000000002a4f5354412055444620436f6d706c69616e74000000000201030000000000", 0x40, 0x80980}, {&(0x7f0000013000)="08000200fc0000000000f0010100"/32, 0x20, 0x81000}, {&(0x7f0000013100)="050102008e0000007c60a8000200000000000000040000000100000400000000000030020000000000000000a51400000200000000000000080100000000000001000000000000007810e40709140b2a3a0000007810e40709140b2a3a0000007810e40709140b2a3a0000000100000000000000000000000000000000000000002a67656e69736f696d6167650000000000000000000000000000000000000000000000000000000000000008000000080100000300"/192, 0xc0, 0x81800}, {&(0x7f0000013200)="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"/288, 0x120, 0x82000}, {&(0x7f0000013400)="0501020065000000a50ca8000400000000000000040000000100000400000000000030020000000000000000a51400000100000000000000800000000000000001000000000000007810e40709140b2a3a0000007810e40709140b2a3a0000007810e40709140b2a3a0000000100000000000000000000000000000000000000002a67656e69736f696d6167650000000000000000000000000000000000000005010000000000000000000008000000800000000500"/192, 0xc0, 0x82800}, {&(0x7f0000013500)="01010200ca000000476218000500000001000a00000800000200000000000000000000000000000001010200d2000000affe1c000500000001000006000800000a000000000000000b01000000000866696c6530010102006e00000076d31c000500000001000006000800000b000000000000000c01000000000866696c6531", 0x80, 0x83000}, {&(0x7f0000013600)="050102009d00000045a2a8000600000000000000040000000100000500000000000030020000000000000000841000000100000000000000640000000000000001000000000000007810e40709140b2a3a0000007810e40709140b2a3a0000007810e40709140b2a3a0000000100000000000000000000000000000000000000002a67656e69736f696d6167650000000000000000000000000000000000000007010000000000000000000008000000640000001900"/192, 0xc0, 0x83800}, {&(0x7f0000013700)="0501020028000000442da80007000000000000000400000001000005000000000000300200000000000000008410000001000000000000000a0000000000000001000000000000007810e40709140b2a3a0000007810e40709140b2a3a0000007810e40709140b2a3a0000000100000000000000000000000000000000000000002a67656e69736f696d61676500000000000000000000000000000000000000080100000000000000000000080000000a0000001a00"/192, 0xc0, 0x84000}, {&(0x7f0000013800)="05010200010000002524a8000800000000000000040000000100000500000000000030020000000000000000841000000100000000000000282300000000000005000000000000007810e40709140b2a3a0000007810e40709140b2a3a0000007810e40709140b2a3a0000000100000000000000000000000000000000000000002a67656e69736f696d6167650000000000000000000000000000000000000009010000000000000000000008000000282300001b00"/192, 0xc0, 0x84800}, {&(0x7f0000013900)="0501020056000000207da8000900000000000000040000000100000500000000000030020000000000000000841000000100000000000000282300000000000005000000000000007810e40709140b2a3a0000007810e40709140b2a3a0000007810e40709140b2a3a0000000100000000000000000000000000000000000000002a67656e69736f696d616765000000000000000000000000000000000000000a010000000000000000000008000000282300001b00"/192, 0xc0, 0x85000}, {&(0x7f0000013a00)="050102008100000018afa8000a000000000000000400000001000005000000000000300200000000000000008410000001000000000000001a0400000000000001000000000000007810e40709140b2a3a0000007810e40709140b2a3a0000007810e40709140b2a3a0000000100000000000000000000000000000000000000002a67656e69736f696d616765000000000000000000000000000000000000000b0100000000000000000000080000001a0400002000"/192, 0xc0, 0x85800}, {&(0x7f0000013b00)="0501020039000000f690a0000b00000000000000040000000100000500000000000030020000000000000000841000000100000000000000000000000000000000000000000000007810e40709140b2a3a0000007810e40709140b2a3a0000007810e40709140b2a3a0000000100000000000000000000000000000000000000002a67656e69736f696d616765000000000000000000000000000000000000000c0100"/192, 0xc0, 0x86000}, {&(0x7f0000013c00)="01001501000001000000050016010000010046494c4530000000000000000000", 0x20, 0x86800}, {&(0x7f0000013d00)="01000000011500010000050000000116000146494c4530000000000000000000", 0x20, 0x87800}, {&(0x7f0000013e00)="010017010000010000000a0018010000010000660069006c0065003000000000", 0x20, 0x88800}, {&(0x7f0000013f00)="010000000117000100000a0000000118000100660069006c0065003000000000", 0x20, 0x89800}, {&(0x7f0000014000)="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", 0x380, 0x8a800}, {&(0x7f0000014400)="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", 0x200, 0x8b000}, {&(0x7f0000014600)="2200170100000000011700080000000008007809140b2a3a080200000100000101002200170100000000011700080000000008007809140b2a3a0802000001000001010134001a0100000000011a64000000000000647809140b2a3a08000000010000011200660069006c0065002e0063006f006c0064002c00180100000000011800080000000008007809140b2a3a08020000010000010a00660069006c00650030002c001b0100000000011b0a0000000000000a7809140b2a3a08000000010000010a00660069006c00650031002c001c0100000000011c28230000000023287809140b2a3a08000000010000010a00660069006c00650032002c001c0100000000011c28230000000023287809140b2a3a08000000010000010a00660069006c0065003300"/320, 0x140, 0x8b800}, {&(0x7f0000014800)="2200180100000000011800080000000008007809140b2a3a080200000100000101002200170100000000011700080000000008007809140b2a3a080200000100000101012c0021010000000001211a0400000000041a7809140b2a3a08000000010000010a00660069006c00650030002c00220100000000012200000000000000007809140b2a3a08000000010000010a00660069006c006500310000000000", 0xa0, 0x8c000}, {&(0x7f0000014900)="4552ed010a548701525249505f313939314154484520524f434b20524944474520494e5445524348414e47452050524f544f434f4c2050524f564944455320535550504f525420464f5220504f5349582046494c452053595354454d2053454d414e54494353504c4541534520434f4e544143542044495343205055424c495348455220464f522053504543494649434154494f4e20534f555243452e2020534545205055424c4953484552204944454e54494649455220494e205052494d41525920564f4c554d452044455343524950544f5220464f5220434f4e5441435420494e464f524d4154494f4e2e00"/256, 0x100, 0x8c800}, {&(0x7f0000014a00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x8d000}, {&(0x7f0000014b00)='syzkallers\x00'/32, 0x20, 0x8d800}, {&(0x7f0000014c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x90800}, {&(0x7f0000015100)="02000200f000000001d7f0012201000000800000200000000080000030000000", 0x20, 0x91000}], 0x0, &(0x7f0000002ac0)=ANY=[@ANYBLOB="1a7a23ce64b6c359031042ae4e360c1a4d002487c6bacd00506c5b780712eeefff58399d7517756393310b50685c3cd58d018a72fd788254a5f59e115a1ed1193107586eee0a95445941799cd488aacbda74c956663b83cb35690d88f6c46cab8fc9247d72a3406c410d4ed0a447dddff3e2a90337104a20b80962e6947280fd9fe58416f3f1d13e5c2adbbe877ed99496630af9d43e121b8874b4c3fbb703c7c57b2de798177bac18f81fef7de9a9c5d0092a07d4f08fe24373956a223300b2b7e99ee18bef9c6915dd420add374e7a9aecb4897dbb0bd2e50fcdfd13b4f38a8aa56f7b1b9ac343c2e874d9decadf593e01fd412a28d9a5c9800f2a8a8b20d42f28de57ace19463b9f96471942188262abeed8e24"]) prctl$PR_GET_THP_DISABLE(0x2a) [ 943.771075] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 943.800610] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 12:02:06 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 82) tgkill(r0, r1, 0xb) [ 943.823393] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 12:02:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x700, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:02:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="2cf00000", @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:02:06 executing program 6: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/217, 0xd9, 0x0) setns(r1, 0x2000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x12, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/134, 0x86}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/213, 0xd5}], 0x3) [ 943.873198] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode 12:02:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x9000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:02:06 executing program 7: ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xb8edc) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/79) [ 943.896573] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 943.919018] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 943.933564] audit: type=1400 audit(1753617726.126:15): avc: denied { read } for pid=8212 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 943.939130] FAULT_INJECTION: forcing a failure. [ 943.939130] name failslab, interval 1, probability 0, space 0, times 0 [ 943.940090] CPU: 1 UID: 0 PID: 8219 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 943.940107] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 943.940114] Call Trace: [ 943.940119] [ 943.940124] dump_stack_lvl+0xfa/0x120 [ 943.940148] should_fail_ex+0x4d7/0x5e0 [ 943.940171] ? security_sk_alloc+0x101/0x160 [ 943.940185] should_failslab+0xc2/0x120 [ 943.940200] __kmalloc_noprof+0xb4/0x4b0 [ 943.940217] ? __kasan_kmalloc+0x7f/0x90 [ 943.940231] ? trace_kmalloc+0x1f/0xb0 [ 943.940249] security_sk_alloc+0x101/0x160 [ 943.940265] sk_prot_alloc+0x20b/0x280 [ 943.940285] sk_alloc+0x34/0xbd0 [ 943.940298] __netlink_create+0x5d/0x280 [ 943.940319] __netlink_kernel_create+0xea/0x7c0 [ 943.940334] ? __pfx___netlink_kernel_create+0x10/0x10 [ 943.940346] ? find_held_lock+0x2b/0x80 [ 943.940364] ? audit_net_init+0x190/0x440 [ 943.940383] ? lock_release+0xc8/0x290 [ 943.940395] ? lock_is_held_type+0x9e/0x120 [ 943.940416] audit_net_init+0x1ae/0x440 [ 943.940433] ? __pfx_audit_net_init+0x10/0x10 [ 943.940451] ? kasan_save_track+0x14/0x30 [ 943.940464] ? __pfx_audit_receive+0x10/0x10 [ 943.940476] ? __pfx_audit_multicast_bind+0x10/0x10 [ 943.940488] ? __pfx_audit_multicast_unbind+0x10/0x10 [ 943.940501] ? __kmalloc_noprof+0x215/0x4b0 [ 943.940517] ? __pfx_genl_release+0x10/0x10 [ 943.940532] ? lock_is_held_type+0x9e/0x120 [ 943.940550] ? __pfx_audit_net_init+0x10/0x10 [ 943.940568] ops_init+0x1e1/0x650 [ 943.940590] setup_net+0x10d/0x320 [ 943.940603] ? lockdep_init_map_type+0x4b/0x240 [ 943.940617] ? __pfx_setup_net+0x10/0x10 [ 943.940633] ? debug_mutex_init+0x37/0x70 [ 943.940653] copy_net_ns+0x2e3/0x650 [ 943.940670] create_new_namespaces+0x3f6/0xab0 [ 943.940693] copy_namespaces+0x45c/0x580 [ 943.940712] copy_process+0x26d5/0x73e0 [ 943.940724] ? __pfx_perf_trace_lock+0x10/0x10 [ 943.940749] ? __pfx_copy_process+0x10/0x10 [ 943.940760] ? __might_fault+0xe0/0x190 [ 943.940779] ? _copy_from_user+0x5b/0xd0 [ 943.940796] kernel_clone+0xea/0x7f0 [ 943.940807] ? get_pid_task+0xfd/0x250 [ 943.940835] ? __pfx_kernel_clone+0x10/0x10 [ 943.940845] ? perf_trace_lock+0xb5/0x5d0 [ 943.940864] ? find_held_lock+0x2b/0x80 [ 943.940881] ? ksys_write+0x121/0x240 [ 943.940893] ? lock_is_held_type+0x9e/0x120 [ 943.940912] __do_sys_clone3+0x1f5/0x280 [ 943.940924] ? __pfx___do_sys_clone3+0x10/0x10 [ 943.940948] ? __fget_files+0x20d/0x3b0 [ 943.940972] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 943.940991] ? fput+0x6a/0x100 [ 943.941005] ? ksys_write+0x1a3/0x240 [ 943.941016] ? __pfx_ksys_write+0x10/0x10 [ 943.941035] do_syscall_64+0xbf/0x360 [ 943.941055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.941067] RIP: 0033:0x7ffb744edb19 [ 943.941077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 943.941089] RSP: 002b:00007ffb71a63188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 943.941100] RAX: ffffffffffffffda RBX: 00007ffb74600f60 RCX: 00007ffb744edb19 [ 943.941109] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 943.941116] RBP: 00007ffb71a631d0 R08: 0000000000000000 R09: 0000000000000000 [ 943.941122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 943.941129] R13: 00007ffeb487a35f R14: 00007ffb71a63300 R15: 0000000000022000 [ 943.941149] [ 943.967012] audit: cannot initialize netlink socket in namespace 12:02:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:02:17 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 83) tgkill(r0, r1, 0xb) 12:02:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0xf000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:02:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c110100", @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:02:17 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/raw6\x00') pread64(r5, &(0x7f0000000140)=""/217, 0xd9, 0x0) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) r6 = openat(r5, &(0x7f0000000280)='./file0\x00', 0x20202, 0x84) getsockopt$IP_VS_SO_GET_SERVICES(r6, 0x0, 0x482, &(0x7f00000002c0)=""/207, &(0x7f00000003c0)=0xcf) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r5, 0x89fa, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'syztnl2\x00', r4, 0x2f, 0x9, 0x0, 0x2, 0x10, @local, @empty, 0x10, 0x10, 0x3, 0x6}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000240)={r7, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, 0x10) 12:02:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x900, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:02:17 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x7000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 954.888134] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 954.924685] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 12:02:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x9effffff, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 954.944021] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode 12:02:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0xf00, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 954.968287] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 12:02:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x38, r1, 0x1, 0x0, 0x20000000, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xffff, 0x6a}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x77}]}, 0x38}}, 0x0) 12:02:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c000300", @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:02:17 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000140)='./file1\x00') symlinkat(&(0x7f0000003780)='./file0\x00', r0, &(0x7f0000003740)='./file1\x00') linkat(r0, &(0x7f0000000080)='./file0\x00', r0, &(0x7f00000000c0)='./file1\x00', 0x0) 12:02:17 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r5, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r7, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 12:02:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0xb7000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 955.143675] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 955.170925] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 12:02:17 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 84) tgkill(r0, r1, 0xb) [ 955.184975] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode 12:02:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0xed00, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 955.212935] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 955.255047] FAULT_INJECTION: forcing a failure. [ 955.255047] name failslab, interval 1, probability 0, space 0, times 0 [ 955.255929] CPU: 1 UID: 0 PID: 8290 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 955.255946] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 955.255953] Call Trace: [ 955.255958] [ 955.255963] dump_stack_lvl+0xfa/0x120 [ 955.255990] should_fail_ex+0x4d7/0x5e0 [ 955.256014] ? security_sk_alloc+0x101/0x160 [ 955.256029] should_failslab+0xc2/0x120 [ 955.256045] __kmalloc_noprof+0xb4/0x4b0 [ 955.256063] ? __kasan_kmalloc+0x7f/0x90 [ 955.256078] ? trace_kmalloc+0x1f/0xb0 [ 955.256097] security_sk_alloc+0x101/0x160 [ 955.256112] sk_prot_alloc+0x20b/0x280 [ 955.256133] sk_alloc+0x34/0xbd0 [ 955.256147] __netlink_create+0x5d/0x280 [ 955.256169] __netlink_kernel_create+0xea/0x7c0 [ 955.256184] ? __pfx___netlink_kernel_create+0x10/0x10 [ 955.256197] ? find_held_lock+0x2b/0x80 [ 955.256215] ? audit_net_init+0x190/0x440 [ 955.256235] ? lock_release+0xc8/0x290 [ 955.256247] ? lock_is_held_type+0x9e/0x120 [ 955.256267] audit_net_init+0x1ae/0x440 [ 955.256285] ? __pfx_audit_net_init+0x10/0x10 [ 955.256303] ? kasan_save_track+0x14/0x30 [ 955.256317] ? __pfx_audit_receive+0x10/0x10 [ 955.256329] ? __pfx_audit_multicast_bind+0x10/0x10 [ 955.256341] ? __pfx_audit_multicast_unbind+0x10/0x10 [ 955.256353] ? __kmalloc_noprof+0x215/0x4b0 [ 955.256369] ? __pfx_genl_release+0x10/0x10 [ 955.256386] ? lock_is_held_type+0x9e/0x120 [ 955.256404] ? __pfx_audit_net_init+0x10/0x10 [ 955.256421] ops_init+0x1e1/0x650 [ 955.256440] setup_net+0x10d/0x320 [ 955.256453] ? lockdep_init_map_type+0x4b/0x240 [ 955.256467] ? __pfx_setup_net+0x10/0x10 [ 955.256483] ? debug_mutex_init+0x37/0x70 [ 955.256504] copy_net_ns+0x2e3/0x650 [ 955.256521] create_new_namespaces+0x3f6/0xab0 [ 955.256544] copy_namespaces+0x45c/0x580 [ 955.256563] copy_process+0x26d5/0x73e0 [ 955.256575] ? __pfx_perf_trace_lock+0x10/0x10 [ 955.256604] ? __pfx_copy_process+0x10/0x10 [ 955.256616] ? __might_fault+0xe0/0x190 [ 955.256635] ? _copy_from_user+0x5b/0xd0 [ 955.256652] kernel_clone+0xea/0x7f0 [ 955.256662] ? get_pid_task+0xfd/0x250 [ 955.256682] ? __pfx_kernel_clone+0x10/0x10 [ 955.256692] ? perf_trace_lock+0xb5/0x5d0 [ 955.256711] ? find_held_lock+0x2b/0x80 [ 955.256728] ? ksys_write+0x121/0x240 [ 955.256741] ? lock_is_held_type+0x9e/0x120 [ 955.256760] __do_sys_clone3+0x1f5/0x280 [ 955.256771] ? __pfx___do_sys_clone3+0x10/0x10 [ 955.256795] ? __fget_files+0x20d/0x3b0 [ 955.256820] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 955.256840] ? fput+0x6a/0x100 [ 955.256854] ? ksys_write+0x1a3/0x240 [ 955.256865] ? __pfx_ksys_write+0x10/0x10 [ 955.256884] do_syscall_64+0xbf/0x360 [ 955.256904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.256916] RIP: 0033:0x7ffb744edb19 [ 955.256926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 955.256937] RSP: 002b:00007ffb71a63188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 955.256949] RAX: ffffffffffffffda RBX: 00007ffb74600f60 RCX: 00007ffb744edb19 [ 955.256957] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 955.256964] RBP: 00007ffb71a631d0 R08: 0000000000000000 R09: 0000000000000000 [ 955.256981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 955.256987] R13: 00007ffeb487a35f R14: 00007ffb71a63300 R15: 0000000000022000 [ 955.257007] [ 955.283213] audit: cannot initialize netlink socket in namespace 12:02:17 executing program 7: r0 = msgget(0x2, 0x9a) msgrcv(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007dba4e57a264eaaf00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007a68af5fe28f7ce55e3a8b5180caf830ccd9620d512919cb8374e7df9fed3a88728eafcb902d1e6b2aaba3ef98e4531f7e481fb589de4d633b1ba956aaa7d607a649c49bdfc7f309a8f0e886d2db9e29598a14ece665bba13f3fa9031dd25f2ebf1c837615114f6e4957b6514b8b97417622c7775175fc73df9934465744eff0d30e7e8f15d4ae864d615061c8c231d9d5d97cae92acd1c36366b87a838152e31eea8817d77c164bf951e76d62152d4895"], 0x103, 0x3, 0x3000) r1 = msgget(0x2, 0x200) msgrcv(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007dba4e57a264eaaf00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007a68af5fe28f7ce55e3a8b5180caf830ccd9620d512919cb8374e7df9fed3a88728eafcb902d1e6b2aaba3ef98e4531f7e481fb589de4d633b1ba956aaa7d607a649c49bdfc7f309a8f0e886d2db9e29598a14ece665bba13f3fa9031dd25f2ebf1c837615114f6e4957b6514b8b97417622c7775175fc73df9934465744eff0d30e7e8f15d4ae864d615061c8c231d9d5d97cae92acd1c36366b87a838152e31eea8817d77c164bf951e76d62152d4895"], 0x103, 0x3, 0x3000) msgsnd(r1, &(0x7f0000000280)={0x2}, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) r6 = msgget(0x2, 0x20) msgsnd(r6, &(0x7f0000000080)={0x2, "27e93c88ef1b3e8e09ac1e9c3bf5f46e04ed7948369f52110c2de4f2b12cac7a042c3d9ec7748cc6076554cb7369f0b67d35ce70437c330d4cab971ff48b5c3d2ba261b2f54e6e3d068cdef29338"}, 0x56, 0x800) msgsnd(r1, &(0x7f0000000100)=ANY=[], 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000000)=""/105) msgctl$IPC_RMID(0x0, 0x0) 12:02:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0xf0ffffff, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:02:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fork() ptrace(0x10, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r4, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r1, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x61}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20048000}, 0x20000014) ptrace$setsig(0x4203, r3, 0x5, &(0x7f00000000c0)={0x1f, 0x101, 0xfffffffe}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/raw6\x00') pread64(r6, &(0x7f0000000140)=""/217, 0xd9, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x34, r1, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x20}}}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x322}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x411}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0xc040) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x54, r7, 0x308, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x4e}, @void, @val={0xc, 0x99, {0xd574, 0x23}}}}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x52}, @NL80211_ATTR_PID={0x8, 0x52, r3}, @NL80211_ATTR_PID={0x8, 0x52, r5}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40040}, 0x800c0d4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:02:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c000500", @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:02:17 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x14c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfffffffd}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x694}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3b}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9413}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x400, 0x5, 0x6, 0x400, 0x7fffffff, 0x10000]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x63b9}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xc}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6c9}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x40}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x31}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xff}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0xae2c, 0x20, 0x40]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xdf}]}, @NL80211_ATTR_CQM={0x50, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8001}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9c70}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x221}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x3, 0x595, 0x9, 0x81]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40080) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r8, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) [ 955.388815] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 955.406001] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 955.424779] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 955.438976] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 12:02:26 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 85) tgkill(r0, r1, 0xb) 12:02:26 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000006600000008000300044b3d602915b36ff5e110abe31f3cec94898cd88311ffef3effffff7a3f78079392e3497af849e102db517f99ed1a466eb79796635cf8ab7485163fe29fc09da84f60", @ANYRES16, @ANYBLOB="080026006c0900000800b70000000000c7ad61db8a1232d1097149c8c775cd41d71de19b2f3d6b1f24700bde39248ed704f5b45d1a96628fbfeab3318d9b30819af297239c64da068c3002439475fc1a546a21b15f4f3893b9b5089284cebad956c7e418cc7bc730aece13174f20d48664b2b6ea8430344eb0e2683c1af30992b73973"], 