netlink socket, switching to perfect channel medium 03:39:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x1c, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x1c}], 0x1}, 0x0) 03:39:09 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) 03:39:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) r3 = creat(&(0x7f0000000040)='./cgroup/pids.max\x00', 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8001) syz_80211_inject_frame(&(0x7f0000000600)=@device_b, &(0x7f0000000640)=@mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x0, 0x2}}, 0x32, @val={0x8c, 0x10, {0xd0, "c445cd222a99", @short="551f8a6b6d27a09f"}}}, 0x2c) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f00000005c0)={&(0x7f0000000000), 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r5, 0x4, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008010) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:09 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) 03:39:09 executing program 6: syz_mount_image$tmpfs(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000002c0)={[{@none}, {@name={'name', 0x3d, 'user.incfs.metadata\x00'}}]}) 03:39:09 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) 03:39:09 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) flock(r1, 0x2) flock(r0, 0x1) 03:39:09 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000080)}, 0xc01, 0xffffffffffffffff, 0x0, 0x7, 0x0, 0x9, 0x401, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005fb80)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000063e00)={{0x0, 0x100000000, 0x6, 0x4, 0x0, 0x7, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x452}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000066e00)={0x0, 0x0, "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", "08e7c04951dbf169760f1ab8ea2a445e29a64174557575bd04e476e1c7e4c1b1923e65eb5236cdb7c1f22ba02f354b568981192358ecd29e445b0c58c5d78a946883cc2dd4d75331b5af2de03fb728c976b9be5a19c9c87438874bc8198426df3a8919c63182b9a653b02b9d78c5668e45bd9c75fffcae4f0eb74f3bd76d9af45c22446a122f213815f625668ce43c7204594a9d2e6f0d2e486a643d5fbed67668643dfb31a6ba07cb73e0ac8dc21ecd884f3c73e0bb711c76eb064b08b05a26a799c6612fda55ac7fb3b560104b5c8466c07e5a9c8fa69e4374260c94f171eb696a200074f4daf5507e07b8df10bb914a9cea920df321c1dd115435618019c0aeff7b70cc68f1ec7358802cd8e6cda843993a819dc9d19b8bb11c4e122ad1c0a467bbf83699470dec51a146a4915e318762991fd2f9b7cb0c6a4177cd5acb5f3ae8c7efce7df73234447d5798d3224f037bd51811a97cd84247709f02f5b40d5f4da8a3935d9cf85f14a8e43d38d91009c5be30d99e63d7471941c606eb519ea55fd25b1a86bd3b99b85cb9e88b715f32d54cd73adc1598c306835227c4e11be85f172ea7a87fc4b8850c8cb985786651f96a8f2d80b4a318092596d3d5144f164162a614d12fbf560a0698266147e886046e9472c2e9a63eb72d413ac4eb8da462d416e113521916d68677f4013ff87beabce4160dbae05c69bf7f0c64b84d1df5fb606a9acd25fc60f40739e748a864602a25a678fc5146571b3f3dbf7d6ad25c6501657cb7875819421c72b0b0a29b4cdc5c4670d4720ad4393322018abca2f552432255425ca7098888c8ba9ce7a7031acaf9ce4a87094589754865082b37c4c426f30312f2e85d005bc94654ddb3a1c1fd19091aa0ddd6f570c8feea6b4e6eb11067a75624c972ba71fc5142da1fbe832a48ec240196a5102290731fdae3ff0321ae8d0dca48f1e6c309508d58d4a7b931f7701db74c044e2610df65b3f06abf9b11e626085343a69e5c3a645a0cb3b761a2c2203e77a545de06c055a40acb6f80c493faff9c631eb9267737efe7eeff0385ee419b847b13e535ca77a75db8e6ed8ad01485533c154d422a32409c5a69dc1bdbb6441103abfdb7930ef0412bc25900fb257c04fbb72c8b9943e32b50b601910c1bfafc7e25d60ee39c1a0cbc4d5150206625f0118d1944dd92d5598c885f374416206dfc3eea09e27b4be62373e632eabbbddf8a71615c150e4cc4714561efc59e9ea404ac12869b07f8456f9af897611606f17e1c9a02262f72cee88d830a1f73638e0bea87cbc7b07cc3e7ad51a83f1f594514fda9f6b3c32355b91715cb2b665011b891e9b8bd5deda57c4b4d8e93697dccf5e88b5ee9ef6e79ae9b993a74bd6e21950aad89add809bade0ed1e860febaf6d35e2e697720887a57a3a95dd92cbe051fb6467d0892204efe1da7ab05b3fa209107cd6bae30c8a1c748136e3f732d8f78d2e923567a4981ff007dae4b9b0d4e189cd15efe7c95f5b0c0341be9a26433323df2f07627e845ff679815e42531d082f61ad74ddb1804c9a0635e0b01c28fb091997dfc2ab0ca55ecf2fa046a1380620377d1518ae0ab10491a5f2f3b0115fbcaaf20d980e0a82a73aadea64df6b7e6211ec3363da24422cbe0686cd320da2bb23e9c8de3d168212bb0d84c7b1b6c1794b24168af587fddb1a720f2c7299ece89450ffedffae719df0b18de1d4ead11135a300c9b118e667a6556a8344653c265b18a49553edd2abf0341909987e1db0606ffcb88f8c73d0957bd0d61946007f6eea1885204877d7851376aa375b0ece2bf960b6067c808301417c8bdffff6eb718acd0622133606259f99447c77035172e2387b187fc3861a340cf8912b294f6a292b4a38660643184c816e83ec752ec646927650ed74503ec87567faaace4682ce54ff538d1ebb72a33739054fea4fdd3c4af3cc70a333108ceb1487b162b5fba0be042cc0b6d6a491684ab40fdcc27564964bdab315e2c05b6f9a14975ddbd2f015f504a5e91731c01ce91c3326744f61c2e623c5ef08163f5ef6de917aa019d95bdb3957cf3c3e492dcb0a7b31030e55a1d4aa46c2d7bcfd1b67cc2535a239af63705e080285f11c66daf26c56f5d68d7b9bc24266badc922b5f42792cb63d2ceb0484bdf758fb197dc66a7a85db1eca264aba7bd9f92447d9dbab52d41d69b7df3f806e41355bfa8804589f5e7fa16029c3fdbcfcffa9cceb702695c7be2a0dbfc906b660b0a49033e8980e610c25f1ab33d1dde030d8e5df5d4ee5e7e986a6cfb48b40df4ecaef13a519f3bb4b1d3db1618960019fe2569a6a01fcdd18d202a3ff8bec60ab1e05369be9793b2fdbdb98775377ccba28532b8e8df723abe17cd704c02ab98f741e9dc2a71cc6cf8957ddd785514fef4d22702902074c301c2f247df2d914ae27c675f02ee4c1b22d3ef209d5fa6c50e2313cddec5a27ebf50bfdbfef3cee0d759751ead34a97478e6d033da49034b08c77d998d895177aef9f5ba8b2445521c86169ed1603f277ea43b7d08c829911cb0a45e05057532a2c0eb815f93c19dabab229aeb68c6419c06a81804876d5e78ac68ddc7984c5b98846058da1c068fd23c2d673ee4456381e16c64f457a86f62c75665d3e988dcff64e86cb7c59b575545f9006a84da413d2e75cd6310bc3d090477ae3a500ef2cd5ea33e374cf76373f8bab16d1155e400b1a7dbc6f5f727aef1afdc7c712c895490725c0ed69bae4f6a9c1bf7b0315e9e283f337e2447ae857e986886d7563499dde473164940cb292845b8578fc57197c5712e0eea60c352b12db0da1919abd52db331eca8cc100e25a7be0edb91cad408b57c863052fae58e531668221166a47946207e39db76670a960f5dc0f1966dcb2857f6ea14c6b511758388e90b40c41361ef1384bced75ae8c5406b915a617fdde3625cbc03d6c7d619f5d3ec2eadb923eadf985afcc703f1917038d08a9c3703d1c7c0188b458f5f2218fd1afa8365091b5afd4cc3821f9a4bc0c7b4739c9a1c9941475642e9bd2e2b4b698c6b1ddba226ed3472312fdb284bc3830380809cffbe219061bf2ff42afbd1aca8c3885dcae38462c000171b12f385d6282efe96f43af79ecd9a93cac60710a562ec9c90a2388e78c18345d77b9e908c28b080774f3fc0a16633ff193cee6d825605392c1056aedd4f511a3a61aec486ecc17698eb5296869746e9641dd8f9e801550e2a279017e31c9493bce6b7d88358e0afb2257bf769238d0488e0c2730d283f358601207858834f7421d707871d4042d14b434ff4eb94acb10887c6a19a938d5f6d6d9dd29f3ab9896e29c0ed306b33bd1acc619f7fcd0b894edd9a7a15505b7a2b82ac940c154a43a6e94c382cef82d4d71cd9a7dd965e9e9c658aac182aeeafab4232928d51210d9be6dce1c7cda62b785d327f541a59cbf658f4c55848bd18c6927d6ff2095ee2f2daaeea15f2e0e1af240a28fef9c63c9c7160222e53f8254d2dbfb7414432fee36adcbf6e5986bf83ed88798a4ca2238d426f43916b55866abb32a490279d737ab443cf72d0961053a9ccb5fe5fca3035282975e74f821a7dbeac3ff0318c3d9325dd540cfdfb47822d5f825c6df4fc7d336f255de6927e7e0956d08b65e61f88e4664b6f5431ab9ca8f20f1e54c87a870ce4b928b80d95bc8e521a81ac959f0b8478a46ab730cdeab535f0e7bee9127e9f90431e56d57b418cd4452d37338c22afd376792eb7382ca1021b354880ab5b0f21cac8d0fbd41af60e01f3ac6db98761a5e63d728c5e8d9ea48f5e8127f8e3b5dca0cdf67b6f4f633ccaca50e15dcd87c92d95e2e4e41ca85a4d787d4eee4214e39bf5008645eaca7f0775c27be5c6d84237e6a1f08241d67ef70d943de02d1ea6363bc9675261aacaccebcb7c7d4bd915e24721fbe28618ecc3165f47919e7695f0784668f3db372e2f760e66d54338be0fae064e290eb8b64afd9ad54703aa3672b6e99a8be9caabd843efb3cc681bd3fb4e0e6719cdadd9f846cf650f5c7741f891749d6dcbe357cf5e6f7ef2dc35d16ba5ea3ea6810f14d8a1c895f9acd48e50b5bfb55af57add290d7c42a5f9267813ac0ef69790cd743d78aa3bbc6cf522d09eb8644d394d295aae84ccb27262864f1b0bb237175aeae9a6a05d76315e134079bad1f9cc1b6133ca181a9612a4a30d1c01a3962ba0f2bc97d5ea203b5801de7de16d0076b94c5662c2c0e5d78e4d108b87d55d62c4625c9dd461084b51746a52c5419bc47478fc583ea1c9c6f9f07e03e1e4efbf942a2ed7459762c6309e7e3af43ac2850378eedc65324a6c3d50abf359380817d5602d294c3af356b35aec53962b8b46be6ff79f3099b8b1e05994cc4da91e7972342614e603311ec75f75669394d1d4f0426a2fd432efb39036c4c93794e1078899561f189fb42b05abb8bb27f4bc653d3f151a2df6392f8a388b4ea0f74778450d39970268cfd9684bc60a3e8d6490f79e0fa36ec9b4a0d3309234d063f0e62b4c47bf670f43cf672bbf0728a16eb569656c963c3f58faa9f27e07ba88bcaef20c48f2a32a8935b2f7b153e18cf512fff62fe3cb521cd01ece7b0d351989b188d481aef36e2be5094905f1775bf04370d66608fb8de869f147b1ecef23cf2a7903c77d8037858fa3aace647f512442ec6ee47fb89354ea9f6e34511fd8476adf40f16c1b53745f5fd955bc79af22c296dcd5ffa52201dba8fb418e54286d61b5a57d8bcd20b6c75816955e33900ac9343f1ff191634f1a24b9969752761afab1c358b96775d1564990bf0b222b601825b81f5485fde2ece91559bef940f3651b783cafff7509d355fcff64e93ce102141d41194aded0dbbd5389d471585b127affe4cf086e163be2dbd206c23e2fd44dfa9aa73e69eb89a0d2c19935cf227dda4217253c35ec3d78fab82dcd057e378c2b19c5454913bfbdd693c04a791db2973d6eda1f87cf01f2ff5d33617252c6ead373166ba5e08e7b486401a3ae634b3e5a7d065671cf467d41c16cbed8ffda9bbccddf88165a2a22a0b6c018158cd545a906ba59e8debcfc6ddc25be205f00b735a3c42d012af29c7054dd81c701e734f36aba50ad7d5340135e16cffffcd1daa20dac2d96f7a0c7c62a7743134faee363165588f4298fa892f49ac214fb1e73a0afcdfba1e21eb6f58408433a43357842d15b9f8954a647c578efea7497a1c503076d49a826ea2cfac93d1e07a663464a32372c8bfda83b22ba1d69532d4b64e51fc901f821b672a79509abb335b86d9419b346e284f135598de98de2245fbcef6c352b65556665f4496925047dc334b5b22c3e05228bfb73d0d24dbf1a155096d0dda3d428a24285242da762687e132292da1"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000068e00)={{0x0, 0x8000, 0x0, 0x6, 0x0, 0x7, 0x81, 0x180000, 0x7, 0x0, 0x0, 0x8, 0xffffffff80000000}, 0x8, [0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:39:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) nanosleep(&(0x7f0000000000)={0x77359400}, 0x0) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:09 executing program 1: r0 = fsopen(&(0x7f00000003c0)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, 0x0, 0x0, 0xffffffffffffffff) 03:39:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0xff0e) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 786.098129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:10 executing program 6: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0xd4000a8b) creat(&(0x7f00000003c0)='./file0\x00', 0x0) unlink(&(0x7f0000000240)='./file0\x00') inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) read(r0, &(0x7f00000000c0)=""/199, 0xc7) 03:39:10 executing program 1: keyctl$chown(0x2, 0x0, 0x0, 0xee01) [ 786.237883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:10 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) [ 786.304683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:10 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) 03:39:10 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @long}, 0x7) 03:39:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x30000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:10 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000d00)={0x34, r1, 0x5, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x34}}, 0x0) 03:39:10 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000080)}, 0xc01, 0xffffffffffffffff, 0x0, 0x7, 0x0, 0x9, 0x401, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005fb80)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000063e00)={{0x0, 0x100000000, 0x6, 0x4, 0x0, 0x7, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x452}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000066e00)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000068e00)={{0x0, 0x8000, 0x0, 0x6, 0x0, 0x7, 0x81, 0x180000, 0x7, 0x0, 0x0, 0x8, 0xffffffff80000000}, 0x8, [0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:39:10 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$P9_RREAD(r0, &(0x7f0000000000)=ANY=[], 0x23) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="a0", 0x1}, {&(0x7f0000000300)="ca", 0x1}], 0x2) 03:39:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="600000001d5e9ec65d5913281f4d58a88017d070456247c7408d863e66f90d8a6b39e8370335", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="1c00e700b41b72a473966430a99d04f31de7dc3fbbd7cc7f801e305b1c00e700fb1942ac0d062deba51719aa8a4e973c4bc01b05650151da0a00e8000802110000010000"], 0x60}}, 0x8010) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:10 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) flock(r1, 0x2) flock(r0, 0x1) 03:39:10 executing program 7: r0 = semget$private(0x0, 0x4, 0x0) semop(r0, &(0x7f0000000000)=[{0x0, 0x1}, {0x0, 0xd794}], 0x2) semop(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x1000}, {0x1, 0x803}, {0x1}], 0x3) semop(r0, &(0x7f0000000080)=[{0x1, 0x4}], 0x1) [ 787.178972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:11 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x11}) [ 787.250960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:11 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$P9_RREAD(r0, &(0x7f0000000000)=ANY=[], 0x23) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="a0", 0x1}, {&(0x7f0000000300)="ca", 0x1}], 0x2) [ 787.326632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:11 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000001a00f9"], 0x34}], 0x1}, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/220, 0xdc}], 0x1000000000000364) 03:39:11 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, 0x0) 03:39:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) r3 = syz_open_dev$vcsa(&(0x7f0000000040), 0xfff, 0x18102) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_TX_TS(r4, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x54, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x8}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4000) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r5, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x28, r5, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x6}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x9da}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040084}, 0x20000000) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000540)=@data_frame={@qos_ht={{{@type11={{0x0, 0x2, 0xc}, {0x2}, @broadcast, @device_a, @device_b, {0xa, 0x7}, @device_b}, {0x3, 0x0, 0x0, 0x0, 0x3}}, {@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1}, {0x3}, @device_a, @device_a, @random="d99da496d9e7", {0x8, 0x1f}}, {0xa, 0x1, 0x0, 0x1, 0x31}}}, @ver_80211n={0x0, 0x0, 0x3, 0x1, 0x0, 0x1}}, @random="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"}, 0x5ea) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:11 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) copy_file_range(r0, 0x0, r0, 0x0, 0x0, 0x0) 03:39:11 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$P9_RREAD(r0, &(0x7f0000000000)=ANY=[], 0x23) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="a0", 0x1}, {&(0x7f0000000300)="ca", 0x1}], 0x2) 03:39:11 executing program 7: move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0xfffffffffffffffc, 0x50) 03:39:11 executing program 1: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) 03:39:11 executing program 6: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$tmpfs(0x0, &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)) 03:39:11 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x9}, 0x1c) 03:39:11 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18}, 0x18}}, 0x0) 03:39:11 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$P9_RREAD(r0, &(0x7f0000000000)=ANY=[], 0x23) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="a0", 0x1}, {&(0x7f0000000300)="ca", 0x1}], 0x2) 03:39:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x80000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@mgmt_frame=@action_no_ack={@wo_ht={{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1}, {0x5299}, @device_a, @device_b, @from_mac=@broadcast, {0xd, 0x81}}, @sa_query_req={0x8, 0x0, 0xd1}}, 0x1c) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:11 executing program 3: mincore(&(0x7f0000ff2000/0x4000)=nil, 0x4000, 0xfffffffffffffffc) [ 788.132281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:12 executing program 5: r0 = memfd_create(&(0x7f0000000340)='\x02\xce\x16Td\xa8\x98\x86\xb1:\x8f\xc5\x88{\xbd\xb4\xc2\xb1\x9b\x84\x97R\xcc\xdb<\x01\xfa\x91\x85\xa0\x81\xa9F0!/\x89\xacX\xbd\xcd\x12R|lTn\xac-\xfd\x8b\n\x1a\xbc\xf0^B6\xb6`[/\xafE\xdaYz\xd6\xc7\xbc!\xe5\x89\xc8^\x06np\xc6\xe7\x1d\xe4\xbe\xcaa}\x1c\x12\xf9\xd8\xefw\xe1\xcb\x85\xdb?^\x8f\f\nD\xf2\x1f\x11\xaa\x90>N\xb7\x86\x15\x03=\xcc\xbe\x0f\x0f\x14\x84\xde:;\x0f\xb5\xf1\x86\xf2{y\xe0t\xa2\xe9\x01\x00\x00\x00\x8e:^v\xc9\x8d\xd7E\xb4\vw\xbe\\\x11J\xf4\xae\xc6\x88F\x9c\xaflM\x1dSHjH\xd6\x8d\xa6\xbd\x96\xe4SR\xe6\x118L*\x9b\xb2\tbg\xad\x0fRu\xeb\xe4{GO\xa5M\x80-Y\xc6\x1f%\xb8i|\x86\xa9Zm+\x9fe~\x8a\xe7\xca\f\xad?\xa0t\x13_Rq\x1f\xc6\xd9\x1d#\x8a8q\x1e#c\x8c\x193\xab\xdbE\xe1\xc8d=\xe5\r\xe6\x9a\xe5zc-\f\xe5#\xa2v\x1eY\xf0\xe3\x1c*h\xdbq\x92\xf8a6\x99\x02\xc9}\x14\xfb\x03\xce\xb34\x95/\x18\xacJs0\x9f\x9b>\xae\a2\x01\xa7\x95\xbd\xf2\x99w\x11G\x1c\xd2\xbc\xf0E\x86\xca\x87\xefv\x8e\xad\xb8\xc7u\xc2z\x85\xc1\xd5R\x82\v\x1b\xea\x8f\xad\xc1\x02\x8a$\xd1T\xce\xa6\xa2m\x18K\xd5-\x03\xa0\xeeF^F\vJLx\xdc\xc8\b\xb7\xa1j2l\x8fQ\xc1\x89\xb8\xbef\xc6\x90\r\xae\xd4S\x8f\x7f\xe2[\x1cs\xab&\xa3\x81B<\xc5]n\xfc', 0x6) lseek(r0, 0x0, 0x2) 03:39:12 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) 03:39:12 executing program 1: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') setns(r0, 0x40000000) 03:39:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x45, 0x0, &(0x7f0000007dc0)) 03:39:12 executing program 2: r0 = getpgrp(0x0) r1 = gettid() r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x40001, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xaa80) tgkill(r0, r1, 0xb) 03:39:12 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000640), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x1c}}, 0x0) 03:39:12 executing program 6: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$tmpfs(0x0, &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)) 03:39:12 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000280)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) sendmsg(r0, &(0x7f00000007c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0xc, 0x0}, 0x0) 03:39:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0xf0ffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:12 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) 03:39:12 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCINQ(r0, 0x541b, 0xfffffffffffffffc) 03:39:12 executing program 6: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$tmpfs(0x0, &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)) 03:39:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 788.648356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 788.711026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 788.768980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:13 executing program 6: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$tmpfs(0x0, &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)) 03:39:13 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) 03:39:13 executing program 5: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f00000014c0)=[{0x0, 0xcd6d}], 0x1, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) semctl$GETNCNT(r0, 0x0, 0xe, 0x0) 03:39:13 executing program 2: r0 = getpgrp(0x0) r1 = gettid() r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x40001, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xaa80) tgkill(r0, r1, 0xb) 03:39:13 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000003c0)="8c3a", 0x2}], 0x1) splice(r0, 0x0, r2, 0x0, 0x1, 0x0) 03:39:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x1000000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:13 executing program 0: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000540), 0x2000, 0x0) ioctl$HIDIOCGREPORTINFO(r0, 0xc00c4809, &(0x7f0000000580)={0x3, 0x1, 0x100}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) r3 = creat(&(0x7f0000000040)='./cgroup/pids.max\x00', 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8001) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r5, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="5b078f576cd83609e6122db000000008021d000001080211000000080211"], 0x1e) semtimedop(0xffffffffffffffff, &(0x7f0000000000)=[{0x3, 0x3f, 0x1000}, {0x2, 0x1b}, {0x0, 0xe4, 0x2800}, {0x4, 0x3ff, 0x1800}, {0x2, 0x7}, {0x0, 0x1, 0x1000}, {0x2, 0x3, 0x800}, {0x1, 0x1}, {0x3, 0x81, 0x1800}], 0x9, &(0x7f0000000040)={0x77359400}) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:13 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xb56000}}]}) [ 789.247092] No source specified [ 789.253821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 789.258411] No source specified [ 789.276238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:13 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f00000003c0)=@raw={0x8, 0x0, {"9a444bd1d7"}}, &(0x7f0000000200), 0x0) 03:39:13 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) 03:39:13 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000540)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "7437d7", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 03:39:13 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) writev(r0, &(0x7f00000025c0)=[{&(0x7f0000000480)="8b68f60e9b3942", 0x7}], 0x1) 03:39:13 executing program 2: r0 = getpgrp(0x0) r1 = gettid() r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x40001, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xaa80) tgkill(r0, r1, 0xb) 03:39:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f00000007c0)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_a, @device_a, @random="278fdb0deda1"}, 0x0, @random=0x5, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @val={0x4, 0x6, {0x3f, 0x8, 0x1, 0x4000}}, @void, @val={0x2d, 0x1a, {0x800, 0x0, 0x1, 0x0, {0x7fffffff, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3}, 0x800, 0x9, 0x2}}, @void, @void}, 0x5a) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x3, 0x2}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={r5, 0x3, 0x2}, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xf8, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x5}, 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) r6 = creat(&(0x7f0000000040)='./cgroup/pids.max\x00', 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x8001) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x54, r1, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0xb}}}}, [@NL80211_ATTR_HE_OBSS_PD={0x24, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0xe}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x11}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0xf}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x2004c004) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000a40)=@mgmt_frame=@assoc_resp={@with_ht={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x40}, @broadcast, @broadcast, @initial, {0x9, 0x14d}}, @ver_80211n={0x0, 0x6, 0x1, 0x2, 0x0, 0x1, 0x1}}, 0xa004, 0x49, @random=0xffff, @void, @val={0x2d, 0x1a, {0x80, 0x0, 0x2, 0x0, {0xfffffffffffffffe, 0x1bf, 0x0, 0x1f, 0x0, 0x1, 0x1, 0x3}, 0x300, 0x2, 0x6}}, [{0xdd, 0xcb, "3e87c1837aac643da03b7a278e96f93f3df8c90a39bdd6e490ac23af9f4d7d313f95eb0564f4ffba4b82b9d4a928268e02b26505d9f3cbb1d835fa545a2309db60df64ff5d276277c22495bf09a2c38a4da0157f92d6414291c0c42eac4651f71a87802035d306665a9fa9c597cf18b63318084402a76c2b6a848a89a7386c709ebaacde8135d4b7102fe53b8876dee6d436e2beefbe54827c04d3426fee1ae07628c3cc2b60b25418b38bf4fb0dad1ca1a6ad901c39b8e047ee02785e2db67a12d110315f23f1eaab0e48"}, {0xdd, 0x95, "d1cfc96516d368ee6857947726671c6b67b1310a348535b6815cd53de970f0d1da31159a0a8386fb3a1aaff29086744e86736c13d201721f7711560c1c2e36d5268b17988154307bd5076c710732de50bf701e7b2ab324c2c1c9b7fa1b4b724e1fc9b2b3e9c295b499d903f27382e803bb43a5112f4029eff0952247ffb4fba80188f4ca1fc8e962c286227e5b263115729ea9c2b4"}, {0xdd, 0x79, "c9b79a7f5ce8ad7c982b7dbf1b6c75a21fa528a8539f896c8dd7151c3901db077583b9ff47c0c79df537b6824a13070fd6b49b7f369345bc9a9d17744e6a74a4252be5cbdd0e4d30af90c2c657ae21c1bfd5a3c0174d1b336b5514bd75920afef449dff99a3072367bd531938ea5658b68f4201bf9fb769120"}, {0xdd, 0xf7, "e6338bbe2bac41372fe60226d234239301f232cd834ddbbc331ceab73a85b16acfc25814e3bf0092fa52339f5d1e7d0e6562dcd085e95f0705ae36ef83a723ea42b0ee9def2c8f813ac7272ac174232485fc7230ce160073972640d4071ea72110f85c0179013bb78b03db6390587045dbc080e54027babcafa66d9e723f0fb64d99744ea062c19da6e9bc2a55af9672cdee59fc635964be2ffc352aaed7c069c57f61755d6b27e27cfdc8b0fb90897a2213f4a6b84db9b454a1e3d07955171a82a73a6a8699d9313e40350946e83e2cf4e040b5e7b6ecaaf98a559f27ca1843e68c82282819754d86af1c33ea9f6d1d02773a762a5ece"}, {0xdd, 0xef, "68dfa61a8fde7110db39427824055782725477f4e95d6cd6f1e040a8b015799fd41c06485de65f2d53e4219c0166b12f2a97d3db2b5ffbebfc11f42bae030a5880ea196ff08e40c585cdba30f8a72d56a507be4c0d3abeaa9e57f484a4b6e857338fdbf37f58aabbb2f38ca354e9e387f81a061cb8b1a597f3961c28f3cc3dff5162d7fd6b42464ddff7f79733d6eae57c942a89d8900b7e154a560cd4c9cf84397b9b742bc026f2b01bc61b548009a14a55f4608baa2c5a34fb4e605e9b64640184f3a1a2b8bb4c02e43cdb95b9684f4ae5596e2036e36c0afdf0a91735577056a7a7f0aaf3c81960096d82354892"}, {0xdd, 0x45, "caa58a34b05c2fa2cd51c2c8ed101caa0bffbca71ede7fb0fae45e162a4bdf5e175d9dd9f17920b2eedef75b999d3e0cf28f6938c7e07b160c26738e24c7cf84adc90fb495"}]}, 0x44e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:13 executing program 6: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000000100)=0x1100) 03:39:13 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000540)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "7437d7", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 03:39:13 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x7, 0x0, 0x0) 03:39:13 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40189206, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffffffa}) 03:39:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x2000000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:13 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, &(0x7f0000000100)) 03:39:13 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000540)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "7437d7", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 03:39:13 executing program 6: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 03:39:13 executing program 2: r0 = getpgrp(0x0) r1 = gettid() r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x40001, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xaa80) tgkill(r0, r1, 0xb) 03:39:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) r3 = fsmount(0xffffffffffffffff, 0x0, 0x5) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000001740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001700)={&(0x7f0000000540)={0x11a0, r4, 0x800, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x6f}, @void, @val={0xc, 0x99, {0x2, 0x4c}}}}, [@NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "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"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_DATA={0xdf, 0xc5, "db5d8a6f581a24c309860f9ee169d89bd02849a183c8be666f743384cf1ad70c5920ab57d7a3e544ef4916c4116c51f304576d7cba90b4e087e7807a5f4a2e9887eba24aa5f8bf290d498d0f0f5d4611ae517b05f6e93b1a8c4de4ab479669b06765a86426c47ed5fe5e8cfcea4416ed1667272327b73c4787d0e49bda7ef8c0739cb5b24bc271b087ea5b543d7a3c7cbad9f039afbbf3bdd37c9f80bcef2b83cde68b221027c8e134f8e190808651ab45b78ed4db009ebf1241dd4fde387409ec9034e16c57fd0ef9a34802a0de58f616f1fcd5419c0e58f0c8f4"}, @NL80211_ATTR_VENDOR_DATA={0x4f, 0xc5, "b7c4cbc7b64928bd268957a9e0c60b95cb321bac21ef46a718c0443ca2529802e0b29cfd7a71601b4316dac2b233ce5079c1a2f3f3133bf509f87280e3ab75b26500b8bf161a75e8b7cc77"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x40}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x6af}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xff}, @NL80211_ATTR_VENDOR_DATA={0x14, 0xc5, "4e2ba0023c4dc43cf2df7f0fe31bc5a2"}]}, 0x11a0}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:13 executing program 5: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f00000014c0)=[{0x0, 0xcd6d}], 0x1, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) semctl$GETNCNT(r0, 0x0, 0xe, 0x0) [ 790.160749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 790.217785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:14 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000100)={{r0}}) 03:39:14 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000540)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "7437d7", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 790.288767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:14 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x52, &(0x7f0000000200)={0x0, 0x0}, 0x10) 03:39:14 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, 0x0, 0x0) 03:39:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000)=0xc46f, 0x4) sendto$inet(r0, 0x0, 0x33, 0x0, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) 03:39:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00'], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:14 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 03:39:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000040), 0x0, 0x4) 03:39:14 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000240)={0x30000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:39:14 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) acct(0x0) 03:39:14 executing program 6: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) 03:39:14 executing program 5: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f00000014c0)=[{0x0, 0xcd6d}], 0x1, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) semctl$GETNCNT(r0, 0x0, 0xe, 0x0) 03:39:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x3000000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 791.180986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:15 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 03:39:15 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) 03:39:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000040), 0x0, 0x4) [ 791.242574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:15 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x8921, &(0x7f0000000c80)={'sit0\x00', 0x0}) [ 791.303261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:15 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 03:39:15 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000240)={0x30000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:39:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300c1eea6ffb5d9853614afffe81ec8420a76c3c1b0559b7ff209bb506cee32a8725f50e8d52ed0cb2bbe26a6e61075c5c59e84ba19961d8c946126c472942e13134e67e93effda4807dc08b4698f4dc9e2a3c51f980c5ac942565fe6b5dd9519ff13cf19903f24d08522b0b52fd90b7598d7ea06b910af46eeb38353c606e47918ce0110346ac52fedb925a08e4e6037253f5e37", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000"], 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="10000000080211000001080211fd6c000802110000002000010000000100010882848b960c121824"], 0x28) 03:39:15 executing program 3: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xc0085504, 0x0) 03:39:15 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) [ 791.561608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 791.571694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 03:39:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000040), 0x0, 0x4) 03:39:16 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001a40), 0x0, 0x0) ioctl$SG_GET_SCSI_ID(r0, 0x2276, 0x0) 03:39:16 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000240)={0x30000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:39:16 executing program 3: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 03:39:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x4000000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x490000, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r3, 0xfffffffffffffffc, 0x1) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) socket$nl_route(0x10, 0x3, 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) mq_timedsend(0xffffffffffffffff, &(0x7f0000000600)="f94cfbf24ea1291db2a2d0548cb2db05acdd404d5ad41c310a604c1326d486eb1c9c89c14cf98ec76309a60989459c7db65947c84d8615d3fe6772cdc19cccfa5b3ca067ecb2ba1a9146af605c21dd8f79db94104e0601f461a2a53e5982045e36f2a0c2c23de75c6da22e2db92e3b315a0d0aad2219db2e113d5d83302614f7958889ca7a16a83ee407caa079df016e715186027e182d1935783e5c98b89f91f7287e266d22f59e2bf5f8022a8b8093879750cec86f5dc778916df0b5508a83ee3e547961", 0xc5, 0x80000001, &(0x7f0000000700)={0x77359400}) socketpair(0x2b, 0x3, 0x7fffffff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read(0xffffffffffffffff, &(0x7f0000000080)=""/86, 0x56) r6 = accept4$inet6(r5, &(0x7f0000003600), &(0x7f0000003640)=0x1c, 0x80800) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000003680), 0x50002, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000037c0)={&(0x7f00000007c0)=@kern={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003400)=[{&(0x7f0000000800)={0x18, 0x2a, 0x200, 0x70bd2c, 0x25dfdbfe, "", [@typed={0x8, 0x72, 0x0, 0x0, @uid=0xffffffffffffffff}]}, 0x18}, {&(0x7f0000000840)={0x10c, 0x42, 0x10, 0x70bd28, 0x25dfdbff, "", [@nested={0x4, 0x88}, @typed={0xc, 0x1, 0x0, 0x0, @str='nl80211\x00'}, @generic="be12403851ca08278201ccf1329c81df3b5db77467b9b0c562edad142748952d7a552f276ae9b85c97ab11b92f8c17d26be565b9f5214745026f4265799fe263c600d024c0291989036fafcf38cd4b14111bc40201497fafaa02e8a33d0aa9eb08cfec4f400cdd4c0be033b220", @generic="96e7ec0be7c016400a05a5d3e5d6125fef2c2d5a8e076aa322c2cc0516ce3e598b8dd2caae37a6c7504158edb10259026890f0b09093531e907f0dbe3bbee59ca8ffe03cccc84725d44acb6238aee161f371367419e6e601ca7c5b0ebcc88a03d0f6482700015275e85d53f5c2e23725b309f78dd893068a27f618e15866aa"]}, 0x10c}, {&(0x7f0000000a40)={0x242c, 0x29, 0x800, 0x70bd2d, 0x25dfdbfc, "", [@generic="6f6116e043e3bc9350d2f226fe24847ab73a79c6f0a26624afebfb84b637", @generic="5e639b43c56745cd2a955e9e552f", @generic="cdedb7cfcecce9580db784e92e667ab0262e9a6b0f05eec8fd5102c4526db47da29241a72dd0700b98dc369ee30af977d0d393749cd9a9a20fe78b70ec869d3d966baf54948466e90528de605aa74a183e3c284a806cfa241d292613fef0ddd7bedc34adee1a234e7b67bc323388b6379980c37e1fdbe29f7ccd48c3addcc8b4cc787004fc5ea5689fe4e9", @nested={0x11f7, 0x92, 0x0, 0x1, [@typed={0x1004, 0x94, 0x0, 0x0, @binary="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"}, @generic="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", @generic="34d8a2bc7abbe87f84131b0b1df28b93c1e3a56b0de94a280f01d8c8a27c86fd0f6bc4c0c6e5a808f7ba8cef37e1f0b25951288828ebf96ba64a67f457c69ca3e0aa303cf01cb32f426ecfd91716f3bd881fa5e62ae88809daadbf04d47c7efabd3bca07e081f3f0dc964b5686229c8b81a26cefd4fe99ff46a52d0c4117c862a423de4f7b8f73df2861ccd38226e8f74f836b405b090b7e3224805cf3e362a104672715881e6233ef5cae416d8e80659e75ccf0bab9a8c1166570aba2fae813967ff7447f8b7b53e3e30e39bba684b8b997a580e5445540830691a846814ba634df0b5b21b594bde146ab701f3ea32542"]}, @generic="3641522e633e2c3452fc373c873c0e769a171d39e8a3a985867fd4996645fcdbff9bcc04bbffd44f0ed7d6621e75e60ce7b7e438c7f65a3c555af06e474985b85d8c65128fa4f277d61a3a17518454bfac1738b68308251f80bab67565ea084398e370f5cda416faa13c377d8143c1abd54b498cbe21555457b2c8e5090e2ea3a79b2ea13a6d4ba916dc3c5a26ec96508ddebae4e1f9ed72edf20c01fc41343a282d3e57a9d133cb6146090e4386d757e2146868d94b9a5d7ae6e2d9baea1637af538f2201a5e1a8fc", @generic="be1ca23f266bfae4ef3336582e1d78b5c5bab4b0567cedbd32c40cd9", @nested={0x1070, 0x81, 0x0, 0x1, [@generic="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", @generic="600374cfbfeda1b23170698e9fb76b5078f57eea3b143c10c3c13ebaf39ddca23ac5085667ef887bdb2a553a77d30280dd8958960745152f6b3a2883b5907c826117953317c1443582ace1458a98b735287a73030ed7b2e8", @typed={0x14, 0x4f, 0x0, 0x0, @ipv6=@private0}]}, @nested={0x18, 0x29, 0x0, 0x1, [@generic, @typed={0x4, 0x95}, @typed={0x8, 0x15, 0x0, 0x0, @uid}, @typed={0x8, 0xf, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x242c}, {&(0x7f0000002e80)={0xcc, 0x2a, 0x7aa, 0x70bd25, 0x25dfdbff, "", [@typed={0xf, 0x5e, 0x0, 0x0, @str='@^(//@(-$*\x00'}, @generic="6b93b360f854f57642379bb018a01fe96259cf231a912f9a317b0bcb5475d0f03ebcd03470bf67a2d6616fce79a4995d498ac56942b3fefc0915bdce69591f98e576b39b1813ef50ab7548c5acdb08c05764b882406d00ce369f06779eaa1d1988ca9870ef1473bc99e9c65b5adeec7cf96c613f63d6a06c5a5f244417f63cfd6e3780aa816e935444caf6bd1e264875d1ed049f6ca13e15899dbdfe3cfc844c07e5dbf656de514d5bbd"]}, 0xcc}, {&(0x7f0000002f80)={0x20c, 0x1e, 0x8, 0x70bd2b, 0x25dfdbff, "", [@typed={0x4, 0x16}, @nested={0x185, 0x4e, 0x0, 0x1, [@typed={0xbd, 0x46, 0x0, 0x0, @binary="efce5d8754e1b78b192d624327cf45c2761ddfabb34fe92311158baf4b0d2bbef3be18916604cd3d04a33172e3da30bd967c95c1ca22b9b6b4b36e80553ac986475badc6f539c56665ba1b65ce783f397c1693a89116f1bd4cfe95282f54b02e797f4c6e21c56f10dbf59ed72d5000136cb303b949b7aafb1c6d0ee92ff67caa61f541ef71ad9df711222f773429a227d4124a11ea5b6ede10019557251bd5ef07406aceafae7125e8ab84b958217c7502a6b8bd6ce1be42c2"}, @generic="1b6c82e732e8cca2bf30c42f831fc96b84359f1efa7d7700f9752042fed8ebbb58aff48f4055a421c96b81342e2fe7136c99", @generic="de09c43d2e426fca89e6748d994c21fb0741556a36d9ccda28b6b59cb1cdbb65a72559342dbd57b24c7189fc680467b77b59fb7a5ae9ea03b1202efb4a505103bebe10b55999a2494c80082d9033b1dd8545c5213207817f29e8f485b6013898bc51c60213e53ce6d38847adf8e1652519c6404af0d1fbe3d72f144767d8b45a2fcc3003c33ceef3cda49237af1dcc"]}, @typed={0xc, 0x53, 0x0, 0x0, @u64=0x7}, @generic="c74692eedfd7ff0497a38befab48a4f8a3794348552124ebadd6aac3ee4793e8d984c497a8a8cdf2bec75294c52c3822fa449fa543237ad222e320925002546c58a1b443f6dc63544a91fafde6fa706d5bb483199e45451b7df3", @typed={0x8, 0x70, 0x0, 0x0, @ipv4=@loopback}]}, 0x20c}, {&(0x7f00000031c0)={0x238, 0x18, 0x100, 0x70bd28, 0x25dfdbfb, "", [@nested={0x228, 0x7, 0x0, 0x1, [@typed={0xc, 0x6f, 0x0, 0x0, @u64=0x55}, @generic="a06858ce6c0f2d9eba9d626d202b2687b5c3fcd543fe2686a47426389b3c18a1e35414888d7a74dde02f762863b6194abdcad88d197503ea52607c8046f102ed07057f6a1b5ffc0a35a6f5aed1cdfe6229b344de96c792eaceb839c0de", @generic="6f5364f33ff086c95114e3ab61661f117c1a2a4c1d069d05f0f738a2739d06509e6af944cb895d586fdd775bf1e7a8bc3aa5c1809c4c70285490092ecf9bc0cedbc763d2923fedfa658f8718e96d9903", @generic="a2e55855d8816ef00ca83574344d5be8c2bb34ee78fb04cdcf5ac43ef92e841b14bb9696969d11791103543bbadc9331ca71ea231379fe75af4f7497f948128a109501d192fe489c8297a44b8d509aea8d2a4519627fe9ab19e76527abf7d0f6e7ac75d36bcdfd0c2cf7079fb42101e4f8dc855491bc7d40016052f2b453b10f792fb3d3a80a9d862874d53f16b2c232900872707d", @typed={0x5, 0xf, 0x0, 0x0, @str='\x00'}, @generic="483efb51d62bf25d642263db8cb41cd539b8eac6cf6806708cfcb090b788dd3651ca7fe9aecc0a5e804f66e447e7f6c2f21c79a2b14db7771f547398ba601cabcb6b29957adf6b57726659d06674f29418aa4799c3b88408111a93f52b48c2ab2276f8c06c9d9adcf2844e2dfc4d7cfbb23861ca5960e22306acb103c8d7527fc86577029130b7f6d6b0dae8ceb891e1b01f5527ce0ddcc0b4c31a743e8f6b1ab3b9a62bd8ec44d90d88f690723eedb3cbb621dcea660a44a5700a7d5872ab96eb4fdb6a91050e4d1fabbf005085"]}]}, 0x238}], 0x6, &(0x7f00000036c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r4, r4, r5, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r3, r4, 0xffffffffffffffff, 0xffffffffffffffff, r3, r6, r7]}}], 0xf0, 0x40010}, 0xc044) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, 0x3, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048045}, 0x4000) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:16 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), 0x4) 03:39:16 executing program 5: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f00000014c0)=[{0x0, 0xcd6d}], 0x1, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) semctl$GETNCNT(r0, 0x0, 0xe, 0x0) 03:39:16 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup2(r0, r1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x13, r2, 0x0) syz_io_uring_submit(r3, 0x0, 0xfffffffffffffffe, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) 03:39:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000040), 0x0, 0x4) [ 792.331765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:16 executing program 3: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 03:39:16 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), 0x4) 03:39:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000540)=@mgmt_frame=@assoc_req={@wo_ht={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x81}, @device_b, @device_b, @random="c05ee2804d3e", {0x4, 0x5}}, 0x181, 0x153d, {0x0, 0x2, @random="c388"}, @val={0x1, 0x7, [{0x30, 0x1}, {0x6}, {0x48}, {0xb, 0x1}, {0x4}, {0x24}, {0xc, 0x1}]}, @void, [{0xdd, 0x62, "9da601ec17a7205dd9ab7f9253dd915fe4c0e63a0b4895b8cec7fd0ede9faa9d8e8a8eb62a666e86e8576d86e2a03f10e1ab8229f916e4f905726281013596cc66d23e9ffb92df4a6339b974f1d5a1cea15e027cb11863607903ed37d2b7da6932a2"}]}, 0x8d) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, r1, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x67}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x4d}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20008020}, 0x20048054) 03:39:16 executing program 3: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 03:39:16 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000240)={0x30000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:39:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, r3, 0x119, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x616e71cd}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x9d}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000000) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@ctrl_frame=@cts={{}, {0x1}, @device_b}, 0xa) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100030000000c0004800400fdffffff00000800020002"], 0x30}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000008000100030000000c0004800400fdffffff00000800020002"], 0x30}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xbc, r7, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xa8, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3fe2e282}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x53}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x513f6e73}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6c75b64d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78222b8f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38b6f296}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3293a8ae}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb694b47}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x39}, @NLBL_CIPSOV4_A_MLSLVLREM={0xfffffffffffffea6, 0x6, 0x89}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4095d4a5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62e3bd9e}]}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4}, 0x1) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:16 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), 0x4) 03:39:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x5000000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:16 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000007e40), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000007f40)={&(0x7f0000007e00), 0xc, &(0x7f0000007f00)={&(0x7f0000007e80)={0x30, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\xff\xff'}]}, 0x30}}, 0x0) 03:39:17 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x4000000002, 0x7}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x8, 0xfff}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000440)="85", 0x80000}], 0x1, 0x1000, 0x0) [ 793.193272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:17 executing program 1: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto(r0, &(0x7f00000000c0)="c898fe2d19243daa47991317fe499e1aa63e84a1cdc41b", 0x17, 0x0, 0x0, 0x0) 03:39:17 executing program 3: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) [ 793.252151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 793.317381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:17 executing program 1: syz_open_procfs(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) sendmsg$SOCK_DESTROY(0xffffffffffffffff, 0x0, 0x840) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 03:39:17 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), 0x4) 03:39:17 executing program 3: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 03:39:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000a8d328b100000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c009900000000000000000081002600d5160000"], 0x30}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7ff}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r3}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004095}, 0x811) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, r6, 0x200, 0x80000, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x4000000) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="50000000080211000801081b1100000008021100000000000000000000000000640001000006020202020202010882848b960c121824"], 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f0000000640)=@device_b, &(0x7f0000000400)=@ctrl_frame=@cts={{}, {0x2}, @device_b}, 0xa) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, r6, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:17 executing program 1: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000f00)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @void, @val={0x5, 0x4, {0x1, 0x0, 0x0, '\n'}}, @void, @void, @void, @void, @void, @void, @void}, 0x34) syz_80211_inject_frame(&(0x7f0000000280)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000380)=@data_frame={@qos_no_ht={{@type10={{0x0, 0x2, 0x9}, {}, @random="afccc0dd30c9"}, {0x0, 0x0, 0x0, 0x0, 0x3}}, {@type10={{0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x1}, @initial, @device_a, @random="e2cbeacd6bc6", {0x0, 0x7}}}}}, 0x34) 03:39:17 executing program 6: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080)) r0 = epoll_create(0xe1e0) epoll_wait(r0, &(0x7f0000000140)=[{}], 0x1, 0x0) [ 793.702645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 793.729741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:17 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) [ 793.753193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:17 executing program 6: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080)) r0 = epoll_create(0xe1e0) epoll_wait(r0, &(0x7f0000000140)=[{}], 0x1, 0x0) 03:39:17 executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080)) r0 = epoll_create(0xe1e0) epoll_wait(r0, &(0x7f0000000140)=[{}], 0x1, 0x0) 03:39:17 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @private1}}}, 0x90) 03:39:17 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x3a, &(0x7f00000001c0), 0xc) 03:39:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x6000000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:17 executing program 5: mlockall(0x5) shmat(0x0, &(0x7f000076e000/0x2000)=nil, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) mlockall(0x0) 03:39:17 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) [ 794.025778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 794.065388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 794.074907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 794.084009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 794.145361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:18 executing program 6: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080)) r0 = epoll_create(0xe1e0) epoll_wait(r0, &(0x7f0000000140)=[{}], 0x1, 0x0) 03:39:18 executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080)) r0 = epoll_create(0xe1e0) epoll_wait(r0, &(0x7f0000000140)=[{}], 0x1, 0x0) 03:39:18 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000000)={0xb00}, 0x8) 03:39:18 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000000)=@ethtool_coalesce={0x4a}}) 03:39:18 executing program 1: socket$inet(0x2, 0xa, 0x8) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @val={@void, {0x8100, 0x6}}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @multicast2, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "b65b59", 0x0, "de8e63"}}}}}}, 0x0) 03:39:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x7000000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:18 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000180)) ppoll(&(0x7f0000000140)=[{r0}, {}], 0x2, 0x0, &(0x7f0000000200)={[0x10000]}, 0x8) 03:39:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x148, r3, 0x10, 0x70bd27, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0x4}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7c}, {0x6, 0x11, 0x401}, {0x8, 0x13, 0x2}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0x7375}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xff}, {0x8, 0x13, 0x80}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xfffb}, {0x8, 0x13, 0x1}, {0x5, 0x14, 0x1}}]}, 0x148}, 0x1, 0x0, 0x0, 0x40}, 0x40000) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000740)='macvtap0\x00') nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r7, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000013c0)={&(0x7f00000007c0)={0xbf4, r1, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x3e0, 0x11d, 0x0, 0x1, [{0x1cc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xda}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1a8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x12, 0xc, 0x1b, 0x24, 0x9, 0x12, 0x6, 0x6]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x6, 0x7}, {0x3, 0x5}, {0x7, 0x2}, {0x0, 0x3}, {0x7, 0x1}, {0x3, 0x3}, {0x0, 0x4}, {0x0, 0x8}, {0x6, 0x1}, {0x7, 0xa}, {0x3, 0x7}, {0x7}, {0x7, 0x7}, {0x5, 0x3}, {0x5}, {0x0, 0xa}, {0x0, 0x1}, {0x1, 0x3}, {0x6, 0x8}, {0x5, 0x2}, {}, {0x1, 0x9}, {0x6, 0x2}, {0x0, 0x9}, {0x0, 0x4}, {0x4, 0x6}, {0x2, 0x3}, {0x7, 0x5}, {0x7, 0x5}, {0x7, 0xa}, {0x5, 0x8}, {0x1, 0x5}, {0x7, 0x3}, {0x6, 0x6}, {0x3, 0x9}, {0x6, 0x9}, {0x3, 0x4}, {0x2, 0x4}, {0x3, 0x3}, {0x0, 0x1}, {0x3, 0x2}, {0x3, 0x8}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x3}, {0x2, 0x6}, {0x0, 0x2}, {0x0, 0x6}, {0x1, 0x7}, {0x5, 0x4}, {0x7, 0x2}, {0x2, 0x1}, {0x0, 0x8}, {0x4, 0x6}, {0x7, 0x2}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2e, 0x2, [{0x2, 0x8}, {0x6}, {0x3, 0x6}, {0x3, 0x3}, {0x7, 0x4}, {0x1, 0x1}, {0x1, 0x3}, {0x7, 0x4}, {0x0, 0x5}, {0x2, 0x4}, {}, {0x3}, {0x0, 0x5}, {0x3, 0x2}, {0x1, 0x2}, {0x5, 0xa}, {0x0, 0x3}, {0x2, 0x3}, {0x1, 0x5}, {0x2, 0x1}, {0x1}, {0x3, 0x8}, {0x3, 0x1}, {0x4, 0x6}, {0x1, 0x9}, {0x4, 0x6}, {0x5, 0x4}, {0x4}, {0x2, 0x6}, {0x6, 0x6}, {0x0, 0xa}, {0x1, 0x5}, {0x4, 0x5}, {0x3, 0x1}, {0x1, 0x8}, {0x7}, {0x4, 0xa}, {0x0, 0x1}, {0x6, 0x8}, {0x3, 0x4}, {0x6, 0x4}, {0x6, 0x1}]}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x4, 0x2}, {0x7, 0x2}, {0x5, 0x6}, {0x1, 0x1}, {0x3, 0x6}, {0x0, 0x3}, {0x1, 0x1}, {0x7, 0x5}, {0x0, 0x7}, {0x1, 0x9}, {0x2, 0x9}, {0x0, 0x1}, {0x5, 0x9}, {0x5, 0xa}, {0x6, 0x2}, {0x5, 0x1}, {0x7, 0x3}, {0x5, 0x7}, {0x4, 0x6}, {0x1}, {0x2, 0x2}, {0x1, 0x1}, {0x5, 0x2}, {0x7, 0x2}, {0x1, 0x2}, {0x5, 0x5}, {0x0, 0x7}, {}, {0x4, 0x1}, {0x5, 0x3}, {0x6, 0x1}]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x0, 0x1b, 0xb, 0x5, 0x9, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x8000, 0x1, 0x3199, 0x0, 0x6, 0x3d3, 0x9]}}]}, @NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0xc, 0x12, 0x36, 0x4, 0x4, 0x48, 0x6, 0x4, 0x16, 0x30, 0x2, 0x12, 0x12, 0x3, 0xc, 0x4, 0x1b, 0x6, 0x48, 0x2, 0x48, 0x9, 0x16, 0x1b, 0x6c, 0x6c, 0x6, 0x60]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x0, 0x74, 0x4, 0x8, 0xd830, 0x5]}}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x16, 0x36, 0x6, 0x1, 0x3]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x72455c7a6b0c76}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x2, 0x2}, {0x6, 0x5}, {0x3, 0xa}, {0x0, 0x3}, {0x7, 0x8}, {0x6, 0x1}, {0x3, 0xa}, {0x6, 0x8}, {0x5, 0x1}, {0x5, 0x6}, {0x2, 0xa}, {}, {0x2, 0x8}, {0x3, 0x8}, {0x0, 0x4}, {0x4, 0x7}, {0x0, 0x2}, {0x5}, {0x2, 0x5}, {0x0, 0x3}, {0x0, 0x2}, {0x4, 0x7}, {0x0, 0x5}, {0x1}, {0x6}, {0x3, 0xa}, {0x4}, {0x0, 0x1}, {0x4}, {0x6, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x5, 0x2}, {0x7, 0x4}, {0x1, 0x6}, {0x6, 0x8}, {0x7}, {0x7, 0xa}, {0x7, 0x2}, {0x6, 0x4}, {0x6, 0xa}, {0x0, 0x8}, {0x1}, {0x5, 0x8}, {0x0, 0x2}, {0x3, 0x8}, {0x2, 0x2}, {0x4}, {0x2, 0x9}, {0x0, 0x6}, {0x0, 0x6}, {0x5, 0x1}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x200, 0x7, 0x0, 0x2, 0x0, 0x2, 0x5]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0xb, 0x1b, 0x5, 0x60, 0x16, 0x24, 0x16, 0x3, 0x16, 0x9, 0x1, 0x5, 0xc, 0x0, 0xc, 0x0, 0x1b, 0x1, 0x6]}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffeffffffff}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x29}]}, {0x1ac, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xed}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x21}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x188, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x773, 0x4, 0x7e, 0x4b81, 0x9, 0x91, 0x101]}}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x2, 0x7}, {0x1, 0xa}, {0x2, 0x7}, {0x6, 0x7}, {0x2, 0x7}, {}, {0x3, 0x7}, {0x2, 0x6}, {0x4, 0x3}, {0x7, 0x2}, {0x6, 0x7}, {0x1, 0x4}, {0x1, 0x1}, {0x4, 0x9}, {0x4, 0x6}, {0x2, 0x6}, {0x0, 0x2}, {0x5, 0x4}, {0x0, 0xa}, {0x6, 0x8}, {0x4, 0x7}, {0x1, 0x8}, {0x4, 0x9}, {0x4, 0x1}, {0x7, 0x8}, {0x5, 0x6}, {0x1, 0x7}, {0x3, 0x6}, {0x4, 0x2}, {0x6, 0x2}, {0x3, 0xa}, {0x6, 0x8}, {0x6, 0x9}, {0x0, 0x9}, {0x1, 0x2}, {0x3, 0x8}, {0x1, 0x7}, {0x6, 0x5}, {0x6, 0x1}, {0x4, 0x4}, {0x4, 0xa}, {0x5, 0x4}, {0x1, 0x1}, {0x6, 0x9}, {0x6, 0x9}, {0x0, 0x1}, {0x1, 0x8}, {0x6, 0x9}, {0x3, 0x5}, {0x0, 0x7}, {0x2, 0xa}, {0x0, 0x4}, {0x1, 0x9}, {0x7, 0x7}, {0x0, 0x7}, {0x1, 0x4}, {0x2, 0x9}, {0x6, 0x3}, {0x4, 0x1}, {0x2, 0x8}, {0x2, 0x9}, {0x0, 0x8}, {0x7, 0x2}, {0x4, 0x4}, {0x6, 0x3}, {0x0, 0x6}, {0x4, 0x6}]}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x3, 0x2}, {0x0, 0x6}, {0x7, 0x9}, {0x7, 0x3}, {0x6, 0x5}, {0x1, 0x4}, {0x6, 0x9}, {0x5}, {0x3, 0x3}, {0x5, 0xa}, {0x1, 0x3}, {0x5, 0x2}, {0x2, 0x2}, {0x6, 0x5}, {0x4}, {0x0, 0x6}, {0x5, 0x2}, {0x2, 0x5}, {0x2, 0x2}, {0x7, 0x5}, {0x7, 0x4}, {0x6, 0x7}, {0x7, 0x5}, {0x1, 0x7}, {0x0, 0xa}, {0x3, 0x9}, {0x4, 0x4}, {0x1, 0x5}, {0x0, 0x8}, {0x0, 0x2}, {0x1, 0x8}, {0x3, 0x1}, {0x1, 0x2}, {0x2, 0x1}, {0x2, 0x9}, {0x6, 0x7}, {0x1}, {0x0, 0x1}, {0x7}, {0x1}, {0x4}, {0x7, 0x3}, {0x2, 0x6}, {0x3, 0x9}]}]}, @NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0xc, 0x3, 0xc, 0x41, 0x30, 0x1, 0xc, 0x36, 0xb, 0xc]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xc, 0xc, 0x65, 0x0, 0xc, 0x5, 0x9, 0xc, 0x2, 0x24, 0x36]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x0, 0x4}, {0x3, 0x4}, {0x1, 0x1}, {0x5, 0x8}, {0x0, 0xa}, {0x6, 0x5}, {0x2, 0x1}, {}, {0x0, 0x5}, {0x0, 0x8}, {0x2, 0x7}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x5}, {0x6, 0xa}, {0x6, 0x6}, {0x1, 0x1}, {0x0, 0x9}, {0x0, 0x4}]}]}, @NL80211_BAND_2GHZ={0xa0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x1, 0x1000, 0x40, 0x200, 0x0, 0x101, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x535, 0x401, 0x6, 0xff, 0x0, 0x81, 0x9]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x36, 0x48, 0x48, 0x16, 0x36, 0x6, 0x1b, 0x30, 0x1, 0x5, 0x5, 0x16, 0x3, 0x48]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x6c, 0x3, 0x1, 0x4, 0x4, 0x48, 0x0, 0x5, 0x16, 0x16, 0x12, 0xb, 0x36, 0x24, 0x44, 0x2, 0x59e0f61f15762147]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x3, 0x5}, {0x2, 0x4}, {0x5, 0x8}, {0x3, 0x7}, {0x3, 0x8}, {0x4, 0x2}, {0x1, 0xa}, {0x1, 0x5}, {0x0, 0xa}, {0x4, 0x5}, {0x3}, {0x2, 0x1}, {0x5, 0x3}, {0x6, 0x5}, {0x2, 0x4}, {0x0, 0x7}, {0x5, 0x5}, {0x4, 0x6}, {0x7, 0x5}, {0x4}, {0x6, 0x2}, {0x5, 0x7}, {0x7}, {0x7, 0x6}, {}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x5, 0xb, 0x6c, 0x1, 0x3, 0x14]}]}]}]}, {0x4}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd6}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x7c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x23}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8001}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1ff}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffff}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd9}]}]}, @NL80211_ATTR_TID_CONFIG={0x2c, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6c}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xddf4}]}]}, @NL80211_ATTR_TID_CONFIG={0x3d8, 0x11d, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3b}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x388, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5e}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xaf}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xbe}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x340, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x114, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x3ff, 0x4, 0xffff, 0x1, 0x8001, 0x9, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x1, 0x2}, {}, {0x3, 0x2}, {0x5, 0x6}, {0x7, 0x4}, {0x7}, {0x7, 0x4}, {0x1, 0x3}, {0x0, 0x8}, {0x5, 0x2}, {}, {0x7, 0xa}, {0x0, 0x7}, {0x1, 0x8}, {0x6, 0x7}, {0x7, 0x2}, {0x4, 0x4}, {0x1, 0x7}, {0x4, 0x9}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x8}, {0x6, 0x4}, {0x7, 0x1}, {0x3, 0x8}, {0x7, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x5, 0x5}, {0x0, 0x3}, {0x0, 0x1}, {0x4, 0x4}]}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x7, 0x4}, {0x0, 0x1}, {0x1, 0x2}, {0x7, 0x6}, {0x0, 0x5}, {0x3, 0x1}, {0x6, 0x6}, {0x4, 0x1}, {0x5, 0x2}, {0x3, 0x2}, {0x1, 0x9}, {0x3, 0x4}, {0x7, 0xa}, {0x6, 0x6}, {0x7, 0xa}, {0x6, 0x2}, {0x7, 0x9}, {0x1, 0x2}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x4, 0x4}, {0x3}, {0x6, 0x7}, {0x3, 0x9}, {0x6, 0xa}, {}, {0x3, 0xa}, {0x4, 0x9}, {0x2, 0x6}, {0x3, 0x9}, {0x3, 0x6}, {0x6, 0x2}, {0x1, 0x2}, {0x6, 0x6}, {0x1, 0xa}, {0x7, 0x6}, {0x0, 0x1}, {0x6, 0x8}, {0x0, 0x2}, {0x6, 0x1}, {0x5, 0x8}, {0x7, 0x3}, {0x0, 0x6}, {0x2}, {0x5}, {0x0, 0x9}, {0x5, 0x6}, {0x5, 0x1}, {0x3, 0x3}, {0x0, 0x8}, {0x5, 0x7}, {0x5, 0x8}, {0x2, 0x6}, {0x3, 0x1}, {0x6, 0x7}, {0x1, 0x2}, {0x7, 0x2}, {0x0, 0x6}, {0x2, 0x7}]}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x5, 0x9}, {0x7, 0x3}, {0x3, 0x6}, {0x0, 0x6}, {0x4, 0x7}, {0x5, 0xa}, {0x5, 0xa}, {0x1}, {0x0, 0x7}, {0x3, 0x5}, {0x6, 0x5}, {0x2, 0x3}, {0x3, 0x8}, {0x7, 0x2}, {0x1, 0xa}, {0x1}, {0x1, 0x8}, {0x0, 0x6}, {0x4, 0x8}, {0x7, 0xa}, {0x1, 0x1}, {0x1, 0x5}, {0x3, 0x2}, {0x1, 0xa}, {0x5, 0x1}, {0x1, 0x4}, {}, {0x2, 0x9}, {0x7, 0xa}, {0x7, 0x8}, {0x0, 0x7}, {0x6, 0x6}, {0x7, 0x9}, {0x0, 0x4}, {0x4, 0x3}, {0x6}, {0x0, 0x5}, {0x5, 0x3}, {0x0, 0xa}, {0x1, 0x8}, {0x3, 0x1}, {0x3, 0x6}, {0x1, 0x5}, {0x3}, {0x7, 0x6}, {0x0, 0x5}, {0x7, 0x5}, {0x0, 0x5}, {0x4, 0x5}, {0x7, 0x5}, {0x5, 0x9}, {0x7, 0x9}, {0x3, 0x3}, {}, {0x4, 0x1}, {0x6, 0x4}, {0x6, 0x8}, {0x7, 0x5}, {0x2, 0xa}, {0x4, 0x1}, {0x5}, {0x7, 0x5}]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x6, 0xc, 0x18, 0x60, 0x18, 0x1b, 0xc, 0x3, 0x6, 0x6, 0x5, 0x3, 0x0, 0x4]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x48, 0x2, 0x5, 0x18, 0x60, 0x6, 0x5, 0x4, 0x16, 0x30, 0x18, 0x1, 0x9, 0x0, 0x4, 0x4, 0x60, 0x36, 0x48, 0x48, 0x1b, 0x5, 0x60, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0xcabb, 0x1f, 0x1, 0x2, 0x7, 0x9]}}]}, @NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x7, 0x1}, {0x0, 0x2}, {0x7, 0xa}, {0x2, 0x6}, {0x4, 0xa}, {0x0, 0x8}, {0x6}, {0x1, 0x5}, {0x7, 0x3}]}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x0, 0x5}, {0x6, 0x2}, {0x4, 0x2}, {0x5, 0x5}, {0x3, 0xa}, {0x4}, {0x6, 0x2}, {0x5, 0x2}, {0x4, 0x3}, {0x0, 0x9}, {0x3, 0x6}, {0x0, 0x8}, {0x6, 0x2}, {0x6, 0x6}, {0x6, 0x9}, {0x1, 0x8}, {0x0, 0x3}, {}]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x7, 0x7}, {0x1, 0x9}, {0x2, 0x8}, {0x6, 0x3}, {0x4, 0x2}, {0x5, 0x8}, {0x7, 0x1}, {0x4, 0x5}, {0x0, 0x7}, {0x1, 0x5}, {0x4, 0x3}, {0x4}, {0x1, 0x8}, {0x2}, {0x0, 0x6}, {0x7, 0x6}, {0x7}, {0x2, 0x1}, {0x4}, {0x6, 0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x2, 0x7}, {0x1, 0x2}, {0x7, 0x8}, {0x1, 0x6}, {0x1, 0x9}, {0x1, 0x7}, {0x6, 0x1}, {0x6, 0x7}, {0x7, 0x2}, {0x3, 0x8}, {0x0, 0x2}, {0x1, 0x1}, {0x0, 0xa}, {0x0, 0x2}, {0x1, 0x7}, {0x3, 0x6}, {0x4, 0xa}, {0x0, 0x3}, {0x1, 0x9}, {0x7, 0x1}, {0x6, 0x9}, {0x5, 0xa}, {0x4, 0x2}, {0x2, 0x1}, {0x6, 0xa}, {0x1, 0x4}, {0x5, 0xa}]}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x23, 0x2, [{}, {0x3, 0x7}, {0x0, 0x6}, {0x2, 0x10}, {0x2, 0x6}, {0x6, 0x9}, {0x1}, {0x2, 0x8}, {0x2, 0x5}, {0x1}, {0x2, 0x3}, {0x6, 0x1}, {0x0, 0x1}, {0x5, 0x6}, {0x3, 0x1}, {0x2, 0x2}, {0x7, 0x5}, {0x7, 0x2}, {0x6, 0x2}, {0x7, 0x3}, {0x3, 0x3}, {0x0, 0x5}, {0x3, 0x6}, {0x5, 0x9}, {0x0, 0x2}, {0x6}, {0x1, 0x4}, {0x3, 0x2}, {0x4}, {0x0, 0xa}, {0x6, 0x4}]}]}, @NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5, 0x200, 0x40, 0x6, 0x5, 0x8000, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xc5f, 0xff, 0x6, 0xe8, 0x2, 0x5, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x4, 0x0, 0x0, 0x20, 0x6d5, 0x9, 0xffff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8001, 0x5, 0x0, 0x3, 0x9, 0x5, 0x200]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xf046, 0x0, 0x7, 0x8, 0x7, 0x3f, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x800, 0x9, 0x1, 0x7, 0x8, 0xe61, 0x8]}}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x0, 0x16, 0x18, 0x3]}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x2, 0x2}, {0x1, 0x2}, {0x7, 0x3}, {0x2, 0xa}, {0x2, 0x6}, {0x2, 0x1}, {0x7, 0x7}, {0x5, 0x9}, {0x3}, {}, {0x3, 0x1}, {0x1, 0x3}, {0x3, 0x6}, {0x6, 0x4}, {0x1, 0x5}, {0x2, 0x5}, {0x4, 0x2}, {0x5, 0x1}, {0x6, 0x3}, {0x6, 0x2}, {0x0, 0x3}, {0x0, 0x8}, {0x4, 0x6}, {0x5, 0x3}, {0x3, 0x6}, {0x4, 0x7}, {0x3, 0xa}, {0x3, 0x4}, {0x3, 0x9}, {0x2, 0xa}, {0x7, 0x1}, {0x4, 0x4}, {0x6, 0x6}, {0x1, 0x8}, {0x4}, {0x1, 0x7}, {0x1, 0x8}, {0x1, 0x9}, {0x1, 0x5}, {0x1, 0x8}, {0x2, 0x8}, {0x3, 0xa}, {0x6, 0x9}, {0x4, 0x6}, {0x6, 