0x2c}}, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000000)=""/170, 0xaa}, {&(0x7f0000000240)=""/116, 0x74}, {&(0x7f00000002c0)=""/122, 0x7a}, {&(0x7f0000000340)=""/175, 0xaf}, {&(0x7f0000000400)=""/104, 0x68}, {&(0x7f00000000c0)=""/44, 0x2c}], 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r8 = socket$packet(0x11, 0x2, 0x300) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000100)={r10, 0x1, 0x6, @multicast}, 0x10) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000500)=""/206, 0xce, 0x40000021, &(0x7f0000000600)={0x11, 0x15, r10, 0x1, 0x40, 0x6, @multicast}, 0x14) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r7, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000180)={r4, 0x1, 0x6, @multicast}, 0x10) 12:02:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0xf000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:02:26 executing program 7: r0 = msgget(0x3, 0x101) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000000)=""/71) 12:02:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0xfffff000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:02:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c000600", @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:02:26 executing program 6: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fork() ptrace(0x10, r1) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x8, 0x5, 0x9, 0x0, 0x1f, 0x14000, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x10001, 0x1, @perf_bp={&(0x7f0000000000), 0x1}, 0xb400, 0x0, 0x8, 0x0, 0xa4d, 0x3, 0x1, 0x0, 0x1}, r1, 0x8, 0xffffffffffffffff, 0x1) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)={0x1238, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x1225, 0x3, 0x0, 0x1, [@typed={0x14, 0x1e, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3e}}, @generic="25da5a48241ce9d781f5d7ee880ec70093121fec84371a812ff320b19fafd6760ef25edb2840f23fb179205f6e3b48a5022cce8b0c4a2c456855eebf4f0c1938dceea9545778be9e7c69ba8a776e1437ed0183f1ed476a219b5e20d0d6daede57ebf8b67f3331940f9525fe412b2d5ef4ebd22ad854771417edbb77e567679f9c871185cac9ea44516274d7b35da48cd69d20e5009f4c24958b21962bfc0548fb699a472adfc", @typed={0x8, 0x18, 0x0, 0x0, @pid=r1}, @typed={0x8, 0x3e, 0x0, 0x0, @pid}, @generic="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", @typed={0xc, 0x11, 0x0, 0x0, @u64=0x9}, @generic="013d5fcda238393bdc30730160f40843b95df072694e8d948fedbc93ef905cdd8ee9ea381a39f70f230a405dcb24c975bb4dab6badfe6b7bf5657c9ce43159db75269a1dae2bf68fd0df568eb709e9d617a58bbaacfba6aed5b2bff9172ed72689a869e9f2223626e9084f5c2bd42837ef498a7e7bb816a6513b40a9da6273a67406b964239f16afd54cdd5de6ec342cc1fc0c4fe4837e3ea0fcd2b2def24c78da268dafb1169a99a2b66b7120534a4ee83570a695f4412403d346bbfeba2b615638619699a99e6fe2430cca0154a696b411511d9e17dbe2d342c9a7f78f", @generic="08fbac2a043e4f6e6a9397c958e489d380680dabead3be464b729ed4cb983a37933724e2339e3c145907ca4805f4a00917315c2763c8eb37114e03f0db3ea21b7e083ab58f1005936513d4608ae83377727cab6e44fd3e8855880bdf4b92569bf2b6598f1c3397b636ddc7564e"]}]}, 0x1238}], 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000040)={0xffffffff, 0x0, 0x8, 0x0, 0x3, 0x9}) 12:02:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00'], 0x2c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) sendmsg$NL80211_CMD_DEL_INTERFACE(r2, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="14400001", @ANYRES16=r8, @ANYBLOB="000325bd7000fcdbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 964.757228] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 964.763461] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 12:02:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r6, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x64}, @val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) recvmmsg(r0, 0x0, 0x0, 0x10020, &(0x7f00000000c0)={r9, r10+10000000}) [ 964.868212] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 12:02:27 executing program 7: msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/77) r0 = msgget(0x0, 0x11c) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000000000)=""/216) 12:02:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0xffffff7f, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 964.902806] netlink: 4632 bytes leftover after parsing attributes in process `syz-executor.6'. [ 964.904409] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode 12:02:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\a\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:02:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x30000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:02:27 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 86) tgkill(r0, r1, 0xb) [ 965.004248] netlink: 4632 bytes leftover after parsing attributes in process `syz-executor.6'. [ 965.016075] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 965.024185] FAULT_INJECTION: forcing a failure. [ 965.024185] name failslab, interval 1, probability 0, space 0, times 0 [ 965.025163] CPU: 0 UID: 0 PID: 8363 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 965.025180] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 965.025187] Call Trace: [ 965.025192] [ 965.025197] dump_stack_lvl+0xfa/0x120 [ 965.025225] should_fail_ex+0x4d7/0x5e0 [ 965.025252] should_failslab+0xc2/0x120 [ 965.025269] __kmalloc_cache_noprof+0x6a/0x3e0 [ 965.025288] ? audit_net_init+0x190/0x440 [ 965.025307] ? lock_release+0xc8/0x290 [ 965.025321] ? uevent_net_init+0xd3/0x330 [ 965.025339] uevent_net_init+0xd3/0x330 [ 965.025354] ? __pfx_uevent_net_init+0x10/0x10 [ 965.025367] ? kasan_save_track+0x14/0x30 [ 965.025382] ? __pfx_uevent_net_rcv+0x10/0x10 [ 965.025397] ? __pfx_genl_release+0x10/0x10 [ 965.025414] ? lock_is_held_type+0x9e/0x120 [ 965.025434] ? __pfx_uevent_net_init+0x10/0x10 [ 965.025447] ops_init+0x1e1/0x650 [ 965.025468] setup_net+0x10d/0x320 [ 965.025480] ? lockdep_init_map_type+0x4b/0x240 [ 965.025494] ? __pfx_setup_net+0x10/0x10 [ 965.025510] ? debug_mutex_init+0x37/0x70 [ 965.025531] copy_net_ns+0x2e3/0x650 [ 965.025549] create_new_namespaces+0x3f6/0xab0 [ 965.025573] copy_namespaces+0x45c/0x580 [ 965.025595] copy_process+0x26d5/0x73e0 [ 965.025608] ? __pfx_perf_trace_lock+0x10/0x10 [ 965.025632] ? __pfx_copy_process+0x10/0x10 [ 965.025644] ? __might_fault+0xe0/0x190 [ 965.025663] ? _copy_from_user+0x5b/0xd0 [ 965.025680] kernel_clone+0xea/0x7f0 [ 965.025691] ? get_pid_task+0xfd/0x250 [ 965.025710] ? __pfx_kernel_clone+0x10/0x10 [ 965.025720] ? perf_trace_lock+0xb5/0x5d0 [ 965.025739] ? find_held_lock+0x2b/0x80 [ 965.025756] ? ksys_write+0x121/0x240 [ 965.025768] ? lock_is_held_type+0x9e/0x120 [ 965.025788] __do_sys_clone3+0x1f5/0x280 [ 965.025799] ? __pfx___do_sys_clone3+0x10/0x10 [ 965.025823] ? __fget_files+0x20d/0x3b0 [ 965.025847] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 965.025867] ? fput+0x6a/0x100 [ 965.025881] ? ksys_write+0x1a3/0x240 [ 965.025892] ? __pfx_ksys_write+0x10/0x10 [ 965.025911] do_syscall_64+0xbf/0x360 [ 965.025932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.025944] RIP: 0033:0x7ffb744edb19 [ 965.025954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 965.025966] RSP: 002b:00007ffb71a63188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 965.025978] RAX: ffffffffffffffda RBX: 00007ffb74600f60 RCX: 00007ffb744edb19 [ 965.025987] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 965.025994] RBP: 00007ffb71a631d0 R08: 0000000000000000 R09: 0000000000000000 [ 965.026001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 965.026008] R13: 00007ffeb487a35f R14: 00007ffb71a63300 R15: 0000000000022000 [ 965.026028] 12:02:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\t\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) [ 965.079939] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 965.102119] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 965.145506] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 12:02:27 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x14c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfffffffd}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x694}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3b}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9413}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x400, 0x5, 0x6, 0x400, 0x7fffffff, 0x10000]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x63b9}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xc}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6c9}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x40}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x31}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xff}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0xae2c, 0x20, 0x40]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xdf}]}, @NL80211_ATTR_CQM={0x50, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8001}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9c70}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x221}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x3, 0x595, 0x9, 0x81]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40080) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r8, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) [ 965.243766] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 965.257095] mac80211_hwsim hwsim11 wlan1: left promiscuous mode 12:02:36 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x40001, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xaa80) ioctl$TCSETSF2(r0, 0x5437, 0x0) 12:02:36 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) ioctl$sock_netdev_private(r4, 0x89fc, &(0x7f0000000000)="d7e3a4fcfd747db6c1edae36d38502cdd19f166d8a489fd4d4489246049058d63dad109d9627f42a2c1f4c48df6d5ac8a34bbefecf36f5702065b4d8f94b72fc47508cfe08f9b3bfa9bc6f62b1cc1ec6e5521ccf84a71cc78aeb06192570974548be22fee2a9076bb71f1921794e570937737a1d36e2b7aa33f493923afd7c82604b59272c444ec979ac03682b924fc8da646b59cc4ef6c5256aec513ea164b47de27c0ea0a26a6054ce08eb035d1069b48852ee8f2e3989b5a6800bfc03") ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r8, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 12:02:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0xffffff9e, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:02:36 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 87) tgkill(r0, r1, 0xb) 12:02:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x80000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:02:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c000f00", @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:02:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) r4 = memfd_secret(0x80000) sendmsg$NL80211_CMD_GET_REG(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x320004}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r3, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x20, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8001}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}]}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xee}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004810}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) r6 = signalfd4(r4, &(0x7f0000000200)={[0x4]}, 0x8, 0x80000) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x300}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0x100, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x2c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa3ea}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffff3a3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x20000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1f}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x9, @empty, 0x81}}}}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000080) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, r7, 0x40a, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xbfde}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xcc8000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000d0}, 0x20000000) 12:02:36 executing program 7: msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/79) r0 = msgget(0x2, 0x200) msgrcv(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007dba4e57a264eaaf00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007a68af5fe28f7ce55e3a8b5180caf830ccd9620d512919cb8374e7df9fed3a88728eafcb902d1e6b2aaba3ef98e4531f7e481fb589de4d633b1ba956aaa7d607a649c49bdfc7f309a8f0e886d2db9e29598a14ece665bba13f3fa9031dd25f2ebf1c837615114f6e4957b6514b8b97417622c7775175fc73df9934465744eff0d30e7e8f15d4ae864d615061c8c231d9d5d97cae92acd1c36366b87a838152e31eea8817d77c164bf951e76d62152d4895"], 0x103, 0x3, 0x3000) r1 = msgget$private(0x0, 0x8) msgrcv(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000000ffff0000000000fffb00cdaead1b525a02e791d3aeccb2470000000000000000000000000000000000000000000000000000000000000000000000b3fe534db19fccc800"/93], 0x54, 0x0, 0x0) r2 = msgget$private(0x0, 0x101) fstat(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = fork() ptrace(0x10, r4) ptrace$setsig(0x4203, r4, 0x5, &(0x7f00000000c0)={0x1f, 0x101, 0xfffffffe}) r5 = fork() ptrace(0x10, r5) ptrace$setsig(0x4203, r5, 0x5, &(0x7f00000000c0)={0x1f, 0x101, 0xfffffffe}) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000540)={{0x2, 0x0, 0xee00, 0xffffffffffffffff, r3, 0x1a7a16bfa09cda9, 0x3}, 0x0, 0x0, 0xe2b, 0x200000000, 0x100, 0xa8, 0xff, 0x7, 0x1, 0xa148, r4, r5}) msgsnd(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffffffff"], 0x8, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000100)=""/230) msgctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/217) msgget(0x3, 0x2) 12:02:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c011100", @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) [ 974.397537] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode 12:02:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c00f000", @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:02:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0xf0ffff, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:02:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0xfffffff0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 974.542740] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 12:02:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:02:36 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 88) tgkill(r0, r1, 0xb) [ 974.629110] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 974.656349] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 974.718229] FAULT_INJECTION: forcing a failure. [ 974.718229] name failslab, interval 1, probability 0, space 0, times 0 [ 974.719354] CPU: 1 UID: 0 PID: 8445 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 974.719371] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 974.719379] Call Trace: [ 974.719383] [ 974.719388] dump_stack_lvl+0xfa/0x120 [ 974.719414] should_fail_ex+0x4d7/0x5e0 [ 974.719438] should_failslab+0xc2/0x120 [ 974.719453] kmem_cache_alloc_lru_noprof+0x73/0x3c0 [ 974.719475] ? sock_alloc_inode+0x27/0x1d0 [ 974.719496] sock_alloc_inode+0x27/0x1d0 [ 974.719510] ? __pfx_sock_alloc_inode+0x10/0x10 [ 974.719525] alloc_inode+0x67/0x250 [ 974.719541] sock_alloc+0x40/0x270 [ 974.719557] sock_create_lite+0x83/0x120 [ 974.719574] __netlink_kernel_create+0xba/0x7c0 [ 974.719596] ? __pfx___netlink_kernel_create+0x10/0x10 [ 974.719608] ? __kmalloc_cache_noprof+0x1b3/0x3e0 [ 974.719626] ? audit_net_init+0x190/0x440 [ 974.719651] uevent_net_init+0xf8/0x330 [ 974.719666] ? __pfx_uevent_net_init+0x10/0x10 [ 974.719679] ? kasan_save_track+0x14/0x30 [ 974.719694] ? __pfx_uevent_net_rcv+0x10/0x10 [ 974.719709] ? __pfx_genl_release+0x10/0x10 [ 974.719726] ? lock_is_held_type+0x9e/0x120 [ 974.719746] ? __pfx_uevent_net_init+0x10/0x10 [ 974.719759] ops_init+0x1e1/0x650 [ 974.719778] setup_net+0x10d/0x320 [ 974.719790] ? lockdep_init_map_type+0x4b/0x240 [ 974.719807] ? __pfx_setup_net+0x10/0x10 [ 974.719823] ? debug_mutex_init+0x37/0x70 [ 974.719844] copy_net_ns+0x2e3/0x650 [ 974.719861] create_new_namespaces+0x3f6/0xab0 [ 974.719885] copy_namespaces+0x45c/0x580 [ 974.719903] copy_process+0x26d5/0x73e0 [ 974.719915] ? __pfx_perf_trace_lock+0x10/0x10 [ 974.719940] ? __pfx_copy_process+0x10/0x10 [ 974.719952] ? __might_fault+0xe0/0x190 [ 974.719971] ? _copy_from_user+0x5b/0xd0 [ 974.719988] kernel_clone+0xea/0x7f0 [ 974.719999] ? get_pid_task+0xfd/0x250 [ 974.720018] ? __pfx_kernel_clone+0x10/0x10 [ 974.720028] ? perf_trace_lock+0xb5/0x5d0 [ 974.720048] ? find_held_lock+0x2b/0x80 [ 974.720064] ? ksys_write+0x121/0x240 [ 974.720076] ? lock_is_held_type+0x9e/0x120 [ 974.720095] __do_sys_clone3+0x1f5/0x280 [ 974.720107] ? __pfx___do_sys_clone3+0x10/0x10 [ 974.720131] ? __fget_files+0x20d/0x3b0 [ 974.720154] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 974.720174] ? fput+0x6a/0x100 [ 974.720188] ? ksys_write+0x1a3/0x240 [ 974.720199] ? __pfx_ksys_write+0x10/0x10 [ 974.720218] do_syscall_64+0xbf/0x360 [ 974.720238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.720251] RIP: 0033:0x7ffb744edb19 [ 974.720261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 974.720272] RSP: 002b:00007ffb71a63188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 974.720284] RAX: ffffffffffffffda RBX: 00007ffb74600f60 RCX: 00007ffb744edb19 [ 974.720292] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 974.720299] RBP: 00007ffb71a631d0 R08: 0000000000000000 R09: 0000000000000000 [ 974.720306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 974.720313] R13: 00007ffeb487a35f R14: 00007ffb71a63300 R15: 0000000000022000 [ 974.720332] [ 974.745293] kobject_uevent: unable to create netlink socket! 12:02:48 executing program 7: msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/79) 12:02:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x1000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:02:48 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 89) tgkill(r0, r1, 0xb) 12:02:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:02:48 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x40001, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xaa80) ioctl$TCSETSF2(r0, 0x5437, 0x0) 12:02:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c00ff00", @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:02:48 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000180)={0x0, 0x1, 0x6, @multicast}, 0x10) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={r9, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000180)={r7, 0x1, 0x6, @multicast}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000024c0)={@local, @local, 0x0}, &(0x7f0000002500)=0xc) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000003c0)={0x2}, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003a00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000040)="319a507acf5f5321ad11d8eec437c00ba9129aa7ece416fa3aa9c9c5ff795014dcd2e3b87f204d96f500f8a03a04d8f1299e7d9c5b315b0c71c1f4a05c49a98c0a61092bb4ea42794626d02688e682394dc325c1b1b203fb1cbe0eed308a0e10680664ad715fafeded0a257c9600eba91e2d4c381446c766f4e697f01df31550d5e1c7d4ea7ca657a4fa66c2ce8791c9998b8fd712e4aa943ea0", 0x9a}, {&(0x7f0000000100)="3aec8cb6de0eedfe5cc28a9d76", 0xd}, {&(0x7f0000000240)="3f7e6ac65d238becc56cd787c055ecf4f47d4a364d652497efc108d13cac89ecf1d7ba2fd0d9cdb314a08675dfc66c2fca7c76657781bebed6ae9346bc525157ab7b6b5512e5d65c4af349f3981e466e9a40b4fd4486fdd28561d0b5e38eccf4481f94bad0b73e6218071fbc296edbc3fc2dd8cc897218e89453d5f5df2d2f0f9d649c4acc7c277e862da03522ac6ade4f3f40ebab4297dcf54bae8c4624783a108af7d6c7d22a9e454ecb8f7d742748294341317ec9fe207516216402cfc27f9cb4c31a675be5eb24f3", 0xca}, {&(0x7f00000001c0)="8c42e0debfc28dc22949ad91fd8954a21d6a761fc1e6efeb4f51", 0x1a}, {&(0x7f0000000340)="7ba037416a52275ecf77aa2926ff070ed7b48be8122f670390d774dcde24f3cce2ef514ece743d3cc5bb535b2b859f841694f62207b912ba629d521de9cbb4b74bf4d855d2fa84361f7952cebc76ba8057", 0x51}, {&(0x7f00000003c0)}, {&(0x7f0000000400)="d4b4e9df94b7a07680e287da4f8c4fd32edbb7af39121aab146df6f60049d9be621a18699e534bc84b873aa235cc6e58fc9c7736df57e0cc795cedc5157138d365e1611f780147221d097b76ea2932cf405bad7192b8db7c92226c533127c9607e74d826747c7b15fa925073cf472404aabc922641a289f167fbdd676b385e0835ed54cb25b5", 0x86}, {&(0x7f00000004c0)="51cb2dc7ce3cd0b19196fd20db0539bae9fb70bbc747b9d0e8610a5f857b099e6e4a49427ab41fabcb48f817043b5e0397a1715dc951d560ab929c6cdad903022b95c278199d3d786b973c224e3ed3e1baec15cde5cf60e75af2088c70724c0679fc2be740fbce638f446427076671", 0x6f}, {&(0x7f0000000540)="5a9a24598c4ed0ab0929e0a1204fbef7d9500e7ba7138b92f8cd921463011d585c0319cbcd3ef439da3a25d787829b2d4be2f43d570899687d8d36420cd01dc3e72b22be45", 0x45}], 0x9, &(0x7f0000000680)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x38}, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x68}}, {{&(0x7f0000000700)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000740)="53131319b8a81489c8bb91d4f559d285346725ce0d6bb3c9e51ef03bc133d5532cbb72d3d209980bd7aa9c57896abe57d876cc5ffc9ba2ccedb511c708c9bcd14c4ff0c78958fcab8e29373381d53272253c084ad396b0410badb497aa8eae2241088e8ebe99b6a0f487d2151b2a930e2bcfcff37e78746ce68cc07bf5ea3d3aa8533338230e3c0d2a81c7af7848448e71b7680397c53f476570c7cdf01c69824653b9d792fe596170a6a053c2b720753a85db897a611584439bef0e34eea97b2a8e12d14066cc5a72ddfb1bed7dbbd5ff1505c16951b768eb765d", 0xdb}, {&(0x7f0000000840)="cf12258a28d431e304f5c72ef509afff42919f96aea30e89fa331764c3c950b6e96215918bc4863f788242faf3b91126b5f9c992526de09466c349fa097b3c281b1c4837c7c2d16c425a3dbc22b6fd91e2eadc8481c52518763bbbb62354330fcd264570f6f5a74ad43233102bcfd134cb16787667783eacbcb6ba03563f65b5f6b520c49e70da2479052555bbf9b4cc5da5181f653e76695086f49c27963569e97e4be1e563cbe6a93d43da32aa387f27b97b7b49170ce7a76b3d1b3ddb0171b99d33f54bd7aa15148de432e208954eeff31df52d73488f8144cfd8c49bf35ecfc0d50d862a", 0xe6}], 0x2, &(0x7f0000000a40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @local}}}, @ip_retopts={{0x88, 0x0, 0x7, {[@generic={0x7, 0x4, "73de"}, @rr={0x7, 0xf, 0xe7, [@broadcast, @local, @dev={0xac, 0x14, 0x14, 0x1e}]}, @rr={0x7, 0x1b, 0x59, [@remote, @empty, @private=0x2727, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @loopback]}, @timestamp_prespec={0x44, 0x34, 0xb8, 0x3, 0xf, [{@private=0xa010102, 0x1000}, {@local, 0x200}, {@loopback, 0x200}, {@private=0xa010101, 0xff}, {@remote, 0x9}, {@loopback, 0xffffffff}]}, @generic={0x8e, 0x8, "618bf237480e"}, @timestamp={0x44, 0xc, 0x4e, 0x0, 0x4, [0x8001, 0xfffffff8]}]}}}, @ip_tos_int={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100}}}], 0x110}}, {{&(0x7f0000000b80)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000001d80)=[{&(0x7f0000000bc0)="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", 0x1000}, {&(0x7f0000000980)="ebbbf95fb319b847f5325e96e75bc07564131756f630b16087906272a330791d693153fd2a6f003a3fa16f662d292e109cec02000000006b404e1ac180bb00"/74, 0x4a}, {&(0x7f0000001c00)="d2dcff1b7ef3216648c4bd3475c1", 0xe}, {&(0x7f0000001c40)="d96bb0fc5ce6eb282b083d569bc5352f96dc68db9f1931c2c3a98fcdc484b64849680d38c60fa48a7cca5ee020a40d8c8701d45aafa2206048139b6dcfcde4934d3d853d674e566fa448d0ef84b7862e96a54398573e2cb195b064980452763e6e34d47bd133a66274b4dce5a7dcde8b027fe788a0f93f5e9a92ed09a6a411b1d3cc0fd4a189316acb811048367237aa102d470724468550811bccfc7072052b97542e9b8ad4a3721a9edb3e27671f31eb63762e79c11b12ae1d67bbb14ce7e42bca3f1cafd88a4504fba0b173298aac57c353d47e3e36b3", 0xd8}, {&(0x7f0000001d40)="4d05bdf6f17b7576922aee469d145dd1b126954f960a5e04392da5dc5a", 0x1d}], 0x5, &(0x7f0000001e00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @dev={0xac, 0x14, 0x14, 0x14}, @multicast2}}}], 0x98}}, {{&(0x7f0000001ec0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000002080)=[{&(0x7f0000001f00)="0c984373bf5b531fd148793e7a5773412755ddca3d0071396af4682dce3ce5b7c4888d2c4f57b6bda63299283fb340acbd9a914d276bba567f981a0d2fbadc275cb580289b1564472b8d916659ca90fc9be09f00d56dc8c906283e8a73b8ead2a53cd7533a729da65f249621d83c1766dbc8c0d2e3b26f9c2b558c599ca1d28f9708e61d025df384a569cd750b826046b470bdb54c05241b92562ac2", 0x9c}, {&(0x7f0000001fc0)="799eedf419a8cf5d923f12c3679faacf4124e37d2395faf7cbc8fb5c6934ffc787c0295de5696df24d59829dad59379d6e19df387e21fd0fbe4caf2e1af32ea0276d6fb3554aa3ff7b10ee45bfcaaa60c2027cd76da8c528671717abe6760756c5d5a4423bc757f6e34139fc8ba6cf2898ccbdf9cb0421cdbb75e01b553e96d666638d9da288717633d177cc42997e39429dafb1b9348cae5283db613004a88fe0c6ee5d54f7b6387eda36e164753cf3a237003f", 0xb4}], 0x2, &(0x7f00000020c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x63}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @broadcast, @remote}}}], 0x68}}, {{&(0x7f0000002140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, &(0x7f0000002440), 0x0, &(0x7f0000003b80)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r10, @ANYBLOB="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"], 0x198}}, {{&(0x7f0000002700)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000003980)=[{&(0x7f0000002740)="9e4afed8945ea44eb205ef3e3eccbe3b1f7446f6b0f05e74fb9702b6b065bab862ed7ca5a1a6fa54a1d718bf456845465d45186f01232afb30c0ff98858c152365bba053bd39ea116b6afcddc21078543705a422e044f484ecc9b4d4b222e151e97de217b39b549c81c1812fc1b0284b16282801c0a818af11aa0e4f5b590112d44acdcf11f97a34c4b6c07fab9e0481e194dc9008e1b900e37a40b83f703d6b6119ed61c7edf94e80f13f08f162", 0xae}, {&(0x7f0000002800)="fe174fd04160fc1fca80", 0xa}, {&(0x7f0000002840)="fbdeee3d24a2feb3c8274d26e90d9e2d84c8d89fe98536007a6c42a13dc0181bbe6b8864659507c0e0ae2ca93ae09a43aab6e568911b1b0c1d1737aa835d0c0b8bcfd5a008ab3ed0e24a173410681adbb446da28cbc59cb50b59bf21608da167525c210312a91aaf7230b2fcd051b8cad8dcee6ed59484f5b598aaedb4d841306edf1b0a7c0e289907f52fcbaaceec8dbd2e79f1e272754038bdc3d48b7795b836faf8b7c5c5b79a117933b7f13040bed6b843303aee87c8f8003650724594433985ab24406de08ba740cb8ba54d762e1650fea996e3045aef43b975193f683cdf9aed864592798905cfd18a8bf58f11914a87f5364dcadb24f3e452943a33d23fa1557e6848fe3e912138f8708b9d1f97836c7285e2635729e3c108c8813094294b7620ad9adcc7149a5480e13217858ebf1317d2ff53589d999ad7067859862ea148e93a61a05091c756c52d86239bc5da24778e0c9edb9fbf37be31dffedcbd17ca16cdb16a53d37af56ac38d79864415687900508f05772b8f35d298836007deccf590eee603937613267051ece1bd45e2f4ab6c44a179c1cdc05bf800dc3c5c7978ca76d0198febc3b313ca4454f3556e3fad76b6150f0c11366ea296fa7739a5c0d6db95811d9ad84f10b7aeda8997cac49341900a87d800ca232bda8c517c0b9efc531dee6b5baeb652dc50e09016a092a826d76d0ef199855f3d1870627bc86a0deae91e78a5b4668156eb5b1d55c97d8029f116eea3cb4748cbe49e326bcd3a4197dbde8cee998287732034150ae053b0b57b95c8f715943921a354f0efd8017999ec4ca71e8adadff7dab15838a060390ba2014db092d6b3ff211f7ab41748198dc06603ede520cccf0d82a596b6b49c03b1e4c0161c332bdca937f2cc7ace0e071070b4a3d5ca166cdb2e17ec465e11acfb041aca2097837d5d78b093e6eb9fea3c27eb91f5de2876d4b5221784443d662cdc724f0d2341b53196b1155980e8c7262846c108e188276d6ed666a77a545ad04a1ac7888d2851e81cb9a5a246d2bbdb9800b6a4aa990fb997bbcb6eed10729455ac2e2f3a2ee89487da89ce66585fc0e8e742a98bb69ffcef28a5ab025894b2e21faff627ab169925e0c97909eb61b59956b92e7195bffafbee3014631d46f1cb214663b2c1f0b0ffcf039125e6293f81659982a08ac832359e77e40e4f4374113f8c701e1512c91a52aeb709a9384a342285a90262511fb8a2e7269d2a7de4e949c5f5aea2fd6436ce1bb6644e79cac57f1496fd66426137f605e44ccd6260ad094f7bdb4270f30acf60d681bfb2fd8ccc71904e1ea6182352d40a74f83ec5dce7235027bd275391cced2e52f5a7baff5768bad0b1ba3b75ac1a8e5ad077cd9d54d6f7da7a0b88744da35b38693b5d63c12eedf8de1433a6629c994db3175d5459ce76ffa39aecf6f435433864e18b234170e24204723d88dd49c87bdc0e74cff5f978172d4c997328ce6582dded16cf7cf7fe06de5af123bcab8d0d4b7b6c3c715784529d6f4c4b78facf11b63b345d26d0fcb68f12d141167096394bbd974d73ff1ee1dea23894b066e2f1f93862ecb6f4f2f175006ee76f1b2c37329b4e38d7eeccf1ce47ef52236f226834065b71d7e3477d21c2327941af6e6719ca0f93bc95a9cf1f0a975126cf065ee6baae07cb93295ad31d214c4270c0108d62b34b3d5f48444e3fc593d76a1d2401b8a4c9c9cc441df7cbaaf82883a1ca55a78c7a15739be5ac5af12d4226e89d61e1e7824129a00d4755399f6194016de5643f782ee2c570753b8de43948873937ef3f49e64eac9f76774f0f0d7979809f90bdfe734e9423f73508ee9d36cab0430237bb90fdda013f9abb70d9d048badcae38309705852658c777aac85ef260c826146cf215021d6257060717e6e7e0834b90e18c560a2a9f2399accae4d7ee990ba67f8f1c8ad580da91613a5c693a85ab1a819bad1b9e080e264fb1e9251798e834a5f1066061b1c842de8338d240ae26d17db73a96096dd1c2027dd3d45491594b742c3f353397513f36c90bdd55a25bcbee943cb23f6d9c3774fbfa796a48d796d6d0e661aa956ef8687bfe0848a1e6a1ee8ebe7ae61a5b017914dfe7ef44206c0b8fab7101280e92e8322773b600c28ff1d2bc04e27d3b6009ff3816c11fe2f10ceabf30e3178e5ee0b943bc7f77fdcb266c37766ac7c9091cfc3bcb6f285a9015662d1f45dd32abb5082c919b2811a08b9188d8540cc70f08133508b2f53a12f95f84fd633b8b6dd94761aca578257b6d3a6915a5b74e4dfb3c5b1e4cc10f6fd2516e990e9ddcab76f69360b3fd0eda9b780834b7211a4dba2f9fde46289b7b97799ab3faf9f932e2fa3ef670930424a6fd7559fed1fd14bad8524a897be383f84db4f0251b3f12d872130d201228a7be734a2013d5d0e6ef9cacfdd78e044782e3872d2840db84a7902732ac0596106dc59dd830f185c01bd79d663d4efc5779d2d63c9ca94dd54328824601ba53b329a1387b910bc060b9b739855970afca5b85fc17d7009f88a379c048a323d32e2e6b32037f22dd22354ad667be381cc695f3b0546d3572c131a09e062117b4d5a5880213cca0cf60eedbf1caf27d1094e2b5319520aa4666709c15a2ee1635b340db24f5739ec86fa721cf9ae495b86f61bce7098b1c075d5b74b6dbbedd7f0ee220e5919144a5ca49adc144a4b634c96b9953097352dc8a268a7859bbf560cc129cfec00bc270a4fa41ed9fbf97a77117bbff93bb55d8042ca1c032ced40cc4104f57de8f48b5ebddbc4902a62cb9a837dafe1fa0ee6732204c06e68382a886e32ffe253636662a3590b53eca94393c017425ff89f934644354aadd156320790eb468dfaa6e6c4f5216fdd7d75b05c7df68d66b13e24bf62ac5958f27b43c9d5e97383b85743814839df32a907bb9a9fe15cddc99ed1a459d33521e09a4da0b55536e976fc836ebd611888e4a4183c06451fa043bda32b792154ea8cab50c01669fb914135b0a4f65a8b2d6c1d108419d000c070d02fda828ebde4f12e261dfdb983251d05525235a963f2603186d94740f402b6ec4ef5bd3763e5c6cb557c05bf472a8163a61e59e5c932a4ff5075a2b969a62fc962f49eb5cee9218e51214ac81d1a54b0aa3d34187c00df4dd44de167ee8667b6cf42ce2701cfd00b50755213f0fb641bb3b2162bf2a4d0f1ffe3f007ee2f91e30694825748726d1cfb9df3977cd24d0860eef3c969e3458f8e718c6c2a58dfbe98144c166231dea0002c33b2a88ea41e3c83b93d6c26c1d2cfcbe81e5c5607b60f9dfa4aacf9f2f278b276f9cedfdce1ead361d3a9a906c05fb53dd2b900b41bc9e7a14595789489df5ad619dcd8c10fb3aec6fcc9aa818797f678662b79114b3e3adc926f156f994ff36adcf048b2aea2433f3ff539c872ea8f6d28beda086431657c3f89d603db8ed131d77220ccb3d24dd36c54031d97d4a39758c8992525da1d282b3fe814184a84835508c0d01c406d76bbbf7d228d05474d0938a5dc15268fe47f8637eea73eb26fffc1079aa21373edaa3b4c0b3357f72ee744983081e4562abdb19e54270eb10dcff3eedbb8fd4648a121447bd7941d09b390b8979a88b3a90fdc86c0964bdf8671ea134d6b0d55f010b69ca4aa3a9399e394a29d8a916e98799bd46efc5b2e0ed800bfb96e18b2f705ae99a3469648d9b949b77f70282f08bc818aff38c7f0a07450a3a79ad0bf09012302fe54d65d5163809e06e5bf264b1045bc25c5517deffbe9d3c064cc7674bbc5081d2b33efe4b7aac9d794530c266461d5c40613afe4a41225c68bc2eec684b86e7a2c1785165177b5ee6fef5b7f3856d0ae7e67eb0d82fa09ded5dac077a3589c0524ac6464842579910fe6d2fc2490a0ab489af2f0c03e45bb2e776c295871e6796580760363f277f3d997c0bb419ff21760af5da66601c60be6a04e4be3f0669db49ca17a776613a84ebd8c0c078a52c2cd08ded526cde56931d7ccdc2500abd4a4d43d4774f841da1caddb7cf1e09697f51f8ca79adf08ce414ca78a9b1e6cc65ed05b35ed0792a2bff2ab1a3f881bb69ed499e0469b96cfe05f1bf862afc71a8dba546cdacd30623fbf2cd56b4301b30e710a0009f224bc43796853a737178ee581398c4c41e199dff2c6c111a5c80a95ddbad9a39787abc267c4efd01d68a613cb51729da4d631806364345c0d5cf85986fdaef32a48b5a20ea64838d2d8684664e05128fc1b550d10b762d6b8c8355528073154cce82843431612e15e691395d7f82bbfaa36a9ec93f3abb33e75c1f836b24d7594bf2bd6277b3d0f44bd99ec0446b66f0f36fbd5f3c8697bcc047ed83910067338463ff8bc2447bb84bcefc81445e80ddca9fa9fc1bc4c525cef530357342d087c92f3fd808b75a84dfbc9efec3e73fc331f9aa2a767653c297283d51fee1b29dbe34b90063b4c4b83f3e34aabee4d710f23215893f82bd4f9606d665d30c646ee1a9b7f85af3d9c07e7abeda20afda4bc8fbf4da201d1ef7ba613ea1390118cfc0b5fa282e9cc6fbb490ea0eea764236b06f7d3e17071615b0ca17e046bc5d3414c61124f7c75576f0ba1cea6d8512f81212e74d859b69df508adb9b444dc3b0ccc701183856337eed5e369350cceec1ea47c7b4f698a74c7126f2735bc9c3de560c27cdb5a886421a8a1e98d5d03c53b731f1b2196a393dff32c01d711d9a078ee1cc6a67b7bc217d1391b4c9da43bfcc94616dbb848d85c20057abb0516264387c871fbfb14be48c654d3896a981f70707c8bbe3bcd15aa655c794d82a485b23ef63ae0f34b5592c72720769a55714d8431f91c0242d6ae46b0ec2981051b5668550915701d2c80de153193a4b5ce98c827494b02912e229fdcbb7a49a5dcbd7ad0fbe53c9cf05c41f4e445497d292f9ecb524d9d29447b61e7d33acefe0fba2ae756efe9e31138659a6bc261369313a38c203f14e7b859220a22d8b6e243543d64a7ed2bf0fdb583fe3ef340812e2c969c72d844a7190ff97bb1141ea05673ca66d4303f49a7dd6d262a78b85a410426f135e11fb685b11a0228d72c402e0df1252db179df867c383990e2284ac5cbcdfb2d7e1942349a4d2651228df26114150c993cee9997316fb5ed72d6c4b05ced745c7597ae43341abe8b85d6e03cdeac469406fb3b11c3344160bff3f1b3bcbe14ea035a6f176a11af60408d0d8dc77d8cee2d63cdd7938e1ec522018ed1c550f816b551d27a1bd3e17c75b0ad22618cb5b7d4c0aaef19fc7fc8f9fe45d8ec481d88635a78c662e01704c26073490c6b2ec19d99e8bd386ebc93c1883ffd22eb738b4f0bbeec8195cbf7ac98b824bdbf1311cf6ca0ef9ff50fac3dc66b9ed3037b16b9cf1b7c93c97e01cf04cd8d297c491f6ca4a462620e9a5a6888320b5d7b9e5854b19094b48eeb3a964e8b9b8d753930a25667259162e8a901384bd15f3c65fd777817c48f19e1ede5ce6347823bef7eb2e141311a7db65b6de16a111580905c02c76360a9a096fbaa1f14aa112f6a5fb6fe0bdffbd6044be899ac1bafedb7782aaa9f0b04ef46287289a46a91c974bb657f2c86e8a33cec0de4b90a570d945896663c1a07a8f8c9da4827d2698dc2f401da002b3060b76ad71dd02d92de1863f3a1d655447665cd4b9e740817d2730e7bbeb01b8d9a009daf27d1c0cd3e644ac3e07086f3f95ad614c6a3866577e498fb6c383fba96c76f9c525740ece4f85e14608ac37f7ca089f5d3931909a40f605356bf6", 0x1000}, {&(0x7f0000003840)="db35b3c3ded1be4de86bc95e92fc449e1d5296687fc3634c28e3237d2d90a4eeaadabdce1af3f199568459a1ec047ab95b16fe37b900ec3e443297865cd488d58d53e76ec9fee1ebec7b369fa412a863eda7a0e37eddb7c64d08b4c6f40dddfdb1fa3f45028c102554b6f7d83cce9fdfedb6828c7ba0cd51b78f1fa310b433e802840bd5f60289cf6f2c4a", 0x8b}, {&(0x7f0000003900)="41f046f69f055cd1f53a6c147300d7d89cd867ba0aef884bfedda489bb01d4435fefc3d41b74aaed9e9721f6f3eb3a98995d725b13d5230b62ccc8668ead61a2d3cfa511aaca5a93e4a2c81ae81b8040512ce7ce7a3a868d76d9ea9eaddd654139c034d104974c8dd929cdd2ec", 0x6d}], 0x5}}], 0x6, 0x8000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 12:02:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x5}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=0x0, @ANYBLOB="02002bbd7000ffdbdf2501000000840002801c0001800800010002000000080001000200000008000100040000000400018014000180080001000300000008000100050000002c0001800800010000000000080001000600000008000100060000000800010007000000080001000500000014000180080001000700000008000100080000000c000180084343000f000000"], 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0xc800) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 986.101763] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 986.136396] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 12:02:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c000003", @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:02:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x2000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 986.161769] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 986.171947] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 12:02:48 executing program 7: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) process_madvise(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="3139f8f71300c800fba0709551c010c900def5fa3452f47c0bf7341370efe7c07bbaa877e8818e299b73b83da2b51657a4ecb718674b947e51eab3010d422cbec5f750ecb616df3098136e0478e253e4f49907cb1d0742626a2523ef013c282b55c6ba545d5fb8611978e4952ef81fd743079daf65c954facf515d7cebf59638c30a44a0f6998cde7a76f7923a", 0x8d}, {&(0x7f00000000c0)}, {&(0x7f0000000100)="5efc5e7f0099fd415d32f6762fad827ff0e40faefce7d38ceb0a0835c5cd5eccbee5ec48728bae1624690c7934818745ae25c82631196a52b1eeb2978f029c62e5b8d29f3747b1216e386f5f64d4171c5d8975ff792e06f3e1862a4d4ab917a518133d8fc2d1f77d9ce0e3bd2130c11e2678d70fccf525b53de5c5588bf6e2204f606023eed67b12c31aa418f0edd56bbe2e7ce1bdc4af610a93630f101a6964663d63b58af2ee1235fdacd67e8e117d822a14ca53bd7552695ff946725ad1b184d20149126cf8a5462348f9988e1f2befa5d583a93f85fdff2d16f0", 0xdc}, {&(0x7f0000000200)="d05898e30da0fb749da70d595f6cfac02fe351421a9ad90b561d65d654d090859ddfebd1fb2073ff3fb9b4c69332142f4dd958d2c869bf84548ce623172bb89cf11fff4a3c635d444f61b62f35544f1f7ca3575778672c2be83f197487a2759edf2eb885bfa17d8791f9ef6a2a11d2d896d1134ab5f3c2549879eba9b6103412003d014610cbc58f1f02be2dd791ef6cc25564921c1d41c0bc8eae87c2a892527fe5d69e29df90efb767f33103c5c8dd67775d207665ad49ed1bec17b7dab0b89f97c64ec730a02f384554", 0xcb}], 0x4, 0x8, 0x0) 12:02:48 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/raw6\x00') pread64(r5, &(0x7f0000000140)=""/217, 0xd9, 0x0) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 12:02:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\b', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:02:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:02:48 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/raw6\x00') pread64(r0, &(0x7f0000000140)=""/217, 0xd9, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000080)={{0x2b, @multicast2, 0x4e24, 0x3, 'none\x00', 0x5, 0x2, 0x7b}, {@private=0xa010100, 0x4e21, 0x0, 0x9, 0x5, 0x4}}, 0x44) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x100) readv(r2, &(0x7f0000000300)=[{&(0x7f0000000240)=""/157, 0x9d}], 0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) socketpair(0x1e, 0x1, 0x7fffffff, &(0x7f0000000340)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000005c0)={0xce, r3, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x35, 0x3, r9}, @val={0xc, 0x99, {0x10001, 0x7c}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_HIDDEN_SSID={0x8}, @acl_policy=[@NL80211_ATTR_ACL_POLICY, @NL80211_ATTR_ACL_POLICY={0x0, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x0, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x0, 0xa6, 0x0, 0x1, [{0x0, 0x6, @broadcast}, {0x0, 0x6, @device_b}, {0x0, 0x6, @broadcast}, {0x0, 0x6, @broadcast}, {0x0, 0x6, @broadcast}, {0x0, 0x6, @device_b}, {0x0, 0x6, @device_b}, {0x0, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY, @NL80211_ATTR_MAC_ADDRS={0x0, 0xa6, 0x0, 0x1, [{0x0, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x0, 0xa6, 0x0, 0x1, [{}, {}, {}, {}]}, @NL80211_ATTR_MAC_ADDRS={0x0, 0xa6, 0x0, 0x1, [{}]}, @NL80211_ATTR_ACL_POLICY, @NL80211_ATTR_ACL_POLICY], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_SSID={0x0, 0x34, @default_ap_ssid}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x8895) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r5, @ANYBLOB="080026006c0900000800b70000000000dfc0c03f74"], 0x2c}}, 0x0) [ 986.378463] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode 12:02:48 executing program 7: msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/79) r0 = msgget(0x2, 0x200) msgrcv(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007dba4e57a264eaaf00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007a68af5fe28f7ce55e3a8b5180caf830ccd9620d512919cb8374e7df9fed3a88728eafcb902d1e6b2aaba3ef98e4531f7e481fb589de4d633b1ba956aaa7d607a649c49bdfc7f309a8f0e886d2db9e29598a14ece665bba13f3fa9031dd25f2ebf1c837615114f6e4957b6514b8b97417622c7775175fc73df9934465744eff0d30e7e8f15d4ae864d615061c8c231d9d5d97cae92acd1c36366b87a838152e31eea8817d77c164bf951e76d62152d4895"], 0x103, 0x3, 0x3000) msgsnd(r0, &(0x7f0000000280)={0x2}, 0x8, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000080)=""/121) msgrcv(0x0, &(0x7f0000000000)={0x0, ""/66}, 0x4a, 0x2, 0x1000) 12:02:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x3000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:02:48 executing program 7: msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/52) msgctl$IPC_RMID(0x0, 0x0) [ 986.445131] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 986.466970] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 986.517868] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 12:02:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="2cfffff0", @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:02:57 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 90) tgkill(r0, r1, 0xb) 12:02:57 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000280)=@v2={0x2000000, [{0x20, 0x10000}, {0x1, 0x7ea4}]}, 0x14, 0x3) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x85080, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_none}, {@loose}, {@cache_loose}]}}) 12:02:57 executing program 7: getpeername(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000080)=0x80) accept$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0xfffffffffffffc63) r1 = msgget(0x1, 0x60f) msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000280)=""/47) 12:02:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x2, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:02:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x4000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:02:57 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1055, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r4 = accept4(r0, &(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, &(0x7f0000000080)=0x80, 0x80000) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000000c0)={@empty, 0x6, r3}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000180)={0x0, 0x1, 0x6, @multicast}, 0x10) r5 = syz_io_uring_complete(0x0) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @multicast1}, r3}, 0x14) bind$packet(r5, &(0x7f00000001c0)={0x11, 0x10, r3, 0x1, 0x70}, 0x14) 12:02:57 executing program 1: r0 = openat2(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x204040, 0x41, 0x18}, 0x18) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000400)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r4, 0x20, 0x70bd2d, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24040040}, 0x80) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000500)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f00000008c0)=ANY=[@ANYBLOB="94d8bd7cda530dbab23a8fcc86823b58d80f34fdc42b51af8e24ff1cc04f7ca7a2945cc08fbee8c5701d6cb26a762820b989a0649595e3b8a7ae5e90f9cece2b461e3782aac93347a7c9caed618b443f833e08b603e11260401bcec9fbab0ebb0d71a92b16490f2cb729e446", @ANYRES16=0x0, @ANYBLOB="000928bd7000ffdbdf25070000004000018008000300c50000002c0004001400010002004e200a01010200000000000000001400020002004e20ac1414bb00000000000000000800030006000000400007800c000400080000000000000008000200810000000c000300f80400000000000008000100ffffffff080001001f0000000c0003000010000000000000"], 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x8) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000880)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x112806101d5aa8a3}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x50, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000040}, 0x20008000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x50}]}, 0x2c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) chdir(&(0x7f00000004c0)='./file0\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0x0, 0xee01}}, './file0\x00'}) fremovexattr(r9, &(0x7f0000000780)=@random={'trusted.', 'nl80211\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c010000", @ANYRES16=r7, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x40005}, 0x4081) [ 995.808931] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 995.821278] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 995.845988] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 995.851997] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 12:02:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:02:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x5000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:02:58 executing program 6: r0 = eventfd2(0x1000000, 0x0) io_setup(0x2, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f00000007c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) io_setup(0xfff, &(0x7f0000000000)=0x0) io_submit(r2, 0x0, &(0x7f0000000400)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000000c0)="2af1425e8993e0e8", 0x8, 0x0, 0x0, 0x1}]) io_setup(0x1, &(0x7f0000000040)=0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) io_submit(r3, 0x1, &(0x7f0000000300)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}]) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x42201, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) io_setup(0x1, &(0x7f0000000040)=0x0) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) io_submit(r7, 0x1, &(0x7f0000000300)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0}]) io_cancel(r7, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x6, 0x7a, r6, &(0x7f0000000440)="37edb971a1aba97889a1e6b85425459255514196c3608b57b9a723120df68ff4caf0e065f6ae7eb41dfeba1b6c417d", 0x2f, 0x6, 0x0, 0x3}, &(0x7f00000004c0)) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/raw6\x00') pread64(r9, &(0x7f0000000140)=""/217, 0xd9, 0x0) io_submit(r3, 0x4, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x9a8bb4e96662a6c3, 0x4, r0, &(0x7f0000000800)="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", 0x1000, 0x9, 0x0, 0x2, r5}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x400, r6, &(0x7f00000001c0)="c84a2762b6ad0f922bc4c81f6e60b5d8f6caa5cc1f8f3dfb46fd140f8fcc92e468a6ba5c48840a0978014086ecba11e8b521a86a01ca85e2fbfa882b760376b853d3a513c451dcd8a1b6da5b320934ad54731fc4fe36ea407784f81b2ba5bf4af74e941a031f2abae229707d", 0x6c, 0x8}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x3, 0x1, r0, &(0x7f0000000280)="f5178ce448f52b6b41fe8491f68e23d6fdf6123a2b4540ee958441bd47cc0e12e66670735b44ffaf8f6d1810ddfa20ad59d4237acbafb760c97c5bb29b782f77286924780a3f", 0x46, 0x8000, 0x0, 0x1, r0}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x8, r0, &(0x7f0000000340)="6b20822f8ca5ae77ec8bfe1304a9904d2f0159baf80a", 0x16, 0xffffffffffffff81, 0x0, 0x0, r9}]) 12:02:58 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/raw6\x00') pread64(r5, &(0x7f0000000140)=""/217, 0xd9, 0x0) sendmmsg$inet6(r5, &(0x7f0000001580)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x53c, @loopback, 0x4}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000040)="50022c13e16198656333a1150ba2021e1c63f9631ab5432ec54a36ffe530c8fbe1a067cf2204efcaabcda0", 0x2b}], 0x1, &(0x7f0000000240)=[@dstopts={{0x50, 0x29, 0x37, {0x2c, 0x6, '\x00', [@generic={0x80, 0x34, "65e992cbd77f6c5f641431d30a5198235e3c36be27c3cc779d1d2bbe7d33a68aa4856613bb26d5053baaf17a69acb91d1b5c5a47"}]}}}, @rthdrdstopts={{0x50, 0x29, 0x37, {0x29, 0x6, '\x00', [@pad1, @ra={0x5, 0x2, 0xfff7}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @calipso={0x7, 0x18, {0x1, 0x4, 0x3f, 0xe93, [0x3ff, 0xa]}}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x400}}], 0xb8}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="059442507947280ec1bc331ada0d191abe", 