0xa}, {0x5, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x2, 0x6}, {0x2, 0x7}, {0x0, 0x5}, {0x3, 0x6}, {0x0, 0x7}, {0x6, 0x4}, {0x1}, {0x2, 0x2}, {0x5, 0x7}, {0x4, 0x1}, {0x6, 0x5}, {0x3, 0x5}, {0x0, 0xa}, {0x6, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0xb, 0x6, 0x48, 0x48, 0x4, 0x1, 0x30, 0x16, 0x5, 0x12, 0xc, 0x18, 0x16, 0x36, 0x36, 0x1b, 0x36, 0x3, 0x6c, 0x6, 0x30, 0xc, 0x30, 0x12, 0x30, 0x36, 0x30]}]}, @NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0x2}, {0x0, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x3f, 0xed25, 0x1800, 0x7fff, 0xf3, 0x6, 0x100]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x48]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x6, 0x48, 0x5, 0xb, 0x19, 0x1, 0x6, 0x6, 0x16, 0x9, 0x36, 0x6, 0x30, 0x5, 0x6, 0x6c, 0x4, 0x16, 0x16, 0x48, 0x18, 0x3e, 0x12, 0x24, 0x48, 0xc]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x0, 0x9}, {0x1, 0x2}, {0x6, 0x8}, {0x7, 0x6}, {0x3, 0x7}, {0x3}, {0x1, 0x7}, {0x7, 0x3}, {0x4, 0x4}, {0x2, 0x5}, {0x3, 0x4}, {0x3, 0x1}, {0x5}, {0x1, 0x3}, {0x3, 0x1}, {0x2, 0xa}, {0x3, 0x6}, {0x7, 0x7}, {0x0, 0x5}, {0x6, 0x4}, {0x3, 0x1}, {0x2, 0x4}, {0x1, 0x8}, {0x2, 0x5}, {0x3, 0x6}, {0x3, 0x2}, {0x4, 0x4}, {0x2, 0x8}, {0x0, 0x1}, {0x5, 0x6}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7, 0x100, 0x1, 0x1, 0x1, 0x40, 0x5]}}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0x304, 0x11d, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x56}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x2ac, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x264, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xec, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x12, 0x12, 0x5, 0x30, 0x30, 0x0, 0xb, 0x3, 0x16, 0x16, 0x1b, 0x16, 0x1, 0x5, 0x9, 0x2, 0x24, 0x30, 0x16, 0x3, 0x60, 0x9, 0x6, 0x1b, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3096, 0x20, 0x7, 0x4, 0x4, 0x0, 0x6, 0x40]}}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x1, 0x6}, {0x5, 0x1}, {0x1, 0xa}, {0x7, 0x3}, {0x3, 0x6}, {0x5, 0x3}, {0x2, 0x3}, {0x3, 0x8}, {0x2, 0x9}, {0x4, 0x3}, {0x4, 0xa}, {0x3, 0x6}, {0x1, 0xa}, {0x4, 0x6}, {0x5, 0x1}, {0x5, 0x5}, {0x0, 0xa}, {0x4, 0x4}, {0x7}, {0x3, 0x6}, {0x2, 0x7}, {0x5, 0x6}, {0x2}, {0x6, 0x2}, {0x7, 0x4}, {0x5, 0x9}, {0x0, 0x4}, {0x1}, {0x7, 0x6}, {0x6, 0x7}, {0x4}, {0x0, 0x6}, {0x7}, {0x5, 0x7}, {0x3, 0x5}, {0x1, 0x4}, {0x6, 0x1}, {0x5, 0x7}, {0x0, 0x4}]}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x7, 0x2}, {0x3, 0x4}, {0x4, 0x2}, {0x2, 0x7}, {0x1, 0x7}, {0x0, 0x3}, {0x1}, {0x4, 0x3}, {}, {0x1, 0x5}, {0x0, 0x3}, {0x4, 0x1}, {0x1, 0xa}, {0x0, 0x6}, {0x5, 0x9}, {0x7, 0xa}, {0x5, 0xa}, {0x0, 0x4}, {0x4, 0xa}, {0x1, 0xa}, {0x3, 0x1}, {0x3, 0x5}, {0x7, 0x4}, {0x1, 0x9}, {0x2, 0x3}, {0x6, 0xa}, {0x1, 0xc}, {0x4, 0x2}, {0x1, 0x1}, {0x1, 0x9}, {0x1, 0x9}, {0x1, 0x5}, {0x4, 0x7}, {0x0, 0x4}, {0x2}, {0x2}, {0x1, 0xa}, {0x4, 0x7}, {0x7, 0x5}, {0x1, 0x3}, {0x4, 0x2}, {0x3, 0x7}, {0x7, 0x5}, {0x0, 0x7}, {0x1, 0xa}, {0x5, 0x2}, {0x7, 0x1}, {0x1, 0x4}, {0x4, 0x1}]}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x6, 0x8}, {0x4, 0x9}, {0x7, 0x6}, {0x6, 0x4}, {0x5, 0x9}, {0x0, 0x3}, {0x3, 0x6}, {0x2, 0x8}, {0x5, 0x1d}, {0x0, 0x8}, {0x0, 0x6}, {0x4, 0x5}, {0x4}, {0x5, 0x5}, {0x2, 0x3}, {0x6, 0x8}, {0x3}, {0x7, 0x6}, {0x5, 0x4}, {0x2, 0x1}, {0x7}, {0x6, 0x3}, {0x7, 0x1}, {0x0, 0x5}, {0x0, 0x1}, {0x6, 0xa}, {0x0, 0x1}, {0x3, 0x7}, {0x6, 0x9}, {0x4, 0x1}, {0x6, 0x8}, {0x0, 0x4}, {0x6, 0x5}, {}, {0x1, 0x8}, {0x1, 0x1}, {0x2, 0x5}, {0x5, 0x3}, {0x2, 0x1}, {0x2, 0x2}, {0x1, 0x8}, {0x0, 0x4}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x2, 0x2, 0xb, 0x30, 0x3, 0x1b, 0x48, 0x1, 0x9, 0x2, 0x1b, 0x3, 0x4, 0x3e743f57b6f4df6f, 0x1b, 0x1, 0xc, 0x12, 0x48, 0x1, 0x1b, 0xc, 0x16]}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x3, 0x2}, {0x5, 0x6}, {0x1, 0x5}, {0x3, 0xa}, {0x1, 0xa}, {0x7}, {0x1, 0x6}, {0x6, 0x6}, {0x6, 0x2}, {0x4, 0x2}, {0x6, 0xa}, {0x1, 0x3}, {0x7, 0x1}, {0x7, 0x7}, {0x0, 0x8}, {0x0, 0x3}, {0x2, 0x4}, {0x0, 0x4}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x9}, {0x1}, {0x5, 0x5}, {0x2}, {0x2, 0x7}, {0x3, 0x6}, {0x7, 0x1}, {0x2, 0x6}, {0x4, 0x3}, {0x1, 0x7}, {0x3, 0x3}, {0x0, 0x7}, {0x0, 0x4}, {0x6}, {0x0, 0xa}, {0x1, 0x5}, {0x7, 0xa}, {0x7, 0x1}, {0x1, 0x5}, {0x4, 0x6}]}]}, @NL80211_BAND_2GHZ={0x118, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x4}, {0x4, 0x17}, {0x1, 0x2}, {0x3, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x1, 0x4}, {0x5, 0x7}, {0x4, 0x2}, {0x3, 0x2}, {0x7, 0xa}, {0x2, 0x1}, {0x3, 0x4}, {0x0, 0x1}, {0x5}, {0x7, 0x7}, {0x7, 0x7}, {0x7, 0xa}, {0x2, 0x4}, {0x6, 0x6}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0x5}, {0x1, 0x3}, {0x1, 0x5}, {0x5, 0x4}, {0x7}, {0x2, 0x1}, {0x0, 0xa}, {0x5}, {0x1, 0x8}, {0x1, 0xa}, {0x7, 0x6}, {0x7}, {0x5, 0x5}, {0x5, 0xa}, {0x5, 0x9}, {0x7, 0x3}, {0x1, 0x8}, {}, {0x3, 0x7}, {0x7, 0x5}, {0x7, 0x8}, {0x0, 0x3}, {0x4, 0x5}, {0x6, 0x5}, {0x4, 0x4}, {0x4, 0x3}, {0x1, 0x8}, {0x4, 0x2}, {0x5, 0x7}, {0x5}, {0x7, 0x4}, {0x0, 0xa}, {0x2, 0x7}, {0x0, 0x6}, {0x5, 0x2}, {0x5, 0x2}, {0x7, 0x3}, {0x1, 0x5}, {0x4, 0x8}, {0x4, 0x8}, {0x5, 0x5}, {0x3, 0x3}, {0x1, 0x4}, {0x2, 0x5}, {0x5, 0x4}, {0x2}, {0x2, 0x6}, {0x4, 0x9}, {0x4, 0x4}, {0x3, 0x3}]}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x6, 0x1}, {0x7, 0x6}, {0x5}, {0x7}, {0x4, 0x5}, {0x4, 0x8}, {0x2, 0x4}, {0x5, 0x2}, {0x3, 0x8}]}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x6}, {0x4, 0x3}, {0x5, 0x4}, {0x4, 0x5}, {0x2, 0x5}, {0x2}, {0x1, 0x3}, {0x2, 0x3}, {0x4, 0x5}, {0x5, 0x1}, {0x7, 0x5}, {0x1, 0x2}]}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x0, 0x3}, {0x1, 0x8}, {0x6, 0x3}, {0x5, 0x7}, {0x7, 0x7}, {0x1, 0xa}, {0x2, 0x5}, {0x2, 0x3}, {0x4, 0x7}, {0x0, 0x1}, {0x5, 0xa}, {0x3, 0x1}, {0x7, 0x1}, {0x2, 0xa}, {0x2, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3}, {0x0, 0x4}, {}, {0x0, 0x8}, {0x6, 0x9}, {0x1, 0x9}, {0x7}, {0x1, 0x1}, {0x0, 0x7}, {0x7, 0x5}, {0x1, 0x2}, {0x0, 0x3}, {0x0, 0x9}, {0x2, 0x5}, {0x5, 0x5}, {0x4, 0x1}, {0x7, 0x3}, {0x5, 0x2}, {0x5, 0x1}, {0x0, 0x6}, {0x6, 0x8}, {0x5, 0x2}, {0x0, 0x7}, {0x4, 0x9}, {0x1, 0x6}, {0x5, 0xa}, {0x3, 0x8}, {0x3, 0x7}, {0x7, 0x9}, {0x1, 0x9}, {0x2, 0x7}, {0x2, 0x2}, {0x7, 0x5}, {0x5, 0x7}, {0x2, 0x4}, {0x6, 0x7}, {0x5, 0xa}, {0x5, 0x4}, {0x7, 0x6}, {0x6, 0x7}, {0x6, 0x8}, {0x1}, {0x6, 0x5}, {0x0, 0x5}, {0x0, 0x5}, {0x1, 0x8}, {0x5, 0xa}, {0x7, 0x4}, {0x2, 0x5}, {0x0, 0x7}, {}, {0x7, 0x9}, {0x4, 0x3}, {0x4, 0x1}, {0x5, 0x5}, {0x4, 0x1}, {0x2, 0x2}, {0x3, 0x8}, {0x6, 0x2}, {0x4, 0x6}]}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x4, 0x9}, {0x0, 0xa}, {0x7, 0xa}, {0x1, 0x7}, {0x3, 0x9}, {0x5, 0x7}, {0x3, 0x4}, {0x2, 0x9}, {0x7, 0x5}, {0x4, 0x5}, {0x2, 0x8}, {0x1, 0x2}, {0x4, 0x1}, {0x0, 0x7}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x100, 0xfff, 0x1f, 0x8, 0xff, 0xcd]}}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x4, 0x2}, {0x6, 0x8}, {0x5, 0x1}]}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x7, 0xa}, {0x1, 0x6}, {0x7, 0x9}, {0x7, 0x8}, {0x0, 0x8}, {0x1, 0x8}, {0x1, 0x5}, {0x7, 0x8}, {0x1, 0x3}, {0x3, 0x8}, {0x3}, {0x6, 0x4}, {0x3, 0x4}, {0x0, 0x5}, {0x1, 0x8}, {0x4, 0x2}, {0x2, 0x3}, {0x1, 0x9}, {0x4, 0x5}, {0x1, 0x8}, {0x1, 0x9}, {0x2, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2c}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1c}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}]}]}, @NL80211_ATTR_TID_CONFIG={0x64, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x11}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x10da}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb9}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0xbf4}, 0x1, 0x0, 0x0, 0x400}, 0x20000004) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:18 executing program 6: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080)) r0 = epoll_create(0xe1e0) epoll_wait(r0, &(0x7f0000000140)=[{}], 0x1, 0x0) [ 794.664526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:18 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x2f}) 03:39:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)={0x14, 0x6a, 0x101, 0x0, 0x0, "", [@nested={0x5}]}, 0x14}], 0x1}, 0x0) 03:39:18 executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080)) r0 = epoll_create(0xe1e0) epoll_wait(r0, &(0x7f0000000140)=[{}], 0x1, 0x0) 03:39:18 executing program 7: syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getpgid(0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x201020, &(0x7f0000002600)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$iso9660(&(0x7f0000002a80), &(0x7f0000002ac0)='./file0\x00', 0x0, 0x2, &(0x7f0000003c40)=[{&(0x7f0000002b00)="b3", 0x1}, {&(0x7f0000002c40)="19", 0x1, 0x80000000}], 0x0, &(0x7f0000003cc0)) 03:39:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x0, &(0x7f0000000140)=""/134, &(0x7f0000000200)=0xfffffffffffffead) [ 794.734641] program syz-executor.6 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 794.751591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:18 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0x49}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}}, 0x28}}, 0x0) 03:39:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0810050002009700"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) r3 = creat(&(0x7f0000000040)='./cgroup/pids.max\x00', 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8001) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r3, &(0x7f0000000d00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x180, r5, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe3f9, 0x13}}}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, {}, @device_a, @device_a, @random="b8b16b95ef71", {0xd, 0xff}}, 0xa, @val={0x8c, 0x18, {0xd04, "2ab3ef63545e", @long="37bf6a152cd699d0c477a299b890f321"}}}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {0xff}, @device_b}}, @NL80211_ATTR_FRAME={0x102, 0x33, @data_frame={@no_qos=@type11={{0x0, 0x2, 0x5, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x1}, @device_b, @broadcast, @broadcast, {0x7, 0x96}}, @a_msdu=[{@device_b, @device_b, 0x5f, "7811ff2d635e11f9438f4df525a5b7453051441053e51921afa711b32dd338e422aed526f55b0206e288fd1b586c07e2fba927118df6d6e76d0870600e9e4953aa62229219617ba6c485051eedf2e219464a928c4936a3f2dac64324505f65"}, {@device_a, @device_a, 0x61, "f0933316c91e5cabb274d3c1f7a2a39ee7ca449d180a5d824763eb7d2b163171cde8b20a22fefd92cac9965bbd09bb84dccd0f4194578f8f7fbe63df14cc9d5804e1fff467b1eb9e9dd11cbfd514689a217c714b062a27b5e1bb8a204013749c7d"}]}}]}, 0x180}, 0x1, 0x0, 0x0, 0x805}, 0x2084) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f00000006c0)=@data_frame={@qos_ht={{{@type00={{0x0, 0x2, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x7ffd}, @device_a, @broadcast, @random="2c5183436182", {0x7}}, {0x5, 0x1, 0x0, 0x0, 0x8}}, {@type00={{0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @broadcast, @broadcast, @from_mac=@device_b, {0x5, 0x7f}}, {0x0, 0x0, 0x2, 0x1, 0x2}}}, @ver_80211n={0x0, 0x9, 0x1, 0x1, 0x0, 0x3, 0x1}}, @random="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"}, 0x469) r6 = creat(&(0x7f0000000580)='./file0\x00', 0x40) sendmsg$NL80211_CMD_GET_MPP(r6, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x620010}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x38, r1, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x5}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x18001) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@mgmt_frame=@deauth={@with_ht={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x1}, {0x9}, @device_a, @device_a, @initial, {0x0, 0x7}}, @ver_80211n={0x0, 0x0, 0x3, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1}}, 0x41, @val={0x8c, 0x18, {0x2, "2b24a32627ed", @long="498d61d569793c905dd1a95f759d64f1"}}}, 0x38) 03:39:18 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x401}], 0x0, 0x0) 03:39:18 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000000)) 03:39:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000006c0)={'sit0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, @mcast1, @dev}}) 03:39:18 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8947, &(0x7f0000000340)={'wlan1\x00'}) 03:39:18 executing program 7: r0 = accept$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000500)=0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) ppoll(&(0x7f0000000540)=[{0xffffffffffffffff, 0x12}, {}, {0xffffffffffffffff, 0x2251}, {r0, 0x40}, {r1, 0x4104}, {0xffffffffffffffff, 0x8}, {0xffffffffffffffff, 0x4000}], 0x7, &(0x7f0000000580), &(0x7f00000005c0)={[0xc9af]}, 0x8) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x80000009e9) clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket(0xa, 0x3, 0x6) r2 = fork() ptrace(0x10, r2) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) 03:39:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x9000000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:19 executing program 5: io_setup(0xfff, &(0x7f0000000040)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x140241, 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x2}]) 03:39:19 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000020003000b"], 0x0) 03:39:19 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r1, 0x0) fchown(r0, 0x0, 0xffffffffffffffff) 03:39:19 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8947, &(0x7f0000000340)={'wlan1\x00'}) 03:39:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={0x30, 0x1, 0x1, 0x101, 0x0, 0x0, {0x1}, [@CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0xc, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x6, 0x7f}}]}}, @CTA_SYNPROXY={0x4}, @CTA_MARK={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, 0x1, 0x1, 0x101, 0x0, 0x0, {0x1}, [@CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4}}, @CTA_SYNPROXY={0x4}, @CTA_MARK={0x8}]}, 0x28}}, 0x0) getsockopt$sock_int(r5, 0x1, 0x2a, &(0x7f0000000540), &(0x7f0000000580)=0x4) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[], 0x36) syz_80211_inject_frame(&(0x7f0000000680)=@device_b, &(0x7f00000006c0)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x20}, @from_mac=@broadcast, @broadcast, @device_a, {0x1, 0x7}}, @a_msdu=[{@device_a, @device_b, 0xab, "a02d9adb4e71fa3f6a7741587da0aff292fa06e2fd13098d9d631e76afbf4fe2a238dca9bee0bbac6a58809777729baa092f6cc6895c2e21b6d6a36d758da3275b5e4bd7fafea05950953efffb178e554565a9865494e24cc975910894bb445463b4d83bef868fa31b9490377a0c500c212e433db40ea726a302b586dac60b0101db4202ead3fdba7fe349f9e5ad072d2435c1c243c5e91d5d6172478609932e164eef70f920fc7cd70510"}, {@device_b, @device_a, 0x3, "03bd14"}, {@broadcast, @broadcast, 0x6, "438f2b5a8c32"}, {@device_a, @device_a, 0x9d, "36817b532e214f187870b983b53aeeb560a49e53a83cc72ff7c728911bec5a5868bd1c96f654c7cff3df08cc1b60fb2c9c3ddfd4df768d1435b058960e073e3bc5848dd1af97ce8bbbdf7629db64d9e201845923a029465bd654b5698c1adcd774390047581986ba70a7ca35b460b88bca32563de4e0f58cbd38c6a0dec66842030f0e3a00810da184b390b108ddf39792c6b74f4342fad8990686eba5"}, {@broadcast, @broadcast, 0x10, "1e8bfb33189bf620e948d56eee5b55c4"}, {@device_a, @broadcast, 0xe6, "dc035d26b240893382fd684ae0a3f93a867a629f051d05cab82acee6ea4741024564ba7e136a7a54a5197dad60cbf560d9ccc6eecec8a70ed3965cc1634ca3b45944016e19462da0e5f7d8e82a75e528b31c61c72d8f4172dd8e9b31ece7c9224253f5eb61b640f724c6a1e6c793dfb44417438f15f53552bf9432092fdc719db26a3809516a63ab14f32e922b404a14775b207dbd7ce7e5bfa17e98a66605f65dad84dcd7f07083ed0882991f634fbd88b8b269a4f88ba8298926df6af54373146fd7b590629b7f0efbfe5fde1f43866a7e0bbf3930b26dccc4b60662e39fb4df8dba865ca8"}]}, 0x2bc) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000001) r7 = syz_open_dev$loop(&(0x7f0000000600), 0x100, 0x10800) copy_file_range(r6, &(0x7f00000005c0)=0xb40, r7, &(0x7f0000000640)=0x7, 0x2, 0x0) 03:39:19 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='gid_map\x00') preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000040)=""/4082, 0xff2}], 0x1, 0x201, 0x0) 03:39:19 executing program 2: perf_event_open(&(0x7f0000000340)={0xa, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 795.627629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:19 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8947, &(0x7f0000000340)={'wlan1\x00'}) 03:39:19 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) ppoll(&(0x7f0000000200)=[{r1}, {r0}, {r2, 0x84}], 0x3, 0x0, 0x0, 0x0) 03:39:19 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x18, 0x0, 0x1300) 03:39:19 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000140), 0x10) 03:39:19 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0xf, 0x0, &(0x7f00000023c0)) 03:39:19 executing program 6: r0 = fsopen(&(0x7f0000000000)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = dup(r0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000040)='mand\x00', 0x0, 0x0) 03:39:19 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x80045432, &(0x7f00000000c0)) 03:39:19 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x29, &(0x7f0000000080), 0x4) 03:39:20 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8947, &(0x7f0000000340)={'wlan1\x00'}) 03:39:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="2400407b48d459d024dbf9ae60f92940866900003a7471de9906800ecd789aaf8e", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="b00000000802110000010802110200000802110000001000000002000000"], 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) clock_getres(0x6, &(0x7f0000000040)) 03:39:20 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x80045432, &(0x7f00000000c0)) 03:39:20 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2801000017000100000000000000000000000000000000000000ffffac1414bb0000000000000000fc020000000000000000000000000000ac141400000000000000000000000000fe88000000000000000000000000000100"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000001000000000001000000000000ffffffff00000000000000003c94723a2f05cd5b000000000000000000000000f0adc42ba5530f5497e794aac7907d1932e25e90820ceaa5cb752f16f7318ffa39f231cd885c27b37814d5be1cdd8d6ca2bf86bfa766917f031ae8179ab64bc26aed7a3730e2a3a8d1347419bcaddb933733ce1bec335f905b1893195035b78783f57375e6b6e8b938662e3b1415f9cc25ab9f41"], 0x128}}, 0x0) 03:39:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0xf000000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:20 executing program 7: shmget$private(0x0, 0x4000, 0x800, &(0x7f00006c5000/0x4000)=nil) r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000080)=""/70) r1 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000400000/0xc00000)=nil, 0x5000) shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x2000) fork() 03:39:20 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 03:39:20 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000300), 0x0, 0x0) [ 796.273258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:20 executing program 6: memfd_create(&(0x7f0000000000)='[/\x00', 0x0) getresgid(&(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)) 03:39:20 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x80045432, &(0x7f00000000c0)) [ 796.345122] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:20 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000009c0)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@local}}, 0xe8) close(r0) 03:39:20 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) 03:39:20 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000300), 0x0, 0x0) 03:39:20 executing program 7: msgctl$IPC_SET(0x0, 0x9, 0x0) 03:39:20 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x80045432, &(0x7f00000000c0)) 03:39:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x9effffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x3, 0x2}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000700)={'ip6_vti0\x00', &(0x7f0000000680)={'ip6gre0\x00', 0x0, 0x29, 0x2, 0x8, 0x5, 0x21, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, 0x40, 0x0, 0xd8}}) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000040)={r7, 0x3, 0x2}, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xf4, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x38, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x40, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x400c800}, 0x40110) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:20 executing program 3: mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc00000, 0x8, &(0x7f0000400000/0xc00000)=nil) [ 796.574497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:20 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x11) [ 796.633217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:20 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000300), 0x0, 0x0) 03:39:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)={0x28, 0x1c, 0x1, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='(n\x00'}, @typed={0xd, 0x0, 0x0, 0x0, @str=',\'.),[)/\x00'}]}, 0x28}], 0x1}, 0x0) 03:39:20 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6, 0x0, 0x4, 0x3, 0x0, 0x6, 0x20, 0xe, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_bp, 0x2000, 0x2, 0x8e92, 0x3, 0x7, 0x19c4, 0x0, 0x0, 0x40, 0x0, 0x9}, r1, 0xffffffffffffffff, r0, 0xb) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) r3 = dup(r2) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0xf, &(0x7f0000000140)=0x1, 0x4) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x7, 0x80, 0x7, 0x20, 0x0, 0x3, 0x1034, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x9}, 0x0, 0x5, 0x81, 0x9, 0x3cc7, 0x1, 0x9, 0x0, 0x21}, 0xffffffffffffffff, 0x5, r3, 0x1) r4 = shmget(0x3, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r4, 0x0) 03:39:20 executing program 2: r0 = fsopen(&(0x7f0000000000)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = dup2(r0, r0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) [ 796.702238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 796.735969] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 796.745548] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 03:39:20 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000300), 0x0, 0x0) 03:39:20 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) syz_mount_image$tmpfs(0x0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000001740)='./file1\x00', &(0x7f0000001780)='./file0\x00') 03:39:20 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6, 0x0, 0x4, 0x3, 0x0, 0x6, 0x20, 0xe, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_bp, 0x2000, 0x2, 0x8e92, 0x3, 0x7, 0x19c4, 0x0, 0x0, 0x40, 0x0, 0x9}, r1, 0xffffffffffffffff, r0, 0xb) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) r3 = dup(r2) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0xf, &(0x7f0000000140)=0x1, 0x4) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x7, 0x80, 0x7, 0x20, 0x0, 0x3, 0x1034, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x9}, 0x0, 0x5, 0x81, 0x9, 0x3cc7, 0x1, 0x9, 0x0, 0x21}, 0xffffffffffffffff, 0x5, r3, 0x1) r4 = shmget(0x3, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r4, 0x0) 03:39:20 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, 0x0, 0x0) 03:39:20 executing program 1: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000340)={0x3, "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"}, 0x401, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000003440)={{0x0, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}) 03:39:20 executing program 5: move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5) 03:39:20 executing program 6: prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x0) 03:39:20 executing program 2: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x400) creat(&(0x7f0000000080)='./file0\x00', 0x0) sendfile(r0, r1, 0x0, 0x10400) 03:39:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0xf0ffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="50000000080211000001080211000535a12e69000000000000000000000000006400010000fd8b960c121824"], 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x8) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f00000007c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20002420}, 0xc, &(0x7f0000000080)={&(0x7f0000000540)={0x260, 0x0, 0x28, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x14a}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2b4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x74b53804}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x94}]}, @TIPC_NLA_NODE={0x190, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xbd, 0x3, "0484b6b4c5e27e22f05cd491611da5dc1b5a196005b48e9d91581c74d0025b5850b625969f393a4f4d943b4200724325d5012e9571fd7fd7f56da3b58be96afc967863e5ab3f2630b8c3848ca63d73a1a58c71575d667f030955e8feba97a24aab4cfcc492adfba19bec0b45418a853542272b340754dde34fdc937fbc3aa7a60be0ac500c0b1a05a4201358f222f870b399d6287b849a0ea42cdfeae03ce27f23a20ac1b5e70b2fe09bb7d6c8223b734042d277a40bb70efe"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xb2, 0x3, "c5cd18bbe0465d43f32c038fa4353c296b2a5e8c2d52f4f41aa7ff02e0847f7479a67c136e1a55f8ba330d75f3cac29afacd36c5622cc29aa184afc6b8a5547788afd1107e46353e524fbde82faa1bba5529ff6a5661ad248c1a9975413387abdc8ff9dcb7deea477426f4e894804f66c7811065f25a342072d5d4d5a542902f1ce85db7cf7eb10c36b91827f9fe6f1c6e3a5f75a2a2fae2385a36ea374553a9c143dc6dfa0630797944e22755b4"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2a8}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8000}]}]}, 0x260}, 0x1, 0x0, 0x0, 0x20000011}, 0xc0) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="100000000802110000010802110000000802110000002000010002000100010882848b960c121824"], 0x28) 03:39:20 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, 0x0, 0x0) [ 797.142760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:21 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) setxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@random={'security.', '#! '}, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) 03:39:21 executing program 6: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)) 03:39:21 executing program 2: setreuid(0x0, 0xee00) mq_open(&(0x7f0000000300)='[]\x00', 0x40, 0xc, &(0x7f0000000340)={0x3, 0x5, 0x10000, 0x6}) 03:39:21 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6, 0x0, 0x4, 0x3, 0x0, 0x6, 0x20, 0xe, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_bp, 0x2000, 0x2, 0x8e92, 0x3, 0x7, 0x19c4, 0x0, 0x0, 0x40, 0x0, 0x9}, r1, 0xffffffffffffffff, r0, 0xb) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) r3 = dup(r2) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0xf, &(0x7f0000000140)=0x1, 0x4) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x7, 0x80, 0x7, 0x20, 0x0, 0x3, 0x1034, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x9}, 0x0, 0x5, 0x81, 0x9, 0x3cc7, 0x1, 0x9, 0x0, 0x21}, 0xffffffffffffffff, 0x5, r3, 0x1) r4 = shmget(0x3, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r4, 0x0) 03:39:21 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, 0x0, 0x0) 03:39:21 executing program 1: set_mempolicy(0x1, &(0x7f0000000000)=0x1, 0x6) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000013c0)='numa_maps\x00') preadv(r0, &(0x7f0000001800)=[{&(0x7f0000001400)=""/228, 0xe4}], 0x1, 0x0, 0x0) 03:39:21 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@fixed, "56ac22"}}}, 0xd) 03:39:21 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, 0x0, 0x0) 03:39:21 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) 03:39:21 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x33}, 0x0, @in=@private, 0x0, 0x0, 0x0, 0x7}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:39:21 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000001d80)={0x1f, 0x5, @none, 0x0, 0x2}, 0xe) 03:39:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="03cd15a9311854fe14dd2d4a87b27520611d6386327be1e07a9506b9203d", 0x1e, 0x4000, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0xfcffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:21 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) 03:39:21 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6, 0x0, 0x4, 0x3, 0x0, 0x6, 0x20, 0xe, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_bp, 0x2000, 0x2, 0x8e92, 0x3, 0x7, 0x19c4, 0x0, 0x0, 0x40, 0x0, 0x9}, r1, 0xffffffffffffffff, r0, 0xb) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) r3 = dup(r2) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0xf, &(0x7f0000000140)=0x1, 0x4) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x7, 0x80, 0x7, 0x20, 0x0, 0x3, 0x1034, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x9}, 0x0, 0x5, 0x81, 0x9, 0x3cc7, 0x1, 0x9, 0x0, 0x21}, 0xffffffffffffffff, 0x5, r3, 0x1) r4 = shmget(0x3, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r4, 0x0) [ 797.441043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:21 executing program 1: syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x2019}}}, 0x7) 03:39:21 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f00000000c0), 0x4) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b52, 0x0) 03:39:21 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x44802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x3ffffe00}]) 03:39:21 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 03:39:21 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000), 0xffffff7e) 03:39:21 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) flistxattr(r0, &(0x7f0000000040)=""/9, 0x9) [ 797.598485] scsi_io_completion_action: 163 callbacks suppressed [ 797.598545] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 797.599845] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 797.600453] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 797.601061] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 00 00 00 00 40 00 [ 797.601683] blk_print_req_error: 163 callbacks suppressed [ 797.601691] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 32 prio class 2 [ 797.637567] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 797.638339] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 797.639046] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 797.639757] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 00 40 00 00 40 00 [ 797.640362] critical target error, dev sr0, sector 256 op 0x1:(WRITE) flags 0xc800 phys_seg 32 prio class 2 [ 797.649272] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 797.650200] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 797.650945] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 797.651702] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 00 80 00 00 40 00 [ 797.652379] critical target error, dev sr0, sector 512 op 0x1:(WRITE) flags 0xc800 phys_seg 32 prio class 2 [ 797.661251] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 797.662177] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 797.662921] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 797.663635] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 00 c0 00 00 40 00 [ 797.664232] critical target error, dev sr0, sector 768 op 0x1:(WRITE) flags 0xc800 phys_seg 32 prio class 2 [ 797.678959] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 797.679810] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 797.680389] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 797.681025] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 01 00 00 00 40 00 [ 797.681643] critical target error, dev sr0, sector 1024 op 0x1:(WRITE) flags 0xc800 phys_seg 32 prio class 2 [ 797.691980] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 797.692862] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 797.693616] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 797.694226] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 01 40 00 00 40 00 [ 797.694896] critical target error, dev sr0, sector 1280 op 0x1:(WRITE) flags 0xc800 phys_seg 32 prio class 2 [ 797.702903] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 797.703682] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 797.704263] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 797.704897] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 01 80 00 00 40 00 [ 797.705519] critical target error, dev sr0, sector 1536 op 0x1:(WRITE) flags 0xc800 phys_seg 32 prio class 2 [ 797.714395] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 797.715368] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 797.716071] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 797.716850] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 01 c0 00 00 40 00 [ 797.717632] critical target error, dev sr0, sector 1792 op 0x1:(WRITE) flags 0x8800 phys_seg 32 prio class 2 [ 797.729892] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 797.730673] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 797.731278] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 797.731916] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 02 00 00 00 40 00 [ 797.732541] critical target error, dev sr0, sector 2048 op 0x1:(WRITE) flags 0xc800 phys_seg 32 prio class 2 [ 797.741880] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 797.742664] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 797.743248] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 797.743880] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 02 40 00 00 40 00 [ 797.744508] critical target error, dev sr0, sector 2304 op 0x1:(WRITE) flags 0xc800 phys_seg 32 prio class 2 03:39:22 executing program 6: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 03:39:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002abd7000fedbdf251400000008000300", @ANYRES32=r3, @ANYBLOB="0a800000ffffffffffff000005007400060000000600bd00510000000600ed0071010000"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x20c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_KEYS={0x1d0, 0x51, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "b22f4d7588"}]}, {0x6c, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0xc, 0x4, "4b6d865e326d8631"}, @NL80211_KEY_SEQ={0xfe00, 0x4, "3d0da52603dfbe7e90"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "0dc6b25390"}, @NL80211_KEY_SEQ={0x10, 0x4, "fd79bbfccdff5b1405e1a388"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "14e869fa76"}]}, {0x44}, {0x44, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "cd127db2c6b28f870e5bb542b1"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "6d2ab4e47f"}, @NL80211_KEY_DEFAULT={0xffffffffffffff44}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0xf, 0x4, "a61575818b5e708fdc4a3a"}, @NL80211_KEY_DEFAULT={0xffffffffffffff66}, @NL80211_KEY_MODE, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_SEQ={0x5, 0x4, "bd"}, @NL80211_KEY_DATA_WEP104={0x0, 0x1, "52e1797917e26067f7ea49a160"}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "1e1a25da2b9a3edc98d58e2ccd"}, @NL80211_KEY_DEFAULT, @NL80211_KEY_CIPHER={0x0, 0x3, 0xfac01}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP104={0x0, 0x1, "a5d2cd0f66a75e563ad5c77762"}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x24000898}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@ctrl_frame=@cf_end={{}, {0xff}, @device_a, @random="504a3df9e147"}, 0x10) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) recvmsg(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000780)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0xfffffffffffffef2, &(0x7f0000000bc0)=[{&(0x7f0000000800)=""/197, 0xc5}, {&(0x7f0000000900)=""/218, 0xda}, {&(0x7f0000000a00)=""/251, 0xfb}, {&(0x7f0000000b00)=""/181, 0xa8}], 0x4, &(0x7f0000000c00)=""/208, 0xd0}, 0x10) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="1000000802110000010002000100664f8ef99753722d782400"/36], 0x28) 03:39:22 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:39:22 executing program 5: tkill(0x0, 0x0) 03:39:22 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x0, 0x0) write$cgroup_type(r0, 0x0, 0x0) 03:39:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0xff0e0000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:22 executing program 3: prctl$PR_SET_NAME(0x8, &(0x7f0000000340)='sha224-neon\x00') 03:39:22 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x1c}}, 0x0) [ 798.685463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:22 executing program 3: clock_nanosleep(0x2, 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0) 03:39:22 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x116) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$security_evm(r2, &(0x7f0000000240), &(0x7f0000000280)=@v2={0xa, 0x3, 0x12, 0x0, 0x9c, "63d8244476a83e83b390e3045033e110f69c7b6ba6e07f6862e7435787693477edb193dc829335b31e091440fa20984a2f08b3a80158e01f92be183c1214d217a768e4530233a7a8600e4570d879b558d7647c54fa9cf03b6925c25621d752696aa9dd7213b20bf948a6e030aa13f3cc968e00ca73f56ccbf2af84ad174d14dcbd54fd65f0c9e8ec579a263fbbb6da2f172d64435530c140a74b0291"}, 0xa5, 0x3) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) 03:39:22 executing program 6: socketpair(0xd, 0x0, 0x0, &(0x7f0000000040)) 03:39:22 executing program 2: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc022a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2ac6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:39:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0xb341daa0822653b3, 0x0, 0x0, {0x9}}, 0x14}}, 0x0) [ 798.768908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 798.850492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:22 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000001880), &(0x7f00000018c0)=0x14) 03:39:22 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x1c}}, 0x0) 03:39:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, @in_args={0x4}}, './file0\x00'}) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x61}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0xc005) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="5000000008022c00000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c121824"], 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f0000000600), &(0x7f0000000640)=@ctrl_frame=@bar={{}, {0x2}, @broadcast, @device_b, @multi}, 0x12) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:22 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000080)={0x17e}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000140)={0x17e}) 03:39:22 executing program 5: creat(&(0x7f00000003c0)='./file0\x00', 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x27}, 0x21) 03:39:23 executing program 6: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) rt_sigaction(0x26, 0x0, 0x0, 0x8, &(0x7f0000000100)) 03:39:23 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) 03:39:23 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x1c}}, 0x0) 03:39:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0xfffff000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:23 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup(r0) bind$802154_dgram(r1, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) 03:39:23 executing program 6: clone(0x55160900, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000000)='S') 03:39:23 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000080), 0x4) [ 799.610846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 799.671658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 802.534983] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 802.541382] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 802.543887] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 802.551399] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 802.556347] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 804.632560] Bluetooth: hci4: command tx timeout [ 806.680586] Bluetooth: hci4: command tx timeout [ 808.728654] Bluetooth: hci4: command tx timeout [ 810.776613] Bluetooth: hci4: command tx timeout [ 822.989315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 822.990944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 823.031853] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 823.032912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 03:39:47 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f00000018c0)='./file0\x00', 0x4) umount2(&(0x7f0000000040)='./file0\x00', 0x4) 03:39:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0xffffff7f) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:47 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$invalidate(0x15, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(&(0x7f0000000540), 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000100)='\x00', 0x0) 03:39:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x1c, 0x19, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wlan1\x00'}]}, 0x1c}], 0x1}, 0x0) 03:39:47 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @broadcast, @device_a, @from_mac=@device_b}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="10f9ffff21621100000102110000000802110000002000010000000100010882848b960c121824"], 0x28) 03:39:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000000580)={0x1c0, r2, 0x424, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_REG_RULES={0x190, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xffff0039}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x806}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffffffff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x80000001}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x100}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xffffffff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x10001}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7f}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xb3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3ff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xf5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7f}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6c}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x870b}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4cc}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffffffff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x401}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x81}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r4, @ANYBLOB="0a00340002020202020200000a00060008021156be2ec3000800350043adff94080026026c090000261641c11f045e0111e14933e076c0a3f2a9ca1d283398806d7fca62a7e6908abffd198548c19aee74eca410f0dae96341f16d943a584fe73cf3a5e7cbc951"], 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="50000000080200000000010000000000640000000006020202848b960c121824000000000000"], 0x36) r5 = creat(&(0x7f0000000040)='./cgroup/pids.max\x00', 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8001) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000000000)) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x9effffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:47 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x1c}}, 0x0) [ 823.284248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 823.301619] netlink: 'syz-executor.0': attribute type 338 has an invalid length. [ 823.315477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 823.353519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 823.386977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 823.436360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 823.465184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0xffffff9e) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:47 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) io_setup(0x7d, &(0x7f0000000000)=0x0) io_submit(r1, 0x7, &(0x7f00000003c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000100)="fea51a9e67d4507d826bf2303a798bc3f66ee921bbe83d0a407b94852f64a3fc4923dad5f331301405925b1c577718967504ccba3822b753b25ab5f7df3e9c26b1826f2f7fa55d471eacda3f66c482557c33c376c89bcdffacc5f1b5d1318d466d2609ef88e1f47a36f5aafb63b7fc022cacc3bfdf56ae3fc3defe0a33cffe372fea594ccec3ccb178ae637d070bb34e539f472776cb48cbfa5bc5ade288f775d2dadd7ad1dcf2db71beb1066c163dc0ae149184f8616dd4a63f55df3f72b5b5d0b3df33cbfa6d18b63e2df72271c49d47fbd6baec11e98491739bf9c401c33182116a2d0e3bc9394b4cde69bd4ceb3bd35ee09509630dc53de26b94382f790298", 0x101, 0x300}]) 03:39:47 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000004840)={0x0, 0x0, &(0x7f0000004800)={&(0x7f00000000c0)={0x58, r2, 0xad4e344af954d6f3, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:bin_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private}]}, 0x58}}, 0x0) 03:39:47 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000500)) 03:39:47 executing program 3: timer_create(0xb, 0x0, &(0x7f0000001480)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x77359400}, {0x77359400}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)) 03:39:47 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 03:39:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:47 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) shutdown(r0, 0x0) [ 823.919998] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 823.920909] blk_print_req_error: 54 callbacks suppressed [ 823.920925] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 823.961322] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 823.962247] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 823.995986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:47 executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup(r0) getsockopt$packet_buf(r1, 0x107, 0x0, 0x0, 0x0) 03:39:47 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) [ 824.080111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:47 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) shutdown(r0, 0x0) 03:39:47 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000004840)={0x0, 0x0, &(0x7f0000004800)={&(0x7f00000000c0)={0x58, r2, 0xad4e344af954d6f3, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:bin_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private}]}, 0x58}}, 0x0) [ 824.153221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:48 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r0, 0x5409) 03:39:48 executing program 5: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', r0}) 03:39:48 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x0) r1 = dup(r0) recvmsg$unix(r1, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x0) 03:39:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0xfffffff0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:48 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) shutdown(r0, 0x0) 03:39:48 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 03:39:48 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000004840)={0x0, 0x0, &(0x7f0000004800)={&(0x7f00000000c0)={0x58, r2, 0xad4e344af954d6f3, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:bin_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private}]}, 0x58}}, 0x0) 03:39:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f00000007c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, r1, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}}, 0x10011) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0x1c, r1, 0x400, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20004051}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000240)={0x2c, r4, 0x1, 0x0, 0x0, {0x7}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x29, 0x7f, 0x70, 0xfffffffa, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x80, 0x8, 0x3, 0x1}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xb4, r4, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4008040}, 0xd07d60759e38e3c9) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 03:39:48 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) shutdown(r0, 0x0) 03:39:48 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000004840)={0x0, 0x0, &(0x7f0000004800)={&(0x7f00000000c0)={0x58, r2, 0xad4e344af954d6f3, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:bin_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private}]}, 0x58}}, 0x0) 03:39:48 executing program 3: syz_emit_ethernet(0x0, 0x0, &(0x7f0000000240)) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000280)) 03:39:48 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 03:39:48 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000001c0)={0x0, 0x23985866}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x5420, 0x0) [ 824.750110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:48 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x0) r1 = dup(r0) recvmsg$unix(r1, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x0) 03:39:48 executing program 0: umount2(&(0x7f0000000300)='./file0\x00', 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="360131e2fcaf6c29ce756d3b46e28ddc0c30e76e604833134c60b4d75b0fb7996242cbc34a95b1c70c3bc6464f63dc9a3a45d7312ad751ff97421adf34257e9160bf105fafe5c95467071fd8dfb78d3cff899b8e", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000180)=@mgmt_frame=@disassoc={@with_ht={{{}, {0x5}, @device_a, @broadcast, @initial, {0xe}}, @ver_80211n={0x0, 0x80, 0x2, 0x3, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1}}, 0x24, @void}, 0x1e) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000540)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xa, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x1}, @random="73a6a8a07fc3", @device_a, @broadcast, {0xc, 0x5a}}, {0x3, 0x1, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x1f}, @broadcast, @device_b, @initial, {0x0, 0x1}}, {0x0, 0x1, 0x1, 0x1, 0x83}}}, @ver_80211n={0x0, 0x20, 0x1, 0x2, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}}, @random="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"}, 0x139) syz_80211_inject_frame(&(0x7f0000000400)=@broadcast, &(0x7f0000000680)=@ctrl_frame=@bar={{}, {0x5}, @device_a, @device_a, @compressed={{0x1, 0x0, 0x1, 0x0, 0xd}, {0x6, 0x4}}}, 0x14) syz_80211_inject_frame(&(0x7f0000000840), &(0x7f0000000880)=@ctrl_frame=@cf_end_cf_ack={{}, {0xb}, @device_b, @device_b}, 0x10) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000006c0)=@device_b, &(0x7f0000000700)=@mgmt_frame=@assoc_resp={@wo_ht={{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0xf}, @broadcast, @device_a, @random="99a939263f59", {0xc, 0x5}}, 0x8188, 0x17, @default, @void, @void, [{0xdd, 0x94, "1aeab7977f753309d0d9e69bd97fecf90bb9b940513c897c32133b6c177058232573ced75ad85f74345d10b8dd5f8d0b5afe1b0f4bc15d82ac6fff36ac7610c96ca844cb47e64daa5e9beb0ce0a4743a0cee1ab9f377521d2ca7d68be1e64aa0eef93cd8bb02c4e997fd1ff9b583c31aa8b7f21ffb6891b1f9a9e7adcf61b46d720f10eef52051d306c8f83122c11a409961db9e"}, {0xdd, 0x6c, "3f697cc620087a956c53cc4f5992d86d8322a49da322c4b217b9d245d3f892a62a322fb4cfc4b2214e8bc640d7f7f7f3566abf7dd2a7797bde15f24a2e4f7b74626fa8eca9232b0ff79ac639ec98b50a2f82e59c96b23667aee0e1e6458c6775c76d73d91d200d62514fbfaa"}]}, 0x122) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:48 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x0) r1 = dup(r0) recvmsg$unix(r1, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x0) 03:39:48 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VT_RESIZEX(r0, 0x560e, &(0x7f0000000040)) 03:39:48 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f0000000040)) 03:39:49 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VT_RESIZEX(r0, 0x560e, &(0x7f0000000040)) 03:39:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0xfffffffc) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:49 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f0000000040)) 03:39:49 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x0) r1 = dup(r0) recvmsg$unix(r1, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x0) 03:39:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="754a7982e67f615e83979feddad6b37d44000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000"], 0x44}}, 0x0) r3 = creat(&(0x7f0000000040)='./cgroup/pids.max\x00', 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8001) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r3) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) clock_getres(0x0, &(0x7f0000000240)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x3f}, @device_a, @device_b, @from_mac=@broadcast, {0x7, 0x5}}, 0x1, 0x0, @default, @void, @void}, 0x1e) 03:39:49 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) 03:39:49 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x0) r1 = dup(r0) recvmsg$unix(r1, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x0) 03:39:49 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSW(r0, 0x80045438, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "d724b9d80cdcbde661c6a666d13d0ea35cc8c0"}) [ 826.116323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:50 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x0) r1 = dup(r0) recvmsg$unix(r1, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x0) 03:39:50 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x0) r1 = dup(r0) recvmsg$unix(r1, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x0) [ 826.195854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:50 executing program 1: r0 = memfd_create(&(0x7f0000000100)='veth1_macvtap\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) 03:39:50 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f0000000040)) 03:39:50 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x40401, 0x0) write$rfkill(r0, &(0x7f0000000380)={0x0, 0x3, 0x2}, 0x8) 03:39:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="2005"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@cf_end={{}, {0x2}}, 0x10) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f0000000540)=@broadcast, &(0x7f0000000580)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x9ee}, @broadcast, @device_b, @initial, {0x6, 0x81}}, {0x1, 0x0, 0x0, 0x0, 0x20}}, {@type10={{0x0, 0x2, 0x9}, {0xff}, @random="d5f23837f1a0", @device_a, @initial, {0x5, 0x33f}}, {0x1, 0x1, 0x1, 0x1, 0xfd}}}, @a_msdu=[{@broadcast, @device_a, 0x4b, "d4c85e974cfe22abafe6470d1bbce07ec8ec966efb749344eec2e867b074d2bfc632bde720b402fdc7ce42a02c49a371de78eb4180d1bf92bece30ba23bcfb2d4864856688de4166142b47"}, {@broadcast, @device_b, 0xc3, "7eb9338f0c91ccfd06239eef727e2aec47beff3cd14a3066bf4d722c4394d37bffad64e7ed8efa4840c92689bfc594c806f75bdc178d5ab996c8e66106606db4367c4e54313835de26c80fce69715a4aa87f9c0e0aa6091b8c43e6f35537aa32e575cae268b00873fd11d3fee20ee36c299de41769ab88e7a0440d7ea8561e0afc67b407f90ca21db19129b0d0cedebc49f1f3fa8c239d7e75764e3b8d0ecac67349cd602df95c350129d82e44bb8d2bd15e9131a2ad61e605b1665b48656d62e580f7"}]}, 0x164) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:50 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) 03:39:50 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VT_RESIZEX(r0, 0x560e, &(0x7f0000000040)) 03:39:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x3000000000000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:50 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000040)=""/30) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000200)) 03:39:50 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) 03:39:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="ff010000", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x90, r1, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x74}}}}, [@mon_options, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "26b476ce42cb334ba9c3ffe9ad884a73b479bce42dcdec3c"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "9c4dbe44900817a5d23351110ae7de4f70775e6d3c769f9b"}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}]]}, 0x90}, 0x1, 0x0, 0x0, 0x8001}, 0x2000) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:50 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f0000000040)) 03:39:50 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_stats}) 03:39:50 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f00000003c0)=""/4096, &(0x7f0000000100)=0x1000) [ 827.094812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:50 executing program 1: setresuid(0x0, 0xee01, 0x0) keyctl$invalidate(0x15, 0x0) [ 827.177602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:51 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) 03:39:51 executing program 5: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000240)) dup3(r0, r2, 0x0) 03:39:51 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') write$tcp_mem(r0, &(0x7f00000000c0), 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) write$tcp_mem(r0, &(0x7f0000000540), 0x48) 03:39:51 executing program 1: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_buf(r0, 0x29, 0x0, &(0x7f00000000c0)="d197ccd7", 0x4) 03:39:51 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x16) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x20) 03:39:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8001, 0x37}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@broadcast, &(0x7f0000000b40)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_b, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x1c, @random="5d524940c8b93c703e5d3c6664944d9405d897934c43d59cc0970273"}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x4c) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000b00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000540)=@mgmt_frame=@beacon={@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1}, {}, @device_a, @device_b, @from_mac, {0x4, 0xf01}}, 0xca3, @default, 0x400, @val={0x0, 0xe, @random="715de0dca81692be179260f130e9"}, @val={0x1, 0x2, [{0x67f866b894e74c08, 0x1}, {0x1, 0x1}]}, @void, @val={0x4, 0x6, {0x6, 0x36, 0x3, 0x104}}, @void, @val={0x5, 0x7f, {0xfe, 0xd6, 0x8d, "f146fef12628c1c86b88dbbf0f16e4f635f08b076455b93cc5d4b67a20ee994697445df4773362c35a60d0a68568534936eb6dda60312fee59ede9ce715cc39e371814865d9ed9cd851f9eb43727e45cddeb51699169bc52d1d2f45cfefe29c492de9fecdac0161462194e525f8d1cdc698b0d8334115d09098621e8"}}, @val={0x25, 0x3, {0x0, 0xb0, 0x7}}, @void, @val={0x3c, 0x4, {0x0, 0x3f, 0x6, 0xdc}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x1, 0x1, 0x0, 0xfb}}, @void, [{0xdd, 0x41, "11fb88350bc78b0d44a20500e4e4db47a5e9ff1f51c7be8597d7ece0969cfd171f092c49692a512dba179cd66c491ae8475d4be5114f763f3acba6f35bc0a8f51f"}, {0xdd, 0x74, "d70a32f8a90184665d66bfb039941e8113812007eb69e84c589ca45a41d24c29d0a98e5b956488699dc1afe3927556e620a8f4f40eb26744fc249f09be87975363bd37bda37245e73aef6305fb12ec5b48e4ccb2232aecc34013fed746da6bb4405b6786ad599a945dc8f732853ec3aaf06618f0"}, {0xdd, 0x66, "f4a6a48b523fc5d2b4df2888b917ddb34896deb2107c35185cf89808b1b0ce55b2c3e1cf277fe5a30955e5d7ac1b7132a93f7c635df23c684459217b11f49362a22f38983c0837a96299eed29880c91e9f8c74bd7e7fd62afde1f7ddb0f41bd420bcfdb1907e"}, {0xdd, 0x2d, "7d32a3669c2a950473f68d2e013c963101450cc4577fa089d0f376fef3b09fdfb45851fc7987c8a5b6b2fb38f2"}, {0xdd, 0xad, "8cbe3cd5a0d4ed508f6b2a16809b32523af364b2c87a1f64d8185eefb38c84510200e68191d7d283e1e2b2f5e1839b7fa8e8137dcfcdc27e29f2599095c6ebec0ca0830b741e9233808086a863ef8a20bd0b3f2d83caaf55168949e944203a9de42eb4556f7ccbf758fbff0f460b9c6184beec378fa9f489d9028276a3a8573c7131fa5aad74dcb2725a7190af6910d8730cfb22ff022ee3cfa04a5a34021ab4675fee5ece03996e11451b8890"}, {0xdd, 0xf6, "5cb55e68010cd636e44ec05dcfb094cff61af3a3419a278d0f7c798e2301476fb60bc89545eb3046c10bfa8bfb58e0e24f32364bed0f0621a4839eb1c48982e02c8608dd4b0e2d5b4d5a655052862baab478fc53571a3d83c90d7c0c347b457b0218cc8077a6d4d2356bb2cf0080ba8419f879fb89b55bb501d52f7ef9e0d6ed7c532da0982ead3ecdfbcaf9522c69adce1f284d4976c01d3ed1e8792fa918c3f63e982c0df885ef9a4031bf3c81719da1dd132a966c1607f1bbe38bbc914a0b46728a49b9f8e568b808de92849df1bc0a79b2faeaf6edf1ad780b40fe3bfcbbfaa8ee9ecdf25b16a1d5606ca39cc458bd40bf1f4cec"}, {0xdd, 0xe2, "cd7790359fb75a0fcee59cb76898f7360877a0c653edf70775a6532563007ddb70a1ff22a26573f87fd30b81f5e2be6cc18cf6c43b5e3f08bfbd78649b9ef327903279709f6236c727df52bd20b9469d07e190ee2ccddc01a798fd70aeb15d93e5976d87fbe8c49986117d1c76b9c9f8868cfbe25e792672e0c8c09c4bc691cfe7fb301f4af137b6bd5e15251fb9ceab8e0330ba9011d7338918851f39b77e3243fabdaaf20c1e051f1ba1d5111b77d0390adb899fe4a58233133801fb49155ac456b25b6fd3ac910690dba5b6d0ef1f50ab971840e34d0b2df41b218b7cc74a6afe"}, {0xdd, 0x5c, "1c9aa51df682c8ad7416e30709a107ea27085b7db463bc5f26db97277ec35c2dbc8164fc6d43eafc41dcf740b7bcb16f3d9b89c3245518825ff1f23617beac62b572b5f3ad35fc1aecda7f5de645a87aded7a4f2d9807f5da85419dd"}]}, 0x516) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:51 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) 03:39:51 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0}, &(0x7f0000008600)=0xc) setresuid(0x0, 0xee01, 0x0) chown(&(0x7f0000000300)='./file0\x00', r1, 0x0) 03:39:51 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast1=0xe0000002, @local, @local}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @dev, @multicast2}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000280)={@multicast1=0xe0000002, @local, @empty}, 0xc) 03:39:51 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./file0/file0\x00', 0x0) write$P9_RSETATTR(r0, 0x0, 0xeffd) 03:39:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x8000000000000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050700000000009400000006000000081c0300", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:51 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) 03:39:51 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VT_RESIZEX(r0, 0x560e, &(0x7f0000000040)) 03:39:51 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) 03:39:51 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000640)={@multicast2, @dev}, 0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000640)={@multicast2, @dev}, 0x8) setsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000000000)={@multicast2, @remote, @multicast2}, 0xc) setsockopt$inet_mreqsrc(r1, 0x0, 0x25, &(0x7f00000000c0)={@multicast2, @remote, @multicast2}, 0xc) [ 827.973994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:51 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) [ 828.039669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:51 executing program 7: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/freeze_filesystems', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/freeze_filesystems', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x2) 