0x11}, {&(0x7f00000001c0)="cd87002cb3b9e717806cfe", 0xb}, {&(0x7f0000000300)="2bd115f776684a170eda9c6e879967d01503809b9d5a67479a36924ebdd862b331dd5b0c3c522ab09c077af1453038c0514e2206a720acf28e52480e33b550c652ae32c59eebbc341aff8b46596a0440eccb4e2a55c247be27d5c3a66f963cbee603fa0dd12a84", 0x67}, {&(0x7f0000000380)="79639a5215aecdfe4d9bca05d79a387acefb2b3b0c1aa22dfd1c6abec82611b3ddcb1091a8", 0x25}], 0x4, &(0x7f0000000400)=[@hoplimit={{0x14, 0x29, 0x34, 0x3f}}, @rthdr={{0xa8, 0x29, 0x39, {0x89, 0x12, 0x2, 0x3, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, @ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @loopback, @remote]}}}, @dstopts_2292={{0x1028, 0x29, 0x4, {0x32, 0x202, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x5}, @generic={0x81, 0x1000, "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"}, @jumbo={0xc2, 0x4, 0xb}]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x11, 0x4, 0x0, 0x8, 0x0, [@mcast2, @mcast2]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r1}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}], 0x1168}}], 0x2, 0x80) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 12:02:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x3, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:02:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x6000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 996.207857] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 996.249183] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 12:02:58 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 91) tgkill(r0, r1, 0xb) [ 996.299649] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 996.337021] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 12:02:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40020020}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r6, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x1) 12:02:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:02:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x7000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:02:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x4, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:03:08 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 92) tgkill(r0, r1, 0xb) 12:03:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x16) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x20) fsync(r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00032bbd7000fedbdf256200000008000300", @ANYRES32=r2, @ANYBLOB="878c07ed45e37803dd85d90c53d42ab7d2d7807b687961540d28206a8675929213d2985bf4b8e0eb23004fa7cfcf06cb252ec766a84d736eaea530773d38825442f95471c49f019efd2e6aaecd14e14c204f8b80d37117960139e08cb0ec33aedbfcd9d9188094c6a86f590aa4df8ee735daf5fd46d53a5c6f90f586e68ab65b112bad285d8ffc7e1d7286603f3f54356a1068ca8d40828484221e98314f6b6881d95feef7af"], 0x1c}, 0x1, 0x0, 0x0, 0x20004011}, 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r5, @ANYBLOB="080126006c0900000800b70000000000"], 0x2c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4, {0x9}}, './file0\x00'}) sendmsg$IPVS_CMD_NEW_DEST(r6, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f0000000700)={0xe8, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2b5d}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x63}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x100}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xf6a1}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x8}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xac52}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20048001}, 0x8014) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/hid_ite', 0x8c101, 0x20) sendmsg$IPSET_CMD_GET_BYNAME(r7, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0xe, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x88c4}, 0x4048048) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r8, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@crypto_settings=[@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x103dd}, @NL80211_ATTR_CONTROL_PORT={0x4}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x3f}]}, 0x50}, 0x1, 0x0, 0x0, 0x40094}, 0x8800) 12:03:08 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x53, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) 12:03:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:03:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x9000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:03:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x5, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:03:08 executing program 7: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x6001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x10) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="58e82eb1", @ANYRES16=0x0, @ANYBLOB="200025bd7000ffdbdf250200000008006200000800003c0025800500050000000000050005000000000006000300810000000600030001000000050001071f000000050005002000000005000100ff000000"], 0x58}, 0x1, 0x0, 0x0, 0x4008810}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$DEVLINK_CMD_SB_POOL_SET(r2, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x204001a}, 0xc, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="84d062010e00", @ANYRES16=0x0, @ANYBLOB="010027bd7000fbdbdf25100000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0001000000060011000800000008001300800000000500140001000000080001007063690011000200303030303a30303a31302e300000000008000b00eb780000060011000850000008001300010000000500140000000000080001007063690011000200303030303a30303a31302e300000000008000b0001000000060011009052000008001300bb0d00000500140001000000080001007063690011000200303030303a30303a31302e300000000008000b007f000000060011000000000008001300018000000500140001000000080001007063690011000200303030303a30303a31302e300000000008000b00040000000600110002000000080013000000000005001400000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00ff030000060011000101000008001300040000000500140000000000"], 0x184}, 0x1, 0x0, 0x0, 0x88c0}, 0x40) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r3, 0x20, 0x1ff, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x1b}}}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x6, 0x24, [{0x48, 0x1}, {0x48}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl(r4, 0x1, &(0x7f0000000240)="bc9a896f60186ba3fb48118a06238e53171b3ce736f48600b21559386f69772d1455251b646f771b7c1928c955b0b2344cfea64b683b653f506c653d0d3807f8dc8c09ba45f97239829dbe2a2ca7ae8b75c1d96c903ba89d") r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) preadv(r0, &(0x7f00000009c0)=[{&(0x7f0000000800)=""/104, 0x68}, {&(0x7f0000000880)=""/176, 0xb0}, {&(0x7f0000000940)=""/87, 0x57}], 0x3, 0xee2, 0xffff) r6 = dup(r5) bind$unix(r6, &(0x7f0000000000)=@abs, 0x6e) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r6) sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x8, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}}, 0x4040010) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000007c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000780)={&(0x7f0000000440)={0x30, r7, 0x20, 0x70bd2d, 0x498c, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x8810) 12:03:08 executing program 6: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000001c0)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xb1, "ca23e1a1298eda"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000011c0)={{r0, 0x6, 0x2, 0xd1c, 0x0, 0x7, 0x1, 0x9, 0x8, 0x6, 0x7, 0x2, 0x20, 0x9f}, 0x8, [0x0]}) syz_mount_image$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) getxattr(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00', &(0x7f0000000080)=""/79, 0xfffffffffffffcb6) [ 1006.145066] FAULT_INJECTION: forcing a failure. [ 1006.145066] name failslab, interval 1, probability 0, space 0, times 0 [ 1006.146797] CPU: 1 UID: 0 PID: 8602 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 1006.146827] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1006.146840] Call Trace: [ 1006.146848] [ 1006.146857] dump_stack_lvl+0xfa/0x120 [ 1006.146897] should_fail_ex+0x4d7/0x5e0 [ 1006.146938] ? sk_prot_alloc+0x157/0x280 [ 1006.146966] should_failslab+0xc2/0x120 [ 1006.146992] __kmalloc_noprof+0xb4/0x4b0 [ 1006.147026] ? __pfx_selinux_socket_post_create+0x10/0x10 [ 1006.147071] sk_prot_alloc+0x157/0x280 [ 1006.147105] sk_alloc+0x34/0xbd0 [ 1006.147130] __netlink_create+0x5d/0x280 [ 1006.147168] __netlink_kernel_create+0xea/0x7c0 [ 1006.147195] ? __pfx___netlink_kernel_create+0x10/0x10 [ 1006.147217] ? __kmalloc_cache_noprof+0x1b3/0x3e0 [ 1006.147248] ? audit_net_init+0x190/0x440 [ 1006.147293] uevent_net_init+0xf8/0x330 [ 1006.147319] ? __pfx_uevent_net_init+0x10/0x10 [ 1006.147343] ? kasan_save_track+0x14/0x30 [ 1006.147371] ? __pfx_uevent_net_rcv+0x10/0x10 [ 1006.147398] ? __pfx_genl_release+0x10/0x10 [ 1006.147427] ? lock_is_held_type+0x9e/0x120 [ 1006.147463] ? __pfx_uevent_net_init+0x10/0x10 [ 1006.147487] ops_init+0x1e1/0x650 [ 1006.147520] setup_net+0x10d/0x320 [ 1006.147543] ? lockdep_init_map_type+0x4b/0x240 [ 1006.147571] ? __pfx_setup_net+0x10/0x10 [ 1006.147608] ? debug_mutex_init+0x37/0x70 [ 1006.147646] copy_net_ns+0x2e3/0x650 [ 1006.147681] create_new_namespaces+0x3f6/0xab0 [ 1006.147726] copy_namespaces+0x45c/0x580 [ 1006.147759] copy_process+0x26d5/0x73e0 [ 1006.147781] ? __pfx_perf_trace_lock+0x10/0x10 [ 1006.147825] ? __pfx_copy_process+0x10/0x10 [ 1006.147847] ? __might_fault+0xe0/0x190 [ 1006.147880] ? _copy_from_user+0x5b/0xd0 [ 1006.147911] kernel_clone+0xea/0x7f0 [ 1006.147931] ? get_pid_task+0xfd/0x250 [ 1006.147966] ? __pfx_kernel_clone+0x10/0x10 [ 1006.147984] ? perf_trace_lock+0xb5/0x5d0 [ 1006.148020] ? find_held_lock+0x2b/0x80 [ 1006.148050] ? ksys_write+0x121/0x240 [ 1006.148073] ? lock_is_held_type+0x9e/0x120 [ 1006.148108] __do_sys_clone3+0x1f5/0x280 [ 1006.148130] ? __pfx___do_sys_clone3+0x10/0x10 [ 1006.148174] ? __fget_files+0x20d/0x3b0 [ 1006.148218] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1006.148253] ? fput+0x6a/0x100 [ 1006.148279] ? ksys_write+0x1a3/0x240 [ 1006.148300] ? __pfx_ksys_write+0x10/0x10 [ 1006.148335] do_syscall_64+0xbf/0x360 [ 1006.148372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.148394] RIP: 0033:0x7ffb744edb19 [ 1006.148411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1006.148431] RSP: 002b:00007ffb71a63188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1006.148453] RAX: ffffffffffffffda RBX: 00007ffb74600f60 RCX: 00007ffb744edb19 [ 1006.148468] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1006.148481] RBP: 00007ffb71a631d0 R08: 0000000000000000 R09: 0000000000000000 [ 1006.148494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1006.148507] R13: 00007ffeb487a35f R14: 00007ffb71a63300 R15: 0000000000022000 [ 1006.148544] [ 1006.191932] kobject_uevent: unable to create netlink socket! 12:03:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0xf000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:03:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) [ 1006.305388] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 12:03:08 executing program 7: msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/79) msgget(0x0, 0x40) [ 1006.340384] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 1006.352118] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1006.367197] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 1006.394514] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode 12:03:08 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 93) tgkill(r0, r1, 0xb) [ 1006.439210] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 12:03:19 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 94) tgkill(r0, r1, 0xb) 12:03:19 executing program 6: io_setup(0x572, &(0x7f0000000140)=0x0) clock_gettime(0x4, &(0x7f0000000080)) io_pgetevents(r0, 0x1, 0x0, &(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x17}]) clock_gettime(0x0, &(0x7f0000000100)) futex(&(0x7f0000000040)=0x2, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000200)=0x2, 0x0) 12:03:19 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x400}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/raw6\x00') pread64(r5, &(0x7f0000000140)=""/217, 0xd9, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000100)={r8, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000000)={r8, 0x1, 0x6, @local}, 0x10) 12:03:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x6, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:03:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x9effffff, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:03:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:03:19 executing program 7: sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffffad, 0x19}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2cf}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x18}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffff6041}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x1) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000000)=""/79) 12:03:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="fe489c777ae66bdb3c66c48c50f694540b08796868c10cdfe9fb175578947adaae6fb64d43ac714b901e1ca2d2ccf808c0177771cccab524bd8df6bc7ea641787c85a0562cc3f46e57a82e1124e66fc6897f423c695f8ec8fb7cda376ed3f48fac972c6c24184edbfec8f0bafaf8eedd8248f10250244083342d21f37dececbbee7f5238f0ba5d99d474fa9c576ca9d4ee091c90d893a77fd1cb4a580440d45786cbbed0704cfbc69699b285e28f09c2b4c58644b2b8a7", @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ffff000069000000080026006c0900000800b70000000000"], 0x38}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x59}}}}, [@NL80211_ATTR_BSSID={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x44005) [ 1017.714169] FAULT_INJECTION: forcing a failure. [ 1017.714169] name failslab, interval 1, probability 0, space 0, times 0 [ 1017.716016] CPU: 1 UID: 0 PID: 8649 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 1017.716045] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1017.716058] Call Trace: [ 1017.716065] [ 1017.716073] dump_stack_lvl+0xfa/0x120 [ 1017.716116] should_fail_ex+0x4d7/0x5e0 [ 1017.716154] ? security_sk_alloc+0x101/0x160 [ 1017.716178] should_failslab+0xc2/0x120 [ 1017.716203] __kmalloc_noprof+0xb4/0x4b0 [ 1017.716232] ? __kasan_kmalloc+0x7f/0x90 [ 1017.716258] ? trace_kmalloc+0x1f/0xb0 [ 1017.716288] security_sk_alloc+0x101/0x160 [ 1017.716315] sk_prot_alloc+0x20b/0x280 [ 1017.716349] sk_alloc+0x34/0xbd0 [ 1017.716373] __netlink_create+0x5d/0x280 [ 1017.716410] __netlink_kernel_create+0xea/0x7c0 [ 1017.716437] ? __pfx___netlink_kernel_create+0x10/0x10 [ 1017.716458] ? __kmalloc_cache_noprof+0x1b3/0x3e0 [ 1017.716491] ? audit_net_init+0x190/0x440 [ 1017.716534] uevent_net_init+0xf8/0x330 [ 1017.716559] ? __pfx_uevent_net_init+0x10/0x10 [ 1017.716582] ? kasan_save_track+0x14/0x30 [ 1017.716614] ? __pfx_uevent_net_rcv+0x10/0x10 [ 1017.716640] ? __pfx_genl_release+0x10/0x10 [ 1017.716670] ? lock_is_held_type+0x9e/0x120 [ 1017.716703] ? __pfx_uevent_net_init+0x10/0x10 [ 1017.716727] ops_init+0x1e1/0x650 [ 1017.716758] setup_net+0x10d/0x320 [ 1017.716780] ? lockdep_init_map_type+0x4b/0x240 [ 1017.716807] ? __pfx_setup_net+0x10/0x10 [ 1017.716835] ? debug_mutex_init+0x37/0x70 [ 1017.716870] copy_net_ns+0x2e3/0x650 [ 1017.716901] create_new_namespaces+0x3f6/0xab0 [ 1017.716941] copy_namespaces+0x45c/0x580 [ 1017.716973] copy_process+0x26d5/0x73e0 [ 1017.716994] ? __pfx_perf_trace_lock+0x10/0x10 [ 1017.717036] ? __pfx_copy_process+0x10/0x10 [ 1017.717056] ? __might_fault+0xe0/0x190 [ 1017.717089] ? _copy_from_user+0x5b/0xd0 [ 1017.717118] kernel_clone+0xea/0x7f0 [ 1017.717136] ? get_pid_task+0xfd/0x250 [ 1017.717169] ? __pfx_kernel_clone+0x10/0x10 [ 1017.717186] ? perf_trace_lock+0xb5/0x5d0 [ 1017.717220] ? find_held_lock+0x2b/0x80 [ 1017.717248] ? ksys_write+0x121/0x240 [ 1017.717269] ? lock_is_held_type+0x9e/0x120 [ 1017.717302] __do_sys_clone3+0x1f5/0x280 [ 1017.717322] ? __pfx___do_sys_clone3+0x10/0x10 [ 1017.717363] ? __fget_files+0x20d/0x3b0 [ 1017.717404] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1017.717438] ? fput+0x6a/0x100 [ 1017.717462] ? ksys_write+0x1a3/0x240 [ 1017.717481] ? __pfx_ksys_write+0x10/0x10 [ 1017.717513] do_syscall_64+0xbf/0x360 [ 1017.717548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.717569] RIP: 0033:0x7ffb744edb19 [ 1017.717585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1017.717605] RSP: 002b:00007ffb71a63188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1017.717625] RAX: ffffffffffffffda RBX: 00007ffb74600f60 RCX: 00007ffb744edb19 [ 1017.717639] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1017.717652] RBP: 00007ffb71a631d0 R08: 0000000000000000 R09: 0000000000000000 [ 1017.717664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1017.717676] R13: 00007ffeb487a35f R14: 00007ffb71a63300 R15: 0000000000022000 [ 1017.717711] [ 1017.758949] kobject_uevent: unable to create netlink socket! 12:03:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0xed000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 1017.793531] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 1017.888288] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 1017.949268] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode 12:03:20 executing program 7: msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/79) r0 = msgget$private(0x0, 0x414) msgrcv(r0, &(0x7f0000000000)={0x0, ""/48}, 0x38, 0x0, 0x2800) 12:03:20 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) clone3(&(0x7f0000005880)={0x61020100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0}, 0x58) 12:03:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0xf0ffffff, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:03:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x7, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:03:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:03:20 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 95) tgkill(r0, r1, 0xb) [ 1018.046091] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 12:03:20 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x80}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x80}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "569d39e0e163ef15293b501df5dbee5f0c289118bfa5158c8d01a473e3e070a8"}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "2b9d5b7a3d9aa16cc044b73ebbfe78b962b8c7234ccb67e4f57b06020d0f117b"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x20040000) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000000)) 12:03:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:03:32 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='setgroups\x00') 12:03:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0xfffff000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:03:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x8, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:03:32 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000240)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r8, @ANYBLOB="08000800000000000000b7000000000075288927869eb3bd1b55cc301d8f0ab954cac4b96507a42dcb14695a606ce9e4b2adb74de3222ebc834a81e84d2b7a53bd3aa2bf5c1da469e2fb861bc80f827b0cf7b511ff3a0d5139623a2212f22c0b3960f70211f6d74b007e60a54e2adcae3f638eb36d4e2dd4febd2367bc84453eeae55f102d204f45d9be68cba7a50e3f132878d7296c004eff623ffdb1b55e66553012baa3e3dfd998c2611029b42d3165f744465c68cd34c67e0b11f8e401b690a3ff59eec4801e98"], 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8004}, 0x4008001) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 12:03:32 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 96) tgkill(r0, r1, 0xb) 12:03:32 executing program 7: msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/79) r0 = msgget(0x2, 0x200) msgrcv(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007dba4e57a264eaaf00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007a68af5fe28f7ce55e3a8b5180caf830ccd9620d512919cb8374e7df9fed3a88728eafcb902d1e6b2aaba3ef98e4531f7e481fb589de4d633b1ba956aaa7d607a649c49bdfc7f309a8f0e886d2db9e29598a14ece665bba13f3fa9031dd25f2ebf1c837615114f6e4957b6514b8b97417622c7775175fc73df9934465744eff0d30e7e8f15d4ae864d615061c8c231d9d5d97cae92acd1c36366b87a838152e31eea8817d77c164bf951e76d62152d4895"], 0x103, 0x3, 0x3000) r1 = msgget(0x0, 0x50) msgctl$MSG_STAT(r1, 0xb, &(0x7f00000000c0)=""/68) msgsnd(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000001000010"], 0x8, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r4) r5 = fork() msgctl$IPC_SET(r0, 0x1, &(0x7f0000000200)={{0x1, r2, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0x19a, 0x4513}, 0x0, 0x0, 0x3b5c0fa7, 0x3, 0x2c, 0x100, 0x9, 0xc1, 0x100, 0x7, 0x0, r5}) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000000)=""/154) 12:03:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:03:32 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x17c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x67}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x2}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="e0010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1e0}, 0x1, 0x0, 0x0, 0x10044911}, 0xc884) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 1030.565680] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 1030.566866] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1030.584073] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 1030.606073] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 1030.638795] FAULT_INJECTION: forcing a failure. [ 1030.638795] name failslab, interval 1, probability 0, space 0, times 0 12:03:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0xffffff7f, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 1030.640506] CPU: 1 UID: 0 PID: 8740 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 1030.640538] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1030.640552] Call Trace: [ 1030.640560] [ 1030.640570] dump_stack_lvl+0xfa/0x120 [ 1030.640619] should_fail_ex+0x4d7/0x5e0 [ 1030.640662] ? __netlink_kernel_create+0x17d/0x7c0 [ 1030.640687] should_failslab+0xc2/0x120 [ 1030.640715] __kmalloc_noprof+0xb4/0x4b0 [ 1030.640753] ? __netlink_create+0x193/0x280 [ 1030.640794] __netlink_kernel_create+0x17d/0x7c0 [ 1030.640823] ? __pfx___netlink_kernel_create+0x10/0x10 [ 1030.640848] ? __kmalloc_cache_noprof+0x1b3/0x3e0 [ 1030.640880] ? audit_net_init+0x190/0x440 [ 1030.640929] uevent_net_init+0xf8/0x330 [ 1030.640957] ? __pfx_uevent_net_init+0x10/0x10 [ 1030.640984] ? kasan_save_track+0x14/0x30 [ 1030.641012] ? __pfx_uevent_net_rcv+0x10/0x10 [ 1030.641042] ? __pfx_genl_release+0x10/0x10 [ 1030.641073] ? lock_is_held_type+0x9e/0x120 [ 1030.641111] ? __pfx_uevent_net_init+0x10/0x10 [ 1030.641137] ops_init+0x1e1/0x650 [ 1030.641174] setup_net+0x10d/0x320 [ 1030.641198] ? lockdep_init_map_type+0x4b/0x240 [ 1030.641229] ? __pfx_setup_net+0x10/0x10 [ 1030.641261] ? debug_mutex_init+0x37/0x70 [ 1030.641302] copy_net_ns+0x2e3/0x650 [ 1030.641337] create_new_namespaces+0x3f6/0xab0 [ 1030.641381] copy_namespaces+0x45c/0x580 [ 1030.641417] copy_process+0x26d5/0x73e0 [ 1030.641441] ? __pfx_perf_trace_lock+0x10/0x10 [ 1030.641488] ? __pfx_copy_process+0x10/0x10 [ 1030.641512] ? __might_fault+0xe0/0x190 [ 1030.641548] ? _copy_from_user+0x5b/0xd0 [ 1030.641581] kernel_clone+0xea/0x7f0 [ 1030.641602] ? get_pid_task+0xfd/0x250 [ 1030.641640] ? __pfx_kernel_clone+0x10/0x10 [ 1030.641660] ? perf_trace_lock+0xb5/0x5d0 [ 1030.641698] ? find_held_lock+0x2b/0x80 [ 1030.641731] ? ksys_write+0x121/0x240 [ 1030.641755] ? lock_is_held_type+0x9e/0x120 [ 1030.641793] __do_sys_clone3+0x1f5/0x280 [ 1030.641816] ? __pfx___do_sys_clone3+0x10/0x10 [ 1030.641862] ? __fget_files+0x20d/0x3b0 [ 1030.641910] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1030.641949] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1030.641989] ? ksys_write+0x1a3/0x240 [ 1030.642023] ? __pfx_ksys_write+0x10/0x10 [ 1030.642060] do_syscall_64+0xbf/0x360 [ 1030.642100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.642124] RIP: 0033:0x7ffb744edb19 [ 1030.642143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1030.642165] RSP: 002b:00007ffb71a63188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1030.642189] RAX: ffffffffffffffda RBX: 00007ffb74600f60 RCX: 00007ffb744edb19 [ 1030.642205] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1030.642219] RBP: 00007ffb71a631d0 R08: 0000000000000000 R09: 0000000000000000 [ 1030.642233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1030.642247] R13: 00007ffeb487a35f R14: 00007ffb71a63300 R15: 0000000000022000 [ 1030.642286] [ 1030.686569] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 1030.687749] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1030.705939] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 1030.709277] kobject_uevent: unable to create netlink socket! 12:03:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:03:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x20, r3, 0xb341daa0822653b3, 0x0, 0x0, {0x19}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 1030.728048] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 12:03:32 executing program 6: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x20000000, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xb2, 0x0, 0x2, 0x1, 0x0, 0x6, 0xc8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1ff, 0x1, @perf_bp, 0x100, 0xfffffffffffffff7, 0x3, 0x3, 0x1182, 0x6, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r0 = fsopen(&(0x7f00000000c0)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 12:03:33 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 97) tgkill(r0, r1, 0xb) 12:03:33 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/raw6\x00') ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f00000000c0)={0xffff, 0x40, [0xcb43, 0x3217, 0x6, 0x7], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) pread64(r1, &(0x7f0000000140)=""/217, 0xd9, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x4d, 0x7, 0x4, 0x5, 0x0, 0x9, 0xa12ffd6901589d09, 0xe, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x8, 0x100}, 0x82, 0xdcd, 0x1, 0x2, 0xffffffff, 0x4, 0xe034, 0x0, 0x7, 0x0, 0x4b67}, 0x0, 0xc, r1, 0x8) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={0x0, 0x1, 0x6, @multicast}, 0x10) [ 1031.037959] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode 12:03:33 executing program 7: r0 = msgget(0x2, 0x200) msgrcv(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007dba4e57a264eaaf00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007a68af5fe28f7ce55e3a8b5180caf830ccd9620d512919cb8374e7df9fed3a88728eafcb902d1e6b2aaba3ef98e4531f7e481fb589de4d633b1ba956aaa7d607a649c49bdfc7f309a8f0e886d2db9e29598a14ece665bba13f3fa9031dd25f2ebf1c837615114f6e4957b6514b8b97417622c7775175fc73df9934465744eff0d30e7e8f15d4ae864d615061c8c231d9d5d97cae92acd1c36366b87a838152e31eea8817d77c164bf951e76d62152d4895"], 0x103, 0x3, 0x3000) msgsnd(r0, &(0x7f0000000280)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f00000002c0)=""/52) r1 = msgget(0x0, 0x5e3b0378c9a9706c) msgrcv(r1, &(0x7f0000000180)={0x0, ""/130}, 0x8a, 0x0, 0x1800) msgctl$MSG_INFO(0xffffffffffffffff, 0xc, &(0x7f0000000100)=""/95) msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000240)=""/83) r2 = msgget(0x3, 0x100) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000080)=""/70) 12:03:33 executing program 6: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x26241, 0x40) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000000)={0x0, 0x6, [0x4741, 0x1, 0x5, 0x6, 0x1d50, 0x20]}) 12:03:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0xffffff9e, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 1031.166798] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 1031.222800] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 1031.303436] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 1033.940221] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1033.944164] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1033.946492] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1033.951791] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1033.956512] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1036.035779] Bluetooth: hci6: command tx timeout [ 1038.084680] Bluetooth: hci6: command tx timeout [ 1040.133182] Bluetooth: hci6: command tx timeout [ 1042.179731] Bluetooth: hci6: command tx timeout [ 1054.286509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1054.287632] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1054.333333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1054.334424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:04:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x9, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:04:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) setsockopt(r0, 0x10000, 0x4, &(0x7f00000000c0)="9a3a84921ee1bbd88e27a155d4dbf51a22af705004aa466f439457977b30f10d87f7f0c153f68f45c3fa6ea3fcbe8648e5aa93cbc8600f94256d7eb221e48fb76c9c9d646c48aef67e71d1f58142e5b29746b4c01c32505f220a8b4d8c7c5a86d8bda46d7faf432cd7e13aed173d784e088e080ddf0cd0c6c08442f15c82a1e50e58adca024af30a3f27516f4978223cbe56eac23fc6", 0x96) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:04:06 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x4, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$inet(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000300)}], 0x1}, 0xadae45df6cc48339) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan0\x00'}) r4 = syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x2c, r4, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x8000) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={r9, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000180)={r6, 0x1, 0x6, @multicast}, 0x10) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r4, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_IFINDEX={0x8, 0xb, r6}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0x16}}}}, [@NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x1, 0x4}, {0x3, 0x1}, {0x2, 0x6}, {0xfe}, {0x0, 0x7}, {0x2, 0x5}, {0x5, 0x1}, {0x3f, 0x7}, {0x9, 0x1}, {0xff, 0x2}], "7ca4f61329777ac6"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x7f, 0x5}, {0x3, 0x7}], "4f55dcb7081306b3"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x2, 0x2}, {0x1}, {0x9, 0x3}], "b6e4e6aec529184f"}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:04:06 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 98) tgkill(r0, r1, 0xb) 12:04:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c000001", @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:04:06 executing program 7: add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="ea9e3084abb08cea0386abb4ea03e4c643d8ec5dc4603ad5093feb35407ae04546a37197d4cf20c0952cb664062af9b7f1c964cfc75500547c6e31f2ce86a6b864bc09623b7d6beb67afb13c3fee80cbe6315b37fe14e35c6a8b4b0ea1f8984538e007e177c1f47a09810015dcd36d4d", 0x70, 0xfffffffffffffffd) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/79) 12:04:06 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x187800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x48, r3, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x34, 0x56}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x44) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req={0x9, 0x40, 0x8001}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={r8, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 12:04:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0xfffffff0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:04:07 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020029bd7000fedbdf250600000000000800040000000000080002000300000008000700e0000001000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x4008011) msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/91) [ 1064.830940] FAULT_INJECTION: forcing a failure. [ 1064.830940] name failslab, interval 1, probability 0, space 0, times 0 [ 1064.832880] CPU: 0 UID: 0 PID: 9261 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 1064.832911] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1064.832925] Call Trace: [ 1064.832933] [ 1064.832942] dump_stack_lvl+0xfa/0x120 [ 1064.832983] should_fail_ex+0x4d7/0x5e0 [ 1064.833026] ? __proc_create+0x306/0x920 [ 1064.833056] should_failslab+0xc2/0x120 [ 1064.833084] kmem_cache_alloc_noprof+0x5f/0x3d0 [ 1064.833121] ? lock_release+0xc8/0x290 [ 1064.833157] __proc_create+0x306/0x920 [ 1064.833191] ? __pfx___proc_create+0x10/0x10 [ 1064.833232] ? __pfx___netlink_kernel_create+0x10/0x10 [ 1064.833258] ? __kmalloc_cache_noprof+0x1b3/0x3e0 [ 1064.833299] proc_create_reg+0xb6/0x180 [ 1064.833338] proc_create_net_data+0x8f/0x1c0 [ 1064.833373] ? __pfx_proc_create_net_data+0x10/0x10 [ 1064.833410] ? __pfx_genl_release+0x10/0x10 [ 1064.833443] ? __pfx_proto_init_net+0x10/0x10 [ 1064.833478] proto_init_net+0x55/0x80 [ 1064.833510] ops_init+0x1e1/0x650 [ 1064.833545] setup_net+0x10d/0x320 [ 1064.833570] ? lockdep_init_map_type+0x4b/0x240 [ 1064.833606] ? __pfx_setup_net+0x10/0x10 [ 1064.833638] ? debug_mutex_init+0x37/0x70 [ 1064.833678] copy_net_ns+0x2e3/0x650 [ 1064.833713] create_new_namespaces+0x3f6/0xab0 [ 1064.833759] copy_namespaces+0x45c/0x580 [ 1064.833795] copy_process+0x26d5/0x73e0 [ 1064.833818] ? __pfx_perf_trace_lock+0x10/0x10 [ 1064.833866] ? __pfx_copy_process+0x10/0x10 [ 1064.833890] ? __might_fault+0xe0/0x190 [ 1064.833926] ? _copy_from_user+0x5b/0xd0 [ 1064.833959] kernel_clone+0xea/0x7f0 [ 1064.833980] ? get_pid_task+0xfd/0x250 [ 1064.834018] ? __pfx_kernel_clone+0x10/0x10 [ 1064.834038] ? perf_trace_lock+0xb5/0x5d0 [ 1064.834076] ? find_held_lock+0x2b/0x80 [ 1064.834109] ? ksys_write+0x121/0x240 [ 1064.834132] ? lock_is_held_type+0x9e/0x120 [ 1064.834171] __do_sys_clone3+0x1f5/0x280 [ 1064.834194] ? __pfx___do_sys_clone3+0x10/0x10 [ 1064.834241] ? __fget_files+0x20d/0x3b0 [ 1064.834289] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1064.834327] ? fput+0x6a/0x100 [ 1064.834355] ? ksys_write+0x1a3/0x240 [ 1064.834376] ? __pfx_ksys_write+0x10/0x10 [ 1064.834414] do_syscall_64+0xbf/0x360 [ 1064.834453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1064.834492] RIP: 0033:0x7ffb744edb19 [ 1064.834510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1064.834533] RSP: 002b:00007ffb71a63188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1064.834555] RAX: ffffffffffffffda RBX: 00007ffb74600f60 RCX: 00007ffb744edb19 [ 1064.834571] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1064.834585] RBP: 00007ffb71a631d0 R08: 0000000000000000 R09: 0000000000000000 [ 1064.834599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1064.834613] R13: 00007ffeb487a35f R14: 00007ffb71a63300 R15: 0000000000022000 [ 1064.834653] [ 1064.842072] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode 12:04:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0xf, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:04:07 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10108, 0x0, 0x34ea}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 12:04:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="2cffffff", @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:04:07 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 99) tgkill(r0, r1, 0xb) [ 1064.959493] mac80211_hwsim hwsim11 wlan1: left promiscuous mode 12:04:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:04:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:04:07 executing program 6: madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mremap(&(0x7f0000871000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffd000/0x1000)=nil) mbind(&(0x7f0000872000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0) [ 1065.060768] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 1065.080100] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 1065.139059] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 1065.165303] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 12:04:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0xb7, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:04:19 executing program 2: perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0xf1, 0x0, 0x5, 0x0, 0x0, 0x0, 0xa010c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 12:04:19 executing program 7: r0 = msgget$private(0x0, 0x10) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000000)=""/96) 12:04:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg(r1, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="3746cd1f7080d4e40adc63e33f204b005e9b17568e6effdcc08dc2e52595e428a3c96fedc7c33b3a22f44a4cc20f", 0x2e}, {&(0x7f0000000140)="fa53633b2697c264eff8f7627bb37b93390e71f1a31d2048ab93e1882b7ccc48817f6d9ee87451c85ae5c349eb00e29f63208617a027ede5af11cb648f4c4400ddc4632709b7057dd35fdce814048d5a8725c51ef85f7d2af5d8c3a57e830dda428ab0fcde0c2b2b23a0842be8109effe8ba4fed70859529edc6", 0x7a}, {&(0x7f00000001c0)="0e02a3e11794db3ee99bba1ee547812a0eaec13b06bad63493bfbd0ab3bcede55df33275318da57e25b1a1cee13bc4a8d6f23559558250316c2e336bd4e6347618d077f91bbded9d75ee031fddd24b18b334bd2f5032a6f788e725b87664eb24dfdbc4f7b8bef7c6dbb4d385e1a368fbda293831", 0x74}, {&(0x7f0000000240)="cbf601b45476ccd204db81079ffa7d7675b2faac224945693b4243d4b64f2d31038e5d617ad592d45e1eb32bc83ad0917df2743ebe735589f677c79706713db9be18c2e763946a5567ccbbba2e8ac2dbec7b1c07085f821b693993b343721cfba339a91304cb509d3c0a94d31d8294681ab6e6c60fa06b8f6ede93a2ffaf08631ec39ce298c03ee8", 0x88}, {&(0x7f0000000400)="957d5a8b446eb36a47c1347b8265a75e62c6eca3e268bb432193db8ab401da52da991d41a7ed710b0dc699bcc9cdf22db9f2f9747e0201c797af268e05c6f3c9fd7481a7f19aaa8e6af1c2bea9733d6b36176d676cbc77e105fc6c555ecb820167f1de29834bd1ad1b2b05ae3b11415574a0afb882a81ee47aafbd87650c15f62e90f522e5798a7a4844784aa5a36819d44eec956c9a8ec24b33201bc10cd28bca8e246cfa725605079d229246888d55faf9e8ab516661fd50a2a1b275d5f7", 0xbf}], 0x5, &(0x7f00000004c0)=[{0xd0, 0x119, 0x5, "003a9070852a1c528517269e1151542191cef4b38d07a6ad4392669d990bfc2dcc51b79ecee18e7338863aff9159f128970c3b2714226d4ef1d7708bf6c85b092ae97ad022b603722c6b5c9919598c990aceaaa73c262a14ac9a6d3917816fc49eb98e34d9005e3b39066b9c00e68a3e3a4cdacd6f44a3f6528b2d2ceb383452771665f3b2b7c36e187630d47c31b30b33b776e14c4dac49a655573200eb43ed7f6c79433d6eabb55e160a8eb7cee7f394980573cba62d5537"}, {0x60, 0x1, 0xfff, "8413455451a8bee61c2bacc1bd74df12f00cda32e18992e129066b33754190bb1ac0ca6482597cbe7e020eb72563524db3b7df712c1a348332460aae50ff2f071db2e5cba3ba4f2dc6761abedcbc9810"}, {0xa8, 0x110, 0x9, "be5cd412c96adc34d7b0d1efc7186e9ed08cea05e36608b220f12afa79bd05af7a1e0ed4d32d8660260c099a57ef8b33b171f7a435fead78df5ea88863a179dba70243625eebae4325b7e643803de2d10d00a94d61515b94c755f0ed31aba0521aad19e07dcd1f4c071515270fc4ab761deaa7d5fa700d4307ddcce17795b1ac3671da16d8a838f18fb1619979c6dc75f8ef5abe53dd5a"}, {0xc0, 0x101, 0x4, "c186c6be66c41aac57386ff16fd9ebf1492305fcbed12c04dfffdf12afa8dad420fe28aaf780577896a9c38e8f4e7e6536b577a98199444415352f74a7c42c3d1ff87bd7f2fc6b39888f1194e440baab17c3472dbffc40975e551e0294a6111cbe26f590e6fd15142d56fa5d07e17659ca2f60dd578f492f4a07d6f7653a01e4591940ffdc4fb3048652284b1c5fb7244f15e4378289860ddfa7e3ea01384433eb01682a5f1afffef7854699b5f69a6d"}, {0xf0, 0x84, 0x101, "8b3a0f9d5eb8471c43e0cfcc4d90ef7e8b9cc9e926e940f59f3a6d3dde85a11ed71fb5a1066578f8b0747f6f733965fbd1214ab6041b8252ffd24c9d291e9bb0fb36a113b17d8e98543c95e85a0e6c23fedf8fc5fd9c5436020abb6d3884645a29a32c6208ae16b7b48240447b0fd45c4463b40e8c97df75f8a3c9fdceeedcc47ad23cfed1aff9b4172d4fa35b1fc4e7438eb7c1d5256b467e1f51a2e1e24ec4f1d0c2eae6160d97b2d34195e90613041ebf53d2da32060881f3d747f5b6e9dc870e4da9ce0bc01bf71859adb1a38394756749b809bc6b8db2942f2430"}, {0x58, 0x29, 0x1, "eb54346f51b099f610b17852030fa79978aa07adc736095907f44cb5f74289c162cc9b6a0c57a7e59c4b290a9b88639cae25f500c0f7470aad843a17e8f8fabc6d7b00607a"}, {0x88, 0x6, 0xffffffff, "a52854de17fc9d0674adc94dfa677a6e0042f704836d9ed892cd43a2bdffdfe0f4e803ebd8473f17c351f93ddedd1921554f11d0835f932906a0c0170adea887c5f78a1e105c87690df19925e9a36f87aee9337b5f6867a2a1efcb2b589003d70fc680f2737d371938ce3f78489ce3d20a99cca9da51"}, {0x10, 0x10c, 0xfffffffc}], 0x478}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000940)="c3adf99473d002dcfd88d86c6ef1b945782a0573845f45b441", 0x19}, {&(0x7f0000000980)="6ee2e1182a58a2a469b085945e8a1ecdb7b442356bec370d8129bc7c04e795cccea7ce9c8ab6c294112a05388076bf1cda1e316760e86aa68027a26619f115cab4132e9e4ad74d0e63b4c86378fed9f987131f92260c3c5f66fedd313f", 0x5d}, {&(0x7f0000000a00)="40212a62dfc9ee3ebc2800d5f9", 0xd}, {&(0x7f0000000a40)="4b635e9653fd0f1a4045f157e1005cc8ae22084a2a12a26ba15a041c22c0c4b5507cc8c6cbb4", 0x26}, {&(0x7f0000000a80)="261ed2b95cc38def56247e6b48bc41c77c82d658fc4467fd577657598b57a8", 0x1f}], 0x5, &(0x7f0000000b40)=[{0x78, 0x111, 0x9, "d842037da8e6295813a5aeda00dfa036f8c7943c149cd2e6ddc506042d3facfd62ca3fcaba25a3c74eaa23533169255e266207210bb078d5a152d63a5ccd7dbf4b6604453459facc6e04dfb88ea6c85cb910637a8e1ccb127ddcc1af9a0307263baf21"}], 0x78}}], 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3bb}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}]]}, 0x4c}}, 0x0) 12:04:19 executing program 6: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x3a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7ff, 0x680, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x9}, 0x3008, 0x0, 0xffffffff, 0x1, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup(r0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000980)={0x53, 0xfffffffffffffffd, 0x87, 0x7b, @scatter={0x6, 0x0, &(0x7f0000000740)=[{&(0x7f0000000180)=""/243, 0xf3}, {&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000400)=""/102, 0x66}, {&(0x7f0000000480)=""/178, 0xb2}, {&(0x7f0000000540)=""/229, 0xe5}, {&(0x7f0000000640)=""/207, 0xcf}]}, &(0x7f00000007c0)="4759ae8bf1a172bbb649a8cf436c8a57ef9a5fa8debbba8f4c2aa203bda6e5c3a025516abf6a9ab493837dff18813f2a82a74b9e487f410b8bfd8e83c43fdc9c7dfacc69f2a7f37dd013dd0e34660e63b3be9a00a330abe057374f2cb5715b0ebf62299b071edb0d1f443ab0f704b39ae2a6ce69dc8be465e981ab0af25cfb5c8d42a19ae0aa4d", &(0x7f0000000880)=""/224, 0x0, 0x10021, 0xffffffffffffffff, &(0x7f0000000040)}) r4 = dup2(r2, r1) ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000080)=0x21) write$binfmt_aout(r4, &(0x7f0000000180)=ANY=[], 0x120) 12:04:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="2cffffff", @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:04:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:04:19 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 100) tgkill(r0, r1, 0xb) [ 1077.719335] FAULT_INJECTION: forcing a failure. [ 1077.719335] name failslab, interval 1, probability 0, space 0, times 0 [ 1077.721054] CPU: 0 UID: 0 PID: 9334 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) [ 1077.721086] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1077.721099] Call Trace: [ 1077.721107] [ 1077.721116] dump_stack_lvl+0xfa/0x120 [ 1077.721156] should_fail_ex+0x4d7/0x5e0 [ 1077.721196] ? __proc_create+0x306/0x920 [ 1077.721225] should_failslab+0xc2/0x120 [ 1077.721251] kmem_cache_alloc_noprof+0x5f/0x3d0 [ 1077.721285] ? lock_release+0xc8/0x290 [ 1077.721319] __proc_create+0x306/0x920 [ 1077.721351] ? __pfx___proc_create+0x10/0x10 [ 1077.721378] ? lock_release+0xc8/0x290 [ 1077.721408] ? _raw_write_unlock+0x1e/0x40 [ 1077.721437] ? proc_register+0x446/0x6d0 [ 1077.721472] proc_create_reg+0xb6/0x180 [ 1077.721508] proc_create_net_data+0x8f/0x1c0 [ 1077.721540] ? __pfx_proc_create_net_data+0x10/0x10 [ 1077.721569] ? __pfx_proc_create_net_data+0x10/0x10 [ 1077.721610] ? __pfx_genl_release+0x10/0x10 [ 1077.721642] ? __pfx_dev_proc_net_init+0x10/0x10 [ 1077.721669] dev_proc_net_init+0x5a/0x1c0 [ 1077.721696] ops_init+0x1e1/0x650 [ 1077.721730] setup_net+0x10d/0x320 [ 1077.721753] ? lockdep_init_map_type+0x4b/0x240 [ 1077.721779] ? __pfx_setup_net+0x10/0x10 [ 1077.721809] ? debug_mutex_init+0x37/0x70 [ 1077.721847] copy_net_ns+0x2e3/0x650 [ 1077.721880] create_new_namespaces+0x3f6/0xab0 [ 1077.721922] copy_namespaces+0x45c/0x580 [ 1077.721955] copy_process+0x26d5/0x73e0 [ 1077.721977] ? __pfx_perf_trace_lock+0x10/0x10 [ 1077.722022] ? __pfx_copy_process+0x10/0x10 [ 1077.722044] ? __might_fault+0xe0/0x190 [ 1077.722078] ? _copy_from_user+0x5b/0xd0 [ 1077.722109] kernel_clone+0xea/0x7f0 [ 1077.722129] ? get_pid_task+0xfd/0x250 [ 1077.722164] ? __pfx_kernel_clone+0x10/0x10 [ 1077.722183] ? perf_trace_lock+0xb5/0x5d0 [ 1077.722219] ? find_held_lock+0x2b/0x80 [ 1077.722250] ? ksys_write+0x121/0x240 [ 1077.722272] ? lock_is_held_type+0x9e/0x120 [ 1077.722308] __do_sys_clone3+0x1f5/0x280 [ 1077.722329] ? __pfx___do_sys_clone3+0x10/0x10 [ 1077.722374] ? __fget_files+0x20d/0x3b0 [ 1077.722418] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1077.722453] ? fput+0x6a/0x100 [ 1077.722479] ? ksys_write+0x1a3/0x240 [ 1077.722499] ? __pfx_ksys_write+0x10/0x10 [ 1077.722535] do_syscall_64+0xbf/0x360 [ 1077.722571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1077.722594] RIP: 0033:0x7ffb744edb19 [ 1077.722611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1077.722633] RSP: 002b:00007ffb71a63188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1077.722683] RAX: ffffffffffffffda RBX: 00007ffb74600f60 RCX: 00007ffb744edb19 [ 1077.722698] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1077.722712] RBP: 00007ffb71a631d0 R08: 0000000000000000 R09: 0000000000000000 [ 1077.722725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1077.722737] R13: 00007ffeb487a35f R14: 00007ffb71a63300 R15: 0000000000022000 [ 1077.722774] 12:04:19 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x3}) 12:04:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0xf0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:04:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000080)) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 1077.823778] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 1077.829517] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 12:04:20 executing program 7: msgctl$MSG_STAT_ANY(0xffffffffffffffff, 0xd, &(0x7f0000000000)=""/158) [ 1077.867394] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 1077.869570] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 12:04:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x2, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:04:20 executing program 6: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000340)={0xc0000100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffd3c) 12:04:20 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r0, r1, 0xb) 12:04:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x21a, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) r5 