03:39:51 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x0, 0x0, {0x3}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) [ 828.097219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:51 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) 03:39:52 executing program 1: r0 = fork() tkill(r0, 0x3) 03:39:52 executing program 3: madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) pkey_mprotect(&(0x7f0000871000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000871000/0x2000)=nil, 0x2000, 0x3, 0xffffffffffffffff) 03:39:52 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000009c0), 0x202080, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8000, 0x52}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x30}}, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000a00)) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x58, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x13}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x3, {0x58, 0x6, 0x80, 0x3}}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x58}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x60, r1, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_TXQ_PARAMS={0x24, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x3}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0xfffb}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0xff}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x9}]}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0xfc}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x9463}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x7}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x400}]}, 0x60}, 0x1, 0x0, 0x0, 0x200000a0}, 0x4800) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, r4, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000801}, 0x4000000) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000640), 0x50180, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000940), &(0x7f0000000980)=0x4) sendmsg$NL80211_CMD_DEL_PMKSA(r6, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r1, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x21}}}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0xd}, @NL80211_ATTR_PMK={0x14, 0xfe, "7838c4dde2ebb644a000efa25c2ca6cf"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8811) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:52 executing program 5: prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x0) 03:39:52 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 828.323300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 828.341998] cgroup: fork rejected by pids controller in /syz1 [ 828.383737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:52 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000080)=""/35) 03:39:52 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000040)) 03:39:52 executing program 1: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000040)='cubic\x00', 0x6) 03:39:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0xf0ffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:52 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x0, 0x4000000, 0xff}) 03:39:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x40000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:52 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:39:52 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x1a, &(0x7f0000000000)={0x1, {{0x2, 0x0, @broadcast}}}, 0xa8) [ 828.905999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:52 executing program 3: syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "7437b8", 0x14, 0x6, 0x0, @private2, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x4}}}}}}}, 0x0) [ 828.969856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:52 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000000040)=ANY=[]) r1 = dup2(r0, r0) getdents64(r1, &(0x7f0000000040)=""/81, 0x51) getdents64(r1, &(0x7f0000001ac0)=""/104, 0x68) 03:39:52 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_complete(0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x8) wait4(0x0, 0x0, 0x0, &(0x7f0000000440)) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x2284, &(0x7f0000000000)={0x4, 0x0, 0x0, "b210f8e6"}) [ 829.030850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:53 executing program 3: keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000640)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xffffffffffffff8d}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 03:39:53 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/devices.allow\x00', 0x121802, 0x0) write$cgroup_devices(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='c *:'], 0x8) 03:39:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000540)=@mgmt_frame=@beacon={@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x2}, @broadcast, @device_a, @random="dfa7c8d76a2b", {0x1, 0x3}}, 0x3, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0xc}, @val={0x4, 0x6, {0x7, 0x5e, 0x100, 0x5}}, @val={0x6, 0x2, 0x7}, @void, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @val={0x3c, 0x4, {0x1, 0x2, 0x38, 0x3}}, @val={0x2d, 0x1a, {0x20, 0x3, 0x0, 0x0, {0x8, 0x6, 0x0, 0x2, 0x0, 0x1, 0x0, 0x2}, 0x1, 0x8, 0x7f}}, @void, @void, @void, [{0xdd, 0xfd, "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"}, {0xdd, 0x16, "b3c7f3e0313701d9e552f86f2a6037f9b82efa192003"}, {0xdd, 0x57, "2e5f24ddac398c8507492a74291e81422b150912233b987d5d058856b2e7719a75943f10165a61433ad64f3d93bd489f47a9a234d2971539be7eede29bdd1ec2c61484ead3d9f96af494a34a6b8a87dec6d4810465a871"}, {0xdd, 0x78, "7dec1ce37f083514c01d17f306b2937c6b475a7e40b5ff6ce80aed027749c5e24f64580ce0c66d6fd1356824e25ae3cbb44b643c3eb92531931e80b87ca848d93c02146b76bd0ec134db4e524923c1361ecf716ffe056135dd30efa717e413d92597f17ed8ecd5bdf1f56e902f72045ffba5785c8132128b"}, {0xdd, 0x7d, "0dce535ac3cfd831d4df9c15b873f16b1369a412aec77ccd9974552f394d426c27a18232bbcefca6ce48558bd365c4a4aa6898004df1a597012c67942ee999d5ece4cc616b76971bb4cb9890dcc0be090a3c77c4aca017f3a032c990d1547e8e14ae033b813b6d858e4ec080f90da61a017a270a60213179777a35c4bf"}]}, 0x2c9) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:53 executing program 7: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x1) fallocate(r1, 0x20, 0x0, 0x100000000) write(r1, &(0x7f00000000c0)='g', 0x1) fallocate(r0, 0x20, 0x0, 0x100000000) 03:39:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x100000000000000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:53 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:39:53 executing program 1: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write(r0, &(0x7f0000000000)="42d622", 0x3) 03:39:53 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x4, 0x0, 0x8, 0x1c, 0x1a6, &(0x7f00000003c0)}) 03:39:53 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x0) [ 829.478215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 829.545133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:53 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:39:53 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x4, 0x0, 0x8, 0x1c, 0x1a6, &(0x7f00000003c0)}) 03:39:53 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f0000000000)="a94a128f", 0x4) [ 829.612593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="100000000802110000010802110000000802110000002000010000000100010882848b960c121824fef0f74405b9319ef08669674410321d805b807569b0501fc5471ceb5fa55a5b9aba5f1dc81c42b5be16d5d3904eae32b1"], 0x28) 03:39:53 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x40181, 0x0) sendfile(r1, r0, 0x0, 0x8001) 03:39:53 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x4, 0x0, 0x8, 0x1c, 0x1a6, &(0x7f00000003c0)}) 03:39:53 executing program 7: unshare(0x8020080) semget$private(0x0, 0x4, 0x0) semop(0x0, &(0x7f0000000100)=[{0x3, 0x9}], 0x1) semop(0x0, &(0x7f0000000000)=[{0x2, 0x41}, {0x1, 0x3}, {0x1, 0xffff, 0x1000}, {0x0, 0x2fff}], 0x4) unshare(0x40000) 03:39:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x2) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) 03:39:53 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000000)=[{}, {}], 0x2, 0x7) 03:39:53 executing program 1: futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x0) 03:39:53 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x4, 0x0, 0x8, 0x1c, 0x1a6, &(0x7f00000003c0)}) 03:39:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = creat(&(0x7f0000000040)='./cgroup/pids.max\x00', 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8001) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000002ac0)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a40)={0x28, r1, 0x10, 0x70bd2b, 0x5, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x5}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) r5 = syz_open_dev$vcsu(&(0x7f0000000000), 0xcd, 0xa40) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r7, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r5, &(0x7f00000029c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002980)={&(0x7f0000000580)={0x23e8, r7, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FTM_RESPONDER={0x124, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x8e, 0x3, "b79c4925583e463074684fc043aca05031d258b498b4ddcb293abb12b859f045195695388e7b4a82cb597f7a162300555fe764ba5e3500073863f50543958f43876ef55dcd1212ecf597bfbb0a7dac5ba5389ba960877e52075c5e779d05f3125d5c7eb6dd09e8336e498aa793ad6ec65bef843a89db6bf91e59f4344a9f20d379811ea3b1b52efec3e1"}, @NL80211_FTM_RESP_ATTR_LCI={0x56, 0x2, "fc809ff2e1a0c1e43b64172082b3d55935d61a237d1e62452961882e756e51333d3416c5f1462c42f20a80231347bd2e224537634614c0de1e6289e6503f4b305919fee6ac08b4f77c3604504f9aa983a5c0"}, @NL80211_FTM_RESP_ATTR_LCI={0x36, 0x2, "29a3c32fc5afdd8afb602563dcf7d1b77fb33094a6b7bc457498d47ffb01e4c43d71e6080407e116155c5515cc2f012182db"}]}, @NL80211_ATTR_FTM_RESPONDER={0x216c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x1004, 0x3, "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"}, @NL80211_FTM_RESP_ATTR_LCI={0xe8, 0x2, "2cd8cce22fefea80263d4dec10502744be83a2a3d1a3c81d3489f5322935c56ffd7120c80bbbfcad9cc56f532181e810f6bbfcd074822beac82c694856a53d0a76b6c7041d33618a0a89037332b9efefbdf7d20a965361b657ded31e3d8dfa96508fd76e77d18a95d71e50b98f30a243026909022858cfc924e3a6bce42968724fb0687a07b744331fe154ad68ab3476bac7843295112f1da32f57d05507278703674490f7578cef82b1c4bc58d3562fa44a8214219d3b474866e4e56af379eca5270b19e0f540daf4428e2c2dc4729a96105026510073263acd1ab9b981f129b57262e0"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x6c, 0x2, "797e8f22d28cba81ae89254a3c13ec51ab56abc53c1b932f5ec1df077cb249fc59b9fbb4b0705c57f0ff0944ecb02209d9b1b670783edb3b9a3e6b896a4d6ee16f86b153f0e36f7795c441189b8b56174948427e15ae4b8ccf29d5d1f692edfd2ae00c05cb637827"}, @NL80211_FTM_RESP_ATTR_LCI={0x1004, 0x2, "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"}, @NL80211_FTM_RESP_ATTR_LCI={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x13b, 0x80, [@mic={0x8c, 0x10, {0x334, "2e3a20884883", @short="f8097a1b4161da1d"}}, @perr={0x84, 0xf, {0x81, 0x1, [@not_ext={{}, @device_b, 0x6, "", 0x4}]}}, @mesh_id={0x72, 0x6}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x1, 0x68}}, @random_vendor={0xdd, 0xf8, "10c90f4df7864993b980454e6db8f6a39024560d6edfffa67da40f90cafbe4ac43e3b8ed1606e01fe79f8e5295c98940cd80f0d552a46686a91d11fe9b03703249d4e7069968e29eba416eb69887dd2bfec6cf6ad749c17c08c2460b6c99113a96a852c7dfb587da04375d946a3101fd2fcdeeb6d31a2a10050b9383ecb3656e1348f774d0bd422f166b0733df0d068302aec01b432a7469ef2ff16afbf6fb1880717f0c05cf0b5ba8d007c759010b8cf28722f77574b2daac5ea804858619ec564e394f34566584a99a820aa86cadf549b5179e9d557a4ff22a2e94b41aa8e0835283d0e546a94e79e1a0208e84c56c29db26b45384a4a0"}, @ext_channel_switch={0x3c, 0x4, {0x1, 0xc1, 0x8c, 0x2}}, @chsw_timing={0x68, 0x4, {0x9, 0x80}}]}]}, 0x23e8}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:53 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:39:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x200000000000000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:53 executing program 7: unshare(0x8020080) semget$private(0x0, 0x4, 0x0) semop(0x0, &(0x7f0000000100)=[{0x3, 0x9}], 0x1) semop(0x0, &(0x7f0000000000)=[{0x2, 0x41}, {0x1, 0x3}, {0x1, 0xffff, 0x1000}, {0x0, 0x2fff}], 0x4) unshare(0x40000) [ 830.040306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000080)={@local, 0x1800000}, 0x20) 03:39:53 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080), 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x9) syz_io_uring_setup(0x46ec, &(0x7f0000000240)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:39:54 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000000)=[{}, {}], 0x2, 0x7) 03:39:54 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0xa00000) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) 03:39:54 executing program 7: unshare(0x8020080) semget$private(0x0, 0x4, 0x0) semop(0x0, &(0x7f0000000100)=[{0x3, 0x9}], 0x1) semop(0x0, &(0x7f0000000000)=[{0x2, 0x41}, {0x1, 0x3}, {0x1, 0xffff, 0x1000}, {0x0, 0x2fff}], 0x4) unshare(0x40000) 03:39:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, 0x1, 0x1, 0x101, 0x0, 0x0, {0x1}, [@CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4}}, @CTA_SYNPROXY={0x4}, @CTA_MARK={0x8}]}, 0x28}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x1) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:54 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 03:39:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x300000000000000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:54 executing program 5: ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r0, 0x11, 0xa, 0x0, &(0x7f0000000080)) 03:39:54 executing program 7: unshare(0x8020080) semget$private(0x0, 0x4, 0x0) semop(0x0, &(0x7f0000000100)=[{0x3, 0x9}], 0x1) semop(0x0, &(0x7f0000000000)=[{0x2, 0x41}, {0x1, 0x3}, {0x1, 0xffff, 0x1000}, {0x0, 0x2fff}], 0x4) unshare(0x40000) 03:39:54 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000000)=[{}, {}], 0x2, 0x7) [ 830.423524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 830.482834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 830.542501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000700)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0xac}, @broadcast, @broadcast, @device_b, {0x1, 0x5}, @device_b}, @random="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"}, 0x785) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000600)=ANY=[@ANYBLOB="100000000802110000010802110000000802110000002000010000000100010882848b960c12182439d0ce046d2e354fb348b30d7581c013f2df8b67a50e0cd2c6cdc59c60294de4dd2b1063137e2401686fd7532d9c80a0c927d157fc9c876173040fe7e3606f5e50185768b963c323baad9a463cf001ca3c90a1380cc0b2cb9052d0bf1e3c8330a71ba78c3ada1be997a499aca841dec9ced8b897d87d08696e2f25a8a70db281122d58dccf1e8d641479b4f23bccd379dbe624dfd821abc6bef1dd234a35dac3c8bc8cbe7a85d2276d4d53f718b365950a4b03070c3a912f25826b72c38a7148d0a0173c641cd99a"], 0x28) 03:39:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000002840)=0xffffffffffffffff, 0x4) recvfrom(r0, 0x0, 0x0, 0x42, 0x0, 0x0) 03:39:54 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000000)=[{}, {}], 0x2, 0x7) 03:39:54 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000440)=0x8000, 0x4) 03:39:54 executing program 6: r0 = socket$inet(0x2, 0x80003, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x5942, 0x4) sendto$inet(r0, 0x0, 0x1300, 0x0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) 03:39:54 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.net/syz0\x00', 0x200002, 0x0) 03:39:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x400000000000000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:54 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000640), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) [ 831.032124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:54 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x2, &(0x7f0000000000), 0x8) 03:39:54 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@random={'security.', '#! '}, 0x0, 0x0, 0x0) removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)=@random={'security.', '#! '}) 03:39:54 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) 03:39:55 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pidfd_send_signal(r0, 0x0, 0x0, 0x0) 03:39:55 executing program 6: r0 = socket$inet(0x2, 0x80003, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x5942, 0x4) sendto$inet(r0, 0x0, 0x1300, 0x0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) 03:39:55 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000640), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) 03:39:55 executing program 1: open_by_handle_at(0xffffffffffffffff, &(0x7f0000000540)=@raw={0x4, 0xe79059addec989b5, {"e2"}}, 0x0) 03:39:55 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@random={'security.', '#! '}, 0x0, 0x0, 0x0) removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)=@random={'security.', '#! '}) 03:39:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000500)={0x14, r3, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000540)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, [{0xdd, 0xe2, "31059a7013128abdedfc623b8377f45c99d48ea5dc64240bc3634ed14d35891ff24a3152d4a9fc840cbd1a303de0efbdf4c1a3dfb5b1c35a477d3a305258d60eecb88526e1cb59a830f03219173c83f6604ca343bd48fc5848d7471fcdd44d6123536bf569d27f42c6e6f1c6fdcbaca7e41b41209843c16b429c27dc19b7d714e1bc65854f4687dfa95712b06c3f2b5a99636f04d6bcc578906d1736e4f59493e4bf0baa050e6e989a3c0010dd115e70e422b4c812d300b24de9a1a3762b62b792511a5a538d5755779e240f23034fbd2342e6951a8b6889769364fd78afd74837ab"}, {0xdd, 0x9c, "b09961bf97c5abd19bff58098b02d783200dcdc9af3ddc0b8e49466319a6b5c6a9560adfdd56c73574ac902b81ba44090e4f2d0cd9bb3b99d52071cad3487231e42c1003c397f283aa48991c9af9f1ab3827ee9186b54885ea812b2395a3b43e5ed403622849c3df1e9f103248973f956adc37f0912654fe46dfddef754e685ff5ab547da39d555d44ac339aff5c231df430e137617b8a3c527263f6"}]}, 0x1aa) 03:39:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x500000000000000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 831.390236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:55 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000000)=0x2e, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) 03:39:55 executing program 6: r0 = socket$inet(0x2, 0x80003, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x5942, 0x4) sendto$inet(r0, 0x0, 0x1300, 0x0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) 03:39:55 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000640), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) 03:39:55 executing program 1: r0 = memfd_create(&(0x7f0000001280)='\x00', 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000080), &(0x7f0000000000)='system_u:object_r:klogd_var_run_t:s0\x00', 0xb, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syncfs(0xffffffffffffffff) 03:39:55 executing program 3: unlinkat(0xffffffffffffff9c, 0x0, 0x2) 03:39:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x600000000000000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:55 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@random={'security.', '#! '}, 0x0, 0x0, 0x0) removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)=@random={'security.', '#! '}) 03:39:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000680)={'ip6_vti0\x00', &(0x7f0000000600)={'sit0\x00', 0x0, 0x2f, 0x0, 0x9, 0x3, 0x4b, @private1, @empty, 0x700, 0x7800, 0x1}}) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x3c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x0, 0x9, 0x1, 0x8001]}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8011}, 0x4000040) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000780)={'syztnl0\x00', &(0x7f00000006c0)={'ip_vti0\x00', 0x0, 0x0, 0x40, 0x6, 0x1, {{0x28, 0x4, 0x0, 0x1c, 0xa0, 0x65, 0x0, 0x9, 0x2f, 0x0, @remote, @rand_addr=0x64010101, {[@timestamp={0x44, 0x14, 0x3c, 0x0, 0x0, [0x4, 0x4, 0xffffff00, 0x4]}, @lsrr={0x83, 0x27, 0x5a, [@dev={0xac, 0x14, 0x14, 0x19}, @multicast1, @private=0xa010100, @loopback, @loopback, @multicast2, @rand_addr=0x64010101, @empty, @loopback]}, @timestamp_prespec={0x44, 0x4c, 0xcc, 0x3, 0x7, [{@private=0xa010100, 0x1}, {@remote, 0x7ff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@private=0xa010102, 0x65}, {@multicast1, 0xffff}, {@remote, 0x5}, {@multicast2, 0x101}, {@multicast1, 0xfffffffe}, {@multicast2, 0x7fffffff}]}, @end, @noop]}}}}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xf4, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x8000}, 0x1) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000b80)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void, [{0xdd, 0xa, "bdec1f5a762c1b5304e6"}, {0xdd, 0xce, "425475e9bcb8fdfd190c5ac4215e17b0434b527f68e736c97a8f09255f74fd56dbaa96af20c8798e0b3d9f082605db3427b998b871d2d4588f1bad783ee61d5e9e640705121b0530c543a0f7111b9cb6f6dbbd1437b25eae72fd6eb4db3c2c15b48468c8bd5a917c548eeb62be80c6f65d42729191fa7bfaff0d728e4328b5eff6f2999eb18f57a5d8b11dccb41c080e32dab6aeb9e02c6788744a54fdde72fcca5fd17d50ffe5353dacac3d995ec050f6644680c0fb232e77c7f618ca3e6a9fbe46d1d7c3a578d313e2d02222c2"}, {0xdd, 0x9a, "f052a68120038d52a475a54bdf97c664372f7f0d50165a3f82ea5cc098cc2e4eda6b01cd0486187a36dd6735657dc1cc7a9dbf21dc1ff86e9484f215ae700d9bfd5c73d709d1052206850cb18f0af695917ae6d8b47d76c9e1a490f1c16607f2b821b1956e69d9c3e9067e66a420a0255ceea80617ea86546217082651d6c9cb4529259f889ef61d4a29ed2f3935d5694dd9476b7b4e15823d5f"}, {0xdd, 0xf, "97e13b3dca3f024f0cf464205adef5"}, {0xdd, 0x85, "e4a2ef0d062faa01e8de0918648019511b7e3c83ae953ba3a954cedd4bef10d15d086cb769ca171ab008796aa0c5eec9143ceaaba9810c2c2c76b98d75fea3947ec9ba5d5a20764ae0dd8a6cf5936e1407b0f4b6a41e866df7a017edca4a4e2da773f838e4e64cea63550234246d0c41f7025cd2ebbdec1e354bd4e738ba906a1ccbdc8152"}]}, 0x22e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 831.556805] SELinux: Context system_u:ob is not valid (left unmapped). [ 831.559084] audit: type=1400 audit(2000000395.420:86): avc: denied { associate } for pid=218626 comm="syz-executor.1" name="memfd:" dev="tmpfs" ino=1349 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:ob" 03:39:55 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000000c0)) 03:39:55 executing program 6: r0 = socket$inet(0x2, 0x80003, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x5942, 0x4) sendto$inet(r0, 0x0, 0x1300, 0x0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) 03:39:55 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) lseek(r0, 0x0, 0x0) 03:39:55 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@random={'security.', '#! '}, 0x0, 0x0, 0x0) removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)=@random={'security.', '#! '}) 03:39:55 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x11, &(0x7f0000000080), 0x4) [ 831.625897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:55 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000640), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) [ 831.692287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:55 executing program 3: pipe2(0x0, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000004f00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, &(0x7f0000007680)) 03:39:55 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5608) 03:39:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = eventfd2(0xfffff320, 0x80801) read(r3, &(0x7f0000000080)=""/86, 0x56) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES16=r1, @ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000540)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @val={0x2d, 0x1a, {0x8000, 0x0, 0x6, 0x0, {0x200, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}, 0x1, 0x1e, 0x9}}}, 0x44) 03:39:55 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000100)='./file0\x00', 0x2000000) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0xd4000a8b) inotify_rm_watch(r0, r2) read(r0, &(0x7f0000000000)=""/21, 0x15) 03:39:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x700000000000000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:55 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setpgid(0x0, 0x0) 03:39:55 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000280)=@req3={0x1000, 0x1, 0x400}, 0x1c) 03:39:55 executing program 5: io_setup(0x9, &(0x7f0000000180)=0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) io_cancel(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 03:39:55 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d0c, &(0x7f0000000000)={{0x7}, {}, 0x0, 0x4}) 03:39:55 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r0, r1, 0x0) 03:39:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000000)={0x18, 0x76, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x18}], 0x1}, 0x0) 03:39:55 executing program 2: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="d9543038a1b282d50a0127a3fe787904192e365d99dfc335cf588132eba1a51d12f95180d319ee1e7666ca07423b043d77f268a4db33451cf00ae47cb045f9bc4e0385ab32e07ac5000000000000000032", 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x13) [ 831.914009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:56 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) 03:39:56 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000100)=""/102380, 0x18fec, 0x0) 03:39:56 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) ioctl$FIONREAD(r1, 0x8901, &(0x7f0000001a00)) 03:39:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x900000000000000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000004100000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000"], 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000540)=ANY=[@ANYBLOB="500000000802110000010802110000000802110000eb00000000000000000000640001000006020202020202010882848b960c121824cc7b2253101f0000008ddafed1101596c9db1e9ce790d399438cb5d3593736f7fc16e81a67e347b169363f37ba4b17c8e1765920da4fa61bdcc32501d41dc6644431dbf80a4e89f0eac4ab06c817"], 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000500)=@mgmt_frame=@deauth={@with_ht={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x1fc}, @device_a, @device_b, @from_mac=@device_b, {0xc, 0x3}}, @ver_80211n={0x0, 0x5, 0x1, 0x2, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1}}, 0x2, @void}, 0x1e) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x619) 03:39:56 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5608) 03:39:56 executing program 7: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@random="8fccf763792d", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x8, 0x3a, 0x0, @empty, @mcast2, {[], @echo_reply}}}}}, 0x0) 03:39:56 executing program 2: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="d9543038a1b282d50a0127a3fe787904192e365d99dfc335cf588132eba1a51d12f95180d319ee1e7666ca07423b043d77f268a4db33451cf00ae47cb045f9bc4e0385ab32e07ac5000000000000000032", 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x13) 03:39:56 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5608) 03:39:56 executing program 7: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@random="8fccf763792d", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x8, 0x3a, 0x0, @empty, @mcast2, {[], @echo_reply}}}}}, 0x0) [ 832.289893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:56 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 832.351738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:56 executing program 2: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="d9543038a1b282d50a0127a3fe787904192e365d99dfc335cf588132eba1a51d12f95180d319ee1e7666ca07423b043d77f268a4db33451cf00ae47cb045f9bc4e0385ab32e07ac5000000000000000032", 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x13) 03:39:56 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000040)=0x1000, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000)=0x9, 0x4) 03:39:56 executing program 7: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@random="8fccf763792d", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x8, 0x3a, 0x0, @empty, @mcast2, {[], @echo_reply}}}}}, 0x0) 03:39:56 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5608) [ 832.412144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:56 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) ioctl$FIONREAD(r1, 0x8901, &(0x7f0000001a00)) 03:39:56 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000001200010e000000000000000028001a00e0000002000000000000000000000000ff020000000000000000000000000001f3a3fa"], 0x38}}, 0x0) 03:39:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9f541f59a1b302000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:56 executing program 7: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@random="8fccf763792d", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x8, 0x3a, 0x0, @empty, @mcast2, {[], @echo_reply}}}}}, 0x0) 03:39:56 executing program 2: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="d9543038a1b282d50a0127a3fe787904192e365d99dfc335cf588132eba1a51d12f95180d319ee1e7666ca07423b043d77f268a4db33451cf00ae47cb045f9bc4e0385ab32e07ac5000000000000000032", 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x13) 03:39:56 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:39:56 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) ioctl$FIONREAD(r1, 0x8901, &(0x7f0000001a00)) 03:39:56 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x6, 0x0, &(0x7f00000023c0)) 03:39:56 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0x3) 03:39:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0xf00000000000000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="10000000080211000001080211001b000802110000002000010000000100010882848b960c121824"], 0x28) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000540)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0x4}, {0x40}, @initial, @broadcast, @device_a, {0x0, 0x7}}, {0x9, 0x0, 0x1, 0x0, 0x9}}, {@type10={{0x0, 0x2, 0xd, 0x1, 0x0, 0x0, 0x1}, {0x131}, @random="6c1931d1dcc9", @device_a, @random="610b905d69f4", {0x7, 0x2}}, {0x3, 0x1, 0x3, 0x1, 0x9}}}, @ver_80211n={0x0, 0xff, 0x1, 0x2, 0x0, 0x2, 0x1}}, @a_msdu=[{@broadcast, @broadcast, 0xc5, "c73130e3e35f9964a8c167f8f63ba92bb30d06f178868d13924e497f539e5618bbba3269da4dabef3ea26132208f66968ae75ad00ed32bd95bbc8ea75f8ac045ebcc90b9941b5ff14488908ba26494602af52ba8be604c5d567d4fdcb995814a84541a7539631dfaee0bf0d805686df15b6e7f2322b3ca40b71c393174c50de6d073def15eb9659d9429db6a0eaf7c13e6fdaa1f8d9c47ef42c4ec47a9c277b68489c39d4a0935b310af02214397adcf50744531b1d54d22b8d08213fb76621d0164bbb601"}, {@device_b, @device_b, 0x74, "3851acb8b94df67d3b09fa21f82e951d8319576c7dd22824eb7b670d477bef1100255c92dd4243d8874d961745b8d5b8d53eb2b5960c819863f536d4a86e7dc3bcb9006e14dd44669f7a0ec389966f0a6ebe8e711bee1fe876885265bc05b8f8854bdae6cb621e52f1b414476ba47ca391b9cf1e"}, {@device_a, @device_b, 0xbb, "4c0e890f1e6112074c99a1f4b0520feb2d16e03b0e150140a263fac3b1ff421c19898d02ae565e10b9865c47f886560214671f167938eb59f7643550a4bc8d4afc210b263087d000596445eca72602050ecc2ab26afeae8dc1521d90363b6cbf8269fdc883b71489af771b496bf4a0575a687ef402b8b7904fabd40b6ec175abc6ef18486631c1620c1f046fa564be847f915cc0f4183280d2208f5ae88fc573ef6af8a3d6d2d8b50ea3473e149261ca5dde14cf62a87a2ac0b17f"}, {@broadcast, @broadcast, 0x45, "a17f67f40e4529afda2b14c0266aeb8dd112314cf8bdc612253944f87aafbf1677dbc433c4ccd03c3520f405d853ecfe5dd32a32ba797b45bc16a641b5bc077c00b9263b46"}, {@device_b, @broadcast, 0xf4, "d4d57ac5f54b5b43cfb734ca7aebdc6d31317619411b11f940d573bec3a79a5a366cddb250220a01138fc2e9ac5a38d9fa9e114210347d416dc269778eba2984c5b73a4774a4cd30df5109e28d8f01c3cfaded12cf95c76146125b42361d4df58224966561eb2a285e14e00d92d88c31b1cab578f571cfa2e211fca7c38028b03c795f1ce32be911cb13a6e9dd9b3d93ca7d8b34326271f0152592ad5b5b3d2e3ed6fc75c21e0ef894eac5159ca2554d0ab6ca17ea8dfb281d0415b92a2ce1f4178ca82212d2775255b417c616acc2d6a177de28cea644d392b7846df617bfdef292eff8eac91199d3f2c9e14fe994a29dc72dfd"}, {@device_a, @device_a, 0x6a, "1ba621cb79a1a24ff4e8858e43551218fede10ff0b5c3ef38ae0571329ea812feb3e34f78733ec4a820e76ddb9bc29d483d6447d2d81360c75248bc529d9756fbe1948bb6ef7341fa45dbc6433c548c5ac113f0c08478948ab1931f693832edd4f4064112e2631f57422"}, {@device_a, @broadcast, 0x76, "03705c139ce59a1810a68266b37eea792cd6b473f0c71835d32a3820b78d5c91e61b1bfd559e27b67954f806aa190536104152e3a74341e12a3bf07f9043ff8d235a14d41f6ead79cd647a42bcf72c1cd67b4cfe4ec414bd9eb8fe572171530cef2bd6bca609d501ec63d80254e901eac0b9867579d2"}, {@device_b, @device_a, 0x1000, "063562a8600304c7aae9044016a719c6815763e755c1b470a6cb7feff331d2b63028f75a1d7c35cdc4204b8c2b218128c68612d4e4d4790c0c243aaee58753b3b14a42a0fafdb37ce4fbfa0aad6c3142fdbe35f33097ee0748a215ba63a22a114e7778c486ad9fa17992c3002b0eda615a19c4e0337e6f00f3475c98463b5e1e26df2641efc6fe94830adefc0b946227eb3cfef451dfb7d8e31bd7447ff44e7c8435b7d589ec8dbb999e1f4b00f230713b7a31ec0a9efea885928b10c8ac7b308f407b4ee63615624a3570364405b0d729024f260a60d435b6570b3dbba2fbf1fbe0a4a821557aeb5c59902750466e696e774c9341f5ee01277d7f2631853d65c2f5e67fd312b6d35f70531510c97baf063a67c51950182a5a5744607d44e6f0c3f71a81f54e569e35bb672145413c898047138456459a39e37d4a786d20380ed0e999e44b372a2e24d33ae671bb29ca91d919e9e4ce8f6a0151f211c98b5fc332f5a9fe04ca6be1d12af2fe4e053ff23e4bb6e02bf1c846c3440c64a27a02c2e6e95d1af24c7d4e10f252b8d739c63f75390811c31fb23cc87b9212e95517719dc8f5bb1e25638e1d6149587a8c6973084a5e904bf9aaa604540d177f1f978e2e9fadf734d04b10e7919bd29a1058956285d4fe7dc38555c65b649767397ad3940142349d0dd13149533ca555cc497e58ae5e8e214e2c2f5e4c21a95d2471a68a2604a924271109ff7d1ca7dcabda356c6d0eebb5e35309b707b394f63a056c2f977d66533cab2dff79c6f2d94aa960327fee479eccc9a29d84807cdee4f93ae0a2b86690457070f5898720795a83101024d29bcf0bf0b1a49da67097a33630fff4817aece9963954059108b8e252e01b95dcffc0b83a12ac5019e63021bc701b36a6d35c61be8d670fd0388523a2c949f8bd41ee6b5989724ba038402aed7789b8da030e769b9738c3853f7f1a981430d3bc26520c2dab31321bacfaa59db7eb800ee43eeb9b2339c75438255a80f1a7f37fe175a4d03e57442ae10ef82f7e7489c7c3c57b580860a5586f2cca61651093f6931455e6b44c2097bb99a449ceb30f84e87aae0ac5ce7e98219b8e96ac21bc120f4723d0969c8a8de55358dc6a76e8bbf521cb459e3e283df79aa7112e6e7ebe88c7287262840ab68195d53ba540d727109c19b825fc2dacd0c34d4e68b22d36fa5b7f4798ee75afb9a5b6c04605f6a4a5ae85df5021f7b2b63a13533d6a67ba9bca0514f09199660e4d9ed215d73617d24d175770cd13715f276caa3db72ebafc19f69aa10bb1873e58bd3273b2e3dd0979199a7d5dad3211f36af57f51a3a2bfd19ee19ce92ad54ecadedeca09dad2c1f1bdedfed5243169b23a98dc03a1613ad507315e68462cf6b3281c67db040d712df3f2e130a9fd021bd437a5b87d9a8ae277b82184f3b741c5433bfe2e064e14b977e30316957912480217511811a0cfe125550e19db961741321cc44cceb347df9234b828375d28f5aced3eef4ae639b9a7210cf9a2c0a531147ba630b1b35b969859bcb5c0af0c4edf5393549f66495ec84816721ed609f534f4d88eb6d65a226d8946150a1d8b647fec2cb314e25a89028e9658d48ca9f13f7f83d4e8ce0ed876321369578c3f59f6ff0594c67db59f17baf4f44e90504421a78bdf70954b428a67902b92d20198dcce4298857eac156aca3e1a031ec9b52a9af573d31e8ea967d735a27a338e311cbff95fe6d9927a2bd0994fef0a618a6faab313a975bd9b9494986e397eb21a55f166609846fcdd867c652cd1e23e2d084cc15d9380a9017e0ff1e40932375c5d586bd1ea2ca021e6221435314273b8e5ba03d227f6deba7d498fd56d14bc72c124c4b8cbb028ebafd08bfd53196b21252a62c7b70eabb411b081b15112ec6f927a8b392645c7b17c4da5dd4d7c49b097ad06a3d988e1f8688d16950a3f72978be01594a1c61d7ef20325d1a3ef71e440e963146f090325cea0ccbe95cb2750036eee01927196364ad8b71e20d92115949c40ddbcd61ace573cb622a01f539d928959b8156af0cb89225506db4c77b85823d4393c2b2c31f4bbeb36cdba59dd0968055c2e6ee894bd5768cf0889802d0432972f77b827aad19b9eadc04f31ce35ac61e1cea58fb436369f4af678d7704cc8a3493da2c0157803da125ee2d5a822889e6500525247e21bf81cba58fd153a286245a4ac1d5e0ee5f839679bf5ad50c2bda53461cce6ecdcb2d50264c7e48f29ffc8c53ddd1bdd900135fa55344059cae3e06242f0236d3234756993d730aa90a891873bff3e9480633b565fc44cc8e9c51843a869064d77a7f22b2280a4b3502ce447e9a6b0b2ab2c5c2ecce51dd17fd9adfba8c2ab46db996f7e3bfc3bcba99e9fb4ee072f8f078e77ce2d27016928f0df430535e3176eafd5f9aa1488926b180f8f708c5e54d038602366b0f7a585d7e81b96b42ebf8a13c0c377ab985c8c3ced2b3c465fc7d1c1bf5b48e2772c09c65dad2c583e64c690ec3d10935275c08bd27719e7191cc761321cf710b43e8f6128c7e9b72adfb61ede312897004317fc71838ffbba1f18be724f48891ad43488481f3626492ea834e743c825645803d5661af2fc607a844aeb54b47f1cd5f589970fc11b649842bdd21738823d8d1a2776600c436f325e173da7a0ef3589166293be285ce561a9b6957eca17aa07ccbcec0f2263e650dd4c1506e79542c87708f89470d456813da87f769aed0a47344691bba75dd45bc88deb826baa8fb557e3c5e57c9f847c35e4dbf417ddbfae70cbc96724fd9e702e03ba146b419f68a7ffbad6adef7f6179a1dc4f954af1e0089a47f11fbc83ce8c49a98ceac8af074a8dcf5fc17291377eefe2987d5e77136de68334c7fbaf7a1be8310b91ae26dcce79a13d68e5703c71cd3c7e93b069d812c89d53f41babe6cbedec998a05a16848742ae06c23b91288e7c7fccf768e4c6b64ff0146e1f8e5cc55f53775975b10bae5a30caaa633971ace40632b24cce5783fc73ad0d7936773551bb5ede1a4c52b8028c8b354258b2a7ad196a5b62a5deb5c063fdc866bcb59e21d307378686dc471f04edb0850c202b24f7acdcb246cc740cd36728cb2e78373a3d4aada46d42a14a9d3accaca06903df67e599b551f5ee86a00e4ba3405e0703b3ab863a6a874880f72d12b4b1518202fdc950ff5ef958c47a37c5da12b8dd6d0a835b21c70bab696f0b4ca025e68fcc8e488269358a5ea42be67f10299c5f5bd0fc07ec79f034c2a8869aa121d2af0e2db1f194091f4de0912cac6394175d1f1a32f8a55efaffae4340823db36f98bb0634523612da5369f6727cbea8ad347430fdf47a29813c9112b598445be75b89306cbc80c1c9c8c5cbdf3c3c2faf94deb3874df625c46a107b0f1fbb64a865186444dee25bbc29d04b7c46d733e499dc91a1fbf8b5ee5347b3d6525b513004126e656d8d06b422b8ce24b3c83d40dee0603f9eaa019f65f508f52d625f5a4558adc57e86861fca075b5171cfd291ecde5976e8e246b82f1a6925dca1bdebb76ee0552636a7364619832d6b87b28622d261672d8d86df88e20b878d3dfdfd40d4c6a9540fa51b74b713d4e8826cbeb537e348e17dceb3b6bcfbe5eeb6e377ea1ead4ed7f2d376bccb44e86071b4021e4054d1dbf82e891aeb5b6014a27b3e2512186ee206b5e8af7ec03f08bf16780a2179b2bf42aacbb759661dab9036879b6e0c06e575a0f7e96fdd92709ff60a7a7c425b4f1a4db953ecac4a2640034c836cc7ee8deb77524e4f5fbcc9ce1823772eb1149ee576e30ec7e70da7d7ffb25109a9990ad0cf6c2e435c11e5e0b8169f5789b7db2e88a51e63736897ed39ea34d523227c6d01958bd992066e63e984ac00a78befbae93e12569280a3da728a3ef648a4d99ec10c889318219c99674c0d9a7627ebbd02fe455af733a267b7ddbb1a7f4e29645a0aec5c592442aba625278e1f745db152565601f1e08188fb609e2d2d8d0e4373ad3a66bb47992f14ea8b9dba3389427a1c07a3f8579d11d336150c19b5d12af1874d9523114a275b58ab3f957390b91251420e7a1cef3e95a634986a0c1bf4cd096fe34fd52dc53c95e36c5a13f35f65d5ca91e6784392629518982e43ff58399b99e50948adca57506b9dafb093ece67700818fe1ea7d3da0de8d53034ab1bfda4cf54a63cc508534368207ae033451fc0d4108f45641c813afdfc43638ace8517aea42bfa4c78cdec8e86c7118a2217bb5f6d8b1b1d30c4ead1045766e3b77031e5dc2e967e7bf0c66d09834ad9f7d14443c697a8cedc96b6e6bffe3a4e26135b7038faafbefa886be1b4a1de82af3b00ff551769691f5fb7dd5438e0ad3d11c6db16363a0541ad84ee794167f450ba2c7a39c97e9471acc596bf2e06a3078c0358ac153ef5fa7f61886733743580a7a79591ca05f38249c2d71d8f97335c4971865d352af4bed5ade27d15b89eaa883b66bd92e9c014d16a480bb2206c6d612a11f7a46ea07a480d56d69fa4c1de14476f5551deb29088c72740c91c749d585e5d0c0989100e537d258400245f57d6723a312e5f3f2d810924298ed13a42c4b5bead379845c5c328ff22b035076564c3e273478ffa804003b80d6ea5c9ff47fbb15b3a28fd9f6836d5e34e46bd51e75daf56b7ab157aa10060069a3156d0bab67a05e5f5b450468b2e823db023d978fa93a6c178835d9ed6be14db67af9c08f89920bbfda7016a1fc25613348f411e362f042173e12ee59de879c7da530518435efc5292140931856cf93de9d7d3ebe2b2cce73bb973d531087c49c9b9d52f6d6c28d5f4bf55d5c1a4cf636aac58c2aa90a5654eb9abc8b780ba4df9f0d87e2ea61b3625da0fbc8b46ec4446480e2ddc699771768cd4dc99cff133b253da53ee9aa069f354681a3bc17e79d4ae9ab27846fedafd736a729c04c546bf712feed4a638840bb2098cb8cec568c4c8989f6ed4253171bf6e164caae361a6b8a11f021376fd23357086fadeb416ad74316f4f14af79e1fbd8ac510c0517fa61baf6b7b155927cb469be0921dbe7cd7776908ec6094b4a11358b438872e5c87ea8f1269ebea00df150492c5c85266589c6586866253cd82e6cec3c241abcf6ecff7204135e9a9feed2f452a76cc4a0d224495b0af5a5216fabbf18456a338c10eb2e5c1aad7ba63642dfb7e5a95bcc79f4d52ec284913f141e0db216ddaf10a8be1f9ec0c6df6b90672fb731c1214249aa05f868709acb9686d5534b75f2e74ed41186887ed567700b35640002656833fb81e87f64a65c769e2bf2595016ad31f70b39d67c28cebc481855191a7ee46af96a55913921451f8373d5c481e6d4312ac3b0657994d2eb087c6d224a882385cde98e586455b0b3bd38ae3aa7d18b4acc90cd5c1d398af04f56d2d50c297752382d31e9dfb4d2aa3572e233afac22103c2b4e3cfea2900fd55e8b6638a7ed2ee26cd399e54e9b8d3154013acb2bef65d0c109c3a04d397897a2c11f72607a48d45c215aca0aaf198fd35559419e1b708cdac461efeb5972b537ee9a831a566689e5c102db26ff03d4189dcbc1110b6882ed6f4e7e8239417e3ecf0929113e52c6f54fa2e239c19a76041730f99b744762ed63f5bb03afd5c80c414c895fcaba39b7c45270b98fda453d3ee149cc1f3e6268ee11545865b14b5fd0c1bcbbc206f4a19cde3ccbe2798400980f67146ebce8281170c85ffb55dc0fbac108c82ee25f062c47d7ef20a6c8a14b5f56fcdbfed8bb832f"}, {@broadcast, @broadcast, 0xf9, "f92cb47c7f26fd45d6cb361aacf462ec5a981bcc9aa6400dd4696deb67db36ee41a89b7475bbafaa00736e6f61fe2621086fc8df608e4ee57f4a9709830c132c32b651789f21d520d6b93d81481125e8aec6376cc2353e8b0d76ed46be18d799f430410e1591011ba1cdac39fd8ffef9bf607f4b99ff58b08480a3e817504c007522f1279bd1c1ea53948a57b1a52dba62eac520fd3ec4cb08ad3c8127938ec8ab84f59a6d9991bef7599add725a95e152ac801570b5e995d171ce16efd1b9fd22e73d15451313902b73a3946d84bffe76ad71cd638125926262bea75b49a93b325931a95e18c2e090810b93f6822a2f5a2fb4f01603f4e68f"}]}, 0x15c8) [ 832.844922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:56 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:39:56 executing program 6: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) 03:39:56 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) ioctl$FIONREAD(r1, 0x8901, &(0x7f0000001a00)) 03:39:56 executing program 7: syz_mount_image$ext4(&(0x7f0000002580)='ext2\x00', &(0x7f00000025c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@journal_path={'journal_path', 0x2c, './file0'}}]}) 03:39:56 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:39:56 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0x3) 03:39:56 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0xd, 0x0, &(0x7f00000000c0)) [ 833.047462] journal_path: not usable as path [ 833.047856] EXT4-fs: error: could not find journal device path [ 833.059019] journal_path: not usable as path [ 833.059424] EXT4-fs: error: could not find journal device path 03:39:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x9effffff00000000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000f61bb704d62cd04c08000300", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 833.122152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 833.175657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 833.228405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), r3) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0xf0ffffff00000000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:57 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0xd, 0x0, &(0x7f00000000c0)) 03:39:57 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)={0x28, 0x28, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x2}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x28}], 0x1}, 0x0) 03:39:57 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0x3) 03:39:57 executing program 6: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00') setns(r0, 0x0) 03:39:57 executing program 3: pread64(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffff5b3) 03:39:57 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001d00)) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ftruncate(r0, 0x0) [ 833.386470] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 833.390800] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 833.411710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:57 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0xd, 0x0, &(0x7f00000000c0)) 03:39:57 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000001440)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x0) 03:39:57 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001d00)) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ftruncate(r0, 0x0) 03:39:57 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x1c, r1, 0x5, 0x0, 0x0, {{0x7}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 833.479063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:57 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x80}, {0x6}]}) 03:39:57 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0xd, 0x0, &(0x7f00000000c0)) 03:39:57 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0x3) [ 833.532394] audit: type=1326 audit(2000000397.393:87): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=220366 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc1c343cb19 code=0x0 03:39:57 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000001500)=@ethtool_stats={0x1d, 0x1, [0x0]}}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:39:57 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001d00)) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ftruncate(r0, 0x0) 03:39:57 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={[{@fat=@allow_utime}]}) 03:39:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0xfcffffff00000000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_a, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:57 executing program 7: prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x8004}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) 03:39:57 executing program 6: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) readv(r0, &(0x7f0000001f40)=[{&(0x7f0000001d40)=""/62, 0x3e}], 0x1) [ 833.698167] No source specified [ 833.702388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 833.703625] No source specified 03:39:57 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@mcast2, @in=@remote}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 03:39:57 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x41009432, &(0x7f0000002a00)) 03:39:57 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001d00)) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ftruncate(r0, 0x0) [ 833.766070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:57 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x10000, 0x0, 0x0, 0x0, &(0x7f0000000600)={[{@usrjquota_path={'usrjquota', 0x3d, 'mnt'}}]}) 03:39:57 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000180)='{{\x81=\x00F\xea\x94`\x96x\x16\xd0V<\xd0J\x8f\xc7\f\xfb=\xb3\xf4\x00\nR\as\xcdY\xeb\xad\xa2\xf0\xaf\x94\xb0\x93\xe5\xa3\xde[a\xed\xf2\x7f\xc2 d\xb5\xe9\x94\xd8\x14\x8b/\x95\xc5\xd7\xdc\xd2\xeab\xa0\t\xb3\xec\"\x03\x9c]\xc1S\x03\xbc\xce\xad\x1bC7\xa1\xd5\v\xbaPw\xb9N;\x94\x96< \x81y\xb2\x1f\xf9=\xa6\xc2\xad\xd9\xcd\xa7\x91s', 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000100), &(0x7f0000000140)='system_u:object_r:event_device_t:s0\x00', 0x24, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r1 = memfd_secret(0x80000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @random="769a535ffb74"}, 0x10) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 833.824084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:57 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getspdinfo={0x14, 0x15, 0x101}, 0x14}}, 0x0) 03:39:57 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000001500)=@ethtool_stats={0x1d, 0x1, [0x0]}}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 833.886308] audit: type=1400 audit(2000000397.748:88): avc: denied { relabelto } for pid=220923 comm="syz-executor.1" name=6D656D66643A7B7B813D dev="tmpfs" ino=1351 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:event_device_t:s0 tclass=file permissive=1 03:39:57 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect(r0, &(0x7f0000000140)=@l2, 0x80) [ 833.908484] No source specified [ 833.913161] No source specified 03:39:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000008c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3a}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x30}}, 0x4010) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000540)=@mgmt_frame=@assoc_resp={@wo_ht={{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x4}, @device_a, @device_b, @random="b1a27cf4f2c8", {0x5, 0x5}}, 0x3800, 0x43, @default, @val={0x1, 0x7, [{0x9}, {0x2}, {0x30}, {0x18, 0x1}, {0x18, 0x1}, {0x16, 0x1}, {0x16}]}, @void, [{0xdd, 0xa6, "ab98ac97cd19c4ea56c8e4f9487ec70183dfa9f6dcd5ebc28f079fbfb01f2a777435449c8042d14ec16c2bf5a6f0c00625d54c85ba69bf8f6b7ce38e7eab50bab838ff65ac19a6691a0dea1ae4fd923f6fd2903f3bcf1aa715820f040668a218ce14581ed67f5bf5a5c76d8984bc1ebc2107676d8507e7fa09cdbb8bbc5205a5aba7e86928e7230ac7f29a50d3ea3de9fa0dfe3d4a628b3b3dee1b560603c0b2886db30f9ebd"}, {0xdd, 0x44, "8fd9888b54000837d9e2d8939b27e2cc626818521fcdfdbdc3c60ed23b6ff3f6f828d768fbc861eb76e173524b8a75d8048cb9ec02628c6983ec752ad6f430f7b511420e"}, {0xdd, 0xb3, "a95d131a750572505b1463fb38a10c161623cb2141834e2251e4fb2260d6d4a91f2b3b95ae1e66c56079ba0c94193fb254186a01a78202a62479cdc0bdeee4f57f2172c6c413d19afa4561c6623f817efe7e7029f815fea0e117fcf9fe3394e68b290615557ed2a38c014b0060f811236be37524adc08f181ec2f3dc67878e357b31d3007a20289627fef816e79d7fff4da312fb64083216553881aca2bf47eb3456c427ca54c24fac15b75a80aa6afe24e1e3"}, {0xdd, 0x40, "a74c8e87327d047e36f6cedb62b8e693ca8c8a38a5d9be1f6596a7466495e37feb339590f1d8bdf19d2e0e37cc07693bb6033849ef143c9673a59fd0162a3094"}, {0xdd, 0xf2, "b28c687c59b404095e75b4e8c23eebefb3a6bf0109d917d29688d30a69902d1dfff2c6198a5f5d6eb593076b1370d78249ed689cdd4200f389fa7b0cf8c3b400a0c69b9900ad0a6048fa2ed0f0cbf080f9c50d288f89ca1b53d95e617b7ab5bce66772d15db4d79de5c2647921a6821bb7dfd375f8ce3f7e38c0d42e1969296c70fb937e28f9940215d952f998821e1fbe81a3fc92fe036ac0cd53424b6fe90353f39e07a7a3a4d59928cd6423979d9238c70057f37aff2333bc714070bedc5d972f9c5712e9d9d0b4211eec263abcce9d8c38e6a797040b26fa393741896f54f8c12996dddc869e0fb4ea9dca79f500511c"}]}, 0x300) 03:39:57 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLINK(r1, &(0x7f00000000c0)={0x7}, 0x7) fcntl$setpipe(r1, 0x407, 0x0) ppoll(&(0x7f0000000040)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) 03:39:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000001f00)={0x20, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x2}]}]}, 0x20}}, 0x0) 03:39:57 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000001500)=@ethtool_stats={0x1d, 0x1, [0x0]}}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:39:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0xff0e000000000000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:39:58 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) 03:39:58 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000001500)=@ethtool_stats={0x1d, 0x1, [0x0]}}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:39:58 executing program 2: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fadvise64(r1, 0x0, 0x1, 0x4) 03:39:58 executing program 5: syz_mount_image$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='system.posix_acl_access\x00', &(0x7f00000049c0), 0x24, 0x0) lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_access\x00', 0x0, 0x0) 03:39:58 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGETKEYCODE(r0, 0x4bfb, &(0x7f0000000000)={0xffffffff}) 03:39:58 executing program 6: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) readv(r0, &(0x7f0000001f40)=[{&(0x7f0000001d40)=""/62, 0x3e}], 0x1) 03:39:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="440020c0983a5de50dae22767e7d53f91e8ac62dcbbaece829a35baf42a24db5bccf1d0f00ff8845c8690dd8867c47ff49863de4c7b8c16089", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000"], 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="b00000000802110000010802110002000000000000001000000002000000"], 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) r3 = eventfd2(0xfffff320, 0x80801) read(r3, &(0x7f0000000080)=""/86, 0x56) r4 = eventfd2(0xfffff320, 0x80801) read(r4, &(0x7f0000000080)=""/86, 0x56) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f0000000680)={{r4}, 0x5, &(0x7f0000000640)=[0x1ff, 0x0, 0x100000001, 0xffff, 0x1000], 0xfffffffffffffff7, 0x4, [0x1ff, 0x10001, 0x60000000, 0xab]}) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) r5 = creat(&(0x7f0000000040)='./cgroup/pids.max\x00', 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8001) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r6, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1a72, 0xb}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4344}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x80c0}, 0x4008010) [ 834.697258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:58 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2}) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "aa59a295b8abf010"}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) statfs(0x0, 0x0) [ 834.761020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:58 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f00000024c0)=0x5, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) [ 834.827807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:58 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) creat(&(0x7f00000000c0)='./file0/file0\x00', 0x86) syz_open_procfs(0x0, &(0x7f0000000040)='net/softnet_stat\x00') 03:39:58 executing program 2: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fadvise64(r1, 0x0, 0x1, 0x4) 03:39:59 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x541b, &(0x7f0000000000)={@local}) 03:39:59 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000c80)=[{{0x0, 0xffffff7f, 0x0, 0x0, &(0x7f00000006c0)=[@rights={{0x1c, 0x1, 0x1, [r2, r2, r2]}}], 0x20}}], 0x80000, 0xc0) close_range(r0, 0xffffffffffffffff, 0x0) 03:39:59 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x3, 0xc, 0x0) 03:39:59 executing program 2: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fadvise64(r1, 0x0, 0x1, 0x4) 03:39:59 executing program 0: r0 = creat(&(0x7f0000000040)='./cgroup/pids.max\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8001) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000540)=""/193) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x4, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x44080}, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f00000038c0)={&(0x7f0000000280), 0xc, &(0x7f0000003180)={&(0x7f0000003800)={0xb8, 0x1, 0x9, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x9}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x4}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x74f6}}, @NFCTH_TUPLE={0x20, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}]}, @NFCTH_TUPLE={0x50, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}, @NFCTH_QUEUE_NUM={0x8}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x180800) flistxattr(r5, &(0x7f0000000040)=""/31, 0x1f) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003780)={0x70, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_BSS_SELECT={0x3c, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x7}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x100}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x7f}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x2}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x7fff}]}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x70}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) recvmmsg$unix(r5, &(0x7f00000035c0)=[{{&(0x7f0000000640)=@abs, 0x6e, &(0x7f0000001840)=[{&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/201, 0xc9}, {&(0x7f00000017c0)=""/79, 0x4f}], 0x3, &(0x7f0000001880)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f00000018c0)=""/227, 0xe3}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/227, 0xe3}, {&(0x7f0000001b40)=""/176, 0xb0}], 0x4, &(0x7f0000001c40)=[@cred={{0x1c}}], 0x35}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001c80)=""/217, 0xd9}, {&(0x7f0000001d80)=""/87, 0x57}], 0x2, &(0x7f0000001e40)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000001e80)=@abs, 0x6e, &(0x7f00000031c0)=[{&(0x7f0000001f00)=""/215, 0xd7}, {&(0x7f0000002000)=""/38, 0x26}, {&(0x7f0000002040)=""/202, 0xca}, {&(0x7f0000002140)=""/51, 0x33}, {&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)}], 0x6, &(0x7f0000003240)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00faffff2b000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50}}, {{&(0x7f00000032c0), 0x6e, &(0x7f0000003580)=[{&(0x7f0000003340)=""/212, 0xd4}, {&(0x7f0000003900)=""/268, 0x10c}, {&(0x7f0000003540)=""/18, 0x12}], 0x3}}], 0x5, 0x4040, &(0x7f0000003700)) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000003740)=0x2, 0x4) 03:39:59 executing program 6: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) readv(r0, &(0x7f0000001f40)=[{&(0x7f0000001d40)=""/62, 0x3e}], 0x1) 03:39:59 executing program 7: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x8000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:39:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0xffffff7f00000000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 835.748894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:59 executing program 1: setuid(0xee01) prctl$PR_SET_SECUREBITS(0x18, 0x0) 03:39:59 executing program 5: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r0, 0xa}) keyctl$link(0x8, r1, r1) 03:39:59 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='nonumtail']) [ 835.824874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:39:59 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_IO(r2, 0x227f, &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:39:59 executing program 2: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fadvise64(r1, 0x0, 0x1, 0x4) 03:39:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TCXONC(r0, 0x40087101, 0x0) [ 835.937854] No source specified [ 835.949269] No source specified 03:39:59 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {}]}) 03:39:59 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2287, &(0x7f0000000000)) 03:39:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000040)={0x2c, 0x0, 0xb, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004800}, 0x80880c4) 03:39:59 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBMODE(r0, 0x4bfa, &(0x7f0000000000)) 03:40:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0xfffffffffffff000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 836.340287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:00 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2270, &(0x7f00000000c0)) 03:40:00 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, &(0x7f0000000080)) 03:40:00 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) creat(0x0, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x20000000) inotify_rm_watch(r0, r1) setxattr$security_evm(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) 03:40:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000000)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:40:00 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBMODE(r0, 0x4bfa, &(0x7f0000000000)) 03:40:00 executing program 6: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) readv(r0, &(0x7f0000001f40)=[{&(0x7f0000001d40)=""/62, 0x3e}], 0x1) 03:40:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={r5, 0x3, 0x2}, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000040)={r8, 0x3, 0x2}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x130, 0x0, 0x131, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x48041}, 0x80040d4) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:40:00 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBMODE(r0, 0x4bfa, &(0x7f0000000000)) 03:40:00 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBMODE(r0, 0x4bfa, &(0x7f0000000000)) 03:40:00 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBMODE(r0, 0x4bfa, &(0x7f0000000000)) 03:40:00 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="e9", 0x1}, {&(0x7f00000008c0)="ae94353eed642b46b078fc4713bf42a026e53369448ce74974d825cd3f169f42b3a7fbd198661637bec3d10d00e69594f5646e2b8494b219458203243fdf2035e12a879a2533277fb447996a8d3723b2d9cf732cabedc4bcb12fa1f4a2092e987a8a7c42a1fe65", 0x67}, {0x0}], 0x3, 0x4) fcntl$setstatus(r0, 0x407, 0x0) 03:40:00 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0x5) 03:40:00 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBMODE(r0, 0x4bfa, &(0x7f0000000000)) 03:40:00 executing program 3: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f00000009c0)=[{}], 0x1, 0x2, 0x0, 0x0) 03:40:01 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) 03:40:01 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBMODE(r0, 0x4bfa, &(0x7f0000000000)) 03:40:01 executing program 7: timerfd_create(0x0, 0x0) pselect6(0x40, &(0x7f0000000140), &(0x7f0000000180)={0x3}, &(0x7f00000001c0)={0x9}, 0x0, 0x0) 03:40:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="100000000802110000010802110000000802110000002000010000000100012882848b960c121824"], 0x28) 03:40:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000040)='./cgroup/pids.max\x00', 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8001) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a80)={&(0x7f0000000940)={0x134, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x20000994}, 0x20044004) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="3dd9a43538ed1bd45afdbe150c54d42892ff6a6b5189d93f506ede9d79725c0e3040b45347e0c2fa5840d00a0eef8936e575554252d541baa87af55fa546d67d112a74b3edcb183f94c794c9fe36ff4fafd4b4bbc35bd2d317313f2ea288ee3e3773c9586d2de2843301010000219003001b9db7053147d33c5763a62271866dfa2adcc0495d278de6880ee81801171f5192cdda9c0931ea35a1d65668d7", @ANYRES16=r3, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) r5 = eventfd2(0xfffff320, 0x80801) syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) read(r5, &(0x7f0000000080)=""/86, 0x56) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:40:01 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)={0x18, 0x52, 0x101, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}, 0x18}], 0x1}, 0x0) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000100)=""/205, 0xcd}], 0x1) 03:40:01 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) connect$inet6(r0, &(0x7f0000000b80)={0xa, 0x0, 0x0, @empty}, 0x1c) 03:40:01 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x4000}], 0x0, &(0x7f0000000040)=ANY=[]) [ 837.644760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:01 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x114, &(0x7f0000000000)) 03:40:01 executing program 7: timerfd_create(0x0, 0x0) pselect6(0x40, &(0x7f0000000140), &(0x7f0000000180)={0x3}, &(0x7f00000001c0)={0x9}, 0x0, 0x0) 03:40:01 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b2f, 0x0) 03:40:01 executing program 6: syz_emit_ethernet(0x83, &(0x7f0000000000)={@multicast, @random="61e66292fb0f", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "51c552", 0x4d, 0x11, 0x0, @private2, @local, {[], {0x0, 0x0, 0x4d, 0x0, @gue={{0x2}, "913da906a098b181b0abcfcdd57a0d354940bcd38dcb868f3a6ba19b91a07d0276f5292aa58165793ee182f9599cab30240f2a6e0095ae120ae409c2d3"}}}}}}}, 0x0) 03:40:01 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000000000)='\a', 0x1}], 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x802, 0xf) 03:40:01 executing program 3: prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x0) 03:40:01 executing program 7: timerfd_create(0x0, 0x0) pselect6(0x40, &(0x7f0000000140), &(0x7f0000000180)={0x3}, &(0x7f00000001c0)={0x9}, 0x0, 0x0) 03:40:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000600)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0xa4, r3, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffcc9f, 0x5f}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x3c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_SEQ={0xf, 0x4, "96d13b1597946d4d5585a8"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "67e553019a305b4da9084fdf9d"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_TYPE={0x8, 0x7, 0x29a309d9c31dfd58}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ba42a5c88e"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r4 = syz_open_dev$vcsn(&(0x7f0000000640), 0x1, 0x482) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r2) sendmsg$NL80211_CMD_DEL_MPATH(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x40, r5, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x18}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x2004c000}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="44010000", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r6, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000"], 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x6, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:40:01 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b2f, 0x0) [ 838.089368] netlink: 'syz-executor.0': attribute type 338 has an invalid length. 