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_DEL_PMK(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x28}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) 12:04:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:04:29 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/raw6\x00') pread64(r4, &(0x7f0000000140)=""/217, 0xd9, 0x0) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x3fb) r5 = syz_open_dev$hidraw(&(0x7f0000000240), 0x6, 0x28400) close_range(r2, r5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r6, 0x1, 0x6, @multicast}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r8 = syz_open_dev$vcsn(&(0x7f0000000280), 0x9b, 0x6000c0) fcntl$dupfd(r7, 0x406, r8) sendto$packet(r2, &(0x7f0000000000)="6236caaaab8e85e520d0087463615fd1232378c2ad5ffb321f33a0f6d8abda272db17daae216f2b50161f56e19a6bc3eb8a4cace60392f2c4e661b3be047f8a63357bb32f68f50c092ca0ba28f25629787837a7779d900c4faf5b892334c49a2d37bffb0ebab6436b353596808bb991b80b97a24e1250868e5924efddd0db9338424c964929216dde2f23acdb81dadef91c1f163e9f336a29bbd702d26b00bd9669e4ba62294d6cad70b4caa7a566c545fa0d8682f0dc1a28fe1d0d45dd7d55d8ca1243a12", 0xc5, 0x10, &(0x7f00000001c0)={0x11, 0xf8, r1, 0x1, 0x9, 0x6, @broadcast}, 0x14) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 12:04:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r1, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}], @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xde}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x35}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x17, 0x24, [{0x1, 0x1}, {0xb}, {0x6c, 0x1}, {0x36, 0x1}, {0x1, 0x1}, {0x30}, {0x3, 0x1}, {0x1}, {0xc}, {0x48, 0x1}, {0x1}, {0x48, 0x1}, {0x12}, {0x48}, {0x48, 0x1}, {0x6, 0x1}, {0x6, 0x1}, {0x60}, {0x16, 0x1}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x1) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:04:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x300, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:04:29 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086702, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r0, r1, 0xb) 12:04:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c00f0ff", @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:04:29 executing program 6: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) write$binfmt_script(r1, 0x0, 0x20) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB="010000010100008000000008", @ANYRES32=r1, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file0\x00']) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000080)='#! ') write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file1'}, 0xb) creat(&(0x7f00000000c0)='./file2\x00', 0x100) 12:04:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x3, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:04:29 executing program 7: msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/79) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000100)=""/224) r0 = msgget(0x2, 0x4) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000000000)=""/228) 12:04:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x4, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:04:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c7fffff", @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:04:29 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x16508670a, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r0, r1, 0xb) 12:04:29 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 12:04:30 executing program 6: creat(&(0x7f00000003c0)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./file0/file0\x00', 0x36) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000b80)=[{&(0x7f00000008c0)='!', 0x1}], 0x1, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) recvmmsg$unix(r1, &(0x7f0000004240)=[{{&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000140)=""/248, 0xf8}, {&(0x7f0000000240)=""/171, 0xab}, {&(0x7f0000000300)=""/146, 0x92}, {&(0x7f0000000400)}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000000440)=""/145, 0x91}], 0x6, &(0x7f0000000580)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{&(0x7f0000000640)=@abs, 0x6e, &(0x7f0000000a00)=[{&(0x7f00000006c0)=""/50, 0x32}, {&(0x7f0000000700)=""/155, 0x9b}, {&(0x7f00000007c0)=""/250, 0xfa}, {&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000000900)=""/33, 0x21}, {&(0x7f0000000940)=""/64, 0x40}, {&(0x7f0000000980)=""/83, 0x53}], 0x7, &(0x7f0000000a80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000020000000000020000f3ff00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0xe0}}, {{&(0x7f0000002bc0)=@abs, 0x6e, &(0x7f0000002cc0)=[{&(0x7f0000002c40)=""/113, 0x71}], 0x1, &(0x7f0000002d00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000002d40), 0x6e, &(0x7f0000003000)=[{&(0x7f0000002dc0)=""/72, 0x48}, {&(0x7f0000002e40)=""/58, 0x3a}, {&(0x7f0000002e80)=""/63, 0x3f}, {&(0x7f0000002ec0)=""/251, 0xfb}, {&(0x7f0000002fc0)=""/60, 0x3c}], 0x5, &(0x7f0000003080)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000003100)=""/4096, 0x1000}, {&(0x7f0000004100)=""/57, 0x39}, {&(0x7f0000004140)=""/94, 0x5e}], 0x3, &(0x7f0000004200)=[@cred={{0x1c}}], 0x20}}], 0x5, 0x2000, &(0x7f0000004380)) bind$bt_l2cap(r3, &(0x7f00000043c0)={0x1f, 0x9, @none, 0x5, 0x2}, 0xe) sendfile(r2, r0, 0x0, 0x3) 12:04:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x500, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 1087.896569] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 1088.142294] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 1088.161402] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 1088.234034] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 12:04:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x5, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:04:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000180)={0x0, 0x1, 0x6, @multicast}, 0x10) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r8 = socket$packet(0x11, 0x2, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000180)={r7, 0x1, 0x6, @multicast}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x29, 0x7, 0x7, 0xffff7fff, 0x10, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x700, 0xff, 0xb0}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000200)={'wg1\x00', 0x0}) getsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f00000000c0)={@local, 0x0}, &(0x7f00000002c0)=0x14) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="80020000", @ANYRES16=0x0, @ANYBLOB="00002cbd7000fbdbdf25130000002c000180140002006873723000000000000000000000000014000200626f6e645f736c6176655f31000000005000018008000300000000a0a564c86f3aeb08350d8d43b67f189d3b10e6f494c4b02cbf89dcaf36ce0c22729a00719ef77fe52d5045e10e35a4037026850627bdc67a5749e7404e09000000a175e5d8d0199fa9e4d4f6ed7ba088da6645aabf52abe4", @ANYRES32=0x0, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001400020073797a6b616c6c65723000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300010000004000018008000300000000000800030000000000140002006873723000000000000000000000000008000100", @ANYRES32=r11, @ANYBLOB="080003000000000008000300030000001400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="6c0001801400020069705f767469300000000000000000001400020077673100000000000000000000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020067656e6576653000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002007465616d3000000000000000000000004c000180080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="140002006272696467655f736c6176655f310000080003000100000008000100", @ANYRES32=r9, @ANYBLOB="14000200766c616e3000000000000000000000006400018008000100", @ANYRES32=r10, @ANYBLOB="1400020076657468315f746f5f68737200000000140002007465616d3000000000000000000000001400020074756e6c3000000000000000000000001400020076657468315f6d61637674617000000008000100", @ANYRES32=r9, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000300020000006c00018008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f626f6e6400000008000300000000001400020076657468305f746f5f7465616d0000001400020076657468305f746f5f627269646765000800030001000000140002006970766c616e30000000000000000000"], 0x280}, 0x1, 0x0, 0x0, 0x40}, 0x24044804) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r12, @ANYBLOB="080026006c0900000800b70000000000"], 0x2c}}, 0x0) 12:04:42 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086760, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r0, r1, 0xb) 12:04:42 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, r0, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {r3}}, './file0\x00'}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6}, 0x10) 12:04:42 executing program 7: msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/79) r0 = msgget(0x2, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/28) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000180)={0x0, 0x1, 0x6, @multicast}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6, @multicast}, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000002340)={0x158, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x264a67547744e429}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x400d1}, 0x41) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) msgrcv(0x0, &(0x7f0000000380)=ANY=[], 0x103, 0x3, 0x3000) msgsnd(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000000000400"], 0x8, 0x0) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000001340)=""/4096) r8 = msgget(0x2, 0x214) msgsnd(r8, &(0x7f0000000300)={0x2, "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"}, 0x1008, 0x800) msgctl$MSG_STAT_ANY(r8, 0xd, &(0x7f0000000040)=""/102) 12:04:42 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r2, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x244ffc3c, 0x21}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x48050) 12:04:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x600, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:04:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c9effff", @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) [ 1100.216011] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode 12:04:42 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r0, r1, 0xb) 12:04:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="2cf0ffff", @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) [ 1100.242817] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1100.259132] mac80211_hwsim hwsim14 wlan1: entered promiscuous mode 12:04:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x6, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:04:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x700, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:04:42 executing program 6: ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000100)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x1ff, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0x0, 0x2, 0x28}) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x2, 0x210843) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000040)) 12:04:42 executing program 7: msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/79) msgsnd(0xffffffffffffffff, &(0x7f0000000000)={0x0, "b02e71d5fcdc14a9001b5980363bdac4644ae01ac4bad87cf9a4b5a3e1fa11dd44d68b084f41d37b9dce4179b718b0f88af0415bb483d338465082"}, 0x43, 0x0) 12:04:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) [ 1100.524228] program syz-executor.6 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1100.691903] mac80211_hwsim hwsim14 wlan1: left promiscuous mode [ 1100.724486] mac80211_hwsim hwsim14 wlan1: entered promiscuous mode [ 1100.778939] mac80211_hwsim hwsim14 wlan1: left promiscuous mode 12:04:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x7, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:04:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x900, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:04:52 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r0, r1, 0xb) 12:04:52 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='cpuset\x00') ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000940)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="00000000000013002e2f66696c653000"]) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r6 = syz_mount_image$nfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x9, 0x8, &(0x7f0000000880)=[{&(0x7f0000000140)="d0e4897513efd8b7b61f12f932eeae82b3b1f56e868531539afee795635b65bb419600cf2d9d73a23849c469960f353e42bbe87c93a2623382b14069ac6f3fbe4bd9f66d48def3f8b281b8c1268964888493c76f272290573617f29101b19a21d4bb1c8a933935e785ff6bba4bb3ea8e2f6ad025d135531fe98ff7da7a67c31d0fa3e5b95af7494c83603d5de3e186d6d63164c7921ad38064d0cdf249eb536f5894366d7d28", 0xa6, 0x101}, {&(0x7f0000000200)="594e2b7b84d2812859a38c2ebcdcbc59c326cd3db81a49245e1844fe5e2bfe546136bba840b7154967825a50fa2937c26e970eac4fbbf6a9d38ed2567b2e51ad10966f673220bd2534e5b96ad7dee10998ac0873ec1852a14bd91e551eeb8e5a96f7b9629f7e078664802be656fd6aa5bc", 0x71, 0xff}, {&(0x7f0000000300)="7ab843373839410058", 0x9, 0x400}, {&(0x7f0000000480)="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", 0xfd, 0x159}, {&(0x7f0000000580)="d447d8a0266fa28e44b7d9586926175b9bb396399efd7050914a839ef03e78df3d4a872bb2d8b46828d1b98cbcd3f4c7f76f00b47caae30dd0a0307b5c9c51a68c172dfbb611796c9e47df331fc1cc1d3b2c448355c8a98cddf7ab62c64e", 0x5e, 0x8001}, {&(0x7f0000000600)="5b0194c9ae0c31c96c61ab425f6e9ebea8fd3bf9abc02bfd93b5ea789de110bec925597dd541e34a8232ff7a0bbf317c44c1828bd36694524834496730578c0991a1adfdc3d4136cf7645764e330adb31c312be1ba5a357b05164e8a09acfd3d309af16f1ea41d554ed5bd887d7f8cbd4661334c23139a159dd880ac7d1c203548efd0fd31e407ca5d74952f4221da729ac89de14c1f7c00bd6c4756c725cd42760222d1a1e6c0fdb091f505fdd50c280c662399e3f0162e8b48b4053885771cc56e7cd8de35e8f8da7fbb520e8f32049abe253c5f489dea50e877a7b84c85249c51", 0xe2, 0xeaba}, {&(0x7f0000000700)="90ed4076a750608b7077d895a66807733a34988aa345411af51d155a47d941a2717c738126dfcee8f1ddbab2e7e4d4524495d9fa7e14dc556667e8e7233cfe51cd89456f99223afce777a3e3245321c0040ba5c77fe48a8e1c1fac51eb1d77fa91f9cc77d1eb31aaf97905f118336fcd89e619ed6442cb38fcd1", 0x7a, 0x5}, {&(0x7f0000000780)="0b684cfa85a523fe562a83948d5dd06acc73c56a717cd1d27615030dc08bb5267164ff652cce3a6c78a48fa783457925701954903088be33ee24d11fc0033c8879359284ae6da0cbba11e8b7e61bee2eecb17f9d2f720d2a503694eea1720d29cf09c1c44b00a8eeea1bd6f47974ab26d800774548d621505aba76b006c9e5286c0c181d45dd02f805bbc9f3b6788ee9337c842e81a8cab188d374483da1a570aa852ad427e431596dfd52a5cf04f47a26e49c53e06c8abbe5a4b222e79850fc28a3a99bae8f38f2", 0xc8, 0x9}], 0x20, &(0x7f0000000340)={[{'^'}, {'wlan0\x00'}, {'nl80211\x00'}, {'*'}, {'wlan0\x00'}], [{@euid_lt={'euid<', 0xffffffffffffffff}}]}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYRES16=r4, @ANYRES16=r3, @ANYRESDEC=r6, @ANYRES32=r5, @ANYBLOB="0886d48da5775be70748d95d000000000000004a4c7443e24100"/36], 0x2c}, 0x1, 0x0, 0x0, 0x4c080}, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x1, 0x4) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r4, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x20, r3, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x32}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24000005}, 0x4000040) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/79) 12:04:52 executing program 6: sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x4840}, 0x4) syz_emit_ethernet(0x82, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000810000000800450000700000000000019078ac1e0001ac1414aa04029078000000004a0000000000000000040000ac1414007f000001863d00000000000cba4906dca0ac3f21ee4d000a0b1bb9011e61db13000e9fb8dedc4ea32f0be3c4157e00063f70cd62000d20126d234d2862265a340c000000"], 0x0) 12:04:52 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @remote}, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 12:04:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:04:52 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = clone3(&(0x7f00000003c0)={0x80000000, &(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f00000001c0), {0x27}, &(0x7f0000000200)=""/33, 0x21, &(0x7f0000000240)=""/101, &(0x7f00000002c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3}, 0x58) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0xe7, 0x4, 0xef, 0x0, 0x5, 0xce034, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x3, 0xfffffffffffffffc}, 0x20, 0xb3, 0x0, 0x5, 0x4, 0x3, 0xfff7, 0x0, 0x1, 0x0, 0x3}, r0, 0x7, 0xffffffffffffffff, 0x3) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1000, 0x1) acct(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x61, 0x0, 0x7, 0x80, 0x0, 0x100000001, 0x8ad4c705a9a2f5b4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000300), 0x6}, 0x1000, 0x7f, 0x2, 0x0, 0x80000000, 0x59, 0x2, 0x0, 0x7fffffff, 0x0, 0x6}, r1, 0xc, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x28002, 0x0) [ 1110.093059] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 1110.102574] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 1110.119750] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 1110.125909] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 12:04:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x8, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:04:52 executing program 2: perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x100, 0xa683, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'nr0\x00', 0x0}) r5 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000080)=0x10, 0x80000) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='bond_slave_1\x00', 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="010080f453a44db8cd95e9ae91a3b83d717c450a6c9b2803c4ae46e43323e09c5c9b88cf649c6c93c9655914e21588f78fc1c12a5b8e6b11018f2fc1af6c19bf020e18ee56c8d093ad73ff7c407ef688032a4433c4c0d68e55e6d58d5c220500f3dcc8614a9687da4688cfe3a8dc3c69174172e012c25ea2cf1c104657e33da30e5902dc5c7e7d95e49641d2dc6f27f34ed64aced0399d76959337cc6d50c1a57ddc822bd675196c9e52d9f5098923d57b171a4bec3c6475278acbbf806fa9611f80f881ea3193ccd8d95225d0069403cd78fe0c22fb4f3a4a3b36a98aec92e6a18f182508e7b052fbe5734d7b4a32a40900000000000000dfa02339d465ced66ebc9ec663b71985260096078f415aeed1e5969bb1a94ad853b943930f1c742edbacfb8a60a5cb3c0f9bad351dd9be07c07a606445025d22d25780a1ae372827529bb2dfb1d8306bf6ee218a2743c60ee2d49d82cfab20ebb977b5370b29622fcaff9ae9ae00be88cc5297915b6180b44e1495063d97160b01226cadd1fa234e378e41c55f87961e440eb5520d9e86d2508707437c13b92520971c8bcc4a3040a6718d922e576564f686860606bbb11ddb4d3509abcdc6437e9d6396d6ce52359a43435d5d1e9c2e61a7", @ANYRES16, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x400c015}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f00000001c0)=[{r6, 0x4100}, {r8, 0x1000}], 0x2, &(0x7f0000000280)={r9, r10+10000000}, &(0x7f00000002c0)={[0xffffffffffffffe1]}, 0x8) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1}, 0x4) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 12:04:52 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x61020100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0}, 0x58) 12:04:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0xf00, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:04:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="2cffffff", @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:04:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x9, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:04:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) [ 1110.505562] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode 12:04:52 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r0, r1, 0xb) 12:04:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)={0x20, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0xd, 0x0, 0x0, 0x1, [@generic="a58f19382593749372"]}]}, 0x20}], 0x1}, 0x0) getpeername$netlink(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 1110.561613] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 12:05:03 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r0, r1, 0xb) 12:05:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0xb700, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:05:03 executing program 7: r0 = msgget(0x2, 0x200) msgrcv(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007dba4e57a264eaaf00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007a68af5fe28f7ce55e3a8b5180caf830ccd9620d512919cb8374e7df9fed3a88728eafcb902d1e6b2aaba3ef98e4531f7e481fb589de4d633b1ba956aaa7d607a649c49bdfc7f309a8f0e886d2db9e29598a14ece665bba13f3fa9031dd25f2ebf1c837615114f6e4957b6514b8b97417622c7775175fc73df9934465744eff0d30e7e8f15d4ae864d615061c8c231d9d5d97cae92acd1c36366b87a838152e31eea8817d77c164bf951e76d62152d4895"], 0x103, 0x3, 0x3000) msgsnd(r0, &(0x7f0000000280)={0x2}, 0x8, 0x0) msgget(0x1, 0x20) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/84) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000000)=""/99) 12:05:03 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/raw6\x00') pread64(r5, &(0x7f0000000140)=""/217, 0xd9, 0x0) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}, 0x10) 12:05:03 executing program 6: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r10 = socket$packet(0x11, 0x2, 0x300) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r10, 0x107, 0x1, &(0x7f0000000100)={r12, 0x1, 0x6, @multicast}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@private, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000002c0)=0xe8) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4241}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)={0x1d8, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x68}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xf7}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xba}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}, @ETHTOOL_A_LINKMODES_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_LINKMODES_OURS={0x164, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_BITS={0x150, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x74}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x8a\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '\xe9$@)^@)\\\xb9}/!(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\\&.}*\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x56d2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '[.