03:40:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) r3 = creat(&(0x7f0000000040)='./cgroup/pids.max\x00', 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8001) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r6, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, r6, 0xb22, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x75}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x80) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000540)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x60}}, [{0xdd, 0x15, "2e44c62362c54efbf395b022475b06025d7e4cedc5"}]}, 0x4e) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f0000000040)) 03:40:01 executing program 6: epoll_create1(0xa766cf74be11bd26) 03:40:01 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000001f80)='./file0\x00', 0x0, 0x22, &(0x7f0000002000)={'trans=tcp,', {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0xa, 'sysadm_u'}}]}}) [ 838.244968] netlink: 'syz-executor.4': attribute type 338 has an invalid length. [ 838.263020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 838.321860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 838.380782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:03 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000180)='($\x18\xe5=\x11c\x86g\x02\x00\x00\x00?\x00\x00\x00\a\x00\x00\x00S\xc8\xe8*\xcc\xff\x7f\xcb\x9e@G\x96\x1e>\xdb\xa1J\xab\xd0\xb7.k^mq\xc2\xc4Q{\x14J\xb3i\x82\xa18\xf6\x04\x7f\x14RT?\xd2\x01J\xf5E\xc1\xf8\x1f\x80(\x9b?\xb6\xac_l\x17\xd1\f \xbf\xb8\xf8\xfc\xb5\xf8\xf4\x0e\xc3\xd6\xdf\xa3 \x00\x00\x00\n>\xdfm\f\xd5\xc4?\x04\x00\x00\x00\x00\x00\x00\x00\xd6j\xe7\x00-Y\x99\x03\xdf\xcc(\xa7t\xf4)\xf5\xf9s8@U\xca$Jd\xf3G\xcd\xfdAno\xc7\b\x92\xa7\x18\xf09@\x10\xb3\xe4\xdd\x14\xbfoO', 0x5) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000000007f}) 03:40:03 executing program 3: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000280)=[{&(0x7f0000000080)="8c", 0x1}], 0x1, 0x400000, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x10c00) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f00000005c0)="a4", 0x1}, {&(0x7f0000000140)="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", 0x11c}, {&(0x7f0000000600)="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", 0x2e4}], 0x3, 0x0, 0x0, 0x10) 03:40:03 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b2f, 0x0) 03:40:03 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') 03:40:03 executing program 7: timerfd_create(0x0, 0x0) pselect6(0x40, &(0x7f0000000140), &(0x7f0000000180)={0x3}, &(0x7f00000001c0)={0x9}, 0x0, 0x0) 03:40:03 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000000)) 03:40:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x40000) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0), 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x64, r1, 0x400, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}]}, 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x20000880) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x64, r1, 0x400, 0x70bd26, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40048881}, 0x4004000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xa8, r1, 0x8, 0x70bd29, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = creat(&(0x7f0000000040)='./cgroup/pids.max\x00', 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8001) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r4, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x4044) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1699}]]}, 0x3c}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:40:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x0, 0x119, 0xbe}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f00000007c0)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x21, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @val={0x3, 0x1, 0xae}, @void, @void, @void, @void, @void, [{0xdd, 0x35, "a613b1f668bf5944219a56a979d1a1d146b45aae11c93fcdd7c7e12b53e4c21f68f22fe6cf146f40747d7150c9b289a7cf0b7b7c52"}, {0xdd, 0x5d, "0a45d922df4285399abe473f08936a69dbaf003ff38c87ed233cbc0d5b2ce1e9c7870ea89f008c865925c623145e30b14149b0208a827844ebbc402a8ebcc7d2e1d8a8e06937afb843d538ae4a1f9ca8ec7a143295a783e7ebd5385a1f"}, {0xdd, 0xc2, "7ddf8aa28c31a2c37c2895354c231ab8219ac75332693dfb3eb9c2084300238d445a33d4f92e2705b45301e673b22aba9cdecaabf4b2dafdf24fde899f980781b75e133f2cb6d6f03b3379b798fb42dfc2836e035bb1e5a1b1d551a2493bdbeab80c1cbf0b0325dadf7e4de54d740a09fb0c559b3fd52eeefdead72bc3123d6137e26aa38aa1cf40cbc553615ace62c3f0b49aa48e2947a035c2d38ec8bfa6673f9c8b6b9be3307594135fe5281bda7bfbb8c4a72d19e32dac817169be998ee3c166"}, {0xdd, 0xb9, "48cc4b593b1cce5a846d1f75950706efb568190cc2798c210a96dc2e53d10da647153328377478083ad46929d0d3ee01b99038d723afe6cce3c3fbfc2243ada08e6bd5182093415969d744f1612624009c4d9241c8957f019cf2e563391cd24e2ebafa8a6bcee756a58d0ab9066d6c04077816b811404a510e0b0aa29cb84d8e506d148be3210b4d5ade7136fff7cab9de3d917e0f8ab2dab6990253abde8dfa8eec50cdd25b3be348c9158b815c4763b2185059a83dde2fa2"}]}, 0x24e) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) clock_nanosleep(0x2, 0x1, &(0x7f0000000000), 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xfffffffa}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000300), r0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='net/dev\x00') setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000640)={r7, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000040)={r7, 0x3, 0x2}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r4, 0x20, 0x70bd25, 0x25dfdbfe, {}, [{{0x8, 0x1, r7}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x50) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:40:03 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b2f, 0x0) [ 839.558652] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 839.572372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:03 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0xa, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local, {[@lsrr={0x83, 0xf, 0x6f, [@broadcast, @broadcast, @remote]}, @timestamp={0x44, 0x4}]}}}}}}, 0x0) 03:40:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) r3 = creat(&(0x7f0000000040)='./cgroup/pids.max\x00', 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8001) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:40:03 executing program 1: newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) 03:40:03 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000640)='\x00', 0x0, 0x0) 03:40:03 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='nfs\x00', 0x0, &(0x7f00000000c0)='\x04') 03:40:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="44000500", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000"], 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:40:03 executing program 2: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x4d51000) process_vm_readv(0x0, &(0x7f0000000800)=[{&(0x7f0000000500)=""/187, 0xbb}, {&(0x7f00000005c0)=""/235, 0xeb}, {0x0}], 0x3, &(0x7f0000000280)=[{&(0x7f0000000240)=""/24, 0x18}, {&(0x7f0000003200)=""/4102, 0x1006}], 0x2, 0x0) process_vm_readv(0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/113, 0x71}], 0x1, &(0x7f0000000840)=[{&(0x7f00000006c0)=""/72, 0x48}], 0x1, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80247009, &(0x7f0000000040)) signalfd(r0, &(0x7f0000000880)={[0x1ff]}, 0x8) vmsplice(r0, &(0x7f00000008c0), 0x0, 0x7) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') fork() r1 = fork() process_vm_readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/211, 0xd3}, {&(0x7f0000000100)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000240)=""/30, 0x1e}], 0x2, 0x0) fork() r2 = getpid() waitid(0x2, r2, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) 03:40:03 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000003c0)={0x0, 0x0, 0x80000000, 0xd8}) 03:40:03 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "79104f3aee507297d082b74a0b6b571600293a7c86d486a506f35998c9da489c4132d9a77037b7efe7a5f06afff448639d2cb46e92e69abe6208462327b0e81e"}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_QUERY(0x18, r0, 0x0, &(0x7f0000000100)='\x00', 0x0) [ 839.972008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:03 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x40181, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="fe", 0x1}], 0x1, 0x0, 0x0, 0x0) 03:40:03 executing program 1: creat(&(0x7f00000003c0)='./cgroup/pids.max\x00', 0x0) 03:40:03 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$rfkill(r0, 0x0, 0x0) 03:40:03 executing program 7: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @short}, 0x14) 03:40:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)={0x18, 0x2, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}}, 0x0) 03:40:04 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x22, 0x0, 0x0) 03:40:04 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, 0x0, 0xee00, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f00000001c0)) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0xb, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000400)=@secondary) add_key(0x0, &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000440)="46e90feb1e6594191f975ce286aabe925155b0b0c762b9605288e5f89f3205cd7af099b26aa29a581d8085123bca2f9fa20884bfbe9fdb591b3a3a8f41f3c5f2e563dcae4163a28628d373ec4555e5e9da0e6af4449042e1a869c2769cfd48e65878d87fe0675dff8206f1a03215f508295c592909ec15121003f2253f08915616b161732a28e463c4613cd36b617b5e6ac2432fc901a721bb8f2bc3bec552f997288d63f9fbc72af264893144fd5d8f96a635e527d2beb82297b08689969cea0a71", 0xc2, r0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) 03:40:04 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf2, 0x0, 0x0, 0x4, 0x0, 0x6b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r0, 0x0) eventfd2(0x0, 0x1) fremovexattr(r1, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 03:40:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f00000002c0)=@mgmt_frame=@probe_response={@with_ht={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1}, {0x81}, @broadcast, @broadcast, @from_mac=@device_b, {0x4}}, @ver_80211n={0x0, 0x3, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @val={0x4, 0x6, {0x6, 0x3, 0x0, 0x4}}, @void, @void, @void, @void}, 0x38) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x1, &(0x7f0000000300)={r3, r4+10000000}, &(0x7f0000000540)) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:40:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, r1, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2b, 0x1b}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000050) 03:40:04 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = eventfd(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000080)) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "5c9c7f", 0x1}}}, 0xd) fcntl$getown(r0, 0x9) r2 = fork() ptrace(0x10, r2) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)) 03:40:04 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)) 03:40:04 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x22, 0x0, 0x0) [ 840.522366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 840.594245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 840.673180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:04 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000fbffffffffff20000000050020000300000009001f"], 0x28}}, 0x0) 03:40:04 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)) 03:40:04 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x22, 0x0, 0x0) 03:40:04 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf2, 0x0, 0x0, 0x4, 0x0, 0x6b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r0, 0x0) eventfd2(0x0, 0x1) fremovexattr(r1, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 03:40:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000680)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0x1, 0x0, 0x3f, 0x48}}, [{0xdd, 0xce, "893dc05ab29c1daedf8c1561a8e744cfca89d2eaf38a29ec10d96ee620add668bb842b3054eed14f48e6c9a73777b7484ce7114bb25369bb8ba47961009e3b462fc52e98cf0a702a95a460b650006ae19d0bb50fdffcfe2f539f612fabdcef7067c5ee6b42d3ff5d2e0219d236677ecbe6e18aed9aaf01e2be2fdb126236857012d4508aae28a493356b953da43102d0705857f1b81d3a8a0b9988d4b10414843c917039381d314a1a3c2b8b06b10a6aa33e0518803bf3acadf59bb3df90c1e634688b20c3bd7044bd668f8a0eb2"}]}, 0x10f) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x4}, @device_b, @device_b, @random="7b3be4a8aa79", {0xe, 0x7}}, @ver_80211n={0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1}}, @tdls_chsw_req={0xc, 0x5, {0x6c, 0x0, @void, {0x65, 0x12, {@random="ee6e4a4afb9d", @device_b}}, {0x68, 0x4, {0x709, 0xa}}}}}, 0x3a) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:40:04 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf2, 0x0, 0x0, 0x4, 0x0, 0x6b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r0, 0x0) eventfd2(0x0, 0x1) fremovexattr(r1, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 03:40:04 executing program 2: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x4d51000) process_vm_readv(0x0, &(0x7f0000000800)=[{&(0x7f0000000500)=""/187, 0xbb}, {&(0x7f00000005c0)=""/235, 0xeb}, {0x0}], 0x3, &(0x7f0000000280)=[{&(0x7f0000000240)=""/24, 0x18}, {&(0x7f0000003200)=""/4102, 0x1006}], 0x2, 0x0) process_vm_readv(0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/113, 0x71}], 0x1, &(0x7f0000000840)=[{&(0x7f00000006c0)=""/72, 0x48}], 0x1, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80247009, &(0x7f0000000040)) signalfd(r0, &(0x7f0000000880)={[0x1ff]}, 0x8) vmsplice(r0, &(0x7f00000008c0), 0x0, 0x7) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') fork() r1 = fork() process_vm_readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/211, 0xd3}, {&(0x7f0000000100)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000240)=""/30, 0x1e}], 0x2, 0x0) fork() r2 = getpid() waitid(0x2, r2, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) 03:40:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, 0x1, 0x1, 0x101, 0x0, 0x0, {0x1}, [@CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4}}, @CTA_SYNPROXY={0x4}, @CTA_MARK={0x8}]}, 0x28}}, 0x0) getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000000000)=""/112, &(0x7f0000000540)=0x70) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r2, 0x5, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40090}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) r4 = syz_open_dev$vcsn(&(0x7f0000000580), 0x2, 0x6000) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x1, 0x4, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0xc7b05c0fb71fcc01}, 0x14) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:40:05 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)) [ 841.215553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:05 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf2, 0x0, 0x0, 0x4, 0x0, 0x6b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r0, 0x0) eventfd2(0x0, 0x1) fremovexattr(r1, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 03:40:05 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x22, 0x0, 0x0) 03:40:05 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf2, 0x0, 0x0, 0x4, 0x0, 0x6b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r0, 0x0) eventfd2(0x0, 0x1) fremovexattr(r1, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 03:40:05 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)) 03:40:05 executing program 6: creat(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) 03:40:05 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf2, 0x0, 0x0, 0x4, 0x0, 0x6b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r0, 0x0) eventfd2(0x0, 0x1) fremovexattr(r1, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 03:40:05 executing program 1: clock_settime(0xfffffffffffffffe, &(0x7f0000000000)={0x0, 0x3938700}) 03:40:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@ctrl_frame=@cf_end_cf_ack={{}, {0x3}, @broadcast, @device_b}, 0x10) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:40:05 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f00000000c0)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:40:05 executing program 2: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x4d51000) process_vm_readv(0x0, &(0x7f0000000800)=[{&(0x7f0000000500)=""/187, 0xbb}, {&(0x7f00000005c0)=""/235, 0xeb}, {0x0}], 0x3, &(0x7f0000000280)=[{&(0x7f0000000240)=""/24, 0x18}, {&(0x7f0000003200)=""/4102, 0x1006}], 0x2, 0x0) process_vm_readv(0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/113, 0x71}], 0x1, &(0x7f0000000840)=[{&(0x7f00000006c0)=""/72, 0x48}], 0x1, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80247009, &(0x7f0000000040)) signalfd(r0, &(0x7f0000000880)={[0x1ff]}, 0x8) vmsplice(r0, &(0x7f00000008c0), 0x0, 0x7) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') fork() r1 = fork() process_vm_readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/211, 0xd3}, {&(0x7f0000000100)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000240)=""/30, 0x1e}], 0x2, 0x0) fork() r2 = getpid() waitid(0x2, r2, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) 03:40:05 executing program 6: creat(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) 03:40:05 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf2, 0x0, 0x0, 0x4, 0x0, 0x6b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r0, 0x0) eventfd2(0x0, 0x1) fremovexattr(r1, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 03:40:05 executing program 5: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:40:05 executing program 1: syz_genetlink_get_family_id$fou(&(0x7f0000000bc0), 0xffffffffffffffff) 03:40:05 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) 03:40:05 executing program 5: syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "912c684f2a808e748e0d03fb3a04dadcd5b61d00", "3e5454d4891c54ecf2f4042ead654623", {"c9df1d92fdba9d2c7fafc401eee65512", "be89216b442023102034790295f5310e"}}}}}}}, 0x0) 03:40:05 executing program 2: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x4d51000) process_vm_readv(0x0, &(0x7f0000000800)=[{&(0x7f0000000500)=""/187, 0xbb}, {&(0x7f00000005c0)=""/235, 0xeb}, {0x0}], 0x3, &(0x7f0000000280)=[{&(0x7f0000000240)=""/24, 0x18}, {&(0x7f0000003200)=""/4102, 0x1006}], 0x2, 0x0) process_vm_readv(0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/113, 0x71}], 0x1, &(0x7f0000000840)=[{&(0x7f00000006c0)=""/72, 0x48}], 0x1, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80247009, &(0x7f0000000040)) signalfd(r0, &(0x7f0000000880)={[0x1ff]}, 0x8) vmsplice(r0, &(0x7f00000008c0), 0x0, 0x7) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') fork() r1 = fork() process_vm_readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/211, 0xd3}, {&(0x7f0000000100)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000240)=""/30, 0x1e}], 0x2, 0x0) fork() r2 = getpid() waitid(0x2, r2, &(0x7f0000000040), 0x3, &(0x7f0000000cc0)) 03:40:05 executing program 6: creat(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) 03:40:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)={0x2c, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @nested={0x10, 0x0, 0x0, 0x1, [@typed={0x9, 0x1b, 0x0, 0x0, @str='&:@\'\x00'}]}]}, 0x2c}], 0x1}, 0x0) [ 842.143160] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 03:40:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="080000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x24}}, 0x20000885) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000028c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002880)={&(0x7f0000000540)=ANY=[@ANYBLOB='<#\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x233c}, 0x1, 0x0, 0x0, 0x20004880}, 0x4010050) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) rt_sigtimedwait(&(0x7f0000002900)={[0x81]}, &(0x7f0000002940), &(0x7f00000029c0)={0x77359400}, 0x8) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:40:06 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x8, &(0x7f0000000040)=0x0) r1 = timerfd_create(0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000001e00)=[&(0x7f0000001c00)={0x0, 0x0, 0x8, 0x0, 0x0, r1, 0x0, 0x2e}]) [ 842.178936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_AUTH_TYPE={0xffffffffffffff7d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}]}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:40:06 executing program 6: creat(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) 03:40:06 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000001b00)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x6) 03:40:06 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000001b00)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x6) 03:40:06 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup2(r0, r1) 03:40:06 executing program 7: setresuid(0xee01, 0xee00, 0x0) acct(0x0) 03:40:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000040)='./cgroup/pids.max\x00', 0x0) r2 = creat(&(0x7f0000000040)='./cgroup/pids.max\x00', 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8001) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3) openat$dir(0xffffffffffffff9c, &(0x7f0000001140)='./file0\x00', 0x50000, 0x41833b56b4abb8b7) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8001) sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000001180)=ANY=[@ANYBLOB="6f010000a2c6cc38d9d293b2a42b31c5f4614d7d859063cfd4398c698ece86a6c5a19ded5354edf8f560fa460b8065f8ccfa219713d08060bfdf352c6514ab5e7755ae0063a01804124ae8d1b360940602831caa2d2a0b7627b8a521ddc86e329d51ac41ac7aec4bcca22986b87cf02df892658f944cb36c3b0d14394a717b6b600bd2ec8043212a1a61", @ANYRES16=0x0, @ANYBLOB="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"], 0x190}, 0x1, 0x0, 0x0, 0x20004801}, 0x48d5) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r6, @ANYBLOB="0a00340002020203020200000a00060008021100000000000800350000000000080026006c090000"], 0x44}}, 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) r7 = accept4$inet6(r2, &(0x7f00000006c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000700)=0x1c, 0x80800) ioctl$INCFS_IOC_CREATE_FILE(r7, 0xc058671e, &(0x7f00000010c0)={{}, {0x3}, 0x8d, 0x0, 0x0, &(0x7f0000000740)='./cgroup/pids.max\x00', &(0x7f0000000780)='./cgroup/pids.max\x00', &(0x7f00000007c0)="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", 0x128, 0x0, &(0x7f0000000900)={0x2, 0x11c, {0x0, 0xc, 0x5c, "07e264b38745b588a359cf8401792f16fade2ea5187913256b280ed3679567b680341101aeaabfe06f16317a3ab34fb36379a3f992e8c810777f04ecc9f6d48b6b22a050d86791e079a43b54f7f74bace679504e1acd891495964b84", 0xb3, "61d29dea4a2b78c4786418289553fbda223b423addc26ed59d927c344038a569a2521e91376512c8b04138b1d096f1a888d687f2bc026a9ca79f77a3301afb1acbc51f7f04c147066141f86aea1e146433d3f6c2bf0f0f9ceb656dc069266ed77f041f7280ebb4435040303844a09f62ecb42e201781ceb319e7d410cd59e829748bf660f1b39e70ec2f8ab6dce3cbede47f7cbdaafa88368e4bd34936edaedcd14a9c1094a648b22f665363062eb3d73a2359"}, 0xad, "2069719270491a76574f59089922c1006fd66b40323436d9254aebdeef269901c93a391175131b7de2b2982a31065885a5e54b15889b7ebb0cfe4521a454c868e74309c236c5c7b1f30bf61a5b1ccb62f14ce667c4716fba94b3aae9ed131ed97b9b00b2f8003923171a0f9be97e2cd586c9d4e6115fefb71cca432a0cfd5e3384f9cf8d655e3176b0a5cb8b61f7aea20528b65a694fa0a22f276ce6db13ba6de6d5c5d6ab17693fcf5d72701b"}, 0x1d5}) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000b00)=@data_frame={@no_qos=@type01={{0x0, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x40}, @device_a, @random="1c6fa3e07d20", @device_a, {0x5, 0x6}}, @random="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"}, 0x596) 03:40:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, 0x1, 0x1, 0x101, 0x0, 0x0, {0x1}, [@CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4}}, @CTA_SYNPROXY={0x4}, @CTA_MARK={0x8}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:40:06 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x0) utime(&(0x7f0000000280)='./file0\x00', 0x0) 03:40:06 executing program 6: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000880)={0x30, r0, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x1c, 0x11d, 0x0, 0x1, [{0x3, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}]}]}, 0x30}}, 0x0) 03:40:06 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup(r0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={0x0, 0x2}}, 0x0) [ 843.030107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:06 executing program 7: io_setup(0x8, &(0x7f0000000140)=0x0) r1 = socket$packet(0x11, 0x3, 0x300) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:06 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000001b00)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x6) 03:40:06 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x8, &(0x7f0000000000), 0x10) [ 843.155712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:07 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=ANY=[@ANYBLOB='/'], &(0x7f00000001c0)='./file0\x00', 0x0, 0x22b5c98, 0x0) llistxattr(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 03:40:07 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000001b00)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x6) 03:40:07 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x8, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) 03:40:07 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc) 03:40:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="500000000802110000010802110000000802110000000000000000000000000064000164c716d20202020202010882848b960c121824"], 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) r3 = dup3(r0, r0, 0x80000) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) mq_timedsend(r3, &(0x7f0000000000)="db47fcbcd3b2cbefff9a2476e2883f83c55ee5e6aa4d2aeed3acbd3baa7faeb2568ee3189aed36bb0cdbb9f230338b593201f1eaeacc977a9892dd3f8fbee73cc086c05aac9a48596e6b573aaa9e53ef0b2f20d4b35167038ed3c1da306badc85571b43bcdb05acf0ee7abff3b4fd958fee9", 0x72, 0x5, &(0x7f0000000580)={r4, r5+10000000}) 03:40:07 executing program 6: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup(r0) setresuid(0x0, 0xee01, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000080), 0x4) 03:40:07 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) eventfd2(0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f0000000100)=ANY=[], 0x9, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x2000000) close(r0) unlink(0x0) 03:40:07 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000200)={0xa6, 0x0, 0xace9}) epoll_create(0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) 03:40:07 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x8, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) 03:40:07 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000140)={0x200, 0x7f}) 03:40:07 executing program 6: syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_EXIT_PERIODIC_INQ={{0x7f}, 0x20}}}, 0x7) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x8, 0x4, 0x7, 0xffff}}]}}, 0x15) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x41c}}}, 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xa2}, "3b9d1d50823db5e2e49ba1f7c2a596412882a4a358c2aadd49ebbc0ac1086a7fd8d8a2ce0e22630aca0a5a00a708b5785800dc05cbd28b2f73d04ea40222b037b3f53c82bee4a2c5a30c7afbe4259ace371f82e3a651cf064f90a3b1d64cee29c1e1c666def7bc6ee3c62ffbbfa31f6b97f5ea0a3dd6597d746320e598031b2cceddb4adc829a1ee1c1119d4eb41939be2f9c119b1c38aef5742e35b2b5de861e4da"}, 0xa6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="03c900009e14e837273701de118d8aad382a2ee9f865767a450b0ce0497a1c7e0977a673802bf56b874c3aea0b1fe4876f06be57ef79f965a7f1cd1fe1bf9d46e29255c8a58c47488ca00c00eba31c89ba1c40cc01a08ed8d37aee0b442f5785ab6dc4342378839eccb5677f44a43dbfcc9bb9375ab873a1cd04b29c15780d1823f686e4bdb209c750cade7ba758bd4f6520c2fd1f9d427d54142daacb9c16270cfa6d8599d58c72f2a4629f75fb238c3929315cca3b888643088fe02670d8c07a5a06e7e8d1ee8ff9a20b5da168f7d6737e0a5d0583471a33fad62a4e3f0a01c8a65466d810ef3d82a57e4c196a2ea8f477fb59036f1e1616cfaa68735835dfdd644f144f4d78da2edb3a32707d1816baa4c603a978c9446174a83b460b157556bfb4dd1204f0aead"], 0x54) getdents64(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x15c) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0xf}, {0x8, 0x2, [{0xc8, 0x8001, 0x2}, {0xc8, 0x3, 0x3f}]}}}, 0x12) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) r1 = syz_open_dev$sg(&(0x7f0000000380), 0x1fb, 0x2000) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x120, 0xa00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)={0x0, 0xffffffff, 0xffffff85}) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c9e00a8da2fc2600131b02008000"], 0xf) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8c}, "b85bd39cdd9c8132caf9a52aaed54f1beac66b0d20609795f390b6e6bd67517df18abe884c05ed0745a531794b2f525f129dab6f54a99c60c7e214bf21b034e69f08e326aef661b51cb4e9cd7eeb3572dd65d0bb6a60899dde430f28eb92f08f1a14ea87df5dec048a0b787386a6a3b5216632f1f1a8f5be29ffb813b5b0c5905eb9d38e163ef73386531ce3"}, 0x90) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:40:07 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x101001, 0x0) write$vga_arbiter(r0, &(0x7f0000000000)=@other={'trylock', ' ', 'none'}, 0xd) 03:40:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="50000000080211000001080211000000080211000000926a00000000000000000000640001000006020202020202010882848b960c121824"], 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:40:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="50000000080211000001080211000000080211000000000000000000004f1911b3ce31646cb9aad54bd6960000006400010000060202"], 0x36) nanosleep(&(0x7f0000000540)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x75}}, 0xa) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 843.894716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect(r0, &(0x7f0000000400)=@un=@abs, 0x80) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000005c0)=0x40) 03:40:07 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x8, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) [ 843.957741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:07 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r0, 0x1, 0x3, &(0x7f0000000000), 0x4) [ 844.022885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:07 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x8, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) 03:40:07 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000200)={0xa6, 0x0, 0xace9}) epoll_create(0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) 03:40:08 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000200)={0xa6, 0x0, 0xace9}) epoll_create(0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) 03:40:08 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) bind$packet(r0, &(0x7f00000017c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="820395b3262f"}, 0x14) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 03:40:08 executing program 1: syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), 0xffffffffffffffff) 03:40:08 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000200)={0xa6, 0x0, 0xace9}) epoll_create(0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) 03:40:08 executing program 2: newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r0, 0x0) r1 = inotify_init() close_range(r1, 0xffffffffffffffff, 0x0) 03:40:08 executing program 6: syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_EXIT_PERIODIC_INQ={{0x7f}, 0x20}}}, 0x7) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x8, 0x4, 0x7, 0xffff}}]}}, 0x15) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x41c}}}, 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xa2}, "3b9d1d50823db5e2e49ba1f7c2a596412882a4a358c2aadd49ebbc0ac1086a7fd8d8a2ce0e22630aca0a5a00a708b5785800dc05cbd28b2f73d04ea40222b037b3f53c82bee4a2c5a30c7afbe4259ace371f82e3a651cf064f90a3b1d64cee29c1e1c666def7bc6ee3c62ffbbfa31f6b97f5ea0a3dd6597d746320e598031b2cceddb4adc829a1ee1c1119d4eb41939be2f9c119b1c38aef5742e35b2b5de861e4da"}, 0xa6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x54) getdents64(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x15c) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0xf}, {0x8, 0x2, [{0xc8, 0x8001, 0x2}, {0xc8, 0x3, 0x3f}]}}}, 0x12) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) r1 = syz_open_dev$sg(&(0x7f0000000380), 0x1fb, 0x2000) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x120, 0xa00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)={0x0, 0xffffffff, 0xffffff85}) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c9e00a8da2fc2600131b02008000"], 0xf) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8c}, "b85bd39cdd9c8132caf9a52aaed54f1beac66b0d20609795f390b6e6bd67517df18abe884c05ed0745a531794b2f525f129dab6f54a99c60c7e214bf21b034e69f08e326aef661b51cb4e9cd7eeb3572dd65d0bb6a60899dde430f28eb92f08f1a14ea87df5dec048a0b787386a6a3b5216632f1f1a8f5be29ffb813b5b0c5905eb9d38e163ef73386531ce3"}, 0x90) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:40:08 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000200)={0xa6, 0x0, 0xace9}) epoll_create(0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) 03:40:08 executing program 1: syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_EXIT_PERIODIC_INQ={{0x7f}, 0x20}}}, 0x7) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x8, 0x4, 0x7, 0xffff}}]}}, 0x15) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x41c}}}, 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xa2}, "3b9d1d50823db5e2e49ba1f7c2a596412882a4a358c2aadd49ebbc0ac1086a7fd8d8a2ce0e22630aca0a5a00a708b5785800dc05cbd28b2f73d04ea40222b037b3f53c82bee4a2c5a30c7afbe4259ace371f82e3a651cf064f90a3b1d64cee29c1e1c666def7bc6ee3c62ffbbfa31f6b97f5ea0a3dd6597d746320e598031b2cceddb4adc829a1ee1c1119d4eb41939be2f9c119b1c38aef5742e35b2b5de861e4da"}, 0xa6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x54) getdents64(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x15c) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0xf}, {0x8, 0x2, [{0xc8, 0x8001, 0x2}, {0xc8, 0x3, 0x3f}]}}}, 0x12) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) r1 = syz_open_dev$sg(&(0x7f0000000380), 0x1fb, 0x2000) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x120, 0xa00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)={0x0, 0xffffffff, 0xffffff85}) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c9e00a8da2fc2600131b02008000"], 0xf) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8c}, "b85bd39cdd9c8132caf9a52aaed54f1beac66b0d20609795f390b6e6bd67517df18abe884c05ed0745a531794b2f525f129dab6f54a99c60c7e214bf21b034e69f08e326aef661b51cb4e9cd7eeb3572dd65d0bb6a60899dde430f28eb92f08f1a14ea87df5dec048a0b787386a6a3b5216632f1f1a8f5be29ffb813b5b0c5905eb9d38e163ef73386531ce3"}, 0x90) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:40:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_a, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @random=0x6, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:40:08 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/raw6\x00') socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pread64(r0, &(0x7f0000000140)=""/217, 0xd9, 0x0) 03:40:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002eee000008000300ca6506adb8feb622535f0e300d00c62b5533ba0abdd70ebd461b926e9cd3d47d21e09f215746ccd5329a2b2fae6c7f364687f38949e1719dcc5e3c6734de583da15ad244fdcad9dc174ee05e01824668490ff2e07c001055729fb6988b0dcd28b3e6b332d187ca7a1cd6928725", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000"], 0x44}}, 0x0) r3 = creat(&(0x7f0000000040)='./cgroup/pids.max\x00', 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8001) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r4, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000040)={0x28, r1, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0xe}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x10) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) r5 = memfd_secret(0x0) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f00000005c0)={'raw\x00', 0x0, [0x2, 0x7f, 0x40, 0x1, 0x5]}, &(0x7f0000000640)=0x54) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) r6 = signalfd4(r3, &(0x7f0000000240)={[0x1]}, 0x8, 0x80000) r7 = eventfd2(0xfffff320, 0x80801) read(r7, &(0x7f0000000080)=""/86, 0x56) ioctl$BTRFS_IOC_RM_DEV(r6, 0x5000940b, &(0x7f0000000740)={{r7}, "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"}) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 844.475820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:08 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000200)={0xa6, 0x0, 0xace9}) epoll_create(0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) 03:40:08 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000200)={0xa6, 0x0, 0xace9}) epoll_create(0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) 03:40:08 executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) munlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) [ 844.558833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:08 executing program 6: syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_EXIT_PERIODIC_INQ={{0x7f}, 0x20}}}, 0x7) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x8, 0x4, 0x7, 0xffff}}]}}, 0x15) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x41c}}}, 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xa2}, "3b9d1d50823db5e2e49ba1f7c2a596412882a4a358c2aadd49ebbc0ac1086a7fd8d8a2ce0e22630aca0a5a00a708b5785800dc05cbd28b2f73d04ea40222b037b3f53c82bee4a2c5a30c7afbe4259ace371f82e3a651cf064f90a3b1d64cee29c1e1c666def7bc6ee3c62ffbbfa31f6b97f5ea0a3dd6597d746320e598031b2cceddb4adc829a1ee1c1119d4eb41939be2f9c119b1c38aef5742e35b2b5de861e4da"}, 0xa6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x54) getdents64(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x15c) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0xf}, {0x8, 0x2, [{0xc8, 0x8001, 0x2}, {0xc8, 0x3, 0x3f}]}}}, 0x12) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) r1 = syz_open_dev$sg(&(0x7f0000000380), 0x1fb, 0x2000) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x120, 0xa00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)={0x0, 0xffffffff, 0xffffff85}) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c9e00a8da2fc2600131b02008000"], 0xf) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8c}, "b85bd39cdd9c8132caf9a52aaed54f1beac66b0d20609795f390b6e6bd67517df18abe884c05ed0745a531794b2f525f129dab6f54a99c60c7e214bf21b034e69f08e326aef661b51cb4e9cd7eeb3572dd65d0bb6a60899dde430f28eb92f08f1a14ea87df5dec048a0b787386a6a3b5216632f1f1a8f5be29ffb813b5b0c5905eb9d38e163ef73386531ce3"}, 0x90) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) [ 844.620814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:08 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5423, &(0x7f00000000c0)=0x3) 03:40:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0), &(0x7f0000000400)=@ctrl_frame=@cf_end={{}, {0x8}, @broadcast, @random="8d3e366ee63b"}, 0x10) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:40:08 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x20102) write$binfmt_script(r0, 0x0, 0x1c) 03:40:08 executing program 1: syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_EXIT_PERIODIC_INQ={{0x7f}, 0x20}}}, 0x7) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x8, 0x4, 0x7, 0xffff}}]}}, 0x15) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x41c}}}, 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xa2}, "3b9d1d50823db5e2e49ba1f7c2a596412882a4a358c2aadd49ebbc0ac1086a7fd8d8a2ce0e22630aca0a5a00a708b5785800dc05cbd28b2f73d04ea40222b037b3f53c82bee4a2c5a30c7afbe4259ace371f82e3a651cf064f90a3b1d64cee29c1e1c666def7bc6ee3c62ffbbfa31f6b97f5ea0a3dd6597d746320e598031b2cceddb4adc829a1ee1c1119d4eb41939be2f9c119b1c38aef5742e35b2b5de861e4da"}, 0xa6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x54) getdents64(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x15c) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0xf}, {0x8, 0x2, [{0xc8, 0x8001, 0x2}, {0xc8, 0x3, 0x3f}]}}}, 0x12) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) r1 = syz_open_dev$sg(&(0x7f0000000380), 0x1fb, 0x2000) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x120, 0xa00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)={0x0, 0xffffffff, 0xffffff85}) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c9e00a8da2fc2600131b02008000"], 0xf) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8c}, "b85bd39cdd9c8132caf9a52aaed54f1beac66b0d20609795f390b6e6bd67517df18abe884c05ed0745a531794b2f525f129dab6f54a99c60c7e214bf21b034e69f08e326aef661b51cb4e9cd7eeb3572dd65d0bb6a60899dde430f28eb92f08f1a14ea87df5dec048a0b787386a6a3b5216632f1f1a8f5be29ffb813b5b0c5905eb9d38e163ef73386531ce3"}, 0x90) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:40:08 executing program 7: openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) 03:40:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="2b642fae15ef5df8"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000240)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000015c0)={&(0x7f0000000040), 0xc, &(0x7f0000001580)={&(0x7f0000000540)={0x102c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x32}}}}, [@NL80211_ATTR_FRAME_MATCH={0x1004, 0x5b, "289934f4e5769c498afe1b6b6cac5e04cbbe9aa2216a07cb71383e69cd3e6ab9d3b9b1578dab07c7a414ecd5e6dca77a439f47695a96d8c46e62367a2044355de72834e4a550c3d957a09eb02e3f084857dbdd834e9ac9300642af12507a5001313ac0f8d2b6093413eb38af37f692ee91e0110fe94a85a4324601fade09d1799669cdff0cd74409f87ce2d038d77e16bbd341560cf0bc992f7db631d6578ab5dc153dddd2569d1a5fb9e8754689895073f6440354b74dfd55161f5ca09b9b49e338e69044976f7dacd7fbeef967defa28a000f081d7e60b520f83460b5a7aa1d55aa4495d427d6e1762558119f8031ab58fc36d56c0ca2ad14ef4bb04e3980a06ac3e2e0ae9a48f91f07ac08a7f6ed94062160445f6c7388fd26ee4d757b1a6fac04983070c72d5a98e52bda765017699ef0e2612802c0a01406f0593bdfe77606f6767e080ad7c0eeaf60dbc7fae2621e1bb1bae4125399e6d823d95758429193287e55ed00269a9ea80556130afdefe2e94783482365a049b55163b6fa828dfb27191a41f589e980149acb4030e6573bf22fbe66c37da33013f6de8adc1c63f067bba55666bff0185a24c4236cd53ec7371f32b5e182d257868e2cad64ca5e3b55732ea9bc57cd00b3fbe00918d2db3cf1168750a18d8ffa6e12525ffab73e007bdc5ca59e72f6b771331fa8320778006c974eb41c1f084f0a5ce50e8b02e7fe43ed95fb4b86d16a87f8c21a27521d91df3659656ce2724fd6feb5c9e5ad1879a215d775f6a2b43569bdcd5d06b171e5f7302d538ef048578d2c3b0be9441e6fcce269d2f0b1df18ed47a6d74dd7cf6c63b36537795e7013e5561a78008d7c055d5a0924a8aaf37b9d8efeaf37a4fe7b4d5a84f659c74a2e8534e94ccea8397b08621233b49db6ef1713bf3e2eaebc8271bcc287de4c601cf7c69f1ea60f68ea8a4c84baa458e7ad2b26eacf1f618a11d89c9541f977242b197f3c69337fe8dac6b43a934922b195e28a0d95cc5de85f4c4407c703ff7c3d2061ec7d10b249680ce1e40b9131055e2761afca3156747225ecab586f316ac22a9ea898539fd8dbee39ccb895b20aa6c66ec58da392325c3e89390acb10e8335051f28bcec5959bfad37fd06d37bfe20ec69523a988371878aa2355d6abd3bc79da7374f714071c2a9d04552a60666dbfaecbbb3d949d1aa6a24e76759dd6be549d85e057fe42935f5461ff80727d77bffe0e116594839d75a1a9659831982a69daf479c9a74103138dcb5c13b4503f4a6fbb496438372a6d799a14f454b1bddf604f9f25a4a5b308efc4dd5faf2b1f8dc38e99f1182d84ac4520971e3e3fbfd1047e3301b0f4b2902e79a5788415cc306f8247671362d22249fc5e08e97c66e7563108185a490f7866960d50ed7f90c7ebb22d6377fe3b97cb58a77934712954f5ec7bd69556dc3dcb3302186f49c4f6eeb2056d82570feb20efbe3b68199134f30c2a47f1cd97cf6d22e5529821ac2f405b0b5e99f286b28224215ded321e0451268feae788b2f4d55fc1c8cd6354ff8982b57c7f2463b36951106432bf70ca94bd56ce2582e0f83cad8a0d57086ea726a7bd42758011c9b8c9ced1f2b2547665b7e3be8e1e35b34d1790185c6701d82727fb3b3b8d483340d14a5c6c1bed5b857ba49d7298040cd74c8ad6d37d9f0586479d66e51119666e273e2bcfb31065a84b9f277d1d8adeb569d93211b9dd4ecfb3a5d8003c421d2524d36cc2a2ab0119bc50ef909e6b44348db0fbbfd8838a96846fa6c4ecbabc3aee6449b10a7757670a583cdc6278881c85fd0050e1ac403fc4fbed60b72f68d31d3c893c9a53343347e585566d2db425b438d0ecfe0c1b3288d878205119dbd72426d4dec5420e1bbd7bcda8020f78a68db552634b697fa42b67e65f59be9f902dcef3339f8de3a821e655454b12ad8011e6d27ed975df802250e8f071b16a214778aae58a58b0a9a26672d8118ae54989270681e4b12b0b99616bf59696efe6a2fe4bfc08d0ec5b9c2f1f3257b7d54795fbbac2d9cb8c2730a9392a9d4eb65b4dc228bd81c23c9b669f8ba978706dd85da7b09947631e63b9a133bb1a832c881b020ada3c13b833497d4d29034fcfd8714887ccf1fd0abc63108916bafbe4de598215bd7db7f3ca25ba145c77e59a81084e0374c0884ae600fb605a510ebda8a3a42b4010b2b0be72d6bce213575de27885c09f08dac2c67aaef8e8288f67b083cd225d43e5625c4aa122c12fd97071e47514547f9d3dc03920e3bbe399dac15df6f9d39ca06f5c20020d3d2b9779d2a2462e4cf8866c95ad8f78ac4536338d3e5d4efc000e78dbba6a52b688412e8d16aa00cc91a9a91ba50100756ec41d096ae714389fe912419b7448f4a89b6c3fa87bbbaf41086a6f01089e33a61b2126680a2e6a339460497dfedebc1b958b53d54b19211c38f8e458a9151bcb322927973faa62fdbdd8c647782f41e0cdd04428335e71ec043ad03e74b8ca6146909122cda493aa5d727660f093212ac7d321693055834c834e3b579c9f2565ee53c1cf341db6952620868538787dd52fb42781e5b5d51d5f8264645ad6e924307c72c5e548733a09f48f176a3f97537cc3f5717f8cfae0de7bf6bbf1761f7bec146ed63e361ecbc704381865fd56346bb660be5e57db7fecd024581d62b45c946a870f2b72c8a03cc9a48b22e5e5ca095be7b61f3a4d082b4101a4329ab3c0642842b3eb88d60eafb5568772a91284e77a9acecd4a6fa21f9d3da971d3a2a3382b99feabbf5b2d24a08c55565de95653ab430d4a8907e0032482aa66ff407d85c6c2cc80309389dcd2ab5adb8126a6a07ba25e9dc18f2418b97227b36dc5e8c0a47332643f6752c85fd6ff5db71082369e368ced807e6f3674b32f9a2b206fd11310e391ede755892ea4dae34617a5d3b6b1697fdd5529a399ea37b8f38300f1b7df399cbfe1f8c592cbd1a183da38e408fdbb5da24a6044c6579fa070fa93385b1d87872cfaa2e498a1a0d04dfe05167d1cace9a2f6a706bd153388b04e54f2045a04e9ae789e20ab52fb04ff860bba86e31ccfca8ba372f33453741b1e6531c9efb4d87c8e226a778ba2d6f3ca8d40d60cc7c84ff8734c6ffe777b2e9cac6fa8c891c890e700016bbd3fa6aeff3a2d1addd02cf8a7d199ca5e1bce02a31f89e0e9905c46990668dedefcfd2d87919c12dd6cdd4cc24d32e887bc5b50fffab3b9e69972d66178365a44e670a8166145005ceeee03707fbd3760ef9d916d2ba36cf640bb47c412cf7ff2b1fe4636b5eb24f86c0cc2fa104e6d775df00f0149cf0b5de113e2cb030279d15266fad440d145d012880e9bf623a5d1308a7be510c9853bbb6fe15c97d2cb274822c1abc26659b44ddd0a798de11ff04e3005b3dc58d83c50baa0382cd79d325dabf6956e1919963fcacebbd810850fbdc1ee23b6882d4cd86543049597f21a9e931b6e8b39373b5f31d35d5cae51337d18e67fb691afbc4b0de70bcf8774785464c162f862d06726f99400c3e035c3daa26b0b93a4b419f952f598e4ab3e4580f1a3dcbc7b71a708caa94eb4576a831187b0edfbb9eec6b8f5b35b6202897ffa656dd5d7654e88a3d3d28871057403c6ca135b4e9ceeff089e3930a510498cc73d76e7b0d6f67a40c9c337c737521a69b14eb3cc7cbdf1789c905cd6f2e9b842ef16a5b1c57159fbb29306d3cc74a194b03ce3a4f554783441ff516455faa52ef79afe2baef002294bde50831c95eac17353217ce5774d463bc46ff2ac95fad38447ab87930a41bc2e1fc9ebb6b1c4fb412f079725f84322ffacb7817aec66a131ac1717cf75e89a7aafa3496bef81bb1f8daea6d646bec28c2c8631f55ff203cb06eb8623be5c95edf48e128c9ca7f104a326550cccd540c56232316f3320c8ca2876b61a97c0e9c3ee991bd7df91c99c00190e765b268f7558cba93be30d5a05424e3ed1c6b68ef8fe3697c1f100eb28f21a45802de04134bad289ecc2b3ba65b95d88596acf1bf1461aca6f7e655ac9e09661a1c086c68762c990a6165f178738d04fdf5a2adec55eed8fbf7a961393ef11597bac0accc2140b4d3e116b124cd69e28a552436647c27f1e9bb6ea32b054c6a198a540cd610fe12ff31f47e907ba191ca1ddd34a0935e4ae6023f3eae295916a82e0fb559ee922dc5598043bf6157fd8dcf60adb319b92eb374c2cf11d26cce09d0b31488bc74786049337b47ccb5004f09a949bdd05ba7751e59e32097ee3446e601f1736262165afcefa53f7aa113f7e930c901f813a52c66ee0f2b6fdeefee36760362cc874210df27e24d50a9b4245b1aa5852d2a57a0a7f60264074f8dfee8e01b47604bdbe1c3a4575bc8bea8d15e754d9e5358eb2bfa09d6615714cf23c736422119a3ab608a4ff56fe969d01e348c9516fd61720fb2927d6c875348a3e9603109210b0e0093f74fb8179c676a7f45fee9f4a9500b131d8252598252b07a45ae1af88679f58287e17b9a8159d9802e61a80a8d728820d78f927cb7695caa3566fea560cd7981866e301885766dbecdcbdf895bcff40f72cc468d9ca653d453a5cda92fff8e5dc7b148c0b427be0af248d26ec5a641bff54bb17ae38358c4de0c0503cf8571d5cc92289b506765ea01c3d270001d81774ba3b72ff313737b1b5fc4cd712a53f2d00229ede05ae64cbf1eae5d011d0109fad9db273a17198f4843684e9149aca0c832b3d2c0b2c9e4b13ffa904173a5ac43b5a28d2e0e749fb381a4c1776ede5e079679e8c27679a0d6d2800aaa602959a7e8b6717a5135d19c84eaa3b8f530408832d2906a40640e5250c0ec8b882d11a1a9dfdabbf46a4883584a961d471d374ec4dee83108e95d6c05c37ba52d70dbd7347f84019b75e1ec97d7d5a398d3ed124f031f80b45efe5821bcec7e5cc523e3c0ac212d1d312e6b9aec1f3d2fb00bc09699b06f27fc770ab822f49a19bbfc01f3b7952aceb11217c959d180c4d8363d85c6520caea135f97fa0644db687b1147abc81b1f89675a05ab2659dc67702ba0a050f2d80e3d429cf787efb249f15c1e1d496bbe92a9a6148db23d56166358441a590278a20c3d80513c4f606680683e9caa2070698cad525a25da69c709451833044a125f7a468b579b866a3d4cd6d330557d8b1acefa3389e074cbb3f513cf43860269eac507722b214fa589d2643ec3a221e692845299ab10cc86c4bd268fd729d828d53df9621aca2824842260db01bf3b855cf1f9f8d1f662705b8bfd1471de9541fcf027603943947b34a656a7fd75668249ebf306143c7fb7eefbc739bd84988979c762c558f95704942ce8d13f01c0320a1422524b0a86d909b42de7d8d38ef034ee073bfd3e64308e5afc6cf017dbb6859d69cf8250032c7370e1f449242f81fb763407fe40e3492d5e9ce0197a1b580553679f778a87d898266c70aa289bd79f41de234b6a0c917205b8036bc89137f4efed0de08e34967dc3498ab841a096cf19a8ea895a27a2713bb3709b3235814a113032d82ebe3b996a5d09720e6b2bffe6c0d52969f254ec43a2a171c72773f2df593e071435ea7f86559f7bffbd4e84dda84242af2806e198f880b8ba0abf62c07603ae3231060a649bc8699de6931f5a5f21f97cac6515f5fa788b8983a89f16c8660a74d2e78f4d2983d104197cd32f110f04ece4f289091665275943df3e020ce76ecacdd8d8091936cfb2224ec7d0d47e8a055d6dd6b73775e018ed365e53b784a95767e16f5f7ffcaef82321a"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}]}, 0x102c}, 0x1, 0x0, 0x0, 0x4080}, 0x4) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) nanosleep(&(0x7f0000000000)={0x0, 0x3938700}, 0x0) 03:40:08 executing program 6: syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_EXIT_PERIODIC_INQ={{0x7f}, 0x20}}}, 0x7) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x8, 0x4, 0x7, 0xffff}}]}}, 0x15) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x41c}}}, 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xa2}, "3b9d1d50823db5e2e49ba1f7c2a596412882a4a358c2aadd49ebbc0ac1086a7fd8d8a2ce0e22630aca0a5a00a708b5785800dc05cbd28b2f73d04ea40222b037b3f53c82bee4a2c5a30c7afbe4259ace371f82e3a651cf064f90a3b1d64cee29c1e1c666def7bc6ee3c62ffbbfa31f6b97f5ea0a3dd6597d746320e598031b2cceddb4adc829a1ee1c1119d4eb41939be2f9c119b1c38aef5742e35b2b5de861e4da"}, 0xa6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x54) getdents64(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x15c) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0xf}, {0x8, 0x2, [{0xc8, 0x8001, 0x2}, {0xc8, 0x3, 0x3f}]}}}, 0x12) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) r1 = syz_open_dev$sg(&(0x7f0000000380), 0x1fb, 0x2000) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x120, 0xa00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)={0x0, 0xffffffff, 0xffffff85}) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c9e00a8da2fc2600131b02008000"], 0xf) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8c}, "b85bd39cdd9c8132caf9a52aaed54f1beac66b0d20609795f390b6e6bd67517df18abe884c05ed0745a531794b2f525f129dab6f54a99c60c7e214bf21b034e69f08e326aef661b51cb4e9cd7eeb3572dd65d0bb6a60899dde430f28eb92f08f1a14ea87df5dec048a0b787386a6a3b5216632f1f1a8f5be29ffb813b5b0c5905eb9d38e163ef73386531ce3"}, 0x90) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:40:08 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x35, 0x0, &(0x7f0000000040)) 03:40:08 executing program 5: syslog(0x2, 0x0, 0x0) [ 845.050370] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 845.059991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:08 executing program 2: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000018c0), 0x101c01, 0x0) ioctl$CDROMPLAYTRKIND(r0, 0x5304, &(0x7f0000000100)) 03:40:08 executing program 5: setitimer(0x3, 0x0, 0x0) 03:40:08 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0xf, &(0x7f0000002b00)={0x0, {{0x2, 0x0, @multicast1}}}, 0x90) 03:40:09 executing program 7: mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:40:09 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x2, 0x0, 0x3}}) 03:40:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = creat(&(0x7f0000000040)='./cgroup/pids.max\x00', 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8001) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="b0007d7062568bd100000802110000010802110000000802110000001000"], 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) clock_getres(0x4, &(0x7f0000000000)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="100000000802110000010802110000000802110000002000010000000140010882848b960c121824"], 0x28) [ 845.357412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.413195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.466030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:09 executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) poll(&(0x7f0000000000)=[{r0, 0x2011}], 0x1, 0x0) 03:40:09 executing program 2: r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000180)={0x9f0a}) 03:40:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0), &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @broadcast, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x28, r8, 0x1, 0x0, 0x1, {{0x2}, {@void, @val={0xc, 0x99, {0x0, 0x2}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}]]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000040)={0x1c, r4, 0x2, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x1) 03:40:09 executing program 7: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./file0/file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RSETATTR(r0, 0x0, 0x0) 03:40:09 executing program 1: syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_EXIT_PERIODIC_INQ={{0x7f}, 0x20}}}, 0x7) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x8, 0x4, 0x7, 0xffff}}]}}, 0x15) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x41c}}}, 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xa2}, "3b9d1d50823db5e2e49ba1f7c2a596412882a4a358c2aadd49ebbc0ac1086a7fd8d8a2ce0e22630aca0a5a00a708b5785800dc05cbd28b2f73d04ea40222b037b3f53c82bee4a2c5a30c7afbe4259ace371f82e3a651cf064f90a3b1d64cee29c1e1c666def7bc6ee3c62ffbbfa31f6b97f5ea0a3dd6597d746320e598031b2cceddb4adc829a1ee1c1119d4eb41939be2f9c119b1c38aef5742e35b2b5de861e4da"}, 0xa6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x54) getdents64(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x15c) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0xf}, {0x8, 0x2, [{0xc8, 0x8001, 0x2}, {0xc8, 0x3, 0x3f}]}}}, 0x12) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) r1 = syz_open_dev$sg(&(0x7f0000000380), 0x1fb, 0x2000) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x120, 0xa00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)={0x0, 0xffffffff, 0xffffff85}) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c9e00a8da2fc2600131b02008000"], 0xf) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8c}, "b85bd39cdd9c8132caf9a52aaed54f1beac66b0d20609795f390b6e6bd67517df18abe884c05ed0745a531794b2f525f129dab6f54a99c60c7e214bf21b034e69f08e326aef661b51cb4e9cd7eeb3572dd65d0bb6a60899dde430f28eb92f08f1a14ea87df5dec048a0b787386a6a3b5216632f1f1a8f5be29ffb813b5b0c5905eb9d38e163ef73386531ce3"}, 0x90) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:40:09 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x4, 0x0, &(0x7f0000000100)) 03:40:09 executing program 6: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x33, 0x82002) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x324) 03:40:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) r3 = creat(&(0x7f0000000040)='./cgroup/pids.max\x00', 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8001) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r1, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x58, r1, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x3a}}}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x2}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x3d}, @NL80211_ATTR_PMK={0x14, 0xfe, "846bffaf43db9b8bb69d8be24229fbd0"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x20}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x58}, 0x1, 0x0, 0x0, 0x40800}, 0x20000080) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) syz_80211_inject_frame(&(0x7f0000000600)=@broadcast, &(0x7f0000000640)=@ctrl_frame=@cf_end_cf_ack={{}, {0x6000}, @device_b, @broadcast}, 0x10) [ 845.999810] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:09 executing program 2: r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1) read(r0, 0x0, 0x28) 03:40:09 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup2(r0, r1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x13, r2, 0x0) syz_io_uring_submit(r3, 0x0, 0x0, 0x0) mbind(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000000)=0x1, 0x8, 0x1) 03:40:09 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)={0x15}) 03:40:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) [ 846.209955] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 21 (only 16 groups) 03:40:10 executing program 7: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./file0/file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RSETATTR(r0, 0x0, 0x0) [ 846.349147] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 21 (only 16 groups) 03:40:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = creat(&(0x7f0000000040)='./cgroup/pids.max\x00', 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8001) sendmsg$TIPC_NL_NET_GET(r4, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x88, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "e141d8c56b85bb43c844393ff576b73420b89cfb0556f384dfadc5"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x4000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000040)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48040}, 0x4000010) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) r5 = open(&(0x7f00000008c0)='./cgroup/pids.max\x00', 0x100, 0x40) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000700)={&(0x7f00000005c0), 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x8c, 0x0, 0x200, 0x4070bd26, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x30, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:40:10 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x4a002) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) 03:40:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x200, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000540), &(0x7f0000000580)=0x8) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) nanosleep(&(0x7f0000001780)={0x0, 0x3938700}, &(0x7f00000017c0)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) syz_80211_inject_frame(&(0x7f00000005c0), &(0x7f0000000600)=@data_frame={@qos_no_ht={{@type01={{0x0, 0x2, 0xd, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @from_mac, @device_a, {0xa}}, {0x1, 0x0, 0x1, 0x0, 0x18}}, {@type10={{0x0, 0x2, 0xc, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x8}, @from_mac=@device_b, @broadcast, @random="ea8f1f4b5585", {0x0, 0x6}}, {0xd, 0x0, 0x3, 0x1, 0x6}}}, @a_msdu=[{@device_a, @broadcast, 0x15, "d958055ecdab8e9e666b4e73bc4acf34fea1cc018a"}, {@device_a, @device_b, 0x1000, "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"}, {@device_b, @device_a, 