@\\@\xbc---\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '*}\xa1),.:,(\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '&:,@{#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}]}, @ETHTOOL_A_LINKMODES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[@ANYRESDEC=r7], 0xb) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000000c0)={0x0, 0x1, r1, 0xfffffffd, 0x80000}) 12:05:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:05:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0xf, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:05:03 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = getpid() r3 = getpid() r4 = pidfd_open(r3, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x282084, 0x10) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000080)={0x2}) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r4, &(0x7f0000000040)={r1}) 12:05:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:05:03 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) ioctl$sock_proto_private(r1, 0x89e6, &(0x7f0000000040)="f4274d80ad3c4eb5f36a50020abb6bfd396e58be87d981df33ccdda9c4ac47dc71381200984e11314d3d814e1a5a0e55d87e2a53dcfda7a7bb91d265a18cf1711539fa1c31c2ae51784367d76f3c771ed34d8891ad4af52da883c045719d3219836050e81baa3d5bdeaa03912827dd85a1e0f68a4dcef93194432351ccdef98be1502b106921b6103e732aec44dd39b95f17030b25c8e18610742c613196386a48b2802878417851a694f341cf6b5a96941db80b583678a6da68671b3b0f3f5537f35a9858d006f094e40ac8cd3d53291b05c65a4696d46a3fbf706b") r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_matches\x00') lseek(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r2, 0x0, 0x4) [ 1121.201558] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 1121.211953] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 1121.243193] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 1121.244824] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 12:05:03 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) listen(r3, 0xffff7ad2) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x1d8, r4, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x42b}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x0, @mcast2, 0x5312}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'caif0\x00'}}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'ip6gretap0\x00'}}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x66b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x19e}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_MEDIA={0x78, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc827}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x100, 0x70bd25, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0xa05}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4801}, 0x4000810) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/79) [ 1121.283001] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 1121.286229] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 1121.303173] mac80211_hwsim hwsim11 wlan1: left promiscuous mode 12:05:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0xf000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:05:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0xed, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 1121.320955] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 12:05:03 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x8, 0xfff}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000440)="85", 0x40000}], 0x1, 0x1000, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000140), 0x2, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/raw6\x00') pread64(r3, &(0x7f0000000140)=""/217, 0xd9, 0x0) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f0000000180)=""/71) truncate(&(0x7f0000000100)='./file0\x00', 0x81) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0xc40) sendfile(r0, r4, &(0x7f00000000c0)=0x5, 0x8) 12:05:03 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r0, r1, 0xb) 12:05:03 executing program 1: fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000080)={0x43d19a41d960e41b, 0x80, 0x0, 0x1, 0x2, 0x18, 0x0, 0x9, 0x20046, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x401, 0xf878}, 0x24, 0x1, 0x802, 0x8, 0x7ff, 0xfff, 0xf4ef, 0x0, 0x100003, 0x0, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000000040)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/raw6\x00') pread64(r0, &(0x7f0000000140)=""/217, 0xd9, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000100)={0x0, @adiantum, 0x0, @desc1}) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000140)=0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) set_mempolicy(0x1, &(0x7f00000007c0)=0x4, 0x6) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000000)={0x3, 0x0, 0xa71, 0x0, 0xc, 0xf702}) 12:05:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0xf0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:05:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:05:03 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000180)={r2, 0x1, 0x6, @multicast}, 0x10) r5 = fork() ptrace(0x10, r5) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x8, 0x5, 0x9, 0x0, 0x1f, 0x14000, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x10001, 0x1, @perf_bp={&(0x7f0000000000), 0x1}, 0xb400, 0x0, 0x8, 0x0, 0xa4d, 0x3, 0x1, 0x0, 0x1}, r5, 0x8, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66696c65300030bd50732237e349f24f1d2a86d30a30662c669f605888350348ab2f26d52cbcb11ae5937abeb6c4a42f40c78832defc35d4a7ac9fbf17295994f10148d30a01e7f2818f"]) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x2, 0x0, 0x1, 0x1, 0x0, 0x3, 0x40008, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x9, 0xfffffffffffffe00}, 0x8010, 0x6878, 0x6, 0x0, 0x3, 0x1ed02, 0x6, 0x0, 0x3ff, 0x0, 0x9}, r5, 0x1, r6, 0x0) fork() r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) close_range(r3, r7, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/raw6\x00') pread64(r8, &(0x7f0000000140)=""/217, 0xd9, 0x0) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{0x7, 0x1f, 0x4a, 0x3}, {0x0, 0x1, 0xe6, 0xfffff679}, {0x9a3, 0x80, 0x1f, 0x1}, {0x1000, 0x1, 0xdd, 0x2}, {0x2, 0x0, 0x81, 0x101}, {0x100, 0x0, 0x1f}, {0x2, 0x1, 0x3f, 0xffff0000}]}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x2400, 0xfc) 12:05:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x300, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:05:03 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x10031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) 12:05:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x30000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 1121.671049] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode 12:05:03 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r0, r1, 0xb) 12:05:03 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x40, 0x0, 0x88) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) 12:05:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:05:12 executing program 7: msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/79) r0 = msgget$private(0x0, 0x20) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000000)=""/49) 12:05:12 executing program 6: mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) msync(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5) 12:05:12 executing program 1: io_setup(0xc1d, &(0x7f0000000000)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/freeze_filesystems', 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/raw6\x00') pread64(r2, &(0x7f0000000140)=""/217, 0xd9, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/raw6\x00') ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f00000000c0)={0x8, 0x7fff, 0x7, 0x80000000, 0x2, 0xccdc}) pread64(r3, &(0x7f0000000140)=""/217, 0xd9, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r3, 0x3309) io_submit(r0, 0x0, &(0x7f0000000200)) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$BLKBSZGET(r5, 0x80081270, &(0x7f0000000900)) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000240)={0x0, 0x1, 0x1, [0x0, 0x20, 0xfff, 0x4, 0x9], [0x1ff, 0x907a, 0xef8b, 0x4, 0x6, 0x1, 0x7, 0x8, 0x400, 0x9, 0x400, 0x0, 0x2, 0x5, 0x3, 0x1, 0x1, 0xfff, 0x39, 0x6, 0x8af, 0x8, 0x7f, 0x20, 0x0, 0x4, 0x9, 0x8, 0x4, 0xffffffff, 0xa5, 0x7fff, 0x3, 0x80, 0xff, 0x101, 0x40, 0x5, 0x5, 0x1f, 0x514a, 0x9, 0x100000001, 0x4, 0x40, 0x400, 0x6, 0x5, 0x8001, 0x1, 0x1, 0x2, 0x1881c57b, 0x2, 0x2, 0x7, 0x3, 0x7ff, 0x6, 0x6, 0xd0, 0x1, 0x1000, 0xc88, 0x3, 0x1, 0xc5, 0x2, 0x6, 0x4, 0x9, 0x9, 0x9, 0x4, 0x4, 0x2, 0xffffffff, 0x8, 0x3, 0x20, 0xc00, 0x100000001, 0xf58f229, 0x5, 0x6, 0x3, 0xffffffffffffffdd, 0x8, 0x200, 0x7, 0x9, 0x7, 0x1, 0x1, 0x80000001, 0x1, 0x6, 0x7, 0x3, 0xff, 0xfff, 0x7, 0x399f, 0x9e, 0x2, 0x8, 0x3, 0xfff, 0x0, 0x2, 0x7645, 0x4, 0xfffffffffffffcba, 0xffffffffffffff7f, 0x658, 0x4, 0x20, 0x3ff, 0x5, 0x7fff, 0x6581]}) r6 = syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000680)='./file0\x00', 0x4, 0x1, &(0x7f0000000780)=[{&(0x7f00000006c0)="0bbe5f0b91ea6062321af15fa40d4d6789a5386395efcecb997e0a2fae4ec02ed98e9c736f547a654b3286593f6833f9d907460e51dd489eb70f295adb8eaf9856fb947067dc0199c5d6147d48c20c2634a0dd0c38c5c2464561fdc5b45952abf9fcf39749040f83a5725a5157f708a22df6be28ae638074c49b0a9017b5bfceb66803161fcc59055cb0ce1d80ed5bdf587b8b8f1069a7b99e6ad97ec334", 0x9e, 0x4}], 0x80000, &(0x7f00000007c0)={[{@shortname_winnt}, {@shortname_lower}, {@numtail}, {@numtail}, {@shortname_winnt}, {@shortname_mixed}], [{@smackfshat={'smackfshat', 0x3d, '-'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@fsname={'fsname', 0x3d, 'net/raw6\x00'}}]}) open_tree(r6, &(0x7f0000000880)='./file0\x00', 0x1000) 12:05:12 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r0, r1, 0xb) 12:05:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x500, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:05:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:05:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x80000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:05:12 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080)=0x5, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) r5 = accept4$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14, 0x100800) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @random='\x00/0\x00'}, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000400)=ANY=[@ANYBLOB="0100"/12, @ANYRES32=r5, @ANYBLOB="0e0000ba431a049687929539c053d90000"]) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, &(0x7f00000001c0)={0x3}, 0x4) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) readahead(r7, 0x4916, 0xec) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000240)={{{@in=@broadcast, @in6=@mcast2}}, {{@in=@local}, 0x0, @in=@private}}, &(0x7f0000000340)=0xe8) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r11, @ANYBLOB="080026006c0900000800b7a400000000"], 0x2c}}, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r8, 0x9362, 0x0) 12:05:24 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 12:05:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:05:24 executing program 6: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r0, r1, 0xb) 12:05:24 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r0, r1, 0xb) 12:05:24 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read(r0, 0x0, 0x0) ioctl$TIOCSBRK(r0, 0x5427) 12:05:24 executing program 7: msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/79) msgctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/124) r0 = msgget(0x3, 0x110) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000000080)=""/50) 12:05:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0xf0ffff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:05:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x600, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:05:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x700, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:05:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x1000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:05:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:05:24 executing program 7: msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/79) r0 = msgget$private(0x0, 0x410) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000000000)=""/85) 12:05:24 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) clock_adjtime(0x2, &(0x7f00000004c0)={0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) clock_adjtime(0x2, &(0x7f0000000000)={0x5, 0x3, 0x6, 0x8cf9, 0xff, 0x80, 0x8, 0x6, 0x6, 0x0, 0x6, 0xc579, 0x5, 0x0, 0x6a, 0x1, 0x8, 0x8001, 0xe1, 0x3ff, 0x3, 0x6, 0x200, 0x3, 0x8, 0x7}) 12:05:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x900, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:05:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x2000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:05:34 executing program 6: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r0, r1, 0xb) 12:05:34 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r0, r1, 0xb) 12:05:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:05:34 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 12:05:34 executing program 7: msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/79) msgsnd(0xffffffffffffffff, &(0x7f0000000000)={0x0, "18d5816f50ee68a7ad90a778b02eec1b0a331a0fdc294f8c58f6ae61df034b0fe8bdddd7c68d7695599bc7ffdb0a524cdcfb266a56d858f6d678b5ceeda58894820930b02360fb4b5c78894d5a42ba35f1faae58628756802a93270ae69a22924d05a8a22d1667"}, 0x6f, 0x800) 12:05:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0xf00, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:05:34 executing program 1: shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x4000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x4, 0x0) 12:05:34 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/raw6\x00') pread64(r0, &(0x7f0000000140)=""/217, 0xd9, 0x0) ioctl$CDROMVOLCTRL(r0, 0x530a, &(0x7f00000001c0)={0x0, 0x6, 0x81, 0x1}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000004000000000b0000000500010003000000000000eaff0000"], 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xcdb}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x20050001) 12:05:34 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0xb24, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 12:05:34 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'veth1_to_team\x00'}) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/79) msgctl$IPC_RMID(0x0, 0x0) msgctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000000)=""/92) 12:05:34 executing program 6: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r0, r1, 0xb) 12:05:34 executing program 1: r0 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000040)={0x6fe9, 0x30, [0x4, 0x100000000, 0x99ff], &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) io_setup(0x2, &(0x7f0000000080)=0x0) io_submit(r1, 0x2, &(0x7f0000000140)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0xfffd, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 12:05:34 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {0xd}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r0, r1, 0xb) 12:05:34 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'hsr0\x00', 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000001780)={{{@in6=@local, @in=@rand_addr=0x64010101, 0x4e22, 0x7fff, 0x4e23, 0x800, 0x0, 0x120, 0x80, 0x67, r1, 0xffffffffffffffff}, {0xffff, 0x3, 0x0, 0x3, 0x1d079059, 0x6, 0x7ff, 0x3}, {0x8, 0x401, 0x101, 0x1f}, 0x7, 0x6e6bb2, 0x1, 0x0, 0x2}, {{@in6=@mcast2, 0x4d5, 0xff}, 0x2, @in=@empty, 0x3501, 0x3, 0x3, 0x2, 0x6, 0x401, 0x3}}, 0xe8) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6, @multicast}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="03200000000000009700000000000000"]) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x82000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x3f7, 0x800, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmsg(r6, &(0x7f0000001700)={&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e22, @multicast2}, 0x0, 0x3, 0x1, 0x1}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)="f3cc8c9a87715b78f6a768ee77fca12118de39c16b2f1e17d3b16bec0551858f4edd25430a373e88d13e41f7", 0x2c}, {&(0x7f0000000300)="33de64626412bd363c4374b9411397faba325b88645282a29f4cb8a4d03ebbe758ff9edbe6863a0775d3bbd781852aa2bdffd4ed8bd552b5954abeca9e227b711463596d062fd9d7fc4d54d125cebd691a6cc4907299eaef8a23733f614e08c8368f7da9be5e9f9b54aac3efa6766e26b15a2380690f92bd3bb5374369a5716e97bc0b26cf9b6cbb71ccbfdfbbc7ff", 0x8f}, {&(0x7f00000003c0)="83ce0ec500808889f36c57866ebadbc581065746fc84b9d2ff90a768ed3d3d022be5430930b66e8592c2318d5ec5ce69f9cfac1d744d9fd58a7279405cec311f0bc28945dacdecec6d4e34bfcf9709662b52dc1a639fa3", 0x57}], 0x3, &(0x7f0000000480)=[{0x80, 0x88, 0xc0, "9cbb25db420475c8ddee6197685e10cdc51a6677014b084240d24751b1b334168e31ffdc8831be75e164135f1f9e8ef84fef517159d3713eaedbe4cd22b642f3ef31d8a7413bf6fe85dad9fbfc48348edf888d3b59d02e7613f2932069ef347d4243bc4e1ac33a7e6078d75902e021"}, {0xe8, 0x1, 0x1ff, "b3f8e8bc067a633c67074f93afd19bcda2348e71127a3208fb8b695b08793b7a7c7093820e28085686febf09744c314233944c50af191b67c57cf9f146b50d82942af370ed65bb577d2874bf960a0db11960036cd319d889d719f39690a5a021643e68e7baf8db0dc82137df8249c74d1d731971ad86ccb9b3a249d290b66b4368b544e617c68e384e5337707d55354d5a580c037e4aacd91fbb123d9f8e19569b4dfc16b1bfe4f890e4af52e5299fefffe8da67abddbb4003c948cdea69aef0ade690f906eff75840e9567493568d14a63951d55ac6"}, {0x1010, 0x1, 0xa3, "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"}, {0x90, 0x10e, 0x5, "d917d1d3b6c0baed02af624d8336b36cf17ff248c8e714569ec0c1b245f8af748d44e8527565b53bb31b93cdc07ff9b28e4bea592893b975f93e264685899ec02fd8b0a9237834e7bce5214c85f1a63a1cee24718c091a34d14e9fe143007e939f407f39ffa387ca0224479694946b5ae488812cb3dfd26c0b6538d5dc"}, {0x78, 0x111, 0x81, "386376be411663dd21e494e595e3fe818b735089801049f488662563374b26b0ae5bbbd199695b7eeb28229f9978fb7457732439833753da25d5bce03c72fe1f8b522f2c43a44395b9dc00797609a7f399277f8c2acf82a1eea204345fbd6dee745a6bfb08"}], 0x1280}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) 12:05:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0xed00, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:05:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x3000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:05:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:05:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/raw6\x00') pread64(r1, &(0x7f0000000140)=""/217, 0xd9, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @private0, 0x2f400000}, 0x1c) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 12:05:35 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r0, r1, 0xb) 12:05:35 executing program 7: r0 = msgget(0x2, 0x230) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000100)=""/77) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000000)=""/238) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000200)=""/112) 12:05:35 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000180)={r2, 0x1, 0x6, @multicast}, 0x10) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/raw6\x00') pread64(r7, &(0x7f0000000140)=""/217, 0xd9, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@loopback, @in6=@empty}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f00000003c0)=0xe8) r8 = perf_event_open$cgroup(&(0x7f0000000240)={0x0, 0x80, 0xf1, 0x8, 0xb0, 0x3, 0x0, 0x1f, 0x500, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x6}, 0x10000, 0x5, 0x74f1, 0x2, 0x6, 0x7, 0x80, 0x0, 0x0, 0x0, 0x7fff8}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x4) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xff, 0x9, 0x3f, 0x1, 0x0, 0x101, 0x2010, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_config_ext={0x8, 0x7fff80000000000}, 0x2104, 0x7c0000000000, 0x6, 0x6, 0x4, 0x7ff, 0x0, 0x0, 0x5, 0x0, 0x27}, r6, 0x4, r8, 0xa) [ 1158.531809] Bluetooth: hci6: command 0x0406 tx timeout 12:05:44 executing program 6: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000300)={@empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, 0xe1, 0x100, 0xffff, 0x0, 0x101, 0x80000}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}, {}, {0xffff}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x1}}}, 0xe8) sendto$inet6(r1, &(0x7f0000000480), 0x0, 0x40000c5, &(0x7f00000004c0)={0xa, 0x3ff, 0x8, @private0, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x7ff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0x2, 0x0, 0x0, @loopback}, 0x1c) llistxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=""/231, 0xe7) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r3) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x4e20, 0x3ff, 0x20, 0x0, 0x2, 0x20, 0x20, 0x0, 0x0, r3}, {0x9, 0x3, 0x8, 0x8000000000000000, 0x2, 0x9, 0xffff, 0x5}, {0xaf, 0x81, 0x7ff, 0x4}, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in6=@private2, 0x4d2, 0x32}, 0x2, @in=@private=0xa010101, 0x3500, 0x2, 0x0, 0x9c, 0x2, 0x1, 0x10000}}, 0xe8) 12:05:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0xf000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:05:44 executing program 7: msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000000)=""/91) 12:05:44 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {0x10}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r0, r1, 0xb) 12:05:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:05:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x4000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:05:44 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000001000)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x8, "995712cbe417c1"}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000002000)={r5, 0x71}) read(r0, &(0x7f0000000000)=""/4096, 0x1000) 12:05:44 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xd772}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0xe}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$packet_buf(r2, 0x107, 0xd, &(0x7f0000000240)=""/223, &(0x7f0000000040)=0xdf) r4 = socket$nl_generic(0x10, 0x3, 0x10) accept$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @private}, &(0x7f00000001c0)=0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f00000014c0), 0x500, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan0\x00'}) listen(r4, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6, @multicast}, 0x10) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f00000003c0)={{r6}, 0x0, 0x0, @inherit={0x70, &(0x7f0000000340)={0x0, 0x5, 0x7782, 0x1, {0x0, 0x3, 0x100, 0x40, 0x4}, [0xbeb, 0x3, 0x10000, 0x0, 0x6]}}, @name="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"}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 12:05:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x30000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:05:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) [ 1162.646180] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 1162.647905] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1162.649048] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1162.650129] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 1162.651331] blk_print_req_error: 23 callbacks suppressed [ 1162.651348] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 12:05:44 executing program 7: msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000000)=""/89) [ 1162.706256] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 1162.708107] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1162.709505] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1162.710843] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 1162.712283] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 12:05:44 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000000)={{0x29d4, 0xffff}, 0x100, './file0\x00'}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x1, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 12:05:54 executing program 6: ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000080)={{0x5, 0x3}, 'port1\x00', 0x0, 0x81004, 0x7, 0x4, 0x2aa, 0x0, 0x4, 0x0, 0x3, 0x3f}) r0 = socket$inet(0x2, 0x3, 0x5) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00'}) r1 = fork() r2 = inotify_init1(0x80000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000000)={0x20000000}) tkill(r1, 0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x2000009, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, r1, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x25, 0x3, 0x3, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000000200)=0x6, 