0x7b, "e450a1742e0301c34b4402182413262facdd367a10c6ca6efd451c9dd96bd29cedb3f62f132363e4cd36698a33eb3b1cab8f6a1e2d61356edc5cf5c63a2ae4502e4fde6544853be0089b2348bef90ae16528ee57116235101824f6e85aa42584bfa88a46d92574604d9ba977f3534ef127e8042bc9996e6892dcaa"}, {@device_a, @broadcast, 0x3f, "9fd8bf8ba0629e2255680a40f12997956236206d8cf14c568828401e26f9a6da7068406b8f5ec0f10b0b7741b706ab5b4c4921527ec96bf33d2dc3310d1da8"}]}, 0x1144) 03:40:10 executing program 3: ptrace(0x10, 0x1) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 846.493870] program syz-executor.6 is using a deprecated SCSI ioctl, please convert it to SG_IO 03:40:10 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001600)={0x68084300, 0x0, 0x0, &(0x7f0000001400), {}, 0x0, 0x0, &(0x7f0000001500)=""/137, 0x0}, 0x58) 03:40:10 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:40:10 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@updpolicy={0xc4, 0x19, 0x441, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 03:40:10 executing program 6: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000002c0)={{0x80}, 'port1\x00'}) r1 = dup2(r0, r0) close(r1) 03:40:10 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @empty}}, 0x20) [ 846.627081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:10 executing program 7: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./file0/file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RSETATTR(r0, 0x0, 0x0) 03:40:10 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/block/sda', 0x0, 0xca) 03:40:10 executing program 4: pwrite64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x200) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:40:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:40:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000100)={&(0x7f0000000140), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_STA_FLAGS2={0xc}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0xfd}]}, 0x34}}, 0x0) 03:40:10 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @empty}}, 0x20) 03:40:10 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448cb, 0x0) 03:40:10 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x58, 0x0, 0x0, 0x0, 0x29, 0x0, @private=0xa010100, @local}}}}}, 0x0) [ 847.029348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:10 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x0) 03:40:10 executing program 5: madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x66) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x1) 03:40:10 executing program 7: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./file0/file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RSETATTR(r0, 0x0, 0x0) 03:40:10 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @empty}}, 0x20) [ 847.092947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 847.148991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:11 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f0000000300)=0xffff7fff, 0x4) 03:40:11 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/intel_agp', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 03:40:11 executing program 5: process_mrelease(0xffffffffffffffff, 0x0) 03:40:11 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @empty}}, 0x20) 03:40:11 executing program 0: ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000640)={0x7, 0x3, 0x3}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f0000000040)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40044}, 0x2400c811) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000bc0)=@data_frame={@no_qos=@type00={{0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x5}, @broadcast, @device_a, @initial, {0x8, 0x40}}, @a_msdu=[{@broadcast, @broadcast, 0xde, "9fe40ecf685d2cecc52893ee9d65fad92e42d530b9144e33562d1fe786ae8358b484955a5df6b4fcf6bde7101bb106daaaf5138ddd91de74e15ef6716bb0533c2f44a9987286d22516cbdd96f24e1d92e831757e805ab17c8fae93c03db46bf82ac7521b29fe35e691feee9d7b11bbecfad5074840a8e43f0799d887ccbc290cbbff6f7dd29d41521b73b6b3c3bcaff8306c0f730eb6a4a017a036f5ecfbb506bb950acac49c7d334ebe913597368358ede39ceefe15038effd9cb8e68a484ca19f4b6fc5cfa87fa14113fd313674b0333a23b3b02484d594e5225caf0f5"}, {@device_a, @device_b, 0xf8, "75fa9340afbbcd02881948add084859f15b0281b908590da80897c4d3608251eac779882e23d66be9f08a608c1e7c4c32f53e1a33fc2e591d42d6d2bb89767843c07996485e0781355afe059ce0f46f118179dac897a9074ce33f4a420671170732e898761248ba4c9a75ab8d5a8244095e4e04a610beb1ebf82718129d347c18a36becca69c5f80624f8982ccfc0544c026221a03c399391809777aadafe5613668832271a2b01f9f27d33b96e1425b1407712cb523b3446bd463f5feb6c5289d0a6368655c3db9ab1737c5c1208c76d9d30efddb72a905f3b1ee343189aee0687c9cc44897110cd1c3dcb0d064855c7778227ad04125e4"}, {@device_b, @device_a, 0xdf, "0227c985ff19d50b4ce2704b60401e7e183e0d9a2a90c83e9d712d9fd9e84464112ee2a30760f4c20edbe78312ba6661c512272637e5f3208625a709b11b5c3da9d3e406e0b7c5fbdb6625e95fe2e895c167142aacdedf27e97b4ea5c1e9cb1f4b0eb8a30386304d9109702131318746a4fcce4216305374ae30dd666c97f54097758d330ffe420d3626337f0c5ce76c5b57161df1444b0d00fdc97e68e8fe0dda81809b9e1e1dd717f980804a34ba7d5457a4f9ee14f961965200a6910bd72777c525ecf4878d4351ccee90da5d228087e7e83aa61e6415e4f50bd17ae8cb"}, {@device_b, @device_b, 0xe8, "de9202d144e46d7197a36ec2aa202b5eb529a82480034f30ea939e8005bc8c64f5d94a1564cdecb4dc981ad0ecd73294d8f90dcf7aab6383a6414d3bd484d3d41765ee2d4571eb30bed4701ec7bcfe127e910675f8510eb4b2127b5fea2cdf07dd2393df7b1b9a37e6dcc583a840dc752042e3ff12552ab84ab350d77929a65f8925401f8ee3b77dd7be0a979ba4d0aece532ba2c1d221e4f1aaae7fbd4eca1a7bb9aeb236b214ef7c6e12a0b7285b38bc86f1a281cf1cb808ac7a88a003c3db53248ba8d0ed78101f2e4841cc1d217299b23ccba652a86e4fb43ed9dbe466c81828789b5a8622f7"}, {@device_a, @device_b, 0xd2, "add09c05bbd1d4d1ef4e3deaad134cdf4b1db353af7aa3c7cd08453db4ecb4d154cfa8727165eb0ab143756d21046b989ec32fa805b51dd4077da689a01ae96f5a068c951dacca9522b36fcf1267d916e6ffe778fc4a76cb8780301fb0fb0fcfa29d5a31e25d7635d7e91d2ebd7812fdf51149adea73ec09b81bf12370c3a54f516adf7afa2ecabd8f631a8675ee2b2fcd3e3b7e55460eb0bd407f8efb19a485cf0a62753a18ee4bf5c575188bd2ceefb836418a1aed7ebcff105656bf026ea9ca8673b52e48eeb09cb9a5f6ac110f44cf75"}, {@device_a, @device_a, 0xad, "cf395c591da198cb4f498a0c6219744ced7de7f50518ea940f4a0718ee883103b2924c3b1ed209f9678cdbd6c4761fe3895cb0c2c9a0803b847ed7b3a8de497ced4a8b63886360442c5b225dcf15b913e1071682bdf70afab83ba26aec99b7bd72ec077bc2dd561f12451a1f5ecec7228c35ce87fef0bd5b983dc7fe007ba9170e60e8225a00dbea8e51dc0cecdbff8a8ec89775110b7dd27c96b68ad8015046725a2ae2ba9817891ad0e8ddf0"}, {@device_b, @broadcast, 0x76, "2ab29591336dc67baf2008221eaecd0dc04ead24f6f4e8bcb4a714c86baadb9c711d17a8cc057cb864e25c8309929aaf786bb766c6a653c28c4ea6794833f0a82fcf2bc7ddc92ba7dc0405bba44140be516cb7710bfb3b24d75214e44029ead49340fa661b739026002da5fc735e42a89f40b968c20e"}]}, 0x614) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) r3 = dup3(r0, 0xffffffffffffffff, 0x263c11ba11283d30) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, r1, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x33}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="100000000802110000010802110000000802110000002000011000ed0000010880848b960c121824"], 0x28) 03:40:11 executing program 2: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ffc000/0x4000)=nil], &(0x7f0000000080), 0x0, 0x0) 03:40:11 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448cb, 0x0) 03:40:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050d4501862acbceaa5418688c6507000000000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000600)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000540)={0xb0, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BSS_SELECT={0x14, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xa}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x80, {0x1, 0x6, 0x8, 0x7}}}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_IE={0x58, 0x2a, [@supported_rates={0x1, 0x7, [{0x3}, {0xb}, {0x9, 0x1}, {0x48, 0x1}, {0x1b}, {0x12}, {0x60, 0x1}]}, @perr={0x84, 0x49, {0x37, 0x5, [@not_ext={{}, @device_b, 0x7, "", 0x36}, @not_ext={{}, @broadcast, 0xffff, "", 0x36}, @not_ext={{}, @broadcast, 0x1f, "", 0x10}, @not_ext={{}, @broadcast, 0x1f, "", 0x24}, @ext={{}, @device_a, 0xfffffff9, @device_b, 0x9}]}}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}]}, 0xb0}, 0x1, 0x0, 0x0, 0x10}, 0x4010) r3 = dup3(r0, r0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r5, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r3, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r5, 0x120, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x1090) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:40:11 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000040101"], 0x14}}, 0x0) [ 847.634874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:11 executing program 1: syz_emit_ethernet(0x46, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "2f2802", 0x10, 0x0, 0x0, @local, @mcast2, {[@hopopts={0x0, 0x1, '\x00', [@pad1, @pad1, @generic]}]}}}}}, 0x0) 03:40:11 executing program 2: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x101880) 03:40:11 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x40505412) 03:40:11 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448cb, 0x0) [ 847.700292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 847.714351] netlink: 'syz-executor.4': attribute type 338 has an invalid length. 03:40:11 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 03:40:11 executing program 1: r0 = semget$private(0x0, 0x5, 0x0) semop(r0, &(0x7f0000000040)=[{0x0, 0x7fff}, {}], 0x2) semop(r0, &(0x7f0000000000)=[{0x0, 0xfffa}, {0x0, 0x7}], 0x2) semtimedop(r0, &(0x7f00000002c0)=[{0x0, 0x3f}], 0x1, 0x0) 03:40:11 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) mknodat$loop(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) setxattr$security_evm(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040), &(0x7f0000000200)=ANY=[@ANYBLOB], 0x15, 0x0) unlink(&(0x7f0000000080)='./file0/file0\x00') 03:40:11 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448cb, 0x0) 03:40:11 executing program 7: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3007}, 0x4) r1 = socket$unix(0x1, 0x5, 0x0) dup2(r1, r0) 03:40:11 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r1, 0x2) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/70, 0x46}], 0x1) accept$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400a0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) 03:40:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000000)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_b, @from_mac}, 0x0, 0x2, 0x0, @val={0x10, 0x1, 0xe9}}, 0x21) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:40:11 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x40505412) [ 847.966941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:11 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 03:40:11 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x40505412) 03:40:11 executing program 6: r0 = fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)='seclabel', 0x0, r0) 03:40:11 executing program 5: r0 = fsopen(&(0x7f0000000200)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, 0x0, 0x0, 0xffffffffffffff9c) [ 848.025558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:11 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="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"]}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 03:40:11 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 03:40:11 executing program 7: timer_create(0x8, &(0x7f0000000100)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, r0+10000000}, {0x77359400}}, 0x0) timer_gettime(0x0, &(0x7f0000000140)) 03:40:11 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x40505412) [ 848.094761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:12 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) prlimit64(0x0, 0x0, 0x0, 0x0) 03:40:12 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000100), &(0x7f0000000140)='system_u:object_r:groupadd_exec_t:s0\x00', 0x25, 0x1) [ 848.258492] audit: type=1400 audit(2000000412.120:89): avc: denied { associate } for pid=230137 comm="syz-executor.5" name="tty30" dev="devtmpfs" ino=50 scontext=system_u:object_r:groupadd_exec_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1 03:40:12 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 03:40:12 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x14, 0x32, 0xffffffffffffffff, 0x0, 0x0, "", [@generic='R']}, 0x14}], 0x1}, 0x0) 03:40:12 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0x0, 0x0, 0x7f}) 03:40:12 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x2, 0x2) 03:40:12 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) 03:40:12 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x88172, 0xffffffffffffffff, 0x8000000) mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1000006) 03:40:12 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000200)) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) 03:40:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="44100000", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000"], 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="b8c0000008583711000000100000000200"/31], 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:40:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x1c, 0x6c, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wlan1\x00'}]}, 0x1c}], 0x1}, 0x0) 03:40:12 executing program 1: syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000940)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}}, 0x0) socket$netlink(0x10, 0x3, 0x4) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) [ 848.526923] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO 03:40:12 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8936, &(0x7f0000000000)={@local, 0x0, r2}) [ 848.532129] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 848.558879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 848.565181] tc_dump_action: action bad kind 03:40:12 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) sendmmsg$inet6(r0, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)='.', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x3, &(0x7f0000000080), 0x4) 03:40:12 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0x0, 0x0, 0x7f}) [ 848.613151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:12 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000080)={0x0, r1}) 03:40:12 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x8, 0x4}}}}, 0x11) [ 848.656262] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 848.675086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:12 executing program 0: syz_io_uring_setup(0x5214, &(0x7f0000000140)={0x0, 0x200000, 0x1d}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 03:40:12 executing program 5: openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000080)) 03:40:12 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0x0, 0x0, 0x7f}) [ 848.769613] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO 03:40:12 executing program 7: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, 0x0, 0x64) 03:40:12 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x8, 0x4}}}}, 0x11) 03:40:12 executing program 5: iopl(0x3f) 03:40:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x0, 0x0, {{0x39}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) 03:40:12 executing program 6: r0 = socket$inet(0x2, 0x3, 0x26) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0xfff, 0x4) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000140)=0x7, 0x4) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:12 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0x0, 0x0, 0x7f}) 03:40:12 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) 03:40:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000540)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x8, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x1, 0x3}}, [{0xdd, 0x36, "7d9b032e85de7e8010f7783776c44ad80c0e4fa7f1cd6fe1e13c3277ffc0b97f8916c9900c0a322f4cc089d5e1758f617090895f4227"}]}, 0x77) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 849.136945] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO 03:40:13 executing program 7: r0 = fsopen(&(0x7f0000000040)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='\x00', 0x0, 0x0) 03:40:13 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000440)="85", 0x80000}], 0x1, 0x1000, 0x0) sendfile(r0, r1, 0x0, 0x1000) unlink(&(0x7f0000000040)='./file0\x00') 03:40:13 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000840)=[{&(0x7f0000000580)="578c9b42", 0x4}], 0x1) [ 849.177620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:13 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x8, 0x4}}}}, 0x11) [ 849.240996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x4}, 0xc) 03:40:13 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x8, 0x4}}}}, 0x11) 03:40:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)={0x14, 0x1a, 0x1, 0x0, 0x0, "", [@generic="02"]}, 0x14}], 0x1}, 0x0) 03:40:13 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r1, 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0x0) [ 849.296533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:13 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x16, 0x0, &(0x7f00000018c0)) 03:40:13 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @remote, 0x1}, 0x1c, 0x0}}], 0x1, 0x400c000) writev(r0, &(0x7f0000001580)=[{&(0x7f00000000c0)="8d", 0x1}], 0x1) 03:40:13 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) splice(r0, 0x0, r1, 0x0, 0x6, 0x0) 03:40:13 executing program 2: r0 = timerfd_create(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timerfd_gettime(r0, &(0x7f0000000000)) 03:40:13 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, 0x0) bind$bt_hci(r0, &(0x7f00000000c0), 0x6) 03:40:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000005c0)=""/207, 0xcf}, {&(0x7f00000006c0)=""/81, 0x51}], 0x2, &(0x7f0000000780)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}, 0x40010102) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000c40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000900)={0x2e4, r1, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x4f}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "5726eead"}, @NL80211_ATTR_FILS_ERP_RRK={0x100, 0xfc, "9c4f8453bdae6c42307b0f45d2465bf912ec936c00c0a4d82972d454a1422d8f318c0ad21fd573988b1f732e5aaddc589e991ca6506efcf160f3696ccf808258105011774fc91913c93146cfac22b3958152e319590bce0bb97d240259c385412a613ed999fd99f5a3a8a138c64c630ab4a61474d2acfbf93f9f471d4fedb6fe6f63374e6ced25c6f9955159b8e86f45ab769d74d598b450a56c73471d2b206cc3bd1995561e794ea8e1099f13187c7a0b269405890a58b0c0b940331ee05558202c030c027ec45436c83f7e013e0c11334b7878b9adcfd15d16defa0cba0acd8a84565b75505000638a87ab59e66e1b8b2a844fb00f66c7b89dff5a"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x4}, @NL80211_ATTR_FILS_ERP_USERNAME={0x14, 0xf9, "49da98a05db7f036f44aa0713e775fc3"}, @NL80211_ATTR_FILS_ERP_REALM={0x99, 0xfa, "151b194a7e41b4cfa2aa4b19eb1b399e8133fb9f8fb654d5bd9773ef132d656e682928b0829e49b1eac84be15ee1f3e89ab0539f0763be5c333845e28600c011d7737581efa60285b104c56b4394d91e0b85610f1706a967de0d9418744a47a1ed4c75e7b50c4e91b4dd29df098fafd40b21c33eea8453504eadf29933a13c10b5caf4c0f7c0ea89b02b014c6fd9fff8cd31d9982c"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x8}, @NL80211_ATTR_FILS_ERP_REALM={0x8c, 0xfa, "ec1d82b175c20044e874a39cc87d243757c40894d157bbac713b6f2ea29a4c3574588a1c2876a530dedb6b1b1ea02949757afcb1e2be36b8aadb4f418793016192dd2c1b493b859ea8a5ca90b6cb6e1138af94e94a056bb4144e08b12d487beaaa8b182f07b205ac5fc747d4f9648c10cec09d6ad5f67dffcec096863f0ac579bbc86e993cb2624d"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x200}, @NL80211_ATTR_FILS_ERP_REALM={0xe, 0xfa, "0ee75b7d436dee6e010b"}, @NL80211_ATTR_FILS_ERP_RRK={0xe, 0xfc, "8c3d7f12ada543733525"}], @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x80, 0x1, 0x7, 0x0, {0x1, 0xff, 0x0, 0x3}, 0x6, 0x8, 0x5}}, @NL80211_ATTR_SSID={0x13, 0x34, @random="36a6cad63122632538be01ea74e053"}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_USE_RRM={0x4}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x504f8bcc303c73fb}, 0x4008000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000040)={0x14, r1, 0x4, 0x70bd2d, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x44000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000240)={0x2c, r6, 0x1, 0x0, 0x0, {0x7}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x58, r6, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x44, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004}, 0x20004894) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:40:13 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x80000, 0x600}]) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) 03:40:13 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x5}]}, 0x24}}, 0x0) 03:40:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)={0x20, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0xd, 0x0, 0x0, 0x1, [@generic="a58f19382593749372"]}]}, 0x20}], 0x1}, 0x0) 03:40:13 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) splice(r0, 0x0, r1, 0x0, 0x6, 0x0) 03:40:13 executing program 2: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLINK(r1, &(0x7f0000000ac0)={0x7}, 0x7) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r2, 0x6, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 03:40:13 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chmod(&(0x7f0000000100)='./file0\x00', 0x1) mknodat$loop(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1) chown(&(0x7f0000000000)='./file0\x00', 0xee01, 0xee00) fchmodat(r0, &(0x7f00000044c0)='./file0\x00', 0x0) [ 850.138803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 850.163643] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 850.164972] I/O error, dev sr0, sector 3 op 0x1:(WRITE) flags 0xc800 phys_seg 32 prio class 2 [ 850.173934] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 850.175405] I/O error, dev sr0, sector 259 op 0x1:(WRITE) flags 0xc800 phys_seg 32 prio class 2 [ 850.185687] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 850.187023] I/O error, dev sr0, sector 515 op 0x1:(WRITE) flags 0xc800 phys_seg 32 prio class 2 [ 850.189227] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 850.190465] I/O error, dev sr0, sector 771 op 0x1:(WRITE) flags 0x8800 phys_seg 32 prio class 2 03:40:14 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) splice(r0, 0x0, r1, 0x0, 0x6, 0x0) 03:40:14 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x60, 0x2, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0xc, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5}]}}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}]}]}, 0x60}}, 0x0) 03:40:14 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd", 0xfe1e) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x8) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) 03:40:14 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') pread64(r0, &(0x7f0000000140)=""/183, 0xb7, 0x0) 03:40:14 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed}, 0x8) bind$bt_sco(r0, &(0x7f0000000080)={0x1f, @none}, 0x8) 03:40:14 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8) listen(r0, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 03:40:14 executing program 6: io_setup(0x1, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) io_submit(r0, 0x1, &(0x7f0000000300)=[&(0x7f0000000100)={0x0, 0x0, 0xfe, 0x0, 0x0, r1, 0x0}]) 03:40:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="500000000802110000010802110000000802110000000000000000000000000064000100000602020202020201088b960c121824d4f5d50958e483f331f11fddb24d1fac11"], 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) r3 = creat(&(0x7f0000000040)='./cgroup/pids.max\x00', 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8001) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8000}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x11) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000600)=0x4) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 850.582976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:14 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4d, &(0x7f0000000000)={0x4, 0x0, 0x8, 0x0, 0x1a6, 0x0}) 03:40:14 executing program 6: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0xc0a85320, &(0x7f0000000080)={0x80}) [ 850.683405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:14 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) splice(r0, 0x0, r1, 0x0, 0x6, 0x0) [ 850.763289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:14 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) readv(r0, 0x0, 0x0) 03:40:14 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfdef) 03:40:14 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') pread64(r0, &(0x7f0000000140)=""/183, 0xb7, 0x0) 03:40:14 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/arp\x00') openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(r0, &(0x7f0000000180)=""/123, 0x7b, 0x8) 03:40:14 executing program 1: syz_io_uring_setup(0x3623, &(0x7f00000001c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 03:40:14 executing program 5: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3) 03:40:14 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x10}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3c}, 0x0, @in=@empty}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:40:15 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000003c0)={0x0, @l2tp={0x2, 0x0, @loopback}, @generic={0x0, "5f3ff1ca035ecf117a93be4fdc78"}, @vsock={0x28, 0x0, 0xffffffff, @my=0x0}}) 03:40:15 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') pread64(r0, &(0x7f0000000140)=""/183, 0xb7, 0x0) 03:40:15 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fallocate(r0, 0x8, 0x0, 0x9) 03:40:15 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) readv(r0, 0x0, 0x0) 03:40:15 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x33, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) 03:40:15 executing program 5: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="d9543038a1b282d50a0127a3fe787904192e30be12e051656ca28132eba1a51d12f95180d319eef8bb32a4a5275ed0721e7666ca07423b043d77f268a4db33451cf00ae47cb045f9bc4e0385ab12e07ac5", 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) 03:40:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a0034000b020202020200070000000008021100000000000800350000000000080026006c090000b251a3eaecaa9b519d2b20a114e819a76271e322464e267e8a114dc5aa7ccf89c68443464fdcfa9f468da517f3c7dfd435ece787ed"], 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="50000000080211000cc39ea8a182ba010802110000000000000000000000000882848b960c121824"], 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) r3 = creat(&(0x7f0000000040)='./cgroup/pids.max\x00', 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8001) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x18010001}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x7fff}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x840) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) creat(&(0x7f0000000600)='./file0\x00', 0x80) 03:40:15 executing program 7: syz_mount_image$iso9660(0x0, &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=tcp,port=0x0']) [ 851.256363] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 851.266742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:15 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000780)={0x0, 0x0}) 03:40:15 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') pread64(r0, &(0x7f0000000140)=""/183, 0xb7, 0x0) 03:40:15 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) readv(r0, 0x0, 0x0) [ 851.329082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:15 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000), 0x4) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000200), 0x4) 03:40:15 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, 0x0) [ 851.394772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:15 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x68, &(0x7f0000000000)=0x3, 0x4) 03:40:15 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(r2, r1, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) faccessat2(r0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) 03:40:15 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000240)=0x20000000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) 03:40:15 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) readv(r0, 0x0, 0x0) 03:40:15 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f0000000000)=""/51) sysinfo(0x0) 03:40:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}}, 0x0) 03:40:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f00000000c0)={0x0, r1/1000+10000}, 0x10) 03:40:15 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$FIBMAP(r0, 0x1267, 0x0) 03:40:15 executing program 7: get_mempolicy(0x0, 0xfffffffffffffffd, 0x100, &(0x7f0000ffc000/0x4000)=nil, 0x2) 03:40:15 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r1, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40008022, 0x0) sendmmsg$unix(r0, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@rights={{0x18, 0x1, 0x1, [r1, r1]}}], 0x18}}], 0x1, 0x0) 03:40:15 executing program 2: r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:40:15 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r0, 0x0, &(0x7f0000000040)) 03:40:15 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x541a, &(0x7f0000000000)) 03:40:15 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x7}, [""]}, 0x14}}, 0x0) 03:40:15 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000540)="ae98d7aa", 0x4}], 0x1, &(0x7f0000001600)=[@hoplimit_2292={{0x14}}], 0x18}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[@dstopts={{0x10}}, @flowinfo={{0x14}}], 0x30}}], 0x2, 0x0) 03:40:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}}, 0x0) 03:40:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x1bc, r4, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7fffffff, 0x3d}}}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d94799785ec38d4a3901820de4e45198b661390b9bbb4f5b"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "562e426cae68c600e8693e19a4071a08cd7dd251cd14bc4c"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b7f5c9f217755c5a718678ec1948c56edfa3accccc0bab6d"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6ef55500c89354ca27ce8cad93a022d432119faf60c2f357"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a1bc38ae8fb60b06667b3ea03cf42ea71d5e95808dfe843a"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "fbb35e7a2e75af57899a1530f84fcd2ed07fcf78d5e2f970"}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a11508577d3344429077421d7abcf8fc2e456cb1ca669afd"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8e0acd8f589d7834d1b36fc22a688ccf1fab509223d5cb7d"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x10800}, 0x4) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 851.832357] netlink: 'syz-executor.4': attribute type 338 has an invalid length. 03:40:15 executing program 6: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ppoll(&(0x7f00000003c0)=[{r1}, {0xffffffffffffffff, 0x408}, {r0}], 0x3, &(0x7f0000000400)={0x77359400}, &(0x7f0000000440), 0x8) 03:40:15 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r0, 0x0, &(0x7f0000000040)) [ 851.859552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:15 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x21, 0x0, 0x1300) 03:40:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000002840)=0xffffffffffffffff, 0x4) sendmmsg$inet6(r0, &(0x7f0000004f80)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000100)="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", 0x21e}, {&(0x7f0000001100), 0x2a6}, {0x0, 0x2}], 0x3}}], 0x1, 0x8000015) 03:40:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}}, 0x0) 03:40:15 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d0c, &(0x7f00000000c0)={{}, {}, 0x0, 0x12}) 03:40:15 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r0, 0x0, &(0x7f0000000040)) 03:40:15 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x7}, [""]}, 0x14}}, 0x0) 03:40:15 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x0, 0x0, "5c2387b3abf58f4f"}}}, 0xe) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040f764a000408"], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x13}, @hci_ev_le_conn_complete={{}, {0x8, 0xc9, 0x40, 0x1, @any, 0x8, 0x7ff, 0x5, 0x9}}}}, 0x16) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="030000502bbbe9325c2f4825ed4e2e792fdda73f228ffd7503c16d40f44ecf7770235540cb73eb566be07629ad9d0d92926932bbae11c89a05bab2b57521c5d80fdc4c248dbc73be336b0e1cb2cf1f2859a4c280e00466"], 0x54) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c91014001000050017000ce4bd85cf500772f10001800400ccc3cf49b6000300"], 0x19) getdents64(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x15c) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x14}, @l2cap_cid_signaling={{0x10}, [@l2cap_move_chan_cfm={{0x10, 0x0, 0x4}, {0x8, 0xfe00}}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0xfdf8, 0x1}}]}}, 0x3) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0xf}, {0x8, 0x2, [{0xc8, 0x8001, 0x2}, {0xc8, 0x3, 0x3f}]}}}, 0x12) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) r1 = syz_open_dev$sg(&(0x7f0000000380), 0x1fb, 0x2000) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)={0x0, 0xffffffff, 0xffffff85}) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="01c9e00a8da2fc2600131b0200805dbcb8a866268200"], 0xf) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8c}, "b85bd39cdd9c8132caf9a52aaed54f1beac66b0d20609795f390b6e6bd67517df18abe884c05ed0745a531794b2f525f129dab6f54a99c60c7e214bf21b034e69f08e326aef661b51cb4e9cd7eeb3572dd65d0bb6a60899dde430f28eb92f08f1a14ea87df5dec048a0b787386a6a3b5216632f1f1a8f5be29ffb813b5b0c5905eb9d38e163ef73386531ce3"}, 0x90) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:40:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={r2, 0x3, 0x2}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000010c0)={'ip6_vti0\x00', &(0x7f0000001040)={'ip6gre0\x00', 0x0, 0x2f, 0x20, 0x4a, 0x401, 0x5, @dev={0xfe, 0x80, '\x00', 0x22}, @local, 0x20, 0x7800, 0x9, 0x5}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000001100)={'wg0\x00', 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000300)={0x0, 0x3, 0x6}, 0xfffffffffffffc60) getsockname$packet(0xffffffffffffffff, &(0x7f0000001140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001180)=0x14) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000014c0)={&(0x7f00000011c0)={0x2c8, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x20040805}, 0x41) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000ef0000000200000600000008000300", @ANYRES32=r9, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000240)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0000000000000006eb00004000000004", @ANYRES32=r9, @ANYBLOB="2b002a0083254002320802110000000400000008021100000004000000ff010000ffffffffffff09000000000a00060008021100000000000800350000000000080026006c090000"], 0x64}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x35a) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:40:15 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d0c, &(0x7f00000000c0)={{}, {}, 0x0, 0x12}) [ 852.081142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}}, 0x0) 03:40:15 executing program 5: setresuid(0x0, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = dup2(r1, r0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) 03:40:15 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x7}, [""]}, 0x14}}, 0x0) 03:40:15 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r0, 0x0, &(0x7f0000000040)) [ 852.138972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:16 executing program 2: syz_emit_ethernet(0x3f, &(0x7f0000000040)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000010", 0x9, 0x3a, 0x0, @remote, @local, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x0, 'S'}}}}}}, 0x0) 03:40:16 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$rfkill(r0, &(0x7f0000000240), 0x80000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x16) read$rfkill(r0, &(0x7f0000000200), 0xfffffda9) 03:40:16 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d0c, &(0x7f00000000c0)={{}, {}, 0x0, 0x12}) 03:40:16 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x7}, [""]}, 0x14}}, 0x0) 03:40:16 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) flistxattr(r0, &(0x7f0000001280)=""/4, 0x4) 03:40:16 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x4c, &(0x7f0000000000)=0xfffffffe, 0x4) connect$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 03:40:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000300), 0x31) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) 03:40:16 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d0c, &(0x7f00000000c0)={{}, {}, 0x0, 0x12}) 03:40:16 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000280)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) sendmsg(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) 03:40:16 executing program 6: modify_ldt$write(0x1, &(0x7f0000000080), 0x10) modify_ldt$write(0x1, &(0x7f0000000040)={0x80000001, 0x1000, 0x1000, 0x1, 0x3, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000100)={0xffffffc1, 0x1000, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1}, 0x10) modify_ldt$write(0xffffc90000000000, &(0x7f0000000180), 0x10) 03:40:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="2499bfc3000000", @ANYRES16=r1, @ANYBLOB="0500000000000000e1d1060071770a160300", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) r3 = creat(&(0x7f0000000040)='./cgroup/pids.max\x00', 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8001) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x184, r1, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_KEYS={0x128, 0x51, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "116b162301"}]}, {0x64, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_SEQ={0xb, 0x4, "fb31e77504c983"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "22dcee2e44"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x7, 0x4, "942305"}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0x9, 0x4, "849f566b09"}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "581f429de18ce5b63884092703"}]}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x4}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x6}, @NL80211_ATTR_KEYS={0x14, 0x51, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0xa, 0x4, "5f0dd43d9f4b"}]}]}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x200000, {0x0, 0x7, 0x101}}}]}, 0x184}}, 0x4000805) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000740)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x60e2, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @void, @void, @void, [{0xdd, 0x48, "4896993978a36acbb191fad46994764361f0b7f389c3c7910852110cb064e64ebee7a3f5f5cafcd5ac7fc292221250ecdde51aa66312ebc7b898296991c8879017baaf1471481cd2"}]}, 0x76) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="b0000000080211000001080211000300000011e00000100045a9d400c21bac0262000002000000"], 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 852.514127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:16 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace(0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r1 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0xc058534b, &(0x7f00000000c0)) 03:40:16 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) finit_module(r0, 0x0, 0x0) 03:40:16 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)) 03:40:16 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@time_offset={'time_offset', 0x2c}}]}) 03:40:16 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0xf, 0x2}}, 0x14}}, 0x0) [ 852.569077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 852.593840] vfat: Bad value for 'time_offset' [ 852.597942] vfat: Bad value for 'time_offset' [ 852.607985] program syz-executor.7 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 852.611870] program syz-executor.7 is using a deprecated SCSI ioctl, please convert it to SG_IO 03:40:17 executing program 5: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r0, 0x0, 0x0) 03:40:17 executing program 1: ftruncate(0xffffffffffffffff, 0x0) 03:40:17 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000b00)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0x2, 0x0, 0x0, @local}, 0x1c) 03:40:17 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)) 03:40:17 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x40401) close(r0) 03:40:17 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace(0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r1 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0xc058534b, &(0x7f00000000c0)) 03:40:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) r3 = creat(&(0x7f0000000040)='./cgroup/pids.max\x00', 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8001) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r4, &(0x7f0000001cc0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001c80)={&(0x7f0000000680)={0x15fc, r1, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3, 0x53}}}}, [@NL80211_ATTR_IE={0x13c, 0x2a, [@mesh_id={0x72, 0x6}, @perr={0x84, 0x12e, {0xc1, 0x12, [@ext={{}, @device_b, 0x1f, @device_b, 0x1}, @ext={{}, @device_b, 0x5e}, @ext={{}, @device_a, 0x0, @broadcast, 0x25}, @not_ext={{}, @broadcast, 0x7f, "", 0x2a}, @ext={{}, @device_b, 0x3, @device_b, 0x41}, @ext={{}, @device_a, 0x10000, @device_b, 0x22}, @not_ext={{}, @device_a, 0x298acd8c, "", 0x12}, @ext={{}, @device_a, 0x8, @device_b, 0x1b}, @ext={{}, @device_b, 0x9, @broadcast, 0x41}, @not_ext={{}, @broadcast, 0x2, "", 0x1}, @ext={{}, @device_b, 0xb43, @device_a, 0xb}, @not_ext={{}, @device_b, 0xfbf5, "", 0x1}, @not_ext={{}, @device_a, 0x1, "", 0x2e}, @ext={{}, @device_b, 0x7, @device_a, 0x3e}, @ext={{}, @broadcast, 0x0, @device_b, 0x34}, @not_ext={{}, @device_a, 0x7f, "", 0x22}, @ext={{}, @broadcast, 0x6, @device_b, 0x4}, @not_ext={{}, @device_a, 0x0, "", 0x20}]}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5a}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x27}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x40}, @NL80211_ATTR_IE={0x11, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x30, 0x4}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_IE={0xc2, 0x2a, [@preq={0x82, 0x41, @ext={{0x0, 0x1, 0x1}, 0x9, 0x40, 0x4, @broadcast, 0x6, @device_b, 0x4, 0x4, 0x3, [{{}, @device_a, 0x1}, {{0x1}, @device_b, 0x113e4625}, {{0x1, 0x0, 0x1}, @broadcast, 0x1}]}}, @peer_mgmt={0x75, 0x16, {0x0, 0x8, @void, @val=0x2d, @val="c4b3488a5229c0b06bb15202278089d1"}}, @measure_req={0x26, 0x34, {0x8, 0xf8, 0x80, "4eec2c348dbaf529e5a593724868a0b7d0c58e53229ae0de9068050cd31dd34a4e81806a71cebcba33b474637b93d303a9"}}, @peer_mgmt={0x75, 0x8, {0x1, 0x2, @val=0x3ff, @val=0x19, @void}}, @rann={0x7e, 0x15, {{0x1, 0x2}, 0xab, 0x20, @broadcast, 0x4, 0x4, 0x4}}, @chsw_timing={0x68, 0x4, {0x4, 0x4}}, @sec_chan_ofs={0x3e, 0x1}, @sec_chan_ofs={0x3e, 0x1, 0xfe}]}, @NL80211_ATTR_IE={0x1018, 0x2a, [@supported_rates={0x1, 0x5, [{0x1, 0x1}, {0x2}, {0x48}, {0x6, 0x1}, {0x2}]}, @gcr_ga={0xbd, 0x6, @device_b}, @measure_req={0x26, 0x1003, {0x4, 0x2, 0x0, "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"}}]}, @NL80211_ATTR_IE={0xf8, 0x2a, [@preq={0x82, 0x62, @ext={{0x1, 0x0, 0x1}, 0x7f, 0x2, 0xfffffc18, @device_a, 0x5, @device_a, 0x1, 0xffffffba, 0x6, [{{0x0, 0x0, 0x1}, @broadcast, 0x6a1}, {{0x1, 0x0, 0x1}, @device_a, 0xffff}, {{0x0, 0x0, 0x1}, @device_a, 0xecc}, {{0x1}, @device_b, 0x5}, {{0x1}, @device_b, 0xff}, {{0x0, 0x0, 0x1}, @device_b, 0x7fffffff}]}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0x1, 0x0, 0x9}}, @tim={0x5, 0x66, {0x7f, 0x3b, 0x9, "2ac70373e7039021476bd3820253bb15ee7ea6ce189c6a9733868b30f39e76dcd2b091ee181c4ae58e99366b6e2f37339fb638844e596c997bc4c5e983fdceba31f78612416d6f00121cce2640e0cf07a8ca523e03b9e50d254945646ae09e3f79055a"}}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @dsss={0x3, 0x1, 0x6}, @channel_switch={0x25, 0x3, {0x1, 0xb1, 0x5}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_id={0x72, 0x6}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x1, 0xfe, 0x2, 0x20, 0x20}}]}, @NL80211_ATTR_IE={0x298, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0xa, 0x7f}}, @random_vendor={0xdd, 0x54, "e63e90e44dd8dfbaa3f3218c3320a7fbcc94795fa6294c2aee2a371a9a48744e333270a7e06872697af6951d4abc414b5c938ec8e832306ce4068f684ffa82f864bfd4b9a2e97e838b08c9e865947cf10b0eaa11"}, @measure_req={0x26, 0x61, {0x4, 0x63, 0x0, "bcad3f5bfe0a4f66c06b3409baee2e1e07053c656966e82c0f2777306455cc7cf408052d2091175d072f3e976da51a955415f354123f796322f8444b2f1c8d6e4a7489970c6b6e0c84feee309e6f4efd36d808085080db2dc7b7b34851b2"}}, @channel_switch={0x25, 0x3, {0x0, 0xad, 0x1}}, @link_id={0x65, 0x12, {@from_mac=@broadcast, @device_a, @device_b}}, @preq={0x82, 0x72, @not_ext={{0x1, 0x1}, 0xc1, 0x41, 0x2, @device_a, 0xc000, "", 0x3ff, 0x100, 0x8, [{{0x1, 0x0, 0x1}, @broadcast, 0x8}, {{0x1}, @broadcast, 0x80}, {{0x1, 0x0, 0x1}, @device_a, 0x1ff}, {{0x0, 0x0, 0x1}, @device_a, 0xc3}, {}, {{}, @device_a, 0x2}, {{0x1}, @broadcast, 0x200}, {{0x1, 0x0, 0x1}, @broadcast, 0x20}]}}, @rann={0x7e, 0x15, {{0x0, 0x8}, 0x1, 0x3f, @device_a, 0xff, 0x7f, 0x3f}}, @fast_bss_trans={0x37, 0x114, {0x3, 0x7, "a856f2c2570cbf631aa7d908aad34822", "59d28c8ae76b2150c1e3161b1bbe47968169213f69ccd5ee2a3e8c00da369041", "4bc65876ff8a279deac501f5f7e4daa9c7dc8bc62bfca0a51af68478d705d8da", [{0x2, 0x26, "bb9add2392396bc31f064ff6a672bea0a2490b7783d6572565b05e89626b2ae4a2f5f8fe293a"}, {0x3, 0x27, "7419d00f4c3798e3bfcac21e0a15ee008743223c0f10c35f52c6cd31d67ad7c9f482e2bcd41f71"}, {0x4, 0x19, "dc0f7c28a57903c50cc0ce1be855d8f466413d809872c35ef8"}, {0x3, 0xe, "4647ed68df966e191df21c9663bd"}, {0x2, 0xc, "fa8ffa00816e88e40887c993"}, {0x4, 0x1f, "bb488fd400c86847c86b2007da7861414f7d7467e19fdac034903a46381360"}, {0x4, 0x15, "e259984a11ffc9662fb04512f623ce60c780665564"}]}}, @ht={0x2d, 0x1a, {0x8000, 0x1, 0x2, 0x0, {0x9, 0x7, 0x0, 0x81, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x6, 0xae, 0xf7}}]}]}, 0x15fc}, 0x1, 0x0, 0x0, 0x20008080}, 0x24004001) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="50000000080211000001fe04ba3924407abb59a8080211000000080211000000000000000000fff08208640001000006020202220202"], 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000000)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x34, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000014}, 0x48005) 03:40:17 executing program 2: syz_emit_vhci(&(0x7f0000000640)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none}}}, 0xd) 03:40:17 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/mnt\x00') ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x8008b705, &(0x7f0000000040)) [ 853.534860] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 0 (only 16 groups) 03:40:17 executing program 2: syz_emit_vhci(&(0x7f0000000640)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none}}}, 0xd) 03:40:17 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) fcntl$addseals(r0, 0x403, 0x4808fad37bc57d73) [ 853.625333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:17 executing program 2: syz_emit_vhci(&(0x7f0000000640)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none}}}, 0xd) 03:40:17 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace(0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r1 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0xc058534b, &(0x7f00000000c0)) 03:40:17 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000400), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r1, 0xed8cc6e437879ca9, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x0) 03:40:17 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000000040)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(r0, &(0x7f0000000180)='./file0\x00', 0x0) 03:40:17 executing program 2: syz_emit_vhci(&(0x7f0000000640)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none}}}, 0xd) [ 853.936832] loop0: detected capacity change from 0 to 64 03:40:17 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @local, 0x3}, 0x1c) [ 854.003591] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 03:40:17 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)) 03:40:17 executing program 1: syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "6b1000", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "61165b", 0x0, 0x33, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@srh]}}}}}}}, 0x0) 03:40:17 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace(0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r1 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0xc058534b, &(0x7f00000000c0)) 03:40:17 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000400), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r1, 0xed8cc6e437879ca9, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x0) [ 854.136626] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 0 (only 16 groups) 03:40:18 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x12, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000100), 0x0, 0x4) ptrace(0x10, 0x0) ptrace(0x8, 0x0) splice(0xffffffffffffffff, &(0x7f0000000080)=0x2296, 0xffffffffffffffff, &(0x7f0000000100)=0xcc1f, 0x0, 0x5) fork() 03:40:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002000000dad02f4a69101b53028233a3d310dfd379735b134b8f2067910c959d2e58da5f869e55ae8724987c0e0c932d9776cdbf409872d213e6e1e38e6146a7ed0cf86b0c9eb560699f11d3711795fb1d6419782d61e6142e8f2eac85cd244806d95768ab3ae65a52ae76705c86321cf0ff5c7a2f94d80cc85fdfc3b80a76ae71aaf8341da46fc7eb1b74ec355d00e7ebe60d5734b0c2983091785f8e95ed21935445d54b17b1a8f98a4dfa60abe3e11c05641f98a1902df324578c4d14ec3d481dbd90d7963c7c8259bcbba51e09bd3f6424c28ed1dc80328371937428"], 0x24}}, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x3, 0x2}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={r5, 0x3, 0x2}, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000040)={r8, 0x3, 0x2}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000980)={&(0x7f0000000a00)=ANY=[@ANYBLOB="a4020000", @ANYRES16=0x0, @ANYBLOB="100026bd7000fcdbdf2507000000400001800800035bde9f17790b2e6d0b56c44829f20000f6ffff070003000600000008000182", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f6873720000000008000300000000001c000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="7c000180080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e310000000000000000000000080003000000000014000200726f73653000000000000000000000001400020069705f7674693000000000000000000014000200626f6e64300000000000000000000000840001800800030000000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000140002006970766c616e31000000000000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163767461703000000000000000001400020076657468315f766972745f776966690014000200687372300000000000000000000000002800018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006272696467655f736c6176655f310000780001801400020076657468305f6d616376746170000000140002006272696467655f736c6176655f30000008000300010000001400020076657468305f766972745f776966690014000200626f6e645f736c6176655f3000000000140002006970365f767469300000000000000000080003000300000060000180080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300000000001400020067656e657665310000000000000000000800030001000000080003000200000008000300010000000c00018008000300000000002800018008000100", @ANYRES32=r8, @ANYBLOB="14000200677265746170300000000000000000000800030002000000"], 0x2a4}, 0x1, 0x0, 0x0, 0x200080cc}, 0x4004) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:40:18 executing program 1: fork() openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) 03:40:18 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)) [ 854.250750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 854.286970] scsi_io_completion_action: 54 callbacks suppressed [ 854.287065] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 854.289397] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 854.290484] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 854.291484] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 854.292603] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 854.295699] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 854.296485] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 854.297548] Buffer I/O error on dev sr0, logical block 0, async page read [ 854.304833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 854.325190] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 854.326094] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 854.327354] Buffer I/O error on dev sr0, logical block 1, async page read [ 854.344068] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 854.344994] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 854.346250] Buffer I/O error on dev sr0, logical block 2, async page read [ 854.368343] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 854.369612] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 854.370895] Buffer I/O error on dev sr0, logical block 3, async page read [ 854.396809] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 854.397859] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 854.399141] Buffer I/O error on dev sr0, logical block 4, async page read [ 854.418415] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 0 (only 16 groups) [ 854.436915] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 854.437925] Buffer I/O error on dev sr0, logical block 5, async page read [ 854.452840] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 854.453955] Buffer I/O error on dev sr0, logical block 6, async page read [ 854.460213] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 854.461212] Buffer I/O error on dev sr0, logical block 7, async page read [ 854.469567] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 854.470264] Buffer I/O error on dev sr0, logical block 0, async page read [ 854.476178] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 854.476995] Buffer I/O error on dev sr0, logical block 1, async page read [ 854.484386] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 854.490704] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 854.495938] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 854.498974] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 854.501999] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 854.505836] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 03:40:18 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000400)={0x11, 0x4, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x5a, &(0x7f00000001c0)={@broadcast, @multicast, @val={@void}, {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "34088f7954a62c67018e1da60dc6dc637eb0c684d28a159a310028da47973720865b94434cf99587dc31722b7992b4acd7611173629e2c36eae407b1b64fb680"}}}}, 0x0) 03:40:18 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:40:18 executing program 6: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200), 0x280000, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000280), 0x0, 0x0, 0x0) 03:40:18 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x2000000) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000140)=ANY=[], 0xd) close(r1) close(r0) 03:40:18 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000400), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r1, 0xed8cc6e437879ca9, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x0) 03:40:18 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)) 03:40:18 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x12, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000100), 0x0, 0x4) ptrace(0x10, 0x0) ptrace(0x8, 0x0) splice(0xffffffffffffffff, &(0x7f0000000080)=0x2296, 0xffffffffffffffff, &(0x7f0000000100)=0xcc1f, 0x0, 0x5) fork() 03:40:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000740)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x223, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0xa8) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) r3 = creat(&(0x7f0000000040)='./cgroup/pids.max\x00', 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8001) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01e6fffff900000000000200000008000300", @ANYRES32=r6, @ANYBLOB="0c009900000000000000000008002600d5160000"], 0x30}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x48bd035d475d2826}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x130, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x18}}}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x26}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x10000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7f}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x98fc}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x14}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x9e59, 0x4, 0x2, 0xfffffeff, 0x1c, 0x8, 0x4]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x80000001}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x42}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x76}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7595}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x61f}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4e4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x210}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfffffff7}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x379}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x1, 0x2d73fa6e, 0x1d4]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xad1}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x17c}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffffc}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 854.712293] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 854.716996] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 854.717775] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 854.722339] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 854.733146] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 03:40:18 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="f9", 0x1, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000300)=@keyring={'key_or_keyring:', r1}) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r0) [ 854.740288] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 854.745604] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 854.746326] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 854.751631] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 0 (only 16 groups) [ 854.752072] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 854.766717] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 854.770488] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 854.776102] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 854.781697] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 854.785738] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 854.791388] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 854.796020] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 854.800802] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 854.803554] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 854.806078] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 854.810335] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 03:40:18 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000400), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r1, 0xed8cc6e437879ca9, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x0) [ 854.816171] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 854.822779] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 854.830661] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 854.834410] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 854.863806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 854.930544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:19 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:40:19 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x21, 0x0, 0x0) 03:40:19 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x90, 0x0) r0 = creat(&(0x7f0000000040)='./file0/file0\x00', 0x0) write$P9_RSETATTR(r0, &(0x7f0000000640)={0x7}, 0x7) 03:40:19 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x12, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000100), 0x0, 0x4) ptrace(0x10, 0x0) ptrace(0x8, 0x0) splice(0xffffffffffffffff, &(0x7f0000000080)=0x2296, 0xffffffffffffffff, &(0x7f0000000100)=0xcc1f, 0x0, 0x5) fork() 03:40:19 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') fcntl$notify(r0, 0x402, 0x80000014) fcntl$notify(r0, 0x402, 0x80000024) 03:40:19 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ppoll(&(0x7f00000005c0)=[{r0}, {r2}, {r1}], 0x3, 0x0, 0x0, 0x0) 03:40:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}]]}, 0x30}}, 0x0) r7 = fork() tkill(r7, 0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x2000009, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r7, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x6c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x6e}, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_PID={0x8, 0x52, r7}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x61}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x34}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7e}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x25, 0x1e}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x60}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a00060008021100000003000000000000000000080026006c090000"], 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000680)=@mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {}, @broadcast, @device_b, @random="858ce47cda6d", {0x6, 0x2d8}}, @ver_80211n={0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x22) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:40:19 executing program 5: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="d9543038a1b282d50a0127a3fe787904192e30be12e051656ca28132eba1a51d12f95180d319eef8bb32a4a5275ed0721e7666ca07423b043d77f268a4db33451cf00ae47cb045f9bc4e0385ab12e07ac5", 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) 03:40:19 executing program 7: syz_mount_image$nfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fsc']) [ 855.274468] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 855.275315] blk_print_req_error: 35 callbacks suppressed [ 855.275330] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 855.280805] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 855.281974] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 855.285037] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 855.286316] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 03:40:19 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000180)) [ 855.301944] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 855.303276] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 855.316744] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 855.317668] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 855.334900] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 855.336341] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 855.354922] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 855.356212] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 855.369219] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 855.370548] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 855.389456] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 855.390332] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 03:40:19 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 855.422516] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 855.423383] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 855.437116] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 855.443856] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 03:40:19 executing program 7: pipe(&(0x7f0000000040)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="f7", 0x1}], 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 855.464392] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 03:40:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x50, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40004}, 0x80) [ 855.474176] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 855.479965] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 855.490185] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 855.512867] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 855.517812] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 03:40:19 executing program 6: newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='\x00', &(0x7f0000000140), 0x1000) [ 855.531319] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 855.543050] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 03:40:19 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x4aa3, 0x0, 0x0, 0x4}) [ 855.551244] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 855.563563] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 855.566836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 855.570817] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 03:40:19 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') fcntl$notify(r0, 0x402, 0x80000014) fcntl$notify(r0, 0x402, 0x80000024) [ 855.592168] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 855.630828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:19 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x4bfa, &(0x7f00000000c0)) [ 855.691950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:19 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x1267, &(0x7f0000000000)) 03:40:19 executing program 7: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) io_setup(0x8, &(0x7f0000000140)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:19 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:40:19 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 03:40:19 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x12, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000100), 0x0, 0x4) ptrace(0x10, 0x0) ptrace(0x8, 0x0) splice(0xffffffffffffffff, &(0x7f0000000080)=0x2296, 0xffffffffffffffff, &(0x7f0000000100)=0xcc1f, 0x0, 0x5) fork() 03:40:19 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') fcntl$notify(r0, 0x402, 0x80000014) fcntl$notify(r0, 0x402, 0x80000024) 03:40:19 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x4bfa, &(0x7f00000000c0)) 03:40:19 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x1267, &(0x7f0000000000)) [ 856.119889] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 03:40:19 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x4bfa, &(0x7f00000000c0)) [ 856.136185] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 856.143777] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 856.150792] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 856.155697] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 856.169003] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 856.174532] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 856.187126] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 03:40:20 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') fcntl$notify(r0, 0x402, 0x80000014) fcntl$notify(r0, 0x402, 0x80000024) [ 856.205312] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 856.214294] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 03:40:20 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x1267, &(0x7f0000000000)) [ 856.219372] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 856.232803] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 856.244186] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 03:40:20 executing program 7: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1ffff, 0x0) 03:40:20 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x4bfa, &(0x7f00000000c0)) [ 856.257643] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 856.262203] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 856.269631] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 856.284851] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 856.296364] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 856.305401] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 856.319816] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 03:40:20 executing program 5: syz_emit_ethernet(0x12e, &(0x7f0000001740)={@empty, @link_local, @val={@void}, {@ipv4={0x800, @gre={{0x36, 0x4, 0x0, 0x0, 0x11c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty, {[@timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@private=0xa010102}, {}, {@dev}, {@empty}, {@loopback}, {@private}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@empty}, {@multicast2}, {}, {@local}, {@multicast2}, {@multicast1}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@loopback}, {@remote}, {@remote}, {@loopback}, {}, {@multicast2}]}, @lsrr={0x83, 0x3}, @lsrr={0x83, 0x3}, @cipso={0x86, 0x17, 0x0, [{0x0, 0x11, "c3b8daa421e8707b37171c2cdefa7e"}]}]}}}}}}, 0x0) [ 856.327158] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 856.335656] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 856.343727] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 856.355683] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 03:40:20 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x1267, &(0x7f0000000000)) 03:40:20 executing program 5: mremap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) 03:40:20 executing program 7: syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), 0xffffffffffffffff) 03:40:20 executing program 1: io_setup(0x400, &(0x7f0000000000)=0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) io_pgetevents(r0, 0x0, 0x4, 0x0, 0x0, 0x0) 03:40:20 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) 03:40:20 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed, 0x0, 0x2}, 0xe) r1 = dup(r0) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x2) 03:40:20 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x1c}], 0x1}, 0x0) 03:40:20 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) 03:40:20 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed, 0x0, 0x2}, 0xe) r1 = dup(r0) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x2) 03:40:20 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) lgetxattr(0x0, 0x0, 0x0, 0x0) 03:40:20 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x32, 0x2d, 0x39, 0x3a, 0x34]}}}}]}) [ 856.851351] tmpfs: Bad value for 'mpol' [ 856.861856] tmpfs: Bad value for 'mpol' 03:40:20 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCGETS(r0, 0x5420, &(0x7f00000000c0)) 03:40:20 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) 03:40:20 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed, 0x0, 0x2}, 0xe) r1 = dup(r0) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x2) 03:40:20 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) lgetxattr(0x0, 0x0, 0x0, 0x0) 03:40:20 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)) 03:40:20 executing program 2: modify_ldt$write(0x1, &(0x7f0000000000)={0x871}, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write2(0x11, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) fork() kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) openat$sr(0xffffffffffffff9c, 0x0, 0x4840, 0x0) fork() ptrace(0xffffffffffffffff, 0x0) getpgid(0x0) modify_ldt$write(0x1, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) tgkill(0x0, 0x0, 0x32) 03:40:21 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) 03:40:21 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) lgetxattr(0x0, 0x0, 0x0, 0x0) 03:40:21 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed, 0x0, 0x2}, 0xe) r1 = dup(r0) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x2) 03:40:21 executing program 3: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000980)='\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x0, &(0x7f0000000a40)) 03:40:21 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x13, r2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) 03:40:21 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000005440)={{0x12, 0x1, 0x0, 0xd4, 0xb9, 0x5c, 0x0, 0x6cd, 0x108, 0xc10d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x80, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xbc, 0xbe, 0x8f, 0x0, [], [{}]}}]}}]}}, 0x0) 03:40:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000600)={&(0x7f0000000000), 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x74, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x20044000}, 0x40004) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0), &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @broadcast, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) syz_80211_inject_frame(&(0x7f0000000640)=@broadcast, &(0x7f0000000680)=@mgmt_frame=@reassoc_resp={@with_ht={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x81}, @device_b, @device_b, @from_mac, {0x8, 0x3e4}}, @ver_80211n={0x0, 0x40, 0x3, 0x2, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1}}, 0x4400, 0x67, @default, @void, @void, [{0xdd, 0xd4, "142cee86789bf2c2b774e4228745373c7e26f0998d33a49bd2fd1ed8a98e0bc776995c2df1a773be7c8c5a2d0c80e36f9e3e49bb68f0cc09699250d8efcf8dcba3dc72322fb94ae6c7a651d03c7ac5d150e7d973552a92ec24a2d58af360616df4fe1eba7d78f2c98328e3392747cafd53a4ae7fe79a5f979b26bbec8afcf8be095614a4225ec28a464c2731eb83a61b3a8623e9dd709fa5f3fcda40b3da1a6814768a8d9169059acfb8501c27bfc38b2d97814a979f422d84a4ec92decf958fcaf7c771dafd706850346a226787939be7a76677"}, {0xdd, 0x2f, "0620d286f72aaff3eea2efb39224c8e697417373467d413af1cb06d31c914c40efcfd8ca44dc650c1b504dc292fa68"}, {0xdd, 0xcc, "960a382172a939473a63da40de0ad699536f61b63eb81407129a588a02ef5174dd637f0bd116947c004c54479b9685888a10d7409003f2b55431b26167a4767306fac3f885c2b5b2b47cbe2373a6b17388fa9054964d6b27a53c64fae38fe128558251f28a12c6edc992baf9ff1214191997a53f0fe21980f92606fb1682252299c43be3d12592682b8aaf337bdb52dcd46e945ad26b048095218b8c280056ec41834d98700f562cae093b45948eb6d8f192eeada0b1113e8d9c5f548d4ccbbd61684411409bc822115c9fa1"}]}, 0x1f7) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000880)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000940)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000b00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000980)={0x104, r5, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_TX_RATES={0xc0, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0xfc01, 0x6, 0x6, 0x7ff, 0x34, 0xe5d, 0x2]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x48, 0x6, 0x24, 0x3, 0x16, 0x16, 0x2]}]}, @NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x0, 0x5}, {0x5, 0xa}, {0x7, 0x5}, {0x4, 0x8}, {0x0, 0x1}, {0x4}, {0x6, 0x1}, {0x7, 0x1}, {0x0, 0x3}, {0x6, 0x8}, {0x2, 0x9}, {0x0, 0x5}, {0x7, 0x6}, {0x5, 0xa}, {0x0, 0x9}, {0x5, 0x1}, {0x0, 0x6}, {0x2, 0x8}, {0x0, 0x1}, {0x5, 0x6}, {0x2, 0x3}, {0x5, 0x1}, {0x2}, {0x1, 0x9}, {0x2, 0x6}, {0x5, 0x7}, {0x2, 0x7}, {0x1, 0x6}, {0x1, 0x7}, {0x3, 0x8}, {0x4, 0x8}, {0x7, 0x8}, {0x0, 0x5}, {0x4, 0xa}, {0x4, 0x9}, {0x4}, {0x6, 0x8}, {0x1, 0x4}, {0x2, 0x7}, {0x1, 0x1}, {0x2}, {0x0, 0x6}, {0x6, 0x2}, {0x6, 0x4}, {0x3, 0x5}, {0x7, 0x7}, {0x0, 0xa}, {0x7}, {0x4, 0x7}, {0x3, 0x7}, {0x1, 0x7}, {0x0, 0x8}, {0x0, 0x8}, {0x4, 0x5}, {0x4, 0x3}, {0x5, 0x9}, {0x1, 0x9}, {0x2, 0x6}, {0x0, 0x8}, {0x7, 0x7}, {0x1, 0x6}, {0x0, 0xa}, {0x4, 0xa}, {0x2, 0xa}, {0x1, 0x2}, {0x1, 0x6}, {0x5, 0x9}, {0x6, 0x3}, {0x6, 0x9}, {0x6, 0x5}, {0x0, 0x6}, {0x2, 0x7}, {0x7, 0x4}, {0x1, 0x6}]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x1, 0xa}, {0x6, 0x2}, {0x4, 0x9}, {0x4, 0x9}, {0x3, 0x3}, {0x4, 0xa}, {0x7, 0x7}, {0x4, 0x6}, {0x0, 0x7}, {0x0, 0x5}, {0x3, 0xa}, {0x5, 0x6}, {0x7, 0x3}, {0x7, 0x9}, {0x4, 0x6}, {0x0, 0x6}, {0x0, 0x1}, {0x4, 0x3}, {0x7, 0x4}, {0x4, 0x3}, {0x0, 0x4}, {0x6}, {0x5, 0x1}, {0x6, 0xa}, {0x0, 0x9}, {0x2, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc59, 0x6, 0x101, 0xff7f, 0x7, 0x400, 0x400, 0x1]}}, @NL80211_TXRATE_GI={0x5}]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1ff}], @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xfffffffd}]}, 0x104}}, 0x4c801) 03:40:21 executing program 2: modify_ldt$write(0x1, &(0x7f0000000000)={0x871}, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write2(0x11, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) fork() kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) openat$sr(0xffffffffffffff9c, 0x0, 0x4840, 0x0) fork() ptrace(0xffffffffffffffff, 0x0) getpgid(0x0) modify_ldt$write(0x1, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) tgkill(0x0, 0x0, 0x32) 03:40:21 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x12, r0, 0x0) sigaltstack(&(0x7f0000ffd000/0x2000)=nil, 0x0) [ 857.265790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 857.273331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 03:40:21 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1}, 0x6e) listen(r0, 0x0) listen(r0, 0x6) 03:40:21 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) lgetxattr(0x0, 0x0, 0x0, 0x0) 03:40:21 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="7472616e733d756e6978b538edfae67b21acd65ae63b76622b8aaf1062545497265a2463f41bc6d9cf849a0f2704f802dadd0eed58d9593922426e"]) [ 857.361799] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 857.370706] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 857.376548] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 857.379873] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 857.383996] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 857.388031] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 857.391027] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 857.393166] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 857.399116] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 857.399713] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 857.403035] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 857.406502] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 857.407072] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 857.411723] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 857.412309] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 857.416033] 9p: Could not find request transport: unixµ8íúæ{!¬ÖZæ;vb+Š¯bTT—&Z$côÆÙÏ„š'øÚÝíXÙY9"Bn [ 857.418653] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 857.424167] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 857.431281] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 857.432799] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 857.433386] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 03:40:21 executing program 7: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000001400)={0x0, 0xa00000000000}) 03:40:21 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0) [ 857.455739] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 857.456361] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 857.465727] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 857.466343] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 857.480153] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 857.480961] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 857.490570] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 857.492547] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 857.493135] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 857.508799] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 857.509387] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 857.514263] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 857.782016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 857.783271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 03:40:21 executing program 0: syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3f}, "10c8be25b4e3bd2bdd6673eee3bc1dcf2d9668ffc49a8162b207b4d660986c8ed8b2d4bac2035ebc3e4081761141f62e77c3d01888d8a53b54d26d5991a575"}, 0x43) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT, 0x4) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x0, 0xc8}}}, 0x6) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x8, 0x1, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0xf4}, @l2cap_cid_signaling={{0xf0}, [@l2cap_info_rsp={{0xb, 0xc, 0x9b}, {0x6, 0x8, "b207a9b79a9c7ed78ebc247ae1cf2058266b5719a284a0e0b3aa96d0560c66ef54a0d9187cc5e19fd3eed700cead9ba494bd5818b0c6798240dafa9bac337ca971ac55b2515173e98917ccb474ebdb7bf9b9e43dcc60ccb9defa9ebb8a458fa2f27287b60b3780e5a58988ba093fccfb1114659337d632667fe9f713c06d96366a90643de0c3ad759f18e9a659699db447b2e9737fe9be"}}, @l2cap_info_req={{0xa, 0x0, 0x2}, {0x200}}, @l2cap_conn_rsp={{0x3, 0x0, 0x8}, {0x9, 0x0, 0x4, 0x5}}, @l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x9, 0x3, 0xc3e, 0xfffa}}, @l2cap_conf_rsp={{0x5, 0xfe, 0x27}, {0x4, 0xc16, 0x7, [@l2cap_conf_mtu={0x1, 0x2, 0xe7b}, @l2cap_conf_ews={0x7, 0x2, 0x400}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x8, 0x3f, 0x3, 0x0, 0x6}}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x1f, 0xd599, 0x7f, 0xff}}]}}, @l2cap_disconn_req={{0x6, 0x7, 0x4}, {0x8000, 0x3}}]}}, 0xf9) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x29}, "6e3e6412823892f9b5d5f83c16b642c2d26fa5df6d78ad320e5729945d7baf29bd91dcbb017b848ad7"}, 0x2d) syz_emit_vhci(&(0x7f00000017c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x2, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_disconn_rsp={{0x7, 0x5, 0x4}, {0x81, 0x87}}]}}, 0x11) 03:40:21 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)={0x28, 0x12, 0xffffffffffffffff, 0x0, 0x0, "", [@nested={0x7}, @nested={0x4}, @nested={0x10, 0x0, 0x0, 0x1, [@typed={0x4}, @typed={0x8, 0x1d, 0x0, 0x0, @uid=0xee01}]}]}, 0x28}], 0x1}, 0x0) 03:40:21 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x50, 0x1, 0x2, 0x5, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x28, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) 03:40:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000540)=@data_frame={@qos_no_ht={{@type01={{0x0, 0x2, 0xd, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x4}, @device_b, @initial, @device_b, {0x8, 0x2}}, {0x9, 0x0, 0x1, 0x0, 0x8}}, {@type01={{0x0, 0x2, 0xf, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x3}, @device_a, @from_mac=@device_b, @from_mac=@device_b, {0x4, 0x8}}, {0xd, 0x1, 0x1}}}, @random="d80d73bf0ad047d1d02818c3e8fdf16f3d97a2918d46b0b6f91c73c06c7ef74933ab10d637a3e507de8039690249d3a6083bf1c40ffe77f3a08ad71cab7682e817902eaa1619daf12a14f92dd5b426d7ac3a2f14a63f11722227a2ec90176366c5ea873dc13e6924c1164afd2ab94c9253c17db12f8ebcc993301e1cd4b0b3d97de2027e0279cf29b211cb73bdfb7e8d76263c95625ab427aa78c885e1b89bcbb79a2f4cd6f3edbe0db3aeae4aaa5bc51b00ae8e48b0daa18f7238f1b14804008444b6a52e343563f9bce79b639f52db9d9c52432870e9740f7f5f758eaad3a5f016d17e3d293ff3db7a4cc7a5cc94988e39e1807bb37a8fa5ec8b9595ec386ce6941c5b0ed92bba5e6689cc0cd17759c4210342af694d5e949f9104cdb5585117d134da09df70916c498010d2d1b69e7022183ac7f7ff57bda556f85d101343ececabb66732c0cc0113073aa8c59dfefa3e69584fbba1ad4500153cb1f202f9e8a6f9f68a9a"}, 0x19a) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:40:21 executing program 7: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) 03:40:21 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0) 03:40:21 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x801, @any, 0x0, 0x2}, 0xe) 03:40:21 executing program 2: modify_ldt$write(0x1, &(0x7f0000000000)={0x871}, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write2(0x11, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) fork() kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) openat$sr(0xffffffffffffff9c, 0x0, 0x4840, 0x0) fork() ptrace(0xffffffffffffffff, 0x0) getpgid(0x0) modify_ldt$write(0x1, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) tgkill(0x0, 0x0, 0x32) [ 857.892785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:21 executing program 1: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='{\x00', 0xffffffffffffffff) request_key(&(0x7f0000000700)='dns_resolver\x00', &(0x7f0000000740)={'syz', 0x2}, &(0x7f0000000780)='fscrypt:', 0x0) 03:40:21 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='io\x00') pread64(r0, &(0x7f0000000200)=""/183, 0xb7, 0x0) 03:40:21 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000080), 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @change_conn_ptype={{0x40f, 0x4}}}, 0x8) [ 857.962093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:21 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0) 03:40:21 executing program 1: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='{\x00', 0xffffffffffffffff) request_key(&(0x7f0000000700)='dns_resolver\x00', &(0x7f0000000740)={'syz', 0x2}, &(0x7f0000000780)='fscrypt:', 0x0) 03:40:21 executing program 7: io_uring_setup(0x2e6a, &(0x7f00000000c0)={0x0, 0x0, 0x2}) 03:40:21 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)=0x6) 03:40:21 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000640)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) fchown(r0, 0x0, r2) 03:40:21 executing program 6: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) sigaltstack(&(0x7f0000ffe000/0x2000)=nil, 0x0) 03:40:22 executing program 1: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='{\x00', 0xffffffffffffffff) request_key(&(0x7f0000000700)='dns_resolver\x00', &(0x7f0000000740)={'syz', 0x2}, &(0x7f0000000780)='fscrypt:', 0x0) 03:40:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000580)={&(0x7f0000000000), 0xc, &(0x7f0000000540)={&(0x7f0000000040)={0x30, r1, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x29}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x6}}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80d0}, 0x50) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000600)={0x194, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x40}, {0x6, 0x16, 0xb676}, {0x5}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x20}, {0x6, 0x16, 0xbe}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xffff}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3ff}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x40}, {0x8, 0xb, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffffff7f}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}, {0x6}, {0x8, 0xb, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7ff}, {0x6}, {0x5}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0xffffffff}}]}, 0x194}, 0x1, 0x0, 0x0, 0x2004c890}, 0x48000) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f0000000840)=@broadcast, &(0x7f0000000880)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x1f}, @device_b, @initial, @device_a, {0x1}}, {0xc, 0x1, 0x0, 0x0, 0x9}}, {@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x465}, @device_a, @device_a, @random="00a59657dc52", {0x7, 0x40}}, {0x3, 0x1}}}, @ver_80211n={0x0, 0x40, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}}, @random="0574bc81e9a329799a7d1c2946127b6bed3719b90be94e52c5ac834be37e7719a9053cff828e5ce696860aa21db5fda3e647490c0085d070708f551d88e9d6696c833ce2398d7aa09ca55159b38aaf65160a645ee3e52be6cbd3c298336ad510cf53bcbe8f6b3e208378dc92ad8a84fac1811fa683f34f486862f4cb1c3228134c5b330bc22111f99e1f27a9218814e119cf435dab196d1453a65fe065492be4d72e3a0500507c27c23a2c7dcaba9dbffda63a351ceff8d1b59b8e395cad3ee39edc7d93ccd7ae942b00e71a20cab78b1adb4a457e29c7ba67f67f6dd3774fb92302b03de8e224f9b7eaea2193e51bbf525dd620dd60efdec0da49b2ce8ecbd5de9e87f3528ac0c6fe0075516808740a31219c9a86e453aebbfb59e5fd3648c73e5f12e4449e1717bbdfab4b1efd45d998692678615ae8de1e8a79b8919559e0cd0880933c77c45bbdd53afc22926986a29c99dafe3a4cfcac8cc7e5247b51e3a832412d987b3e244c9f6295ae7be101c148a0820a76ff83c63b1e73f1dff5c02dd46e60a88d999897d2bdfc8fa0b2be23fc081182b743236000b1da3c160225a67f10aa0b77d756d06b29e0c2a620ac8fc565b7ea08b0e45a2e233258aec44076cdd9e6a2a0ba0c8f348e06ec638c9ca280081132ef170abe9b7f0eef715950483b4d12145676bd6b1bba613a259b0e6f43525df73332d32f6d14860947c9f680dcc2fc17f7d240bae32e13d05ba2cb7b75f56446d381f47a46cb991631f968274ee50c5bd24430688764500e4f7cc665a758de7bfb1ea5dca490d39287757f5e205a83446897f35bbb914db582bf3a959fda4dbfaf4c2a7c8ffd4c4e97916efa"}, 0x299) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:40:22 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0) 03:40:22 executing program 6: clone3(&(0x7f0000000300)={0x0, &(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000080), {}, &(0x7f00000000c0)=""/112, 0xffffffffffffffbb, &(0x7f0000000140)=""/174, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x58) 03:40:22 executing program 1: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='{\x00', 0xffffffffffffffff) request_key(&(0x7f0000000700)='dns_resolver\x00', &(0x7f0000000740)={'syz', 0x2}, &(0x7f0000000780)='fscrypt:', 0x0) [ 858.328494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 858.384268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 858.441952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 858.446107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:22 executing program 7: perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000180)={0x1}, 0x8, 0x0) 03:40:22 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0xc, 0x0, 0x0) 03:40:22 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@caif=@rfm={0x25, 0x1, "9f3f952710bf57983b69a979e373131f"}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000080)="30a26aa0f33dc3cc3952c16405fd", 0x1000e}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="d8"], 0xd8}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[], 0x0) recvmmsg(r0, &(0x7f00000083c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x60, 0x0) 03:40:22 executing program 2: modify_ldt$write(0x1, &(0x7f0000000000)={0x871}, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write2(0x11, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) fork() kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) openat$sr(0xffffffffffffff9c, 0x0, 0x4840, 0x0) fork() ptrace(0xffffffffffffffff, 0x0) getpgid(0x0) modify_ldt$write(0x1, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) tgkill(0x0, 0x0, 0x32) 03:40:22 executing program 1: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="d9543038a1b282d50a0127a3fe787904192e30be12e051656ca28132eba1a51d12f95180d319eef8bb32a4a5275ed0721e7666ca07423b043d77f268a4db33451cf00ae47cb045f9bc4e0385ab12e07ac5", 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETVNETHDRSZ(r0, 0x801054db, 0x0) 03:40:22 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r0, 0x5607, 0x1) 03:40:22 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0) 03:40:22 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x0, 0x0, 0x0) 03:40:22 executing program 0: munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) get_mempolicy(&(0x7f0000000040), 0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, 0x2) 03:40:22 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in=@dev}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) 03:40:22 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@caif=@rfm={0x25, 0x1, "9f3f952710bf57983b69a979e373131f"}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000080)="30a26aa0f33dc3cc3952c16405fd", 0x1000e}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="d8"], 0xd8}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[], 0x0) recvmmsg(r0, &(0x7f00000083c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x60, 0x0) 03:40:22 executing program 7: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000140)={0x24, @short}, 0xb) 03:40:23 executing program 1: mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8) 03:40:23 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="b2", 0x7ffff000}, {&(0x7f0000000080)="03", 0x1}], 0x2}, 0x0) 03:40:23 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) sendmsg$802154_dgram(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @long}, 0x14, &(0x7f0000000080)={0x0}}, 0x0) 03:40:23 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@caif=@rfm={0x25, 0x1, "9f3f952710bf57983b69a979e373131f"}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000080)="30a26aa0f33dc3cc3952c16405fd", 0x1000e}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="d8"], 0xd8}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[], 0x0) recvmmsg(r0, &(0x7f00000083c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x60, 0x0) 03:40:23 executing program 7: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x43000000}}]}) [ 859.321639] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 859.327327] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 03:40:23 executing program 3: rt_sigtimedwait(0x0, 0x0, 0x0, 0x8) 03:40:23 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) 03:40:23 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000580)={{0x0, 0x7f}}) 03:40:23 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@caif=@rfm={0x25, 0x1, "9f3f952710bf57983b69a979e373131f"}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000080)="30a26aa0f33dc3cc3952c16405fd", 0x1000e}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="d8"], 0xd8}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[], 0x0) recvmmsg(r0, &(0x7f00000083c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x60, 0x0) 03:40:23 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0xa0840, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, 0x0) 03:40:23 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x101800, 0x0) fcntl$setstatus(r0, 0x4, 0x0) 03:40:23 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00') pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x0) [ 859.481046] Bluetooth: hci7: command 0x0405 tx timeout 03:40:23 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000013c0)='numa_maps\x00') preadv(r0, &(0x7f0000001800)=[{&(0x7f0000001400)=""/228, 0xe4}], 0x1, 0x0, 0x0) 03:40:23 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') pread64(r0, &(0x7f0000000100)=""/109, 0x6d, 0x5) [ 859.525341] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. 03:40:23 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x29, 0x1e, &(0x7f0000000100), 0x4) 03:40:23 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="2321202e2f66696c6531200a9138340d892bce249e3a268138314f4cab476785bc627c39c5b45cc211396b3dce"], 0xc) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0) 03:40:23 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000002c00)='net/snmp\x00') pread64(r0, &(0x7f0000000080)=""/203, 0xcb, 0x33) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)={0x1c, 0x1a, 0x1, 0x0, 0x0, "", [@generic="02a50043e29664b1c6"]}, 0x1c}], 0x1}, 0x0) 03:40:23 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="2321202e2f66696c6531200a9138340d892bce249e3a268138314f4cab476785bc627c39c5b45cc211396b3dce"], 0xc) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0) 03:40:23 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$DVD_AUTH(r0, 0x5392, &(0x7f0000000200)=@hsc={0xb, 0x0, "fcc4dde382d2c46e927d"}) 03:40:23 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000013c0)='numa_maps\x00') preadv(r0, &(0x7f0000001800)=[{&(0x7f0000001400)=""/228, 0xe4}], 0x1, 0x0, 0x0) 03:40:23 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000080), 0x10) 03:40:23 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0xa0840, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, 0x0) 03:40:23 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="2321202e2f66696c6531200a9138340d892bce249e3a268138314f4cab476785bc627c39c5b45cc211396b3dce"], 0xc) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0) 03:40:23 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:40:23 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="2321202e2f66696c6531200a9138340d892bce249e3a268138314f4cab476785bc627c39c5b45cc211396b3dce"], 0xc) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0) 03:40:23 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000013c0)='numa_maps\x00') preadv(r0, &(0x7f0000001800)=[{&(0x7f0000001400)=""/228, 0xe4}], 0x1, 0x0, 0x0) [ 859.955989] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. 03:40:23 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="2321202e2f66696c6531200a9138340d892bce249e3a268138314f4cab476785bc627c39c5b45cc211396b3dce"], 0xc) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0) 03:40:23 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000080), 0x10) 03:40:23 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0xa0840, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, 0x0) 03:40:23 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="2321202e2f66696c6531200a9138340d892bce249e3a268138314f4cab476785bc627c39c5b45cc211396b3dce"], 0xc) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0) 03:40:23 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="2321202e2f66696c6531200a9138340d892bce249e3a268138314f4cab476785bc627c39c5b45cc211396b3dce"], 0xc) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0) 03:40:23 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="2321202e2f66696c6531200a9138340d892bce249e3a268138314f4cab476785bc627c39c5b45cc211396b3dce"], 0xc) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0) 03:40:23 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, &(0x7f0000000000)=ANY=[@ANYBLOB="0101"]) 03:40:24 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000013c0)='numa_maps\x00') preadv(r0, &(0x7f0000001800)=[{&(0x7f0000001400)=""/228, 0xe4}], 0x1, 0x0, 0x0) [ 860.172964] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. 03:40:24 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="2321202e2f66696c6531200a9138340d892bce249e3a268138314f4cab476785bc627c39c5b45cc211396b3dce"], 0xc) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0) 03:40:24 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000080), 0x10) 03:40:24 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0xa0840, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, 0x0) 03:40:24 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="2321202e2f66696c6531200a9138340d892bce249e3a268138314f4cab476785bc627c39c5b45cc211396b3dce"], 0xc) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0) 03:40:24 executing program 6: setuid(0xee01) prctl$PR_SET_MM_MAP(0x39, 0xe, 0x0, 0x0) 03:40:24 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) read$eventfd(r0, &(0x7f0000000a40), 0x8) 03:40:24 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001500), 0xa100, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @multicast2=0xe000000a}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfd}}, {0x2, 0x0, @broadcast}}) close(r2) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x7c3f779a) [ 860.409794] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. 03:40:24 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000004bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udplite6\x00') pread64(r2, &(0x7f0000000200)=""/193, 0xc1, 0x0) 03:40:24 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000080), 0x10) 03:40:24 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000008c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0xfdef) 03:40:24 executing program 2: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfff}) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfff}) 03:40:24 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTAT(r1, &(0x7f0000000140)=ANY=[], 0x4c) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r2, 0x6, 0x0) 03:40:24 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xad}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) clock_nanosleep(0xfffffdfc, 0x0, &(0x7f0000000000)={0x0, 0x3938700}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r2 = dup(r1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000000c0)={0x0, @tick=0xffff3d62, 0xff, {0x0, 0x1}, 0x3f, 0x1}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x80) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000000)={0x0, @xdp={0x2c, 0x1, 0x0, 0x34}, @in={0x2, 0x4e24, @empty}, @llc={0x1a, 0xffff, 0x1, 0xff, 0x0, 0xff}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x10000000007f, 0x2}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r6}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', r6, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback, 0x0, 0x20}}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000740)=0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000240)=ANY=[@ANYBLOB="dc0100001800000125bd7000fedbdf25000000000000000000000000000000000a0101020000000000000000000000004e2404014e2300000000000000000000005232c5631a1d434f42f8ca5776bd6687aacaf5d7eb633396643b56b9bf4c6651c3acf092efcc9e6878d11a5d78", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0a010100000000000000000000000000000004d33300000064010100000000000000000000000000c5ffffffffffffff05000000000000000104000000000000210000000000000000000000000000004000000000000000030000000000000000fcffffffffffff0104000000000000d10200000000000009000000000000000800000000000000000800bb0200000002000027bd70000740bf49916e7bb313eb5f1b3500000a0006060200000000000000b500000000000000e4000600fe800000000000000000000000000037000000000000000000000000000000004e20009b4e23", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="ac1414aa000000000000000000000000000004d46c00000000000000000000000000000000000000dd0e0000000000004d0000000000000000010000000000000200000000000000060000000000000005000000000000001f000000000000000600000000000000b20000000000000005000000000000005f9300000000000008000000000000002000000007000000500f000028bd700007350000020002d64700000000000000"], 0x1dc}, 0x1, 0x0, 0x0, 0x4000011}, 0x40084) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@ll={0x11, 0xf5, r6, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000200)="f367f041c470da6da401aca4a15f7894e27eba90d9e338f4d5f3c06f888f264896603bdb69b8", 0x26}], 0x1, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x3d0}, 0x0, 0x8000000, 0x1, {0x0, r8}}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x9c, 0x5, 0x0, {0x0, r8, r0}}, 0x3000) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x3) 03:40:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0869ffffff7f00947d28a4491fee6a000044ad0ca3de0d294d4161e9063c789398a90c15af339b88663a04d16a71869afd26ee28f26870bc6951cb5e9dcf15e96851d5212e97750ff041f3b1f0e2a607ea5f53fa4baf892a683abd102951c7a2b11ad86efb7b6f2b975d35c107f3bbdc4b99f42b60e72efe585491afda93a5861425d5d61e3da4064488796b6b956b5c997912c560e46b26e695a4424c9b6b32cb090bd5"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) r3 = creat(&(0x7f0000000040)='./cgroup/pids.max\x00', 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8001) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x90, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1ff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x401}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40}]}, 0x90}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) readlinkat(r3, &(0x7f0000000180)='./cgroup/pids.max\x00', &(0x7f0000000700)=""/222, 0xde) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:40:24 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)) 03:40:24 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x6}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) lseek(r1, 0x0, 0x3) [ 860.715818] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 0 (only 16 groups) 03:40:24 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) fork() fork() mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) [ 860.771904] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 0 (only 16 groups) [ 860.847351] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 860.882363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 860.945238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 860.999596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:25 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xad}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) clock_nanosleep(0xfffffdfc, 0x0, &(0x7f0000000000)={0x0, 0x3938700}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r2 = dup(r1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000000c0)={0x0, @tick=0xffff3d62, 0xff, {0x0, 0x1}, 0x3f, 0x1}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x80) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000000)={0x0, @xdp={0x2c, 0x1, 0x0, 0x34}, @in={0x2, 0x4e24, @empty}, @llc={0x1a, 0xffff, 0x1, 0xff, 0x0, 0xff}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x10000000007f, 0x2}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r6}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', r6, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback, 0x0, 0x20}}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000740)=0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000240)=ANY=[@ANYBLOB="dc0100001800000125bd7000fedbdf25000000000000000000000000000000000a0101020000000000000000000000004e2404014e2300000000000000000000005232c5631a1d434f42f8ca5776bd6687aacaf5d7eb633396643b56b9bf4c6651c3acf092efcc9e6878d11a5d78", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0a010100000000000000000000000000000004d33300000064010100000000000000000000000000c5ffffffffffffff05000000000000000104000000000000210000000000000000000000000000004000000000000000030000000000000000fcffffffffffff0104000000000000d10200000000000009000000000000000800000000000000000800bb0200000002000027bd70000740bf49916e7bb313eb5f1b3500000a0006060200000000000000b500000000000000e4000600fe800000000000000000000000000037000000000000000000000000000000004e20009b4e23", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="ac1414aa000000000000000000000000000004d46c00000000000000000000000000000000000000dd0e0000000000004d0000000000000000010000000000000200000000000000060000000000000005000000000000001f000000000000000600000000000000b20000000000000005000000000000005f9300000000000008000000000000002000000007000000500f000028bd700007350000020002d64700000000000000"], 0x1dc}, 0x1, 0x0, 0x0, 0x4000011}, 0x40084) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@ll={0x11, 0xf5, r6, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000200)="f367f041c470da6da401aca4a15f7894e27eba90d9e338f4d5f3c06f888f264896603bdb69b8", 0x26}], 0x1, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x3d0}, 0x0, 0x8000000, 0x1, {0x0, r8}}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x9c, 0x5, 0x0, {0x0, r8, r0}}, 0x3000) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x3) 03:40:25 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xad}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) clock_nanosleep(0xfffffdfc, 0x0, &(0x7f0000000000)={0x0, 0x3938700}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r2 = dup(r1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000000c0)={0x0, @tick=0xffff3d62, 0xff, {0x0, 0x1}, 0x3f, 0x1}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x80) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000000)={0x0, @xdp={0x2c, 0x1, 0x0, 0x34}, @in={0x2, 0x4e24, @empty}, @llc={0x1a, 0xffff, 0x1, 0xff, 0x0, 0xff}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x10000000007f, 0x2}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r6}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', r6, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback, 0x0, 0x20}}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000740)=0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000240)=ANY=[@ANYBLOB="dc0100001800000125bd7000fedbdf25000000000000000000000000000000000a0101020000000000000000000000004e2404014e2300000000000000000000005232c5631a1d434f42f8ca5776bd6687aacaf5d7eb633396643b56b9bf4c6651c3acf092efcc9e6878d11a5d78", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0a010100000000000000000000000000000004d33300000064010100000000000000000000000000c5ffffffffffffff05000000000000000104000000000000210000000000000000000000000000004000000000000000030000000000000000fcffffffffffff0104000000000000d10200000000000009000000000000000800000000000000000800bb0200000002000027bd70000740bf49916e7bb313eb5f1b3500000a0006060200000000000000b500000000000000e4000600fe800000000000000000000000000037000000000000000000000000000000004e20009b4e23", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="ac1414aa000000000000000000000000000004d46c00000000000000000000000000000000000000dd0e0000000000004d0000000000000000010000000000000200000000000000060000000000000005000000000000001f000000000000000600000000000000b20000000000000005000000000000005f9300000000000008000000000000002000000007000000500f000028bd700007350000020002d64700000000000000"], 0x1dc}, 0x1, 0x0, 0x0, 0x4000011}, 0x40084) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@ll={0x11, 0xf5, r6, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000200)="f367f041c470da6da401aca4a15f7894e27eba90d9e338f4d5f3c06f888f264896603bdb69b8", 0x26}], 0x1, &(0x7f0000000e80)=ANY=[@ANYBLOB="78000000000000001801000000020000a08c91caac1f43fc3cb00da6deaa503d79c2788ee4d392585369571d6b3b5fe333a0101160d844461524fe40193f23bd7e51071f6d5ea4046c878dde9afb63a167d45f7ad6a6e6e78ef400108f16fa06ea13f8a810f24df6dab8adf0da7f78379300000000000000b000000000000000080100000100000013deec1a0eb8fbb8006a7f053477a6bb35ded80f390fc302bb2c2fc621d130b0a9facb44ad575c375bebc64be388335dde0396309a0f26e04bf2c811cf1b186a172737036879eb03e1af7b9f0f546b0410833748770cd99f2a070a53897783c6969afed592c6a33544c9aa20b2b857d0cec7eec10a9c9ba8b3523e6a57e4afca28e8a6483600d28d52b120075480769d127557ee3fd661eb1de8470ed0d87000000000000000900000000000000010010000080000000e15cb0fa60f112d155fed0e14594608dba2c60edc3f67a64c32dad570e1cad670c937ba9d86ad5fdcc8d5d29472e7bbee37dc5efeb89089924e9f3894a588d10de678f4cb1493b73f2595f213ced0433e4f7e6491d46b73be682f279e1ebda8aec575151e6cd43977a3fc1d843fde3d272e162fa30e3307e1afdc00000000000801000000000000100100005a0c0000dc0acc25165a664b94c40da6103d8409d01471b0d21e703f331dbe40d13402573c291a13c9c33443ae09743d2d835981c10a9e4259e54d4d5fa4c9e239eb947418a389d38f1707078344084de6ab59f44b4c1d3a5ef9c888a83f232f29996710047ac144e234ce926ff9c57281e30ba564a30902d942db2f337f52a9702b3d16f33505d3310fdddfdcd44ea54f610bae7d4948e15aef8081cb8dc9ba76cc812b17279f7fd61d866b36e85e1a385716864215bcabc555e2704b158073bf3993f9424521ee878a960a4b2695bf7b2d16eb58ccb65f9f3212cd7fee5d25423c24a9ed81e0be0b72b016fc181d937b86f5f2473f08557e5c842510010000000000000101000000020000c593133edd9b0501b546088b8b7199e31f1d4479443cd500f307183db7c0eff02809b2448ac3fb930333ca16f14f08062ed87c2ffbae74f34361fb003df6e9765293f411501ad1f8a95abdc525c29e54173c6e633edf30ce98c9338d522a50b36bf809ee69f432ec41f9b47f7a1ba2f9474aaeb91150a94012913776a97426414b504fb5cf5d865dfdfa63108a18cf03a9c3d58014209ef9c5021a637f4b1036a2658b1b2a7edf0724ceb130f63f1045c70d1d58ecad85718f9046565ca300da940d64b248bcbf8601157786d886c84eacbb06a53d17363bce8c5b2b4b45dacbb8e53aed6f45fd3965aae271dbc75651a0d54920e034d2ba1928e5d10000000066a5d91d703d97319b6530b13e2b6bbbdd59f95d899ae27a8cbc869dd93bd874942735ba3867067a38ff7405e6d6f9997b472d6f264180093e4e0b122faf28e677c9d7f1abd56388dca26a64a2d3ae0a6013f4d53977b047ba150afe2c345613677f03dfc4bddf7226e7e3a3f908675787a4f3"], 0x3d0}, 0x0, 0x8000000, 0x1, {0x0, r8}}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x9c, 0x5, 0x0, {0x0, r8, r0}}, 0x3000) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x3) 03:40:25 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xad}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) clock_nanosleep(0xfffffdfc, 0x0, &(0x7f0000000000)={0x0, 0x3938700}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r2 = dup(r1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000000c0)={0x0, @tick=0xffff3d62, 0xff, {0x0, 0x1}, 0x3f, 0x1}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x80) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000000)={0x0, @xdp={0x2c, 0x1, 0x0, 0x34}, @in={0x2, 0x4e24, @empty}, @llc={0x1a, 0xffff, 0x1, 0xff, 0x0, 0xff}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x10000000007f, 0x2}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r6}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', r6, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback, 0x0, 0x20}}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000740)=0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000240)=ANY=[@ANYBLOB="dc0100001800000125bd7000fedbdf25000000000000000000000000000000000a0101020000000000000000000000004e2404014e2300000000000000000000005232c5631a1d434f42f8ca5776bd6687aacaf5d7eb633396643b56b9bf4c6651c3acf092efcc9e6878d11a5d78", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0a010100000000000000000000000000000004d33300000064010100000000000000000000000000c5ffffffffffffff05000000000000000104000000000000210000000000000000000000000000004000000000000000030000000000000000fcffffffffffff0104000000000000d10200000000000009000000000000000800000000000000000800bb0200000002000027bd70000740bf49916e7bb313eb5f1b3500000a0006060200000000000000b500000000000000e4000600fe800000000000000000000000000037000000000000000000000000000000004e20009b4e23", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="ac1414aa000000000000000000000000000004d46c00000000000000000000000000000000000000dd0e0000000000004d0000000000000000010000000000000200000000000000060000000000000005000000000000001f000000000000000600000000000000b20000000000000005000000000000005f9300000000000008000000000000002000000007000000500f000028bd700007350000020002d64700000000000000"], 0x1dc}, 0x1, 0x0, 0x0, 0x4000011}, 0x40084) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@ll={0x11, 0xf5, r6, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000200)="f367f041c470da6da401aca4a15f7894e27eba90d9e338f4d5f3c06f888f264896603bdb69b8", 0x26}], 0x1, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x3d0}, 0x0, 0x8000000, 0x1, {0x0, r8}}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x9c, 0x5, 0x0, {0x0, r8, r0}}, 0x3000) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x3) 03:40:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) connect(r0, &(0x7f0000000300)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "99daa543345220df853be0e4c8d0ba79236a84d01c6efcba59103202feb28a099b3dac1c49e76755864a75ee5646c85e0858d65f121072e80c710e7049e598"}, 0x80) 03:40:25 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$tcp_congestion(r0, 0x0, 0x7) 03:40:25 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x80247009, &(0x7f0000000040)) 03:40:25 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2405, 0x0) 03:40:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:40:25 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x127b, &(0x7f0000000000)={"0359f93ed59ada90d094df2f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:40:25 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xad}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) clock_nanosleep(0xfffffdfc, 0x0, &(0x7f0000000000)={0x0, 0x3938700}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r2 = dup(r1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000000c0)={0x0, @tick=0xffff3d62, 0xff, {0x0, 0x1}, 0x3f, 0x1}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x80) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000000)={0x0, @xdp={0x2c, 0x1, 0x0, 0x34}, @in={0x2, 0x4e24, @empty}, @llc={0x1a, 0xffff, 0x1, 0xff, 0x0, 0xff}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x10000000007f, 0x2}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r6}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', r6, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback, 0x0, 0x20}}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000740)=0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000240)=ANY=[@ANYBLOB="dc0100001800000125bd7000fedbdf25000000000000000000000000000000000a0101020000000000000000000000004e2404014e2300000000000000000000005232c5631a1d434f42f8ca5776bd6687aacaf5d7eb633396643b56b9bf4c6651c3acf092efcc9e6878d11a5d78", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0a010100000000000000000000000000000004d33300000064010100000000000000000000000000c5ffffffffffffff05000000000000000104000000000000210000000000000000000000000000004000000000000000030000000000000000fcffffffffffff0104000000000000d10200000000000009000000000000000800000000000000000800bb0200000002000027bd70000740bf49916e7bb313eb5f1b3500000a0006060200000000000000b500000000000000e4000600fe800000000000000000000000000037000000000000000000000000000000004e20009b4e23", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="ac1414aa000000000000000000000000000004d46c00000000000000000000000000000000000000dd0e0000000000004d0000000000000000010000000000000200000000000000060000000000000005000000000000001f000000000000000600000000000000b20000000000000005000000000000005f9300000000000008000000000000002000000007000000500f000028bd700007350000020002d64700000000000000"], 0x1dc}, 0x1, 0x0, 0x0, 0x4000011}, 0x40084) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@ll={0x11, 0xf5, r6, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000200)="f367f041c470da6da401aca4a15f7894e27eba90d9e338f4d5f3c06f888f264896603bdb69b8", 0x26}], 0x1, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x3d0}, 0x0, 0x8000000, 0x1, {0x0, r8}}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x9c, 0x5, 0x0, {0x0, r8, r0}}, 0x3000) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x3) [ 861.553395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:25 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@local}) 03:40:25 executing program 5: r0 = msgget$private(0x0, 0x102) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}, {@gid={'gid', 0x3d, r2}}]}) syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}, {@gid}]}) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xee01, 0xffffffffffffffff, 0x124, 0x100}, 0x0, 0x0, 0x9, 0x8, 0x3, 0x7ff, 0x8, 0x2, 0xa8e6, 0x5, 0x0, 0xffffffffffffffff}) sync() 03:40:25 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$tcp_congestion(r0, 0x0, 0x7) [ 861.632230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:25 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xad}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) clock_nanosleep(0xfffffdfc, 0x0, &(0x7f0000000000)={0x0, 0x3938700}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r2 = dup(r1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000000c0)={0x0, @tick=0xffff3d62, 0xff, {0x0, 0x1}, 0x3f, 0x1}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x80) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000000)={0x0, @xdp={0x2c, 0x1, 0x0, 0x34}, @in={0x2, 0x4e24, @empty}, @llc={0x1a, 0xffff, 0x1, 0xff, 0x0, 0xff}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x10000000007f, 0x2}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r6}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', r6, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback, 0x0, 0x20}}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000740)=0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000240)=ANY=[@ANYBLOB="dc0100001800000125bd7000fedbdf25000000000000000000000000000000000a0101020000000000000000000000004e2404014e2300000000000000000000005232c5631a1d434f42f8ca5776bd6687aacaf5d7eb633396643b56b9bf4c6651c3acf092efcc9e6878d11a5d78", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0a010100000000000000000000000000000004d33300000064010100000000000000000000000000c5ffffffffffffff05000000000000000104000000000000210000000000000000000000000000004000000000000000030000000000000000fcffffffffffff0104000000000000d10200000000000009000000000000000800000000000000000800bb0200000002000027bd70000740bf49916e7bb313eb5f1b3500000a0006060200000000000000b500000000000000e4000600fe800000000000000000000000000037000000000000000000000000000000004e20009b4e23", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="ac1414aa000000000000000000000000000004d46c00000000000000000000000000000000000000dd0e0000000000004d0000000000000000010000000000000200000000000000060000000000000005000000000000001f000000000000000600000000000000b20000000000000005000000000000005f9300000000000008000000000000002000000007000000500f000028bd700007350000020002d64700000000000000"], 0x1dc}, 0x1, 0x0, 0x0, 0x4000011}, 0x40084) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@ll={0x11, 0xf5, r6, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000200)="f367f041c470da6da401aca4a15f7894e27eba90d9e338f4d5f3c06f888f264896603bdb69b8", 0x26}], 0x1, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x3d0}, 0x0, 0x8000000, 0x1, {0x0, r8}}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x9c, 0x5, 0x0, {0x0, r8, r0}}, 0x3000) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x3) [ 861.763892] tmpfs: Invalid gid '0x00000000ffffffff' [ 862.024819] tmpfs: Invalid gid '0x00000000ffffffff' 03:40:25 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@local}) 03:40:25 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x4a, &(0x7f00000006c0), 0x4) 03:40:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x12200, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x32}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40880) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000540)=@mgmt_frame=@assoc_resp={@with_ht={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x6}, @device_b, @device_b, @random="64c08c603b83", {0x4, 0x1}}, @ver_80211n={0x0, 0x7f, 0x1, 0x1, 0x0, 0x3, 0x1}}, 0x300, 0x5b, @random=0x1, @val={0x1, 0x7, [{0x48}, {0x30, 0x1}, {0x48}, {0x6}, {0x6c, 0x1}, {0x3, 0x1}, {0x9}]}, @void, [{0xdd, 0xc0, "6e3032fc3d6a5f557d07c2b3eaaa45e15dcb2d6b636f05003c5843cd4029d223c08c85597b1a1957a0e23684d388cbe08f29c225b042e19d853f629409e56922e52c3aacf357b44b4d280a3c3f7796e810a9002e5ad3ec6f9b96983f73d5b0595d12087e1b46d98b32ec1d2cf33c1bf30f74db3fd798ccbd7c78f3c684ec0d6d2a9272daf6a8a63ebbb5f60b7906284b2f9fdd963a2e1300eecfb41f3eb879352d3355ad7711d684ddee30adf2c23cadcd6b35a164a945b543183a4748f09470"}, {0xdd, 0x14, "6302808fe1d0a5b1db301ae0089db2e966ac7ce9"}]}, 0x103) 03:40:25 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xad}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) clock_nanosleep(0xfffffdfc, 0x0, &(0x7f0000000000)={0x0, 0x3938700}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r2 = dup(r1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000000c0)={0x0, @tick=0xffff3d62, 0xff, {0x0, 0x1}, 0x3f, 0x1}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x80) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000000)={0x0, @xdp={0x2c, 0x1, 0x0, 0x34}, @in={0x2, 0x4e24, @empty}, @llc={0x1a, 0xffff, 0x1, 0xff, 0x0, 0xff}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x10000000007f, 0x2}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r6}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', r6, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback, 0x0, 0x20}}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000740)=0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000240)=ANY=[@ANYBLOB="dc0100001800000125bd7000fedbdf25000000000000000000000000000000000a0101020000000000000000000000004e2404014e2300000000000000000000005232c5631a1d434f42f8ca5776bd6687aacaf5d7eb633396643b56b9bf4c6651c3acf092efcc9e6878d11a5d78", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0a010100000000000000000000000000000004d33300000064010100000000000000000000000000c5ffffffffffffff05000000000000000104000000000000210000000000000000000000000000004000000000000000030000000000000000fcffffffffffff0104000000000000d10200000000000009000000000000000800000000000000000800bb0200000002000027bd70000740bf49916e7bb313eb5f1b3500000a0006060200000000000000b500000000000000e4000600fe800000000000000000000000000037000000000000000000000000000000004e20009b4e23", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="ac1414aa000000000000000000000000000004d46c00000000000000000000000000000000000000dd0e0000000000004d0000000000000000010000000000000200000000000000060000000000000005000000000000001f000000000000000600000000000000b20000000000000005000000000000005f9300000000000008000000000000002000000007000000500f000028bd700007350000020002d64700000000000000"], 