0x4) 12:05:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x80000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:05:54 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r0, r1, 0xb) 12:05:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x5000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:05:54 executing program 7: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000040)=""/48) 12:05:54 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) fcntl$setstatus(r1, 0x4, 0x42800) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) 12:05:54 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @random="7bf3a15747ea"}, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/raw6\x00') pread64(r5, &(0x7f0000000140)=""/217, 0xd9, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast1, 0x7}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 12:05:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:05:54 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/raw6\x00') pread64(r0, &(0x7f0000000140)=""/217, 0xd9, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/79) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000001300)=[@mss={0x2, 0x7fff}, @window={0x3, 0x3ff, 0xfffb}, @window={0x3, 0xf001, 0x1}, @sack_perm, @window={0x3, 0x2, 0xfffb}, @window={0x3, 0x2, 0x2}, @window={0x3, 0x9, 0xdf0b}, @sack_perm, @mss={0x2, 0x8}], 0x9) r1 = openat$cgroup_pressure(r0, &(0x7f0000000240)='cpu.pressure\x00', 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) write$binfmt_script(r1, &(0x7f00000024c0)=ANY=[@ANYRESOCT=r5], 0x103c) r6 = msgget(0x2, 0x300) msgctl$MSG_STAT_ANY(r6, 0xd, &(0x7f0000000040)=""/233) r7 = msgget$private(0x0, 0xc0) msgctl$MSG_INFO(r7, 0xc, &(0x7f0000000000)=""/2) pread64(r0, &(0x7f0000000300)=""/4096, 0x1000, 0x5) 12:05:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0xf0ffff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:05:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x6000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:06:04 executing program 6: prctl$PR_SET_SECUREBITS(0x1c, 0x1) r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={[{@nr_inodes={'nr_inodes', 0x3d, [0x6d]}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) ftruncate(r2, 0xfffffffffffffffe) 12:06:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x1000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:06:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x7000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:06:04 executing program 1: r0 = syz_mount_image$tmpfs(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x484803, 0x6) statx(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r3) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r3, r1}}, './file0\x00'}) 12:06:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:06:04 executing program 7: msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/79) r0 = msgget$private(0x0, 0x400) recvmsg$unix(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000000000), 0x6e, &(0x7f0000000200)=[{&(0x7f0000000080)=""/50, 0x32}, {&(0x7f00000000c0)=""/20, 0x14}, {&(0x7f0000000100)=""/8, 0x8}, {&(0x7f0000000140)=""/160, 0xa0}, {&(0x7f0000000300)=""/197, 0xc5}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x6, &(0x7f0000001680)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000001000000020000009cce47d77356da16c7282777080ac61fa022533e6a6a47f2e50cb4d91fd026f1c7be987acf7271ba442b0b8148719d6b422107fab1f3ffe3f64eb3b9f2fa93ede67d321f37aaec7de3bf8ffbb9ca11e77a63f2f28564d5001d3b3761339e9b24c2f6ec0301817a50dacc1dfe3f8daa0eef2d623e5c7c8378477d641a9141f7a6043d379194a9d05c13feb1baa1cbe35c6f6cff14147833d4d4b4704a65422d184391fdbf133425be3fc602e9999ce8e3101a2a12519e3e4463d5e18a6c81e960eb7bec5ce3dc10ad6bdf239c55804b1f6c4b6961bd024f1cd6fc9eb1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa0}, 0x40) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setregid(r3, 0x0) lstat(&(0x7f0000001400)='./file0\x00', &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getpid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000015c0)=0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000001600)={{0x1, r1, r3, 0x0, r4, 0x1c0, 0x4}, 0x0, 0x0, 0x9, 0x4, 0x7, 0x1, 0x5, 0x81, 0x8, 0x3db, r5, r6}) 12:06:04 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r0, r1, 0xb) 12:06:04 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = accept4(r0, &(0x7f0000000240)=@x25, &(0x7f00000002c0)=0x80, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) sendmmsg$inet(r3, &(0x7f0000000c80)=[{{&(0x7f0000000300)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000340)}, {&(0x7f0000000380)="7cc97c9f1878d410ac90fabdf85910283489d2027f1f77f70431c4c099581fa8f05b0291c2de3f7f12ad1cf709", 0x2d}, {&(0x7f00000003c0)="12537a292a90afb07ffc3e95d830f0396428fdafa92e82cced9b1979ec8a6ab6510fba1fa34a69d120de4f6f611af6220a1805eae85c2ea50cdcf047578f6cb153b5d75d7f9125ca29ad9c8a5345b609ddcac88cdf2576cb0546bfac416c5bc84899c7c8bcd23dc843102c10379525a7df97fe6c434de8498692a1ad33bbc30e19083ca0638a017b6c5b13f843575fdd3c2ec42f45818f5cdd21809acd9bb79ccae8137657c3d10fdbf563ae61befef17e7abc667ed287b26c7c8989622f655a7eef9f3eb22f9a03c751814279b14e164f962bc88d", 0xd5}, {&(0x7f00000004c0)="a9e69fc8c0fe807e79fddece3d5058984abe3be4108e5a5e8f28a03ffdf351066b22fea30abf08b12b135e2de0ffd33983b6f530e746a487f6ad8e290d2d259e3cf23d87e34f1ea593743f463d4d84cc67d1797bb7faf7426243a2c636d8f9b4986b9aa23fc0cc037da0bf642ed79568123a8a55c5dca5ddd69b144ba52b23f4b08a483150263b9063773f2b6a9d3ea68bf14b6dbbe9cbb4178e1871c0a49b23a3e7a1bad8a0f155f7edc7eb52", 0xad}, {&(0x7f0000000580)="6670886df1ef9fd79e7cc580ebf2780db0a3871eec417ba9622c1aee7c8ce95b4feebf710c4d7e05f7964f4c8b13cbc0e06fbe8ff565138f8fcf487df1717074cf185f9cc1a6281354cb405f7398bac04e560cb0fc18f5671f2499097b9be0929baeccc9669e111704646bff1a186ccef6a1029731017dbcc4cd1450fe3b52bae2acbc4f972adba86f881e89c67920f2ce3d03e7ea5d5dab6617f0d8c25a40164d401d90dae07d9a6e0f1458bf115d305d628e71d5c8232ccb354622e6aecffde55d2c34fb5e69bd5e7f3281426e56a7152f32948243b1b73051c53fdc55dca3f0ef1f206140609fb96126e95aec6a2c41a56a37f7259f1cc4d1ad", 0xfb}, {&(0x7f0000000680)="75bc02f35602d4cfc2fc6efdd7af4781cc03d756b8dffd5da1f28c76da441111bca2ba4c2ddb63a34a59", 0x2a}, {&(0x7f00000006c0)="fa14f257eea10e9a00de6816c79ebe5f0b1fc9dc0ed00d80f5241b0df3268e3c8ccbd9bbf70670c5935884b4421c906ba3e97413271b614f4f075cf53295e454de8a0af8bdb31c4999641e3bdbff18dac3c2ec2747c45a50645630f3fb368133922286eebf366b351f7ffc855a980fc7d0b8607de743507f7d993874ad4292e07dee0708e9fdec08de8e5a5ef7984ddd51a818aaa7ef98479f002f26b2556b74431537b43b20e30036f3041094d0bdac138015a7da5e0a5f", 0xb8}], 0x7, &(0x7f0000000840)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @local, @private=0xa010101}}}, @ip_retopts={{0x98, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0xb7, 0x0, 0x9, [0x1, 0x8]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x1b, 0xb, [@rand_addr=0x64010100, @broadcast, @remote, @multicast1, @empty, @loopback]}, @timestamp_prespec={0x44, 0x34, 0x54, 0x3, 0xc, [{@private=0xa010101, 0x1}, {@multicast1, 0x9}, {@broadcast, 0x6}, {@multicast1, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@rand_addr=0x64010101, 0x7bcac825}]}, @generic={0x7, 0xf, "47ab738e55e7e32332724e6566"}, @timestamp={0x44, 0x8, 0x3b, 0x0, 0x3, [0x7fffffff]}, @end, @cipso={0x86, 0x11, 0x3, [{0x6, 0x5, "20cb3e"}, {0x6, 0x6, "d2db9c5b"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9c}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @loopback, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0x138}}, {{&(0x7f0000000980)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000000c00)=[{&(0x7f00000009c0)="2dac184158b3be50e3ee1b550228506875930f16358d2df6eb551c3437a5897f9263b3c36b53d191f42c5d31bfceafa374de84fe0d70f62ec16d5a6cc953", 0x3e}, {&(0x7f0000000a00)="4cd8f75c4b24dfbf613eed10f79db20f027fda884a24737b8ac5e0000472ec492576ef724c759b285812e001b79dc1107fc4ac78206edb1524eae9ca9826226852043d11f87ee4dfdbdd798417aae7c3c262085546746cbdfdabc2f1d15a8430b29c7d1537780d61d65ce611070bc9fec08b012e9d28607b7aea2d6a917c58af7d9a3c2d8d9e07d88cc1367826ba2765108c4cc0e0631a8db87c717b36c70fe4915babfa995685a99478226db2fcdefa6d2628021dfcb294e729458fe4c0ffd309884bc697e08c82ece515c49fd386453696162e", 0xd4}, {&(0x7f0000000b00)="ab42e5b3a3e07af980203bffae7d2c2d26110771a0ace99eb6479ed3a76c89c49604c12eee6be22fb91cb8e3096d89d0558c15bf2b44264da0c8646e25d34e945fa65552e6b95bd490c8d57d96", 0x4d}, {&(0x7f0000000b80)="63e48c254899e806a128339e8c08e2383bfa98ae0d63be259ef95e020e249e2a7d509c788a8c1896586fc030408e768082128aad2cdc3a433a5ca542f4d09c5e15da2c017821f10a3e1d3292efdc8f0e23d2db3cd4", 0x55}], 0x4, &(0x7f0000000c40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x18}}], 0x2, 0x8000) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r9 = socket$packet(0x11, 0x2, 0x300) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000100)={r11, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000180)={r8, 0x1, 0x6, @multicast}, 0x10) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x16, 0x5, 0x0, 0x0, 0x7, 0x40020000, r8}) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x3f, &(0x7f0000000040)=0x5, 0x4) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r6, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 12:06:04 executing program 7: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000080)=""/72) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000000)=""/92) 12:06:04 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x200000000, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x28}, &(0x7f00000000c0)=""/110, 0x6e, &(0x7f0000000140)=""/36, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x58) fchmod(r0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 12:06:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:06:04 executing program 7: msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/79) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000000)=""/2) 12:06:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x2000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:06:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x9000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:06:04 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r7, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000180)={r4, 0x1, 0x6, @multicast}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x1, 0x1, 0x5, 0x1, {{0x21, 0x4, 0x1, 0x7, 0x84, 0x68, 0x0, 0x80, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@timestamp_addr={0x44, 0x44, 0x70, 0x1, 0x7, [{@rand_addr=0x64010102, 0x3313897}, {@private=0xa010102, 0x2}, {@loopback, 0x4}, {@rand_addr=0x64010101, 0x8}, {@broadcast, 0x3f}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@private=0xa010102, 0xffffffff}, {@empty, 0x554d}]}, @ssrr={0x89, 0x27, 0x1b, [@remote, @private=0xa010100, @empty, @loopback, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @local, @multicast2]}, @ra={0x94, 0x4}, @end]}}}}}) r9 = socket$packet(0x11, 0x2, 0x300) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000100)={r11, 0x1, 0x6, @multicast}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6}}, &(0x7f0000000640)=0xe8) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1010100}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xf0, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xa5aeebdd98313ddb}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0xc050}, 0x400a801) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/79) 12:06:04 executing program 6: syz_mount_image$msdos(&(0x7f0000018340), &(0x7f0000018380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@fat=@dmask={'dmask', 0x3d, 0xfff}}, {@nodots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@codepage={'codepage', 0x3d, '862'}}]}) [ 1182.678597] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1182.709810] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 12:06:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x3000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) [ 1182.758720] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1182.794223] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1182.799939] No source specified [ 1182.806066] No source specified 12:06:04 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r0, r1, 0xb) 12:06:05 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x2272862e, 0x7b61}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x40, 0x80, 0x5, 0x2, 0x0, 0x9, 0x10140, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000000), 0x6}, 0x200, 0x2, 0xf6e1, 0x3, 0x7ff, 0x1000, 0xffff, 0x0, 0x3, 0x0, 0x7}, 0xffffffffffffffff, 0x8, r0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f00000000c0), &(0x7f00000001c0)=0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000180)={r2, 0x1, 0x6, @multicast}, 0x10) 12:06:05 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = accept4(r0, &(0x7f0000000240)=@x25, &(0x7f00000002c0)=0x80, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) sendmmsg$inet(r3, &(0x7f0000000c80)=[{{&(0x7f0000000300)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000340)}, {&(0x7f0000000380)="7cc97c9f1878d410ac90fabdf85910283489d2027f1f77f70431c4c099581fa8f05b0291c2de3f7f12ad1cf709", 0x2d}, {&(0x7f00000003c0)="12537a292a90afb07ffc3e95d830f0396428fdafa92e82cced9b1979ec8a6ab6510fba1fa34a69d120de4f6f611af6220a1805eae85c2ea50cdcf047578f6cb153b5d75d7f9125ca29ad9c8a5345b609ddcac88cdf2576cb0546bfac416c5bc84899c7c8bcd23dc843102c10379525a7df97fe6c434de8498692a1ad33bbc30e19083ca0638a017b6c5b13f843575fdd3c2ec42f45818f5cdd21809acd9bb79ccae8137657c3d10fdbf563ae61befef17e7abc667ed287b26c7c8989622f655a7eef9f3eb22f9a03c751814279b14e164f962bc88d", 0xd5}, {&(0x7f00000004c0)="a9e69fc8c0fe807e79fddece3d5058984abe3be4108e5a5e8f28a03ffdf351066b22fea30abf08b12b135e2de0ffd33983b6f530e746a487f6ad8e290d2d259e3cf23d87e34f1ea593743f463d4d84cc67d1797bb7faf7426243a2c636d8f9b4986b9aa23fc0cc037da0bf642ed79568123a8a55c5dca5ddd69b144ba52b23f4b08a483150263b9063773f2b6a9d3ea68bf14b6dbbe9cbb4178e1871c0a49b23a3e7a1bad8a0f155f7edc7eb52", 0xad}, {&(0x7f0000000580)="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", 0xfb}, {&(0x7f0000000680)="75bc02f35602d4cfc2fc6efdd7af4781cc03d756b8dffd5da1f28c76da441111bca2ba4c2ddb63a34a59", 0x2a}, {&(0x7f00000006c0)="fa14f257eea10e9a00de6816c79ebe5f0b1fc9dc0ed00d80f5241b0df3268e3c8ccbd9bbf70670c5935884b4421c906ba3e97413271b614f4f075cf53295e454de8a0af8bdb31c4999641e3bdbff18dac3c2ec2747c45a50645630f3fb368133922286eebf366b351f7ffc855a980fc7d0b8607de743507f7d993874ad4292e07dee0708e9fdec08de8e5a5ef7984ddd51a818aaa7ef98479f002f26b2556b74431537b43b20e30036f3041094d0bdac138015a7da5e0a5f", 0xb8}], 0x7, &(0x7f0000000840)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @local, @private=0xa010101}}}, @ip_retopts={{0x98, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0xb7, 0x0, 0x9, [0x1, 0x8]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x1b, 0xb, [@rand_addr=0x64010100, @broadcast, @remote, @multicast1, @empty, @loopback]}, @timestamp_prespec={0x44, 0x34, 0x54, 0x3, 0xc, [{@private=0xa010101, 0x1}, {@multicast1, 0x9}, {@broadcast, 0x6}, {@multicast1, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@rand_addr=0x64010101, 0x7bcac825}]}, @generic={0x7, 0xf, "47ab738e55e7e32332724e6566"}, @timestamp={0x44, 0x8, 0x3b, 0x0, 0x3, [0x7fffffff]}, @end, @cipso={0x86, 0x11, 0x3, [{0x6, 0x5, "20cb3e"}, {0x6, 0x6, "d2db9c5b"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9c}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @loopback, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0x138}}, {{&(0x7f0000000980)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000000c00)=[{&(0x7f00000009c0)="2dac184158b3be50e3ee1b550228506875930f16358d2df6eb551c3437a5897f9263b3c36b53d191f42c5d31bfceafa374de84fe0d70f62ec16d5a6cc953", 0x3e}, {&(0x7f0000000a00)="4cd8f75c4b24dfbf613eed10f79db20f027fda884a24737b8ac5e0000472ec492576ef724c759b285812e001b79dc1107fc4ac78206edb1524eae9ca9826226852043d11f87ee4dfdbdd798417aae7c3c262085546746cbdfdabc2f1d15a8430b29c7d1537780d61d65ce611070bc9fec08b012e9d28607b7aea2d6a917c58af7d9a3c2d8d9e07d88cc1367826ba2765108c4cc0e0631a8db87c717b36c70fe4915babfa995685a99478226db2fcdefa6d2628021dfcb294e729458fe4c0ffd309884bc697e08c82ece515c49fd386453696162e", 0xd4}, {&(0x7f0000000b00)="ab42e5b3a3e07af980203bffae7d2c2d26110771a0ace99eb6479ed3a76c89c49604c12eee6be22fb91cb8e3096d89d0558c15bf2b44264da0c8646e25d34e945fa65552e6b95bd490c8d57d96", 0x4d}, {&(0x7f0000000b80)="63e48c254899e806a128339e8c08e2383bfa98ae0d63be259ef95e020e249e2a7d509c788a8c1896586fc030408e768082128aad2cdc3a433a5ca542f4d09c5e15da2c017821f10a3e1d3292efdc8f0e23d2db3cd4", 0x55}], 0x4, &(0x7f0000000c40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x18}}], 0x2, 0x8000) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r9 = socket$packet(0x11, 0x2, 0x300) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000100)={r11, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000180)={r8, 0x1, 0x6, @multicast}, 0x10) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x16, 0x5, 0x0, 0x0, 0x7, 0x40020000, r8}) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x3f, &(0x7f0000000040)=0x5, 0x4) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r6, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 12:06:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c00f0ff", @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) [ 1183.016929] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 1183.039034] mac80211_hwsim hwsim11 wlan1: left promiscuous mode 12:06:19 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clone3(&(0x7f0000005880)={0x165086780, 0x0, 0x0, 0x0, {0x15}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r0, r1, 0xb) 12:06:19 executing program 1: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}, {@version_9p2000}]}}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) openat$cgroup_ro(r5, &(0x7f0000000500)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setregid(r6, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000380), 0x2080, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}, {@access_any}, {@afid={'afid', 0x3d, 0x8}}, {@loose}, {@access_user}, {@dfltgid={'dfltgid', 0x3d, r6}}], [{@pcr={'pcr', 0x3d, 0x2d}}, {@appraise}, {@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@seclabel}]}}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r7, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x96f0}]}, 0x4c}}, 0x805) 12:06:19 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/raw6\x00') pread64(r5, &(0x7f0000000140)=""/217, 0xd9, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20001280}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x98, 0x2, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x579}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x19}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20008800}, 0x80) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 12:06:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x4000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:06:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0xf000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:06:19 executing program 6: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x8000) r2 = socket(0x2c, 0x2, 0x200) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f00000004c0)={{'\x00', 0x1}, {0x2}, 0x14, 0x0, 0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)="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", 0x1d0, 0x0, &(0x7f0000000340)={0x2, 0x106, {0x0, 0xc, 0x45, "08d9b4911463f264e91521dc76264926aceeab84030d6cfbeaf5268c557874f73da775fd9689fda76f600c4338e16c415c28bd611b0e4ebcb7d320539e5a70379b7d6e8b39", 0xb4, "7c1e73e9178f3ef029486f1e778908a78cdeda6a57dcd43e93f5a341212f3359a48221c74dbf86361d3b61c4a30206a3b457dc6b870edf5c1671c6a8e23d92ffd0ad2950dafd8442789c1ece7524172842b8cccdc38c2bb1382cc7258bdf8814976388bf5f1a5774d8f5d113ee859274133feba1c1603786b6b06228681426102fdfe2b6a0c7e71dbdc9d8107c895ae9bfae705c8d8e5950419f0a3a80ccceef759d12a33d42ba8ce200f50b21ae78711085f785"}, 0x4b, "37a0c7e7f6f1fe1677318d24fca448014ea6afd6891687c1830b3f0d8c4d1110f6d3e46dea6d45434e57d2fcf9ad41b59eab251a6d2455ba2a52d9ad89a2e1b30059833fc35bca8deec729"}, 0x15d}) 12:06:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c000200", @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:06:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c000300", @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:06:19 executing program 7: r0 = msgget(0x0, 0x252) msgrcv(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007dba4e57a264eaaf00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007a68af5fe28f7ce55e3a8b5180caf830ccd9620d512919cb8374e7df9fed3a88728eafcb902d1e6b2aaba3ef98e4531f7e481fb589de4d633b1ba956aaa7d607a649c49bdfc7f309a8f0e886d2db9e29598a14ece665bba13f3fa9031dd25f2ebf1c837615114f6e4957b6514b8b97417622c7775175fc73df9934465744eff0d30e7e8f15d4ae864d615061c8c231d9d5d97cae92acd1c36366b87a838152e31eea8817d77c164bf951e76d62152d4895"], 0x103, 0x3, 0x3000) msgsnd(r0, &(0x7f0000000280)={0x2}, 0x8, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000000)=""/66) 12:06:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c000400", @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0b00000800b7"], 0x2c}}, 0x0) 12:06:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x5000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 12:06:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x9effffff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) VM DIAGNOSIS: 12:11:18 Registers: info registers vcpu 0 RAX=000000000082497b RBX=0000000000000000 RCX=ffffffff84bb7167 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814c6e94 RBP=dffffc0000000000 RSP=ffffffff85a07e00 R8 =0000000000000001 R9 =ffffed100d9c630a R10=ffff88806ce31853 R11=0000000000000001 R12=ffffffff8643d150 R13=1ffffffff0b40fc7 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84bb5e9e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e55da000 00000000 00000000 LDT=0000 fffffe4000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f775df3c010 CR3=000000001dfb0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004185da2380000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000558f47 RBX=0000000000000001 RCX=ffffffff84bb7167 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814c6e94 RBP=dffffc0000000000 RSP=ffff888009717e58 R8 =0000000000000001 R9 =ffffed100d9e630a R10=ffff88806cf31853 R11=0000000000000001 R12=ffffffff8643d150 R13=1ffff110012e2fd2 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84bb5e9e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e56da000 00000000 00000000 LDT=0000 fffffe3d00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000559c2010a618 CR3=000000001dfb0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00e301fe016c6c6f502e726567616e61 XMM02=7a7a75662063657865090a0100010101 XMM03=650d0065676169727420636578650b00 XMM04=78651100657a696d696e696d20636578 XMM05=00737472617473657220726f74756365 XMM06=20636578650a006e6567206365786508 XMM07=746e696820636578650a006873616d73 XMM08=6169727420636578650b007a7a756620 XMM09=7a696d696e696d20636578650d006567 XMM10=7473657220726f747563657865110065 XMM11=0a006e65672063657865080073747261 XMM12=636578650a006873616d732063657865 XMM13=65657320636578650a0073746e696820 XMM14=0e006c61746f7420636578650a007364 XMM15=00006574616469646e61632063657865