0x1dc}, 0x1, 0x0, 0x0, 0x4000011}, 0x40084) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@ll={0x11, 0xf5, r6, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000200)="f367f041c470da6da401aca4a15f7894e27eba90d9e338f4d5f3c06f888f264896603bdb69b8", 0x26}], 0x1, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x3d0}, 0x0, 0x8000000, 0x1, {0x0, r8}}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x9c, 0x5, 0x0, {0x0, r8, r0}}, 0x3000) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x3) 03:40:25 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xad}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) clock_nanosleep(0xfffffdfc, 0x0, &(0x7f0000000000)={0x0, 0x3938700}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r2 = dup(r1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000000c0)={0x0, @tick=0xffff3d62, 0xff, {0x0, 0x1}, 0x3f, 0x1}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x80) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000000)={0x0, @xdp={0x2c, 0x1, 0x0, 0x34}, @in={0x2, 0x4e24, @empty}, @llc={0x1a, 0xffff, 0x1, 0xff, 0x0, 0xff}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x10000000007f, 0x2}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r6}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', r6, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback, 0x0, 0x20}}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000740)=0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000240)=ANY=[@ANYBLOB="dc0100001800000125bd7000fedbdf25000000000000000000000000000000000a0101020000000000000000000000004e2404014e2300000000000000000000005232c5631a1d434f42f8ca5776bd6687aacaf5d7eb633396643b56b9bf4c6651c3acf092efcc9e6878d11a5d78", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0a010100000000000000000000000000000004d33300000064010100000000000000000000000000c5ffffffffffffff05000000000000000104000000000000210000000000000000000000000000004000000000000000030000000000000000fcffffffffffff0104000000000000d10200000000000009000000000000000800000000000000000800bb0200000002000027bd70000740bf49916e7bb313eb5f1b3500000a0006060200000000000000b500000000000000e4000600fe800000000000000000000000000037000000000000000000000000000000004e20009b4e23", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="ac1414aa000000000000000000000000000004d46c00000000000000000000000000000000000000dd0e0000000000004d0000000000000000010000000000000200000000000000060000000000000005000000000000001f000000000000000600000000000000b20000000000000005000000000000005f9300000000000008000000000000002000000007000000500f000028bd700007350000020002d64700000000000000"], 0x1dc}, 0x1, 0x0, 0x0, 0x4000011}, 0x40084) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@ll={0x11, 0xf5, r6, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000200)="f367f041c470da6da401aca4a15f7894e27eba90d9e338f4d5f3c06f888f264896603bdb69b8", 0x26}], 0x1, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x3d0}, 0x0, 0x8000000, 0x1, {0x0, r8}}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x9c, 0x5, 0x0, {0x0, r8, r0}}, 0x3000) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x3) 03:40:25 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xad}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) clock_nanosleep(0xfffffdfc, 0x0, &(0x7f0000000000)={0x0, 0x3938700}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r2 = dup(r1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000000c0)={0x0, @tick=0xffff3d62, 0xff, {0x0, 0x1}, 0x3f, 0x1}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x80) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000000)={0x0, @xdp={0x2c, 0x1, 0x0, 0x34}, @in={0x2, 0x4e24, @empty}, @llc={0x1a, 0xffff, 0x1, 0xff, 0x0, 0xff}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x10000000007f, 0x2}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r6}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', r6, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback, 0x0, 0x20}}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000740)=0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000240)=ANY=[@ANYBLOB="dc0100001800000125bd7000fedbdf25000000000000000000000000000000000a0101020000000000000000000000004e2404014e2300000000000000000000005232c5631a1d434f42f8ca5776bd6687aacaf5d7eb633396643b56b9bf4c6651c3acf092efcc9e6878d11a5d78", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0a010100000000000000000000000000000004d33300000064010100000000000000000000000000c5ffffffffffffff05000000000000000104000000000000210000000000000000000000000000004000000000000000030000000000000000fcffffffffffff0104000000000000d10200000000000009000000000000000800000000000000000800bb0200000002000027bd70000740bf49916e7bb313eb5f1b3500000a0006060200000000000000b500000000000000e4000600fe800000000000000000000000000037000000000000000000000000000000004e20009b4e23", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="ac1414aa000000000000000000000000000004d46c00000000000000000000000000000000000000dd0e0000000000004d0000000000000000010000000000000200000000000000060000000000000005000000000000001f000000000000000600000000000000b20000000000000005000000000000005f9300000000000008000000000000002000000007000000500f000028bd700007350000020002d64700000000000000"], 0x1dc}, 0x1, 0x0, 0x0, 0x4000011}, 0x40084) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@ll={0x11, 0xf5, r6, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000200)="f367f041c470da6da401aca4a15f7894e27eba90d9e338f4d5f3c06f888f264896603bdb69b8", 0x26}], 0x1, &(0x7f0000000e80)=ANY=[@ANYBLOB="78000000000000001801000000020000a08c91caac1f43fc3cb00da6deaa503d79c2788ee4d392585369571d6b3b5fe333a0101160d844461524fe40193f23bd7e51071f6d5ea4046c878dde9afb63a167d45f7ad6a6e6e78ef400108f16fa06ea13f8a810f24df6dab8adf0da7f78379300000000000000b000000000000000080100000100000013deec1a0eb8fbb8006a7f053477a6bb35ded80f390fc302bb2c2fc621d130b0a9facb44ad575c375bebc64be388335dde0396309a0f26e04bf2c811cf1b186a172737036879eb03e1af7b9f0f546b0410833748770cd99f2a070a53897783c6969afed592c6a33544c9aa20b2b857d0cec7eec10a9c9ba8b3523e6a57e4afca28e8a6483600d28d52b120075480769d127557ee3fd661eb1de8470ed0d87000000000000000900000000000000010010000080000000e15cb0fa60f112d155fed0e14594608dba2c60edc3f67a64c32dad570e1cad670c937ba9d86ad5fdcc8d5d29472e7bbee37dc5efeb89089924e9f3894a588d10de678f4cb1493b73f2595f213ced0433e4f7e6491d46b73be682f279e1ebda8aec575151e6cd43977a3fc1d843fde3d272e162fa30e3307e1afdc00000000000801000000000000100100005a0c0000dc0acc25165a664b94c40da6103d8409d01471b0d21e703f331dbe40d13402573c291a13c9c33443ae09743d2d835981c10a9e4259e54d4d5fa4c9e239eb947418a389d38f1707078344084de6ab59f44b4c1d3a5ef9c888a83f232f29996710047ac144e234ce926ff9c57281e30ba564a30902d942db2f337f52a9702b3d16f33505d3310fdddfdcd44ea54f610bae7d4948e15aef8081cb8dc9ba76cc812b17279f7fd61d866b36e85e1a385716864215bcabc555e2704b158073bf3993f9424521ee878a960a4b2695bf7b2d16eb58ccb65f9f3212cd7fee5d25423c24a9ed81e0be0b72b016fc181d937b86f5f2473f08557e5c842510010000000000000101000000020000c593133edd9b0501b546088b8b7199e31f1d4479443cd500f307183db7c0eff02809b2448ac3fb930333ca16f14f08062ed87c2ffbae74f34361fb003df6e9765293f411501ad1f8a95abdc525c29e54173c6e633edf30ce98c9338d522a50b36bf809ee69f432ec41f9b47f7a1ba2f9474aaeb91150a94012913776a97426414b504fb5cf5d865dfdfa63108a18cf03a9c3d58014209ef9c5021a637f4b1036a2658b1b2a7edf0724ceb130f63f1045c70d1d58ecad85718f9046565ca300da940d64b248bcbf8601157786d886c84eacbb06a53d17363bce8c5b2b4b45dacbb8e53aed6f45fd3965aae271dbc75651a0d54920e034d2ba1928e5d10000000066a5d91d703d97319b6530b13e2b6bbbdd59f95d899ae27a8cbc869dd93bd874942735ba3867067a38ff7405e6d6f9997b472d6f264180093e4e0b122faf28e677c9d7f1abd56388dca26a64a2d3ae0a6013f4d53977b047ba150afe2c345613677f03dfc4bddf7226e7e3a3f908675787a4f3"], 0x3d0}, 0x0, 0x8000000, 0x1, {0x0, r8}}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x9c, 0x5, 0x0, {0x0, r8, r0}}, 0x3000) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x3) 03:40:25 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$tcp_congestion(r0, 0x0, 0x7) 03:40:25 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@local}) [ 862.142203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:26 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x7, &(0x7f0000000200)={0x0, 0x0}, 0x10) 03:40:26 executing program 5: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x4, 0xc9, "c65792587ae6daad"}}}, 0xe) [ 862.209281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:26 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$tcp_congestion(r0, 0x0, 0x7) [ 862.270815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 862.287394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:26 executing program 2: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) 03:40:26 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xad}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) clock_nanosleep(0xfffffdfc, 0x0, &(0x7f0000000000)={0x0, 0x3938700}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r2 = dup(r1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000000c0)={0x0, @tick=0xffff3d62, 0xff, {0x0, 0x1}, 0x3f, 0x1}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x80) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000000)={0x0, @xdp={0x2c, 0x1, 0x0, 0x34}, @in={0x2, 0x4e24, @empty}, @llc={0x1a, 0xffff, 0x1, 0xff, 0x0, 0xff}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x10000000007f, 0x2}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r6}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', r6, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback, 0x0, 0x20}}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000740)=0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000240)=ANY=[@ANYBLOB="dc0100001800000125bd7000fedbdf25000000000000000000000000000000000a0101020000000000000000000000004e2404014e2300000000000000000000005232c5631a1d434f42f8ca5776bd6687aacaf5d7eb633396643b56b9bf4c6651c3acf092efcc9e6878d11a5d78", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0a010100000000000000000000000000000004d33300000064010100000000000000000000000000c5ffffffffffffff05000000000000000104000000000000210000000000000000000000000000004000000000000000030000000000000000fcffffffffffff0104000000000000d10200000000000009000000000000000800000000000000000800bb0200000002000027bd70000740bf49916e7bb313eb5f1b3500000a0006060200000000000000b500000000000000e4000600fe800000000000000000000000000037000000000000000000000000000000004e20009b4e23", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="ac1414aa000000000000000000000000000004d46c00000000000000000000000000000000000000dd0e0000000000004d0000000000000000010000000000000200000000000000060000000000000005000000000000001f000000000000000600000000000000b20000000000000005000000000000005f9300000000000008000000000000002000000007000000500f000028bd700007350000020002d64700000000000000"], 0x1dc}, 0x1, 0x0, 0x0, 0x4000011}, 0x40084) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@ll={0x11, 0xf5, r6, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000200)="f367f041c470da6da401aca4a15f7894e27eba90d9e338f4d5f3c06f888f264896603bdb69b8", 0x26}], 0x1, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x3d0}, 0x0, 0x8000000, 0x1, {0x0, r8}}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x9c, 0x5, 0x0, {0x0, r8, r0}}, 0x3000) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x3) 03:40:26 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x14, 0x22, 0xffffffffffffffff, 0x0, 0x0, "", [@generic='R']}, 0x14}], 0x1}, 0x0) 03:40:26 executing program 5: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x4, 0xc9, "c65792587ae6daad"}}}, 0xe) 03:40:26 executing program 1: pwritev2(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f00000003c0)="1f9ddee0cae4a56be0", 0x9}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000800)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:40:26 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@local}) 03:40:26 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@local}) 03:40:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000540)=ANY=[@ANYBLOB="b000000008021100000108021100000008021100000010000000020000009c3dc5b8939fa79b1110fad509e59a81ba0213dde234aaa6a1ba64329ef1f95795021fc97fb6d500793da472a04118fcf7e6b5093da5b257b79f25a85472b9c168fe09000000000000002ba990366800437af6e78ce09c07a6c7dbd752027781480984ace8a0b4ede33b89d9c52be63653bf312fe8c98ee13af93197b35ae7c1e4410df84d0487bce5cd1b542035968514f48912bce5cae08f09969bf21b82421a30ec29dd873170bd6be06d"], 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:40:26 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r0, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 03:40:26 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002380)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r0, 0x0, 0x0) r2 = dup(r0) fcntl$setstatus(r2, 0x4, 0x2000) recvmmsg$unix(r1, &(0x7f0000007680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 03:40:26 executing program 1: add_key(&(0x7f0000000100)='cifs.spnego\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 862.767647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:26 executing program 2: r0 = memfd_create(&(0x7f0000000000)=':^/\x00', 0x0) pwrite64(r0, &(0x7f0000000300)="97", 0x1, 0x8000) lseek(r0, 0x0, 0x3) 03:40:26 executing program 5: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x4, 0xc9, "c65792587ae6daad"}}}, 0xe) 03:40:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r0, 0x0, 0x31, 0x0, &(0x7f00000005c0)) 03:40:26 executing program 1: msgsnd(0x0, 0xffffffffffffffff, 0x0, 0x0) [ 862.829901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:26 executing program 6: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @local}, @echo_reply={0x12}}}}}, 0x0) 03:40:26 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getpeername(r0, 0x0, &(0x7f0000000100)) 03:40:26 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@local}) 03:40:26 executing program 5: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x4, 0xc9, "c65792587ae6daad"}}}, 0xe) 03:40:26 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20102) write$sndseq(r0, &(0x7f0000000300)=[{0x0, 0xda, 0x0, 0x0, @time, {}, {}, @result}], 0x1c) 03:40:26 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@local}) 03:40:27 executing program 6: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @local}, @echo_reply={0x12}}}}}, 0x0) 03:40:27 executing program 0: pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffc00) 03:40:27 executing program 2: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file1\x00') 03:40:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @broadcast, @device_a, @from_mac, {0x0, 0xf81}}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @val={0x3, 0x1, 0x78}, @void, @val={0x6, 0x2, 0x101}, @void, @void, @void}, 0x3d) socket$nl_generic(0x10, 0x3, 0x10) r3 = creat(&(0x7f0000000040)='./cgroup/pids.max\x00', 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8001) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) openat$incfs(r3, &(0x7f0000000640)='.pending_reads\x00', 0x10400, 0x100) sendmsg$NL80211_CMD_UPDATE_FT_IES(r4, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x6c, r5, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x3}, @NL80211_ATTR_IE={0x48, 0x2a, [@prep={0x83, 0x25, @ext={{}, 0x9, 0x4, @device_b, 0x9, @broadcast, 0x1, 0x9, @broadcast, 0x1}}, @mesh_id={0x72, 0x6}, @mic={0x8c, 0x10, {0xc49, "a1d8ec12f485", @short="7b02320d4187b978"}}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xff}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) syz_80211_inject_frame(&(0x7f0000000680), &(0x7f00000007c0)=ANY=[@ANYBLOB="d02478001a021100000008027100070000c5a8f0f0f083d9c5fb46b35a94ba054b0da7e591196bd0feeb823bb6b3947e2fc60c58321e16fff265e61b9490cc758cacce198e3b7db8b3697674dbb84f0497e09e04921e68b8fee1c3c056fb2591c1659db54c0c7e98f2cf25a84d9b31c377d35f1eaa9b1139d68a95bc23e286a8d3fcbae918278257b1f20bd25a81ffdbac6d7f78fc1446a776d582823424e9a59884d4db3022b5d3ec2fa9a85cdd19df36016b5d314d99df37d500082a4938abc7eba153a9a3473a2747c6ea10c615621a09df983836e6b6709a6d799853c900"/241], 0x1b) 03:40:27 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x1ff}}) 03:40:27 executing program 1: r0 = io_uring_setup(0x5053, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r0, 0x1b, &(0x7f0000000000), 0x0) 03:40:27 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@mpol={'mpol', 0x3d, {'local', '=relative', @val={0x3a, [0x38, 0x2c, 0x34]}}}}]}) 03:40:27 executing program 7: r0 = epoll_create(0x2b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000), 0x4) 03:40:27 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44800) 03:40:27 executing program 6: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @local}, @echo_reply={0x12}}}}}, 0x0) 03:40:27 executing program 1: keyctl$search(0xa, 0x0, &(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)={'syz', 0x2}, 0xfffffffffffffffe) 03:40:27 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r0) [ 863.230366] tmpfs: Bad value for 'mpol' [ 863.232282] tmpfs: Bad value for 'mpol' [ 863.238228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 863.303352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:27 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4c, &(0x7f0000001600)) 03:40:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000440)=0x7, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) [ 863.357684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 863.369684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:27 executing program 0: times(0xfffffffffffffffd) 03:40:27 executing program 6: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @local}, @echo_reply={0x12}}}}}, 0x0) 03:40:27 executing program 3: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000005, 0x32, 0xffffffffffffffff, 0x0) io_setup(0x572, &(0x7f0000000140)) 03:40:28 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4) 03:40:28 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x1) ioctl$LOOP_SET_FD(r0, 0x4c07, 0xffffffffffffffff) 03:40:28 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) 03:40:28 executing program 6: syz_emit_ethernet(0x52, &(0x7f0000000180)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "708329", 0x1c, 0x3c, 0x0, @remote, @local, {[@routing], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 03:40:28 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in=@dev}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x0, 0x0, @loopback}, 0x1c) 03:40:28 executing program 3: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef01", 0x3b, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x6000}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f0000013c00)) 03:40:28 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) write$vga_arbiter(r0, &(0x7f0000000000)=@other={'unlock', ' ', 'io'}, 0xa) 03:40:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_MPATH(r3, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000000) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r3) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r5, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x4) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 864.420020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:28 executing program 6: syz_emit_ethernet(0x52, &(0x7f0000000180)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "708329", 0x1c, 0x3c, 0x0, @remote, @local, {[@routing], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 03:40:28 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, {0x11, 0x0, 0x0, @dev}}}}}, 0x0) 03:40:28 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x1) ioctl$LOOP_SET_FD(r0, 0x4c07, 0xffffffffffffffff) [ 864.507262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:28 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) 03:40:28 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="340000002c0001efff000000c80000000c000000ffffffff"], 0x34}], 0x1}, 0x0) 03:40:28 executing program 7: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40a85323, &(0x7f0000000140)={{0x80}, 'port0\x00'}) 03:40:28 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x49b, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x4db, 0x4) [ 864.643395] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 864.685975] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 03:40:28 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x1) ioctl$LOOP_SET_FD(r0, 0x4c07, 0xffffffffffffffff) 03:40:28 executing program 1: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x18d101, 0x0) fallocate(r1, 0x0, 0x0, 0x6) lseek(r0, 0x0, 0x3) 03:40:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000280)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) sendmsg(r3, &(0x7f00000007c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, 0x0}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@broadcast, &(0x7f0000000540)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x34) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, r1, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x9f}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x3}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x1f}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0xc045) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000800)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x40}, @broadcast, @device_b, @random="9f687b155355", {0x1, 0x3}}, 0x100000000, @random=0x5c6, 0x4004, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1f, 0x49}}, [{0xdd, 0x71, "de33a754c609786cf43d92bffedaac33b164fb4b2ad4ff198c822f2fa1020717245c14c1a030a67831a778ddb5e0a71ee8437b8066880b4ab25d522a153e472e9619465cbb871eb63ff9f68156283ae6b0ddeb3afc1c9430614a9d680d2d60040a6d09f6c95a5acbeafd1ac8fa1d21b9b6"}, {0xdd, 0xca, "9ca35aa970677067c39551a6c339d245e5ecd129293b92b45b1551db7bd0e567897f1a41a77e01b34c390c7e42ba3f111159ba87f1a5434553c39f9e05d44027722164559431649b7c69a40fde72907ac1778d88f594a127e3f13057f036826c56ef0398a776bddf0b172509cc2c37da4113c17957c6c0994acd453457e1e4829a5c3455fcd548419470acdf0a0da3798f84ae58150ba6e26de7b42b42c4b7a5d7a0cae7b53d2ecf89e7b5ac2bcab62557668c3eb0eda0d06db179ede63e5afd0f969cd2d2e240077d1b"}, {0xdd, 0xf5, "e0bc5fc2ec0dae66347e134be588ea0a7454a3060eed20cc454367b615fee691f771e09c1117f8f7d9edbfac63fbc0f33a4cd5008c3ff4c42fc02b4a6fb8c902737f783dc8ac1ce961a624193507876676215eaab312a39d53e1c8e26f6aadc7da20947c41e4c3f0da77e76cda6ef705055eb0c543bfe4c68a7cab94204a86b83a93caa2e4906067cba7600deb564f5cf90d44a023b427cbff4d6f3e98253a5347f9ec247e8ea301228b103519bf72cf45eac7088c1ddadececfff4bb515ed401d93aca12acb7c056f5c49a41e4d31db2785d3916469bea240963e84f3a443647fc43e68026a7c468060e3089985e940dee9535d0b"}, {0xdd, 0x61, "b31dbc5c2efca7884ad589ad69e43b30b46bf7ad1bec0bbc548d9ef70d64f93858ceb189b1d0671eb1c81aac7f7ae15e5f0442416348af4b8c439bb49c2ba47a27098fc1b37a201d07fbec06a705709c3d0d750cf18ea00d7df4e60048135f7a3c"}, {0xdd, 0x83, "60649da1add2dde5c869519c94d437f11d551b8ab3151db01171460e8d438514ccde78640ffb280b200eaae1e05377c9b6d901177ccc2f6efd8e01c7d8326bf65e9119882f3ff231724cde635eb3a9848f73a00a38ae826b3ebf352102d6d74a4198022d0e56fc20c2140f7f211422c3eb531ac1804506ce067f5fae6a0ad8b2492e2c"}, {0xdd, 0xf4, "464a1fed5e534468792fb44b957ae7eb1a2e6c9b12f203606bfa2ea2511677b92b661e84e09c584c6889a26253886ccd70e6e1bee11079f6006859fbf71860cd1c22a5667a04de3a3b993ddd122bd5579fbb7766301f8c2e8d2af60f747a02b29b0241dbdc911af776413ba1615e77050b83a379d753dc458a91b5771e81c9ddb6d20ef67994f84fd7a0ec4a6f12f550d9ebd3e83697e0fb8b4def03e713fc93b12fc8096920fc4cefe9108dd2b2b0e5fcb44b15d3d9a10c9de78280dc7597f409f81a1a77636dfc4ba1fee6f790aa8de9a64315ea3144269618ef3c3b7b2bcc2bc35002b00f99e943b2b8399d078cbf1c40e0a7"}, {0xdd, 0x64, "cca8420e720c54554ae7eb5f66e72a55ca17c309988a25b1b0426afe46b95da0b3a61155ee9edc73d31098bc0f9c347e149585baa07197013ec1b784f863ae6c58981d9f8fa3711c196f9ab15ec4516dc29a1eb68ad61e9d335e818b6408bb9b1dbf2f3e"}]}, 0x4b7) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:40:28 executing program 6: syz_emit_ethernet(0x52, &(0x7f0000000180)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "708329", 0x1c, 0x3c, 0x0, @remote, @local, {[@routing], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 03:40:28 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x1) ioctl$LOOP_SET_FD(r0, 0x4c07, 0xffffffffffffffff) 03:40:28 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) 03:40:28 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, &(0x7f00000001c0)) 03:40:28 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ftruncate(r0, 0x0) 03:40:28 executing program 7: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x40000000}, 0x0) [ 865.016401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:28 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_FONT(r0, 0x4b61, 0x0) [ 865.110899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:28 executing program 6: syz_emit_ethernet(0x52, &(0x7f0000000180)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "708329", 0x1c, 0x3c, 0x0, @remote, @local, {[@routing], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 865.154122] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:29 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x2, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) 03:40:29 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) 03:40:29 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x2, &(0x7f00000008c0)=[{0x535e}, {}]}) [ 865.228814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:29 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/9, 0x9}, {0x0, 0x2}], 0x2) 03:40:29 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)=0xff) 03:40:29 executing program 2: r0 = eventfd2(0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') close(r0) pread64(r1, &(0x7f0000000100)=""/147, 0x93, 0x0) 03:40:29 executing program 1: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x18d101, 0x0) fallocate(r1, 0x0, 0x0, 0x6) lseek(r0, 0x0, 0x3) [ 865.405661] EXT4-fs warning (device sda): ext4_group_extend:1862: can't shrink FS - resize aborted 03:40:29 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000001000)='./file0\x00', &(0x7f0000001040), &(0x7f0000001080)='system_u:object_r:ssh_exec_t:s0\x00', 0x20, 0x3) 03:40:29 executing program 0: syslog(0x2, &(0x7f0000000000), 0x0) 03:40:29 executing program 1: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x18d101, 0x0) fallocate(r1, 0x0, 0x0, 0x6) lseek(r0, 0x0, 0x3) 03:40:29 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)=0xff) 03:40:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000001800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000017c0)={&(0x7f0000000540)={0x1274, r3, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x62}}}}, [@NL80211_ATTR_FRAME_MATCH={0x79, 0x5b, "e34de22e42c0e47d7d6fe9b74c23144d747bd3fb297d0a422b3d37e6b010eb6a65c900f7c60c8ebb2f2b6cb3cbdc1861f607916b967aa4e7943349ef2282bf3c4ba174d8943f2b897a2ab10c0d0c9e431665847f3e787aca75be96d4d2c4284d33fd0a195126f19a892937fe9e889fcd4944c58f22"}, @NL80211_ATTR_FRAME_MATCH={0x95, 0x5b, "0e8d5671a8ce0694a4563720500448840e8c03c6ca4cf675ae7cf53c73469a462c937991c906b7551dc382427746459fb70d8a42080e9e62e34e93ff68165122642ac88a5a18dff885207d2b7cd3fff0c49bbca962bf5c4db3cb474e4a25caa10eee3da8612672c17124a4b6b98f520801ca884f071610bbc4593f0a3d3f2ba72e74516bd22af57c0ea66e9e0d47dc013c"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_FRAME_MATCH={0x1004, 0x5b, "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"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_MATCH={0x2c, 0x5b, "9a4746491e6db256d43ed1039195d1420a9063f96548c9a2cbeba114f154b0d3f72e1bba88a40a3e"}, @NL80211_ATTR_FRAME_MATCH={0xf6, 0x5b, "39099d0e112139fbdc002b2d598486c7e8a3b0f350c8fd4075d6bab87248e9e8c11e1694c9440539ff6f0734922bb79264bcf2b3a50331d6289ead28f31e363349f570f8e9e747e74af361720f8da42db0ba84befc53395ad221b83bb0ff2cda9a0cbab8bab38c298b15583cfa71dda68ddecdb6ace87d7375528ec2295770aadaeeb9442f0e38d9d4261d02071b3587eaa41c3bcab9024957111d908d9e94a79a7f32c3cc3bef5193ff9b137c15509269898470d05059940366c5842da003feddde4540b66d12d35cfdf4890987c3e8550fd2cdef4399cddfdede32b41a4a990987af7da91c9062da9a8374d4df692b2f47"}]}, 0x1274}}, 0x811) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:40:29 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) 03:40:29 executing program 5: keyctl$read(0x12, 0x0, 0x0, 0x0) 03:40:29 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x4a, &(0x7f0000000000), 0x4) 03:40:29 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) [ 865.801888] EXT4-fs warning (device sda): ext4_group_extend:1862: can't shrink FS - resize aborted 03:40:29 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0xc0481273, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$trusted_overlay_redirect(&(0x7f0000000140)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0, 0x0, 0x0) 03:40:29 executing program 1: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x18d101, 0x0) fallocate(r1, 0x0, 0x0, 0x6) lseek(r0, 0x0, 0x3) [ 865.867362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:29 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x14, 0x18, 0x1, 0x0, 0x0, "", [@generic="80"]}, 0x14}], 0x1}, 0x0) [ 865.944292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:29 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)=0xff) 03:40:29 executing program 2: timer_create(0x6, &(0x7f0000000000), 0x0) 03:40:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="01"], 0x1c}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) [ 866.006907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:29 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x4000) 03:40:29 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) mremap(&(0x7f00004bf000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000ab8000/0x1000)=nil) [ 866.090360] EXT4-fs warning (device sda): ext4_group_extend:1862: can't shrink FS - resize aborted 03:40:29 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) recvmsg$unix(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x41) 03:40:30 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) 03:40:30 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') lseek(r0, 0x10000, 0x0) 03:40:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x62f}}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18, 0x1}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(0xfffffffffffffffe, &(0x7f0000000540)=@mgmt_frame=@reassoc_resp={@wo_ht={{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x2}, @device_b, @device_a, @random="c93d6c27fde1", {0xa, 0xffe}}, 0x80, 0x21, @default, @void, @val={0x2d, 0x1a, {0x8c00, 0x1, 0x7, 0x0, {0xbc, 0x40, 0x0, 0x6, 0x0, 0x0, 0x1}, 0x1, 0x8, 0xff}}, [{0xdd, 0x7d, "67208a9fe31a6dbe4eefe0eed90c2af8ad51fa4ec0e5abf9d74fa9c7da44706df6eb76681c8874ecac3ec380f153246935acf1cd38fd9c2080e0dc8e16da85083b2c1baf2a7c0cf91501f975c0465d0c5e931afd868db2d888adb784cea7ecae52e0c4ffad6b813be21b7726308cbff09a47ab40a3b39c889218c1300c"}, {0xdd, 0xf7, "fa8c3b17582e51aa40a30a9916fde73421cce6bb8495458401770df14ef6eac452e276663027bff701449cdbd66eb27fb6f4029a9ed5430c47449e2d4d4ff9752c7d16cab19aff7083ae909ea99725c4aa9d81c419560da00683aa6b69f77464e2dcc4ed67f38018357df70d852a298cb7b10cb65f4d397175a60a19c8208f8ab9ed68fd439bbc57e66ba5989b3f0c17f491aca0f71f14de9bf47cbebc8fb8127621c74ddc820e026a812997811e737ea6cfc09d851e8f8f223428679c2d1ddd6b7f0403ebc88a3ab4287b5cc1d9a6c0f88dbf1b4a3ef8214aa86b82fa3117ae65f39780c20abb52db868b96ca0f5d5ac1263dc1f43775"}, {0xdd, 0x3b, "7186f9fe7c028a68278a1fd668b6d32c2249df8abd22095d66d69acd0230136bd251715b33f221616568500bb9a2185711dc2ed7a0882ab6ade262"}]}, 0x1ef) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:40:30 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='\t\x00') 03:40:30 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x4000) 03:40:30 executing program 2: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40086602, &(0x7f0000000000)=ANY=[@ANYBLOB="be"]) fcntl$setstatus(r0, 0x4, 0x5c00) 03:40:30 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000140)=')\xf5}\x00') 03:40:30 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getpgid(0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) 03:40:30 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, 0x1, 0x1, 0x101, 0x0, 0x0, {0x1}, [@CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4}}, @CTA_SYNPROXY={0x4}, @CTA_MARK={0x8}]}, 0x28}}, 0x0) 03:40:30 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)=0xff) 03:40:30 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x4000) [ 866.447324] EXT4-fs warning (device sda): ext4_group_extend:1862: can't shrink FS - resize aborted [ 866.450916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x8, 0x0, &(0x7f00000018c0)) 03:40:30 executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x12f1) clone3(&(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) fork() memfd_secret(0x0) finit_module(r0, &(0x7f0000000040)='/dev/sr0\x00', 0x1) [ 866.629365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:31 executing program 2: pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000300, 0xffffffffffffffff) 03:40:31 executing program 0: write$binfmt_script(0xffffffffffffffff, 0x0, 0x108) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x3e96, &(0x7f0000000140)={0x0, 0x66eb}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 03:40:31 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x4000) 03:40:31 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x2aa00) close(r0) close(r1) 03:40:31 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x18, &(0x7f0000000140)=0x400008, 0x4) 03:40:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000005e80)={&(0x7f0000005b00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, 0x0}, 0x120) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) 03:40:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) r3 = creat(&(0x7f0000000040)='./cgroup/pids.max\x00', 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8001) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r5, 0x200, 0x74bd25, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x80) 03:40:31 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getpgid(0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) [ 867.386229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:31 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETLED(r0, 0x4b3b, 0x20000000000000) 03:40:31 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x34, &(0x7f0000000000), 0x4) [ 867.460636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:31 executing program 3: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) [ 867.534093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 867.579321] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 867.583282] Bluetooth: hci7: Opcode 0x0406 failed: -4 03:40:31 executing program 1: setresuid(0x0, 0xee01, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x1c, 0x11, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x1c}], 0x1}, 0x0) [ 867.604193] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 867.607193] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 867.615519] Bluetooth: hci4: Opcode 0x0406 failed: -4 03:40:31 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) mount(&(0x7f0000000080)=@filename='.\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x209443, 0x0) 03:40:31 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) 03:40:31 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, 0x0) 03:40:32 executing program 7: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000280)='asymmetric\x00', &(0x7f0000000240)=@keyring) statfs(0x0, 0x0) creat(0x0, 0x0) creat(0x0, 0xc0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect(r1, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 03:40:32 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getpgid(0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) 03:40:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x28, 0x0, &(0x7f0000000240)) 03:40:32 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0xf, 0x0, 0x4}}) 03:40:32 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000007c0)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="be61", 0x2}], 0x1, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev}}}], 0x20}}], 0x1, 0xf000) 03:40:32 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) 03:40:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000940)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000009c0), r0) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x24, r4, 0x300, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x8ab}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x180}, 0x400d4) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000008c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000880)={&(0x7f00000006c0)={0x1a8, r5, 0x4, 0x9, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x53}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_REG_RULES={0xbc, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffffd}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7fff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7f}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xa5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7ff}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5e3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffe00}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xffffff9c}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x800}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x644}]}]}, @NL80211_ATTR_REG_RULES={0xa8, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffffc}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1535}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x20}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x401}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7fffffff}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1000}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x81}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x4}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000900)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, r6, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="473c3d1e4ada"}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_SSID={0x22, 0x34, @random="2148767afc9a91f76e6093614e4dfaebd2f2072fdcf166a2dd42ae9f1e7b"}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x20040041) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2002, 0x0, @void}, 0x1e) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r7, 0xf502, 0x0) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:40:32 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2201, 0xfffffffffffffffc) 03:40:32 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) 03:40:32 executing program 2: r0 = eventfd2(0x0, 0x0) io_setup(0x2, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f00000007c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) io_getevents(r1, 0x0, 0x2, &(0x7f00000002c0)=[{}, {}], 0x0) 03:40:32 executing program 1: openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x101000, 0x0) 03:40:32 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc}}}}, 0x28}}, 0x0) 03:40:32 executing program 7: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) 03:40:32 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) 03:40:32 executing program 0: msgsnd(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="03"], 0x2000, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) 03:40:33 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) recvmmsg$unix(r1, &(0x7f0000004740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f00000004c0)) ppoll(&(0x7f0000000480)=[{r1}], 0x1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:40:33 executing program 7: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) 03:40:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000890) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020802110000000000080035000000007b4398c6006c090000"], 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:40:33 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) close(r0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) copy_file_range(r0, 0x0, r0, 0x0, 0x0, 0x0) 03:40:33 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc}}}}, 0x28}}, 0x0) 03:40:33 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x11, &(0x7f0000000100)={0x0, {{0x2, 0x0, @broadcast}}, {{0x2, 0x0, @remote}}}, 0x108) 03:40:33 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getpgid(0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) [ 869.274230] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 03:40:33 executing program 7: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) [ 869.285099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:33 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc}}}}, 0x28}}, 0x0) 03:40:33 executing program 0: sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f00000041c0)={0x0, 0x0, 0x0}, 0x0) getitimer(0x1, &(0x7f0000004b40)) 03:40:33 executing program 7: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) [ 869.400868] Bluetooth: hci7: command 0x0405 tx timeout 03:40:33 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc}}}}, 0x28}}, 0x0) 03:40:33 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) 03:40:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000001800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000017c0)={&(0x7f0000000540)={0x1274, r3, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x62}}}}, [@NL80211_ATTR_FRAME_MATCH={0x79, 0x5b, "e34de22e42c0e47d7d6fe9b74c23144d747bd3fb297d0a422b3d37e6b010eb6a65c900f7c60c8ebb2f2b6cb3cbdc1861f607916b967aa4e7943349ef2282bf3c4ba174d8943f2b897a2ab10c0d0c9e431665847f3e787aca75be96d4d2c4284d33fd0a195126f19a892937fe9e889fcd4944c58f22"}, @NL80211_ATTR_FRAME_MATCH={0x95, 0x5b, "0e8d5671a8ce0694a4563720500448840e8c03c6ca4cf675ae7cf53c73469a462c937991c906b7551dc382427746459fb70d8a42080e9e62e34e93ff68165122642ac88a5a18dff885207d2b7cd3fff0c49bbca962bf5c4db3cb474e4a25caa10eee3da8612672c17124a4b6b98f520801ca884f071610bbc4593f0a3d3f2ba72e74516bd22af57c0ea66e9e0d47dc013c"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_FRAME_MATCH={0x1004, 0x5b, "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"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_MATCH={0x2c, 0x5b, "9a4746491e6db256d43ed1039195d1420a9063f96548c9a2cbeba114f154b0d3f72e1bba88a40a3e"}, @NL80211_ATTR_FRAME_MATCH={0xf6, 0x5b, "39099d0e112139fbdc002b2d598486c7e8a3b0f350c8fd4075d6bab87248e9e8c11e1694c9440539ff6f0734922bb79264bcf2b3a50331d6289ead28f31e363349f570f8e9e747e74af361720f8da42db0ba84befc53395ad221b83bb0ff2cda9a0cbab8bab38c298b15583cfa71dda68ddecdb6ace87d7375528ec2295770aadaeeb9442f0e38d9d4261d02071b3587eaa41c3bcab9024957111d908d9e94a79a7f32c3cc3bef5193ff9b137c15509269898470d05059940366c5842da003feddde4540b66d12d35cfdf4890987c3e8550fd2cdef4399cddfdede32b41a4a990987af7da91c9062da9a8374d4df692b2f47"}]}, 0x1274}}, 0x811) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:40:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x4c, r1, 0x5, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="10000000090d110000010802110000000802110000002000010000000000000082848bb1960c1218"], 0x28) 03:40:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000580)={&(0x7f0000000000), 0xc, &(0x7f0000000540)={&(0x7f0000000040)={0x30, r1, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x29}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x6}}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80d0}, 0x50) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000600)={0x194, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x40}, {0x6, 0x16, 0xb676}, {0x5}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x20}, {0x6, 0x16, 0xbe}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xffff}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3ff}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x40}, {0x8, 0xb, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffffff7f}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}, {0x6}, {0x8, 0xb, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7ff}, {0x6}, {0x5}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0xffffffff}}]}, 0x194}, 0x1, 0x0, 0x0, 0x2004c890}, 0x48000) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f0000000840)=@broadcast, &(0x7f0000000880)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x1f}, @device_b, @initial, @device_a, {0x1}}, {0xc, 0x1, 0x0, 0x0, 0x9}}, {@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x465}, @device_a, @device_a, @random="00a59657dc52", {0x7, 0x40}}, {0x3, 0x1}}}, @ver_80211n={0x0, 0x40, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}}, @random="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"}, 0x299) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 869.624193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 869.643573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 869.650417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 869.656881] Bluetooth: hci4: command 0x0c1a tx timeout 03:40:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000580)={&(0x7f0000000000), 0xc, &(0x7f0000000540)={&(0x7f0000000040)={0x30, r1, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x29}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x6}}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80d0}, 0x50) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000600)={0x194, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x40}, {0x6, 0x16, 0xb676}, {0x5}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x20}, {0x6, 0x16, 0xbe}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xffff}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3ff}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x40}, {0x8, 0xb, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffffff7f}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}, {0x6}, {0x8, 0xb, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7ff}, {0x6}, {0x5}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0xffffffff}}]}, 0x194}, 0x1, 0x0, 0x0, 0x2004c890}, 0x48000) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f0000000840)=@broadcast, &(0x7f0000000880)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x1f}, @device_b, @initial, @device_a, {0x1}}, {0xc, 0x1, 0x0, 0x0, 0x9}}, {@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x465}, @device_a, @device_a, @random="00a59657dc52", {0x7, 0x40}}, {0x3, 0x1}}}, @ver_80211n={0x0, 0x40, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}}, @random="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"}, 0x299) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 869.685224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 869.707818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 869.729051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 869.809355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:34 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000001dc0)={0x0, @l2tp={0x2, 0x0, @loopback}, @vsock, @can}) 03:40:34 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 03:40:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000580)={&(0x7f0000000000), 0xc, &(0x7f0000000540)={&(0x7f0000000040)={0x30, r1, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x29}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x6}}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80d0}, 0x50) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000600)={0x194, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x40}, {0x6, 0x16, 0xb676}, {0x5}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x20}, {0x6, 0x16, 0xbe}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xffff}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3ff}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x40}, {0x8, 0xb, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffffff7f}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}, {0x6}, {0x8, 0xb, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7ff}, {0x6}, {0x5}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0xffffffff}}]}, 0x194}, 0x1, 0x0, 0x0, 0x2004c890}, 0x48000) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f0000000840)=@broadcast, &(0x7f0000000880)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x1f}, @device_b, @initial, @device_a, {0x1}}, {0xc, 0x1, 0x0, 0x0, 0x9}}, {@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x465}, @device_a, @device_a, @random="00a59657dc52", {0x7, 0x40}}, {0x3, 0x1}}}, @ver_80211n={0x0, 0x40, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}}, @random="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"}, 0x299) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:40:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={r2, 0x3, 0x2}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000010c0)={'ip6_vti0\x00', &(0x7f0000001040)={'ip6gre0\x00', 0x0, 0x2f, 0x20, 0x4a, 0x401, 0x5, @dev={0xfe, 0x80, '\x00', 0x22}, @local, 0x20, 0x7800, 0x9, 0x5}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000001100)={'wg0\x00', 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000300)={0x0, 0x3, 0x6}, 0xfffffffffffffc60) getsockname$packet(0xffffffffffffffff, &(0x7f0000001140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001180)=0x14) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000014c0)={&(0x7f00000011c0)={0x2c8, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x20040805}, 0x41) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000ef0000000200000600000008000300", @ANYRES32=r9, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000240)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0000000000000006eb00004000000004", @ANYRES32=r9, @ANYBLOB="2b002a0083254002320802110000000400000008021100000004000000ff010000ffffffffffff09000000000a00060008021100000000000800350000000000080026006c090000"], 0x64}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000540)=ANY=[@ANYBLOB="b0340800080211000000080211000001b9403b9e88de0f08010001005e00100171dd07dbbd8d5e1ef8d6dd96b129a1b6491358d715018feb34cdd7a5c02c636dbd8723d22ab0ac433dc19be81eab4ac1c626fbc3b520467cb9e0a6b439ef69e4314e1640bb39b5063d26bd135a8036a84b74780e5afe364dfb5fe725c7939ed7748ef25e5d845ce2939de6a23a93667114411cd55ba4d0c75ac380839c016de7044b0d34a1a09827ee1eb58d049352f2a6703e3fdcba61612849fe091c01a6d83148ddc43899629509577c4d9dffabf67488dcbd45becde083e82bad7c6df8b55281b7b19e0ece9db9c24942519175e19889017c5c2ededdae6564a50c593ff0cbc198947e83a3641c7d92c22f379c76ea656bdf82fcfdd9f0697bafcddb2bd02cf605dd2c507248fea315bc7c316613adbe0057d75dd93d038f2abe89d4133c0f626f29781799188ae4ec2a0473aa18812c885f9458f297652178e88db35b474b484699aa82db04ac16d87ce7a8ba3f349376f3d31251d1dcba173603aec6fd37984cee5a516689dda38211473f51bb175e0f194dc3d419473a41c97bd5508afc9c7524ba9cc86af787b12b32bba806a89abdbbcfc38750f851521861095991499d608eccf28f8899e6675b64a8651e2019e4d8045f0af13f6033a6d0d3612cf6621d390d7716b1935f4690f89b58a10f99b9ba1c67a739b18340d688abeda3fe68e04f45b4ededbac1bd3a9411d0c1ef67a9b6c8018b129e33e4e470f340df4c90b5adc8c9ace6733ddeb3b3c73ee17acdbe32dd29efe880114749f92fa8e0fcc1e565788ff10333a91d4251f9300462c5108d5477adeb4ef82ce16384a6ddb959deaae5cf1f6b916095fd4176f99bf45cbf0d9159417fc864bbb9b8c21ae4980174ee1af221d411cbe953642f6b41d7baf7da550fae4e7d4684346199cf78e57f04c7758e43f7e685063c7038a9a8e736ebe1988c1f17cd2ee513625c409704a1ec1ed9c80b3107585587d6240f02d309da416a9de2981cb457c4908ae5b4b7bc4c9351694ec4bc153a6eba036789c8ae4e4e94eb0d38300debbc1bdc3d1007a0bf6774dbdb5a1b68c5a6607aa791bad3f5b5f32dc974231fdd45d9ddf00e81e811c48f5ed6cc467a7a4bbc2dea9061a33d5189a3b9fbab9436b06a8ff73ab6e8f11ec9a1868fe0e502bb78ea318e36c6fd01906d606288fb"], 0x35a) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:40:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000580)={&(0x7f0000000000), 0xc, &(0x7f0000000540)={&(0x7f0000000040)={0x30, r1, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x29}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x6}}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80d0}, 0x50) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000600)={0x194, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x40}, {0x6, 0x16, 0xb676}, {0x5}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x20}, {0x6, 0x16, 0xbe}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xffff}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3ff}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x40}, {0x8, 0xb, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffffff7f}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}, {0x6}, {0x8, 0xb, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7ff}, {0x6}, {0x5}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0xffffffff}}]}, 0x194}, 0x1, 0x0, 0x0, 0x2004c890}, 0x48000) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f0000000840)=@broadcast, &(0x7f0000000880)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x1f}, @device_b, @initial, @device_a, {0x1}}, {0xc, 0x1, 0x0, 0x0, 0x9}}, {@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x465}, @device_a, @device_a, @random="00a59657dc52", {0x7, 0x40}}, {0x3, 0x1}}}, @ver_80211n={0x0, 0x40, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}}, @random="0574bc81e9a329799a7d1c2946127b6bed3719b90be94e52c5ac834be37e7719a9053cff828e5ce696860aa21db5fda3e647490c0085d070708f551d88e9d6696c833ce2398d7aa09ca55159b38aaf65160a645ee3e52be6cbd3c298336ad510cf53bcbe8f6b3e208378dc92ad8a84fac1811fa683f34f486862f4cb1c3228134c5b330bc22111f99e1f27a9218814e119cf435dab196d1453a65fe065492be4d72e3a0500507c27c23a2c7dcaba9dbffda63a351ceff8d1b59b8e395cad3ee39edc7d93ccd7ae942b00e71a20cab78b1adb4a457e29c7ba67f67f6dd3774fb92302b03de8e224f9b7eaea2193e51bbf525dd620dd60efdec0da49b2ce8ecbd5de9e87f3528ac0c6fe0075516808740a31219c9a86e453aebbfb59e5fd3648c73e5f12e4449e1717bbdfab4b1efd45d998692678615ae8de1e8a79b8919559e0cd0880933c77c45bbdd53afc22926986a29c99dafe3a4cfcac8cc7e5247b51e3a832412d987b3e244c9f6295ae7be101c148a0820a76ff83c63b1e73f1dff5c02dd46e60a88d999897d2bdfc8fa0b2be23fc081182b743236000b1da3c160225a67f10aa0b77d756d06b29e0c2a620ac8fc565b7ea08b0e45a2e233258aec44076cdd9e6a2a0ba0c8f348e06ec638c9ca280081132ef170abe9b7f0eef715950483b4d12145676bd6b1bba613a259b0e6f43525df73332d32f6d14860947c9f680dcc2fc17f7d240bae32e13d05ba2cb7b75f56446d381f47a46cb991631f968274ee50c5bd24430688764500e4f7cc665a758de7bfb1ea5dca490d39287757f5e205a83446897f35bbb914db582bf3a959fda4dbfaf4c2a7c8ffd4c4e97916efa"}, 0x299) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:40:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="b00000000802110000010802110000000802110000001000020002000000"], 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:40:34 executing program 5: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x2840, 0x0) ioctl$CDROMRESUME(r0, 0x5330) [ 870.308088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 870.339969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 870.343272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:34 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x1) fallocate(r0, 0x20, 0x0, 0x100000000) 03:40:34 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f0000001100)) [ 870.378287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 870.406092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:34 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) [ 870.421890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:34 executing program 5: socket$inet(0x2, 0xa, 0x8) syz_emit_ethernet(0x8a, &(0x7f0000000040)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, {[@end]}}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "20937c4ce6bf53324e3fd3ca2707a8092a2ff5d42eb31a661cc3cd6ea6d0133c", "c538df2eabede21c2be8aa0d3df877a7", {"fc0a2e74062eace7149ae53eb80191d1", "97a696bb38fed5ea32b2238a3fe9ac2f"}}}}}}}, 0x0) [ 870.450002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 870.489295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 870.513416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000580)={&(0x7f0000000000), 0xc, &(0x7f0000000540)={&(0x7f0000000040)={0x30, r1, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x29}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x6}}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80d0}, 0x50) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000600)={0x194, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x40}, {0x6, 0x16, 0xb676}, {0x5}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x20}, {0x6, 0x16, 0xbe}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xffff}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3ff}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x40}, {0x8, 0xb, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffffff7f}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}, {0x6}, {0x8, 0xb, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7ff}, {0x6}, {0x5}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0xffffffff}}]}, 0x194}, 0x1, 0x0, 0x0, 0x2004c890}, 0x48000) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f0000000840)=@broadcast, &(0x7f0000000880)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x1f}, @device_b, @initial, @device_a, {0x1}}, {0xc, 0x1, 0x0, 0x0, 0x9}}, {@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x465}, @device_a, @device_a, @random="00a59657dc52", {0x7, 0x40}}, {0x3, 0x1}}}, @ver_80211n={0x0, 0x40, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}}, @random="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"}, 0x299) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:40:34 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r1, 0x63, 0x0) 03:40:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="50000000080231000001080211000000080211000000000000000000000000006400010000060202b0850202010882848b960c121824"], 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:40:34 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x1) fallocate(r0, 0x20, 0x0, 0x100000000) 03:40:34 executing program 2: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x1) fallocate(r0, 0x20, 0x0, 0x100000000) 03:40:34 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, &(0x7f0000001280)={0x24, @long}, 0x11) 03:40:34 executing program 7: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d0c, &(0x7f00000000c0)={{}, {0x400}, 0x0, 0x3}) 03:40:34 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1a, &(0x7f0000000040)={@private2}, 0x14) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 03:40:34 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000040)=""/140, 0x8c) 03:40:34 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) acct(&(0x7f0000001440)='./file0\x00') 03:40:34 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x1) fallocate(r0, 0x20, 0x0, 0x100000000) [ 870.951106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:34 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000880)={0x0, 0x1e9e, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r2, 0x7, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) [ 871.014868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:34 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f00000001c0)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="58000000000000000000000007000000832804"], 0x58}}], 0x1, 0x0) 03:40:34 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x1) fallocate(r0, 0x20, 0x0, 0x100000000) 03:40:34 executing program 7: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d0c, &(0x7f00000000c0)={{}, {0x400}, 0x0, 0x3}) 03:40:34 executing program 2: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x1) fallocate(r0, 0x20, 0x0, 0x100000000) [ 871.072302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 871.117885] Process accounting resumed 03:40:35 executing program 3: r0 = epoll_create(0x3) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)) 03:40:35 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace(0xffffffffffffffff, 0x0) ptrace$getregset(0x4204, 0x0, 0x0, 0x0) clone3(0x0, 0x0) [ 871.451369] Bluetooth: hci7: command 0x0405 tx timeout 03:40:35 executing program 2: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x1) fallocate(r0, 0x20, 0x0, 0x100000000) 03:40:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000021000100000000000000000002"], 0x28}], 0x1}, 0x0) 03:40:35 executing program 7: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d0c, &(0x7f00000000c0)={{}, {0x400}, 0x0, 0x3}) 03:40:35 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x9, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x77359400}}, 0x0) 03:40:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, 0x1, 0x1, 0x101, 0x0, 0x0, {0x1}, [@CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4}}, @CTA_SYNPROXY={0x4}, @CTA_MARK={0x8}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan1\x00'}) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0xc321, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void}, 0x3a) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x60, 0x453, 0x0, 0x70bd2a, 0x25dfdbfd, "80bdc0ac09ebaa167bb3fe9795ce9681a1afbf7b05f760684537e3371b676932ee160ed62c34bc906e90a1433ce8d58583db0431b1193998f48db26af3649b21ede9fd76f56961b87642c7a207e6b927", [""]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x44002) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="b00000000802110000010802110000000802110000001000000002000000ddef7e001a91532b5133755580aadb4c25862d62269b0315de50ec92368642f257a5e767c8509eee0375be4a189c94ec5bc694f712b3cc2f75a12f62b9dc29248de53b950b357ba1e1da551538667ba9a91c781744"], 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) r4 = eventfd2(0xfffff320, 0x80801) read(r4, &(0x7f0000000080)=""/86, 0x56) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000680)='syscall\x00') ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000006c0)={r3, 0x3, 0x5, 0xffff}) ppoll(&(0x7f0000000700)=[{r4, 0x80}, {r3, 0x9}, {r5}, {r6}, {0xffffffffffffffff, 0x8200}], 0x5, &(0x7f0000000740), &(0x7f0000000780)={[0x8]}, 0x8) 03:40:35 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000001640)={0x0, 0x0, "44f770"}) 03:40:35 executing program 0: r0 = epoll_create1(0x0) r1 = getpid() r2 = getpid() r3 = pidfd_open(r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000000)) r4 = getpid() r5 = pidfd_open(r4, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r5, &(0x7f0000000040)={r0, r3, 0x8001}) 03:40:35 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000580), r0) [ 871.563413] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 871.590982] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 871.608752] Bluetooth: hci0: Opcode 0x0401 failed: -22 03:40:35 executing program 7: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d0c, &(0x7f00000000c0)={{}, {0x400}, 0x0, 0x3}) [ 871.705581] Bluetooth: hci4: command 0x0c1a tx timeout 03:40:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000021000100000000000000000002"], 0x28}], 0x1}, 0x0) 03:40:35 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000040)=@srh={0x0, 0x0, 0x4, 0x0, 0x9}, 0x8) 03:40:35 executing program 6: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg(r0, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000800)=[{0x0}, {&(0x7f0000000180)="a4", 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f00000008c0)=[{0x10}], 0x10}}], 0x1, 0x0) [ 871.734856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 871.798968] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 871.815159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:35 executing program 1: perf_event_open$cgroup(&(0x7f0000003400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 871.900343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000021000100000000000000000002"], 0x28}], 0x1}, 0x0) 03:40:35 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) mknodat$loop(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) name_to_handle_at(r0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB=' '], &(0x7f0000000280), 0x0) 03:40:35 executing program 0: syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) 03:40:35 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) unlink(&(0x7f00000005c0)='./file0\x00') 03:40:35 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000640), r1) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0) 03:40:35 executing program 7: clone(0x7fc42f2c2fff, 0x0, 0x0, 0x0, 0x0) [ 872.019033] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 03:40:35 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10000, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000470008000f80100200040000300000000000000800029f95845f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8fffffff0ffffffff078000ffffff00"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="f8fffffff0ffffffff078000ffffff00"/32, 0x20, 0x400}, {&(0x7f0000010300)="f8fffffff0ffffffff078000ffffff00"/32, 0x20, 0x600}, {&(0x7f0000010400)="f8fffffff0ffffffff078000ffffff00"/32, 0x20, 0x800}, {&(0x7f0000010500)="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", 0x120, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100061e870325132510000e87032510300000000002e2e202020202020202020100061e870325132510000e870325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200061e870325132510000e870325104001a040000", 0x80, 0x2800}, {&(0x7f0000010800)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x3800}, {&(0x7f0000010d00)='syzkallers\x00'/32, 0x20, 0x4800}, {&(0x7f0000010e00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x8800}], 0x0, &(0x7f0000010f00)) 03:40:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000021000100000000000000000002"], 0x28}], 0x1}, 0x0) 03:40:36 executing program 7: clone(0x7fc42f2c2fff, 0x0, 0x0, 0x0, 0x0) 03:40:36 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) unlink(&(0x7f00000005c0)='./file0\x00') 03:40:36 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sched_setscheduler(0x0, 0x0, &(0x7f0000000000)) 03:40:36 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x401}}) 03:40:36 executing program 5: prlimit64(0x0, 0x7, &(0x7f0000000080)={0x0, 0xffffffffffffffe1}, 0x0) 03:40:36 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x33, 0xfffffffffffffffe}) 03:40:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000040)=0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000000)=@mgmt_frame=@deauth={@with_ht={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x7fe1}, @device_a, @device_a, @random="d7c10f43de88", {0x7, 0x4}}, @ver_80211n={0x0, 0x2, 0x1, 0x2, 0x0, 0x2, 0x0, 0x0, 0x1}}, 0x34, @val={0x8c, 0x10, {0xc49, "75ba98e0947c", @short="136105a5b9e79d46"}}}, 0x30) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) r4 = creat(&(0x7f0000000040)='./cgroup/pids.max\x00', 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8001) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000040)={r8, 0x3, 0x2}, 0x10) sendmsg$inet6(r5, &(0x7f0000000780)={&(0x7f0000000300)={0xa, 0x4e20, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000540)="a7ca292110a16b43299c0e2f0945a3b40b01a4e4046ca51a52c19836209e8a188924b8393433163f8b78caebc81da91bcdc6ddd5e4e3c1c5e34d8cecebd92531554e775495e0d4c623ec096ce7998d7581512c11efc689d89c7bbb997162367ac87aa73a2eea992ae281d0fdc2f10cac62d5bee37c3c880c004f0c049930fbe421ae7c47e05deaa5cddc617307236451", 0x90}], 0x1, &(0x7f0000000640)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2, r8}}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x0, 0x6, 0x2, 0x40, 0x0, [@ipv4={'\x00', '\xff\xff', @empty}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback]}}}, @rthdr_2292={{0x98, 0x29, 0x39, {0x2e, 0x10, 0x2, 0x3f, 0x0, [@dev={0xfe, 0x80, '\x00', 0x34}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @ipv4={'\x00', '\xff\xff', @local}, @remote, @mcast1]}}}], 0x108}, 0x0) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f00000007c0)=ANY=[@ANYBLOB="c07d100000000802110000010802110000000802110000002000010000000100010882848b960c124b11499a4a05b3ddb64ab244751db5ca5b006994266cdbaaf03e86b3d2ef0a3a2dbd75818f353d4e0d39c7211536b48f7f91f3f256a76b4f1f6e3800278c6496a00d291741e026242fee37ef997d527bb99eb34096624b0e994cda6c1165ce307f1ff7e4195e2cb7815fac84b1472bfd4119a067bf4b508f07258de3c8992b339ef3"], 0x28) [ 872.486633] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 872.565309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:36 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x33, 0xfffffffffffffffe}) 03:40:36 executing program 5: sendto$inet(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0) 03:40:36 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sched_setscheduler(0x0, 0x0, &(0x7f0000000000)) 03:40:36 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) unlink(&(0x7f00000005c0)='./file0\x00') [ 872.631480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:36 executing program 7: clone(0x7fc42f2c2fff, 0x0, 0x0, 0x0, 0x0) 03:40:36 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) 03:40:36 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x401}}) [ 872.752683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:36 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x33, 0xfffffffffffffffe}) 03:40:36 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sched_setscheduler(0x0, 0x0, &(0x7f0000000000)) 03:40:36 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) unlink(&(0x7f00000005c0)='./file0\x00') 03:40:36 executing program 7: clone(0x7fc42f2c2fff, 0x0, 0x0, 0x0, 0x0) 03:40:37 executing program 5: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) fork() fork() mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x12, r1, 0x0) 03:40:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x40001) r2 = dup2(r1, r0) write$binfmt_aout(r2, &(0x7f0000000380)=ANY=[], 0x2e) ppoll(&(0x7f0000000280)=[{r0}], 0x1, &(0x7f0000000300)={0x0, 0x989680}, 0x0, 0x0) 03:40:37 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x401}}) 03:40:37 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sched_setscheduler(0x0, 0x0, &(0x7f0000000000)) 03:40:37 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x33, 0xfffffffffffffffe}) 03:40:37 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8931, &(0x7f00000000c0)={'wlan0\x00', 0x0}) 03:40:37 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)={0x1c, 0x5e, 0x101, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0xf0ffffffffffff}]}, 0x1c}], 0x1}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0}], 0x0, 0x0) 03:40:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r1, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x59}]}, 0x28}}, 0x80) futex(&(0x7f00000005c0), 0x6, 0x1, &(0x7f0000000640)={r3, r4+60000000}, &(0x7f0000000680)=0x2, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r6, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000040)={0x40, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010101}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}]}, 0x40}, 0x1, 0x0, 0x0, 0x40040020}, 0x10) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 873.360736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:37 executing program 7: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) chown(&(0x7f00000001c0)='./file0\x00', r1, 0x0) openat$incfs(r0, &(0x7f0000001740)='.log\x00', 0x2240, 0x0) 03:40:37 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x401}}) [ 873.433893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:37 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) 03:40:37 executing program 1: write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f08d6c2cf47288f8895dca6e85d1f1f7d4666d7035828c4690bca329e"], 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x1, 0x1, [@random="96336e00fdc7"]}) [ 873.625560] Bluetooth: hci0: command tx timeout 03:40:37 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000000)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) [ 873.753509] Bluetooth: hci4: command 0x0c1a tx timeout 03:40:37 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f00000006c0)) 03:40:37 executing program 0: arch_prctl$ARCH_GET_CPUID(0x1025) 03:40:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000040)=@mgmt_frame=@probe_response={@with_ht={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x1}, @device_a, @broadcast, @initial, {0x1, 0x7}}, @ver_80211n={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}}, 0x10000, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void}, 0x32) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:40:37 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x545d, &(0x7f0000000140)) 03:40:37 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLINK(r0, &(0x7f00000000c0)={0x7}, 0x7) write$P9_RLINK(r0, &(0x7f0000000000)={0x7}, 0x7) 03:40:37 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETS(r0, 0x4b4a, &(0x7f0000000180)) 03:40:37 executing program 1: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semop(0x0, &(0x7f00000000c0)=[{}], 0x1) semctl$GETALL(0x0, 0x0, 0x11, &(0x7f00000001c0)=""/131) 03:40:37 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)={0x1c, 0x5e, 0x101, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0xf0ffffffffffff}]}, 0x1c}], 0x1}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0}], 0x0, 0x0) [ 873.985038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:37 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f00000006c0)) 03:40:37 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)={0x1c, 0x5e, 0x101, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0xf0ffffffffffff}]}, 0x1c}], 0x1}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0}], 0x0, 0x0) 03:40:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000014c0)={0x20, 0x1a, 0xffffffffffffffff, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x20}], 0x1}, 0x0) 03:40:38 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLINK(r0, &(0x7f00000000c0)={0x7}, 0x7) write$P9_RLINK(r0, &(0x7f0000000000)={0x7}, 0x7) 03:40:38 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETS(r0, 0x4b4a, &(0x7f0000000180)) 03:40:38 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f00000006c0)) 03:40:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}, 0x1, 0x0, 0x0, 0x1000}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r8, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000040)={0x1c, r8, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:40:38 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000640), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r2, 0x21, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}]}, 0x2c}}, 0x0) 03:40:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000014c0)={0x20, 0x1a, 0xffffffffffffffff, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x20}], 0x1}, 0x0) 03:40:38 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2c, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000ddf4655fddf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000008000000d2420100120300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e37343139313330323700"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000e7e1fc40a6de4c28a2c3627f6ec42b47010040000c00000000000000daf4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000004600000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0300000004000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x800}, {&(0x7f0000010500)="ff030000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000daf4655fdaf4655fdaf4655f00"/4128, 0x1020, 0x1000}, {&(0x7f0000011600)="ed41000000080000daf4655fddf4655fddf4655f00000000000004004000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x2100}, {&(0x7f0000011700)="20000000541597055415970500000000daf4655f00"/32, 0x20, 0x2180}, {&(0x7f0000011800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000030000000", 0x40, 0x2200}, {&(0x7f0000011900)="20000000000000000000000000000000daf4655f00"/32, 0x20, 0x2280}, {&(0x7f0000011a00)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040000000", 0x40, 0x2300}, {&(0x7f0000011b00)="20000000000000000000000000000000daf4655f00"/32, 0x20, 0x2380}, {&(0x7f0000011c00)="c041000000400000daf4655fdaf4655fdaf4655f00000000000002004000000000000800000000000af301000400000000000000000000000800000020000000", 0x40, 0x2a00}, {&(0x7f0000011d00)="20000000000000000000000000000000daf4655f00"/32, 0x20, 0x2a80}, {&(0x7f0000011e00)="ed41000000080000ddf4655fddf4655fddf4655f00000000000002004000000000000800030000000af301000400000000000000000000000100000050000000000000000000000000000000000000000000000000000000000000000000000000000000eb7155bc00000000000000000000000000000000000000000000000020000000541597055415970554159705ddf4655f541597050000000000000000", 0xa0, 0x2b00}, {&(0x7f0000011f00)="ed8100001a040000ddf4655fddf4655fddf4655f00000000000001004000000000000800010000000af301000400000000000000000000000100000060000000000000000000000000000000000000000000000000000000000000000000000000000000af6989a500000000000000000000000000000000000000000000000020000000541597055415970554159705ddf4655f541597050000000000000000", 0xa0, 0x2c00}, {&(0x7f0000012000)="ffa1000026000000ddf4655fddf4655fddf4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3734313931333032372f66696c65302f66696c653000000000000000000000000000000000000000000000725ed7c600000000000000000000000000000000000000000000000020000000541597055415970554159705ddf4655f541597050000000000000000", 0xa0, 0x2d00}, {&(0x7f0000012100)="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", 0x1a0, 0x2e00}, {&(0x7f0000012300)="ed81000064000000ddf4655fddf4655fddf4655f00000000000001004000000000000800010000000af3010004000000000000000000000001000000900000000000000000000000000000000000000000000000000000000000000000000000000000003e5e55c600000000000000000000000000000000000000000000000020000000541597055415970554159705ddf4655f541597050000000000000000", 0xa0, 0x3000}, {&(0x7f0000012400)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x80, 0x8000}, {&(0x7f0000012500)="0b0000000c0001022e00000002000000f40702022e2e00"/32, 0x20, 0x10000}, {&(0x7f0000012600)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x10800}, {&(0x7f0000012700)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11000}, {&(0x7f0000012800)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11800}, {&(0x7f0000012900)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12000}, {&(0x7f0000012a00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12800}, {&(0x7f0000012b00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x13000}, {&(0x7f0000012c00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x13800}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x18000}, {&(0x7f0000012e00)="0200"/32, 0x20, 0x18400}, {&(0x7f0000012f00)="0300"/32, 0x20, 0x18800}, {&(0x7f0000013000)="0400"/32, 0x20, 0x18c00}, {&(0x7f0000013100)="0500"/32, 0x20, 0x19000}, {&(0x7f0000013200)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000800300"/96, 0x60, 0x19400}, {&(0x7f0000013300)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x20000}, {&(0x7f0000013400)="0200"/32, 0x20, 0x20400}, {&(0x7f0000013500)="0300"/32, 0x20, 0x20800}, {&(0x7f0000013600)="0400"/32, 0x20, 0x20c00}, {&(0x7f0000013700)="0500"/32, 0x20, 0x21000}, {&(0x7f0000013800)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000800300"/96, 0x60, 0x21400}, {&(0x7f0000013900)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d807050766696c653100"/64, 0x40, 0x28000}, {&(0x7f0000013a00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x30000}, {&(0x7f0000013f00)='syzkallers\x00'/32, 0x20, 0x38000}, {&(0x7f0000014000)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x48000}], 0x0, &(0x7f0000014100)) [ 874.354220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 874.413965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 874.471998] netlink: 'syz-executor.4': attribute type 338 has an invalid length. [ 874.474699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:38 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f00000006c0)) 03:40:38 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLINK(r0, &(0x7f00000000c0)={0x7}, 0x7) write$P9_RLINK(r0, &(0x7f0000000000)={0x7}, 0x7) 03:40:38 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETS(r0, 0x4b4a, &(0x7f0000000180)) 03:40:38 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$usbmon(r0, 0x0, 0x0) 03:40:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000014c0)={0x20, 0x1a, 0xffffffffffffffff, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x20}], 0x1}, 0x0) 03:40:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x7403e62b78368a52) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="b000"/20], 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:40:38 executing program 7: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) io_setup(0x80000001, &(0x7f00000005c0)) 03:40:38 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)={0x1c, 0x5e, 0x101, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0xf0ffffffffffff}]}, 0x1c}], 0x1}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0}], 0x0, 0x0) [ 875.003335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:38 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLINK(r0, &(0x7f00000000c0)={0x7}, 0x7) write$P9_RLINK(r0, &(0x7f0000000000)={0x7}, 0x7) 03:40:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000014c0)={0x20, 0x1a, 0xffffffffffffffff, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x20}], 0x1}, 0x0) [ 875.077224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:39 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@nr_inodes={'nr_inodes', 0x3d, [0x34, 0x70, 0x0]}}]}) 03:40:39 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) 03:40:39 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETS(r0, 0x4b4a, &(0x7f0000000180)) 03:40:39 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000000)={@ipv4}, 0x14) 03:40:39 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000380)=@abs={0x1}, 0x6e) 03:40:39 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, 0x0, &(0x7f00000002c0)) dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) 03:40:39 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/fscreate\x00') write$P9_RLCREATE(r0, &(0x7f0000001640)={0xa}, 0x18) 03:40:39 executing program 4: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000100}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x58, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_SEC_DEVKEY={0x30, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x24, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x54736727}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x6000000}, 0x4008851) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x0, 0x27, 0x3}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) r4 = creat(&(0x7f0000000040)='./cgroup/pids.max\x00', 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000880)={'batadv_slave_1\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x32, &(0x7f00000008c0)={@dev={0xfe, 0x80, '\x00', 0x33}, r6}, 0x14) sendfile(r4, r5, 0x0, 0x8001) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xe0, r7, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_RULES={0xc4, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8001}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6b2b}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x200}]}, {0x4}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7ff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x31}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffffc}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xac7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x95}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7ff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7f}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3f}]}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000000}, 0x8820) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 875.431168] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 875.452538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:39 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) exit(0x0) 03:40:39 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000280)=@req3={0x1000, 0xffffffff, 0x400}, 0x1c) 03:40:39 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x5, 0x0, &(0x7f0000000700)=0x2) 03:40:39 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000100)=""/102400, 0x19002, 0x0) 03:40:39 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000010f00)) [ 875.511318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 875.595348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:39 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000003a00)={0x0, 0x0, 0x200000}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000040)) 03:40:39 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000380)=@abs={0x1}, 0x6e) 03:40:39 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x5, 0x0, &(0x7f0000000700)=0x2) 03:40:39 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0xc, &(0x7f0000000100)=[@timestamp, @timestamp, @mss, @sack_perm], 0x4) 03:40:39 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x3938700}, 0x0) 03:40:39 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000480)={0x77359400}, 0x10) 03:40:40 executing program 3: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) chroot(0x0) 03:40:40 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="f5", 0x1}], 0x1}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x541b, &(0x7f00000006c0)={'wg2\x00'}) 03:40:40 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000380)=@abs={0x1}, 0x6e) 03:40:40 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$inet6(r0, &(0x7f0000002540)={&(0x7f0000000380)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f00000024c0)=[{0x0}, {0x0}], 0x2, &(0x7f0000002500)=[@hoplimit_2292={{0x14}}], 0x18}, 0x4c081) 03:40:40 executing program 5: munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) signalfd4(0xffffffffffffffff, &(0x7f0000000100), 0x8, 0x0) 03:40:40 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x5, 0x0, &(0x7f0000000700)=0x2) 03:40:40 executing program 1: r0 = fork() wait4(0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r0, 0x39, &(0x7f00000000c0)={0x0, 0x0, 0x80000001}) 03:40:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="44009a04d309d41548188abd8dc10000", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000"], 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 876.547392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:40 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000004c0)) 03:40:40 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x5, 0x0, &(0x7f0000000700)=0x2) 03:40:40 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000380)=@abs={0x1}, 0x6e) [ 876.611372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:40 executing program 7: setitimer(0x1, 0x0, &(0x7f00000002c0)) 03:40:40 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) 03:40:40 executing program 6: setpriority(0x0, 0x0, 0x80000000) 03:40:40 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) 03:40:40 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) 03:40:40 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:40:40 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_PLL_SET(r0, 0x40207012, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, 0x0) 03:40:40 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x20}, {0x6}]}) flistxattr(0xffffffffffffffff, 0x0, 0x0) 03:40:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f00000005c0)={0xf8, r4, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x9e, 0x2a, [@peer_mgmt={0x75, 0x14, {0x0, 0x6, @void, @void, @val="2be7f11203ebd7268a6dd82b296cf7d6"}}, @measure_req={0x26, 0x68, {0x1, 0x0, 0x3, "9fe3d616c736f12359eeb50686b9fa9b1aa3de7f49149b57a9e55270f45703914039d024fa20df8465cd29ea6aef76020f6db7093c8c102654abcf50840ea7fd7d8cea07ec0df717590a1f79ce34cbed76ff4a8941b56e1cb63735b21be7ae0787bd93d54a"}}, @challenge={0x10, 0x1, 0x9f}, @challenge={0x10, 0x1, 0x8e}, @link_id={0x65, 0x12, {@initial, @device_a, @broadcast}}]}, @NL80211_ATTR_IE={0x36, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0xc1, 0xb4, 0x1}}, @mic={0x8c, 0x10, {0xd7c, "a4376eda7b92", @short="ace7729ce0d534b7"}}, @cf={0x4, 0x6, {0x8, 0x80, 0x9, 0x9e6}}, @mic={0x8c, 0x10, {0x897, "b75aeacc8a62", @short="52419a36858cbb7b"}}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0xf8}, 0x1, 0x0, 0x0, 0x841}, 0x12841) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000540)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000000000000000000000640001007107000101ff010960cb00f5fbab42f7ef1af78d6e29858067ead3cf517de8fdb2f714edef1fc3e3dd4af6facdc9c530dd9febe20f6f3319150cf1faa5fc"], 0x2d) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:40:40 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000180)="19b541ff", 0x4) 03:40:40 executing program 3: perf_event_open(&(0x7f0000000140)={0x9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:40:40 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) get_robust_list(0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) [ 877.109381] audit: type=1326 audit(2000000440.970:90): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=250229 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f17c468bb19 code=0x0 [ 877.124398] netlink: 'syz-executor.4': attribute type 338 has an invalid length. [ 877.139856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="240000001c0001000000000000de00000a00000000000000", @ANYRES32, @ANYBLOB="080001"], 0x24}], 0x1}, 0x0) 03:40:41 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001240), r1) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r2, 0x109, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x24}}, 0x0) 03:40:41 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0x10, 0x0, 0x0) [ 877.208704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:41 executing program 1: io_setup(0x1, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) io_submit(r0, 0x1, &(0x7f0000000300)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 03:40:41 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = dup(r0) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{}]}) 03:40:41 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x120) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_retopts={{0x20, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0xb, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}], 0x20}, 0x0) fork() 03:40:41 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001440)=[{&(0x7f0000000000)="d3f9ed77bcd1a9700347a040f16226c4366500513d2db140ff2133967792c7bbff7fa5e5257ca3cb76ef94f4630211663694cb61665e29598d04e66be09453a70ba1c92868b6cb66d8f4b3f58288e4739880d59bf1bbadd3838303a8efb6806e46a48540909d708f5c9c741542767a1a97266007ecc38c0c29a177bd23e8ca02b920967da668dfbb83389b44d2c2a6a0961a0ee6be8d57051c6449445b6b543845a8e3d77c6a2ea582619cb62d0992c21846e0829db4c8ba17524db329b9c8339f8fcefbc547cc796181d4622dab445dbd", 0xd1}], 0x1) 03:40:41 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/cgroup.procs\x00', &(0x7f0000000180), 0x0) 03:40:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00@\x00', @ANYRES16=r1, @ANYBLOB="05000004000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000655e9021100000000000800350000000000080026006c090000"], 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000001780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x120c, 0x0, 0xf24, 0x70bd25, 0x3, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC_HINT={0xa, 0xc8, @from_mac}, @NL80211_ATTR_SSID={0x1c, 0x34, @random="196d0fd264c394e8c3b6866aa2b09106ffd65a1c5ba387a1"}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_AKM_SUITES={0x8, 0x4c, [0xfac05]}, @NL80211_ATTR_AKM_SUITES={0x10, 0x4c, [0xfac06, 0x11, 0x0]}, @NL80211_ATTR_WPA_VERSIONS={0x8}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x2}], @NL80211_ATTR_SOCKET_OWNER={0x4}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x91, 0xfc, "f92d619b40e3c6732b507f4634f0a4808bd59257becbc3677d9537ea154319c7b760330e98b04f1b72a6a2275784e663d14f9947f3d5b73d80841f3cf59c574c7a47edac2e4f22c284e4ce8715bce945a92b5b431f7086b5f10b204447f57903d31667a52d042326b6e2170d68cb3c09c8a72a4ea4bf8246e2a8c235666ac0e6ff4f1d0a6b1b6668eb01924b7c"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}, @NL80211_ATTR_FILS_ERP_USERNAME={0x14, 0xf9, "d41fd914621714d277493fc112e29688"}, @NL80211_ATTR_FILS_ERP_RRK={0xbe, 0xfc, "98a7f13081d840f53d58076e1be0f52a788b3c7950b1d26e6ddb72e8ec19d4178336f39ec5f5a65ae18f9118f157f6e9b1a666ee96e46f8212fb76fd0f0cd2b1280842354d5f936b3975561277903ead1cb45e67a0ca3ae325d90a4128fe12981e63b1d0b1041ec27383c24bcd480c47140effeffd2071b4265a5c4bc0aba1bbc195cc70fa8141ac5b55765dee422615c176e3a9baa3575caf97e6983b229eb244f03a4fd63e4a407f5988b829b9804ecf5a76d585754b0d431b"}, @NL80211_ATTR_FILS_ERP_RRK={0x1004, 0xfc, "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"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x8000}, @NL80211_ATTR_FILS_ERP_REALM={0x1c, 0xfa, "1fb9e08a813daa7d253041de24db3856a3b1851e22b62a9e"}]]}, 0x120c}, 0x1, 0x0, 0x0, 0x80}, 0x20040080) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:40:41 executing program 2: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x0) 03:40:41 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001240), r1) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r2, 0x109, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x24}}, 0x0) [ 877.657641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 877.725545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 877.778792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 877.936379] audit: type=1326 audit(2000000441.798:91): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=250229 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f17c468bb19 code=0x0 03:40:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000200)='d1b\x00', 0x4}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x800) 03:40:42 executing program 5: r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)="f7", 0x1, 0xffffffffffffffff) keyctl$update(0x2, r0, &(0x7f0000000100)='`', 0x1) 03:40:42 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/packet\x00') io_uring_setup(0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5) 03:40:42 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001440)=[{&(0x7f0000000000)="d3f9ed77bcd1a9700347a040f16226c4366500513d2db140ff2133967792c7bbff7fa5e5257ca3cb76ef94f4630211663694cb61665e29598d04e66be09453a70ba1c92868b6cb66d8f4b3f58288e4739880d59bf1bbadd3838303a8efb6806e46a48540909d708f5c9c741542767a1a97266007ecc38c0c29a177bd23e8ca02b920967da668dfbb83389b44d2c2a6a0961a0ee6be8d57051c6449445b6b543845a8e3d77c6a2ea582619cb62d0992c21846e0829db4c8ba17524db329b9c8339f8fcefbc547cc796181d4622dab445dbd", 0xd1}], 0x1) 03:40:42 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001240), r1) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r2, 0x109, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x24}}, 0x0) 03:40:42 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) setresuid(0x0, 0xee01, 0x0) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) 03:40:42 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 03:40:42 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001440)=[{&(0x7f0000000000)="d3f9ed77bcd1a9700347a040f16226c4366500513d2db140ff2133967792c7bbff7fa5e5257ca3cb76ef94f4630211663694cb61665e29598d04e66be09453a70ba1c92868b6cb66d8f4b3f58288e4739880d59bf1bbadd3838303a8efb6806e46a48540909d708f5c9c741542767a1a97266007ecc38c0c29a177bd23e8ca02b920967da668dfbb83389b44d2c2a6a0961a0ee6be8d57051c6449445b6b543845a8e3d77c6a2ea582619cb62d0992c21846e0829db4c8ba17524db329b9c8339f8fcefbc547cc796181d4622dab445dbd", 0xd1}], 0x1) 03:40:42 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001240), r1) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r2, 0x109, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x24}}, 0x0) 03:40:42 executing program 5: socket$inet6(0xa, 0x1, 0x1) 03:40:42 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_setup(0x70c, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}) 03:40:42 executing program 1: r0 = syz_io_uring_setup(0x77b6, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000001240)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x15, &(0x7f00000011c0)=[{0x0}, {0x0}], 0x2) 03:40:42 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) pwritev(r0, &(0x7f0000001600)=[{&(0x7f00000000c0)="e3", 0x1}], 0x1, 0x0, 0x0) 03:40:42 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001440)=[{&(0x7f0000000000)="d3f9ed77bcd1a9700347a040f16226c4366500513d2db140ff2133967792c7bbff7fa5e5257ca3cb76ef94f4630211663694cb61665e29598d04e66be09453a70ba1c92868b6cb66d8f4b3f58288e4739880d59bf1bbadd3838303a8efb6806e46a48540909d708f5c9c741542767a1a97266007ecc38c0c29a177bd23e8ca02b920967da668dfbb83389b44d2c2a6a0961a0ee6be8d57051c6449445b6b543845a8e3d77c6a2ea582619cb62d0992c21846e0829db4c8ba17524db329b9c8339f8fcefbc547cc796181d4622dab445dbd", 0xd1}], 0x1) 03:40:42 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_linger(r0, 0x1, 0x3e, 0x0, &(0x7f0000000140)) 03:40:42 executing program 1: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) utime(0x0, &(0x7f0000000080)) 03:40:42 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) sync_file_range(r0, 0xfffffffffffffff7, 0x0, 0x0) 03:40:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'ip6erspan0\x00'}}}}}, 0x38}}, 0x0) connect$netlink(r0, &(0x7f00000004c0)=@kern={0x10, 0x0, 0x0, 0x4}, 0xc) 03:40:42 executing program 7: ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x0, 0x21, 0x4, 0x0, 0x3a, 0x8}, 0x0) 03:40:42 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = eventfd(0x6) read(r0, &(0x7f0000000640)=""/100, 0x64) [ 878.840642] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=251505 comm=syz-executor.5 03:40:42 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x12, 0x0, @opaque='\x00'/10}}}}}, 0x0) recvfrom(r0, &(0x7f00000000c0)=""/10, 0xa, 0x0, 0x0, 0x0) 03:40:42 executing program 5: munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0}) 03:40:42 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80284504, &(0x7f00000000c0)={0x9, 0x0, 0x0, 0x0, "05f5724e42fc11ab19d53d257da87935d68d9a0efdab28929f337626c1db7e9c"}) 03:40:42 executing program 2: r0 = mq_open(&(0x7f0000000040)='(^\x00', 0x1, 0xa, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000018c0), 0x101c01, 0x0) ioctl$CDROM_LAST_WRITTEN(r1, 0x5395, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f00000018c0), 0x101c01, 0x0) 03:40:42 executing program 0: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') 03:40:42 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc0305302, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) 03:40:42 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000000)='nfs\x00', 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0xf, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) 03:40:42 executing program 7: openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x40, 0x14418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:40:42 executing program 3: open(&(0x7f0000001c40)='./file0\x00', 0x68240, 0x0) mount(&(0x7f0000000000)=@sr0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='iso9660\x00', 0x0, 0x0) [ 879.171210] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 879.208771] /dev/sr0: Can't open blockdev [ 879.256912] /dev/sr0: Can't open blockdev 03:40:43 executing program 2: add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) 03:40:43 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000001440), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000000)="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") 03:40:43 executing program 6: r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1}, 0x6e) bind$unix(r0, &(0x7f0000000100)=@abs={0x1}, 0x6e) 03:40:43 executing program 1: syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x8906, @tipc={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}, 0x0) 03:40:43 executing program 3: open(&(0x7f0000001c40)='./file0\x00', 0x68240, 0x0) mount(&(0x7f0000000000)=@sr0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='iso9660\x00', 0x0, 0x0) 03:40:43 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000000)='nfs\x00', 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0xf, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) 03:40:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = creat(&(0x7f0000000040)='./cgroup/pids.max\x00', 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8001) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x6c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf7}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000800) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="1000000008021100000108ff7f0000000802110007000000000000000100010882848b960c121824"], 0x28) 03:40:43 executing program 7: openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x40, 0x14418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:40:43 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r1 = socket$inet6_udp(0xa, 0x2, 0x0) dup2(r1, r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) 03:40:43 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x67) [ 879.436681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:43 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000000)='nfs\x00', 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0xf, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) [ 879.465331] /dev/sr0: Can't open blockdev 03:40:43 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000140)={0x1f, @none}, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) 03:40:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) 03:40:43 executing program 3: open(&(0x7f0000001c40)='./file0\x00', 0x68240, 0x0) mount(&(0x7f0000000000)=@sr0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='iso9660\x00', 0x0, 0x0) 03:40:43 executing program 6: clock_getres(0x5, &(0x7f0000000000)) 03:40:43 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000000)='nfs\x00', 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0xf, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) 03:40:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, r3, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x44, 0x7a}}}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000084}, 0x20040000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) r4 = creat(&(0x7f0000000040)='./cgroup/pids.max\x00', 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8001) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r4, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x148, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1ff}, {0x6, 0x16, 0xfbff}, {0x5}, {0x6, 0x11, 0xc6a}, {0x8, 0xb, 0x6056}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x400}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x800}, {0x8, 0xb, 0x10001}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x7}, {0x5}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x6}}, {0x8, 0xb, 0xf98}, {0x6, 0x16, 0x9}, {0x5}, {0x6, 0x11, 0x40e}, {0x8, 0xb, 0x3f}}]}, 0x148}, 0x1, 0x0, 0x0, 0x1000}, 0x14) 03:40:43 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) flock(r0, 0x1) 03:40:43 executing program 7: openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x40, 0x14418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) [ 879.767727] /dev/sr0: Can't open blockdev [ 879.832866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 879.895245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 879.952243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:44 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/70, 0x46}], 0x1) inotify_init() close(0xffffffffffffffff) 03:40:44 executing program 2: timer_create(0xfffffffffffffffe, 0x0, &(0x7f0000000100)) 03:40:44 executing program 1: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000440), 0x30200, 0x0) 03:40:44 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./cgroup/cgroup.procs\x00', &(0x7f0000000180), 0x0, &(0x7f00000066c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@context={'context', 0x3d, 'staff_u'}}, {@seclabel}]}}) 03:40:44 executing program 3: open(&(0x7f0000001c40)='./file0\x00', 0x68240, 0x0) mount(&(0x7f0000000000)=@sr0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='iso9660\x00', 0x0, 0x0) 03:40:44 executing program 7: openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x40, 0x14418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:40:44 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x4ac0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f00000016c0)={0x0, @ethernet={0x0, @multicast}, @phonet, @xdp}) fcntl$dupfd(r1, 0x406, r0) ioctl$FIBMAP(r0, 0x125d, 0x0) write$cgroup_freezer_state(r0, &(0x7f0000000000)='FROZEN\x00', 0x7) r2 = socket(0x2a, 0x2, 0x94f0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000700)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x20}, @in={0x2, 0x4e20, @multicast1}, @rc={0x1f, @any, 0xac}, 0x0, 0x0, 0x0, 0x0, 0xfff, &(0x7f00000006c0)='ip6tnl0\x00', 0x8, 0xd29, 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x323) syz_read_part_table(0x800000000004, 0x3, &(0x7f0000000480)=[{&(0x7f0000000280)="60bf59b0315a53aadca9d38d4eaf8de9b27d67e39d67182786231b13a19afc5588007060b911a0a192ffb7233de94fb6a0250492a9e2810b5b453b2b75ba13fcc81ae00b0a06e77716c3917dc14468aa1ec1cb819a429c771294634adc4c088d900fc6c139ef560dd403646afb63441f3ac026abd11662f7de08ba75e76a8822f9a5be590934da5e3b83abf2e0eea54805cb5c0bc386e888638237dae926e2b4592c732f66b9b019ee929c28af41bc218f2357e2007b6ef1983dcd6bc6c1018eb531f68a2356e429c91c780d347d9efcb45aa3e5e67f2f945cbc753d48e65d1d90d13c61203b99677e0fc9a4c2fbeb6b591d73145d494a1c4d10bf1006202b30d0b678344b22e6a6a7c6bc6b0895be033868eefaccf6d392ee51f550f740c464814077fc8c542207d2084bb7b8adaef731dc2f5bd8f7899e22367143deb533bba5b109dcbdd1eced9c49e580447ebbdd44da9feaf5cf08750de9093d57671ae108b7a50d1b20fe8f7bb893677c4b60e9a820cf3d061562aeb9b71c999395985c2d1546d4292907a28b8b56be2425e47e524fc7f724b7f86c72844d1448b72622a2a1adb7cd43d3154f5c67c6713a1757a4c2fb5acf6fa0a7c8676afb7eeb25097be483ec6e2024284c0105f4b9e20472ba9a981ced92327eb6a9df729c559e6c360481fbb30e376a54e37dac5b278db6559c", 0xfffffdb7, 0x4}, {&(0x7f00000000c0)="b1af108f16238885d7726e02501bb606592305b4e53a9bd819ec9b1c14f49e5511e0b5e4259ac399b397bf6234a8485ca821847b73d312a84dbb3c12ed0e75250bb1a31d6b39609651b1981941a414b7ada5148e604e79cb58151ca9e4929b2ffbb2885e4305735c921409e4d8f60f05f6c51cca7acc4020a98f131a4126154d030ad2a3b9fb5da5586def1193a54c9df4480b89aa18c623", 0x98, 0x4}, {&(0x7f0000000180)="52dc0c6e7fbbf942278f1f38e172720774b949037629f4a43625f2ad649a4da1c09cd214dcff9b4fc5aa4d9867f6a72288a015c224fa3a61e11ef16bceb224ae3367169df18c1a75141c51ca50076a79dc4034d07e5ce76afa247607a41c16fd32e08ce707353bf75ea5381fd6459f48c20fc9d1319d2d5ff8cf0b9c4237cd58e112ff8fe237194b134cf60519fbed546e1b859f2e9385", 0x97, 0x1}]) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$FIBMAP(r3, 0x125d, 0x0) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="60c269544898923c", @ANYRES16=0x0, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0x4}, 0x4) 03:40:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) r3 = syz_open_dev$mouse(&(0x7f00000013c0), 0x5, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000001680)={&(0x7f0000001400), 0xc, &(0x7f0000001640)={&(0x7f0000001480)={0x1b4, r4, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4c30}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}]}]}, @TIPC_NLA_LINK={0xe0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x48000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ea8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x26}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x24}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3466b4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3f94}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x87b6}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0xc1}, 0x4004010) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 880.434130] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 880.449895] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 880.462727] /dev/sr0: Can't open blockdev 03:40:44 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$lock(r0, 0x26, &(0x7f0000000180)) fcntl$lock(r0, 0x26, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x2}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup3(r1, r0, 0x0) [ 880.499405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:44 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x1}}}, 0x4) 03:40:44 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f00000000c0)='./file0\x00') mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000000180)='./file0/../file0\x00', 0x0) 03:40:44 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f00000000c0)={0x6}) 03:40:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 03:40:44 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_buf(r0, 0x29, 0x10, &(0x7f0000000080), 0x0) 03:40:44 executing program 5: r0 = msgget$private(0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) [ 880.877035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0xa348, 0x8, 0x10001}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x28) 03:40:44 executing program 3: add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) mq_notify(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x33, 0x6}) request_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='\\:{:[(^{,@!\x00', 0xfffffffffffffffc) io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, &(0x7f0000000180)="ecb038f47536dbc30c4705a930e158abd91b0369840d7c", 0x17, 0x0, 0x0, 0x1}, &(0x7f0000000200)) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x400001, 0x40) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000280)=r0, 0x1) eventfd2(0x5c, 0x0) io_setup(0x80000000, &(0x7f0000000400)=0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x100000001) io_submit(r1, 0x0, &(0x7f00000016c0)) syz_usb_connect(0x3, 0x36, &(0x7f0000001700)={{0x12, 0x1, 0x110, 0xfd, 0x25, 0x6e, 0x0, 0xaf0, 0xd057, 0x9941, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x5, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xb3, 0xa6, 0x8b, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x3ff}}, {}]}}]}}]}}, 0x0) io_setup(0x0, 0x0) [ 880.982327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 881.037031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 881.039213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 03:40:45 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r1, 0x1}, 0x14}}, 0x0) 03:40:45 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 03:40:45 executing program 3: add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) mq_notify(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x33, 0x6}) request_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='\\:{:[(^{,@!\x00', 0xfffffffffffffffc) io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, &(0x7f0000000180)="ecb038f47536dbc30c4705a930e158abd91b0369840d7c", 0x17, 0x0, 0x0, 0x1}, &(0x7f0000000200)) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x400001, 0x40) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000280)=r0, 0x1) eventfd2(0x5c, 0x0) io_setup(0x80000000, &(0x7f0000000400)=0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x100000001) io_submit(r1, 0x0, &(0x7f00000016c0)) syz_usb_connect(0x3, 0x36, &(0x7f0000001700)={{0x12, 0x1, 0x110, 0xfd, 0x25, 0x6e, 0x0, 0xaf0, 0xd057, 0x9941, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x5, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xb3, 0xa6, 0x8b, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x3ff}}, {}]}}]}}]}}, 0x0) io_setup(0x0, 0x0) 03:40:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x1c, 0x58, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wlan1\x00'}]}, 0x1c}], 0x1}, 0x0) 03:40:45 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) 03:40:45 executing program 5: perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffff88806ce0e000, 0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:40:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) clock_getres(0x6, &(0x7f0000000000)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:40:45 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f00000000c0)={0x6}) 03:40:45 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000580)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f00000005c0)='system_u:object_r:inetd_log_t:s0\x00', 0x21) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) [ 881.734407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 881.736885] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 881.752404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 881.761737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 881.799624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:45 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:40:45 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f00000000c0)={0x6}) [ 881.872697] audit: type=1400 audit(2000000445.732:92): avc: denied { create } for pid=253896 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:inetd_log_t:s0 tclass=key permissive=1 [ 881.890384] audit: type=1400 audit(2000000445.752:93): avc: denied { write } for pid=253896 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:inetd_log_t:s0 tclass=key permissive=1 03:40:45 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 03:40:45 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x02\xce\x16Td\xa8\x98\x86\xb1:\x8f\xc5\x88{\xbd\xb4\xc2\xb1\x9b\x84\x97R\xcc\xdb<\x01\xfa\x91\x85\xa0\x81\xa9F0!/\x89\xacX\xbd\xcd\x12R|lTn\xac-\xfd\x8b\n\x1a\xbc\xf0^B6\xb6`[/\xafE\xdaYz\xd6\xc7\xbc!\xe5\x89\xc8^\x06np\xc6\xe7\x1d\xe4\xbe\xcaa}\x1c\x12\xf9\xd8\xefw\xe1\xcb\x85\xdb?^\x8f\f\nD\xf2\x1f\x11\xaa\x90>N\xb7\x86\xcc\xbe\x0f\x0f\x14\x84\xde:;\x0f\xb5\xf1\x86\xf2{y\xe0t\xa2\xe9\x01\x00\x00\x00\x8e:^v\xc9\x8d\xd7E\xb4\vw\xbe\\\x11JB\xb2\x16PxS\xfey\x95\xe9\xf4\xae\xc6\x88F\x9c\xaflM\x1dSHjH\xd6\x8d\xa6\xbd\x96\xe4SR\xe6\x118L*\x9b\xb2\tbg\xad\x0fRu\xeb\xe4{GO\xa5M\x80\xe5\xeaY\xdbm8\x92\xd3-Y\xc6\x1f%\xb8i|\x86\xa9Zm+\x9fe~\x8az\xcaL\xad?\xa0t\x13_Rq\x1f\xc6\xd9\x1d#\x8a8q\x1e#c\x8c\x193\xab\xdbE\xe1\xc8d=\xe5\r\xe6\x9a\xe5zc-\f\xe5#\xa2v\x1eY\xf0\xe3\x1c*h\xdbq\x92\xf8a6\x99\x02\xc9}\x14\xfb\x03\xce\xb34\x95/\x18\xacJs0\x9f\x9b>\xae\a\x99w\x11G\x1c\xd2\xbc\xf0E\x86\xca\x87\xefvo&\xba(u\xc2z\x85\xc1\xd5R\x82\v\x1b\xea\x8f\xad\xc1\x02\x8a$\xd1T\xceJo\xa6\xa2m\x18K\xd5-\x03\xa0\xeeF^F\x00\x00Lx\xdc\xc8\b\xb7\xa1j2l\x8fQ\xc1\x89\xb8\xbef\xc6\x90\r\xae\xd4S\x8f\x7f\xe2[\x1cs\xab&\xa3\x81B<\xc5\xdd\x00\x00\x00\xe2y\x9b\xcbd\xb7\x9eb\xf6\x8f\xfb?7\xb9\xf6\xeaFu\xd1\xa2L\xd1n\x1a\xa1\xb9\x10K\xe2\x88\x9a\xa2\xb9\xd8\xbf\xd4*\x00\xde\xc7\xec\x9f\xcd\xe7\xb9b\xcd1\xc6\x7f\x97\x91p\x80\x9c@\xe6g\xef\x00!\xf5\xf4\xc1\xc55\x04&\xea2\x10\\\x06+\vt\xd8l\xe8\x97\xabGcpgl\t\xec\x1b\xdc0\x1a,K\xddY\x04\xe1yy\xc0it,\x94\xa1I\xd1\xc6\xdd|\xc3\x0f[\x9b\x11z\x133\xc9g\xb3\xce_v\xffC!\x86\xa7\xf2\xc5', 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0xfffffd1f) fallocate(r0, 0x3, 0x1000000, 0x9025) 03:40:45 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000580)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f00000005c0)='system_u:object_r:inetd_log_t:s0\x00', 0x21) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 03:40:45 executing program 7: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000580)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f00000005c0)='system_u:object_r:inetd_log_t:s0\x00', 0x21) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 03:40:45 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) ioctl$SNAPSHOT_S2RAM(r0, 0x3307) 03:40:45 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f00000000c0)={0x6}) 03:40:45 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 03:40:46 executing program 2: clock_nanosleep(0x7ffffffffffffff9, 0x0, &(0x7f00000000c0), 0x0) 03:40:46 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 03:40:46 executing program 3: add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) mq_notify(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x33, 0x6}) request_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='\\:{:[(^{,@!\x00', 0xfffffffffffffffc) io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, &(0x7f0000000180)="ecb038f47536dbc30c4705a930e158abd91b0369840d7c", 0x17, 0x0, 0x0, 0x1}, &(0x7f0000000200)) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x400001, 0x40) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000280)=r0, 0x1) eventfd2(0x5c, 0x0) io_setup(0x80000000, &(0x7f0000000400)=0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x100000001) io_submit(r1, 0x0, &(0x7f00000016c0)) syz_usb_connect(0x3, 0x36, &(0x7f0000001700)={{0x12, 0x1, 0x110, 0xfd, 0x25, 0x6e, 0x0, 0xaf0, 0xd057, 0x9941, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x5, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xb3, 0xa6, 0x8b, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x3ff}}, {}]}}]}}]}}, 0x0) io_setup(0x0, 0x0) 03:40:46 executing program 1: syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 03:40:46 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000580)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f00000005c0)='system_u:object_r:inetd_log_t:s0\x00', 0x21) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 03:40:46 executing program 7: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000580)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f00000005c0)='system_u:object_r:inetd_log_t:s0\x00', 0x21) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 03:40:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000009c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x50, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x89931f8b, 0x51}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x50}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000a40)=@mgmt_frame=@probe_response={@with_ht={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x4}, @broadcast, @device_a, @initial, {0x9, 0x5}}, @ver_80211n={0x0, 0x5, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1}}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, [{0xdd, 0xd1, "ca6ad6a3fe4d65bf399c0fc2a28e906192518cead4983a713e641a24374d56fbf1830d65d58598e58750e7bc86f6bfd2cdec20fa886614f77ef0009f602119af000636b474c5620758ec093e365cdc8d24bf4119dd76e626aaf1d9cf078795816cf0fba3021b8b455a7f2dfcf0bac61cd6cf0fcc7dc691bed4c2909fe55c84742898e9e3c777bd174b3a7b4511e075f0da5176e46a6078ca112a41ade618faaefc4091f78eaf2754fae46be15898a8b6b7419c777ecd04398120948ae87131d39fa120dfa18075f175666bee047e0fa5c0"}]}, 0x10d) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000040)={&(0x7f0000000680)={0x48, r1, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x52}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10000}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1c}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x1) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000700), 0x498880, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f0000000a00)={0x24, r5, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x2d90}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x81) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r7, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x5c, r7, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xff}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xfe}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 882.554096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 882.559823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 882.565919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 03:40:46 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000580)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f00000005c0)='system_u:object_r:inetd_log_t:s0\x00', 0x21) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) [ 882.639014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 882.652943] netlink: 'syz-executor.4': attribute type 338 has an invalid length. [ 882.715322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:46 executing program 7: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000580)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f00000005c0)='system_u:object_r:inetd_log_t:s0\x00', 0x21) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 03:40:46 executing program 2: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000000)={'syz', 0x3}, &(0x7f0000000280)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xbc, r1) keyctl$read(0xf, r2, &(0x7f0000000340)=""/216, 0xd8) 03:40:46 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) io_setup(0x400, &(0x7f0000000000)=0x0) r2 = io_uring_setup(0x1ff, &(0x7f0000000000)) io_submit(r1, 0x2, &(0x7f00000014c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, r2, &(0x7f0000000200)}]) 03:40:46 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) 03:40:46 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f000001ac00), 0x0) clock_getres(0x0, 0x0) 03:40:46 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) truncate(0x0, 0x0) 03:40:47 executing program 3: add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) mq_notify(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x33, 0x6}) request_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='\\:{:[(^{,@!\x00', 0xfffffffffffffffc) io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, &(0x7f0000000180)="ecb038f47536dbc30c4705a930e158abd91b0369840d7c", 0x17, 0x0, 0x0, 0x1}, &(0x7f0000000200)) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x400001, 0x40) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000280)=r0, 0x1) eventfd2(0x5c, 0x0) io_setup(0x80000000, &(0x7f0000000400)=0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x100000001) io_submit(r1, 0x0, &(0x7f00000016c0)) syz_usb_connect(0x3, 0x36, &(0x7f0000001700)={{0x12, 0x1, 0x110, 0xfd, 0x25, 0x6e, 0x0, 0xaf0, 0xd057, 0x9941, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x5, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xb3, 0xa6, 0x8b, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x3ff}}, {}]}}]}}]}}, 0x0) io_setup(0x0, 0x0) 03:40:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="3b949000", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0xfacf8dc2f3a18fa1}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)=ANY=[@ANYBLOB="24ba0e00", @ANYRES16=r4, @ANYBLOB="000329bd7000ffdbdf2501000000080001003700000008000300", @ANYRES32=r2, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4014) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) r5 = openat2(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', &(0x7f00000006c0)={0x600000, 0x12, 0x10}, 0x18) sendmsg$NL80211_CMD_GET_POWER_SAVE(r5, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, r1, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0xc1) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f00000009c0)=ANY=[@ANYBLOB="b0000000080211000001080211000000080211000000a7000000020000006298d7d9e4b8a6c0fd7fa615280a35f154292e72329eea33ac7649d7fb8fa569619d9046f42bcc648d0d521dabf98e446a0139e6489825a547a18b6a41ffbdbe749ef6ecba2f8164a38e5f1d618752dbb0f07de293056c5a9d7b577f7aa70151e6d776a68a5d0c0cf91b9c090fa75b676f21cb5def9a7d910233039ab82119dbc8fae92342494f99c4066631c3566f0e3835afff8567b43b51cad9f6248adde765a5dd76"], 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) openat2(r5, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x220782, 0x4, 0x2}, 0x18) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@ctrl_frame=@cf_end={{}, {0x1}, @device_b, @random="8dd77e0b1683"}, 0x10) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, 0x1, 0x1, 0x101, 0x0, 0x0, {0x1}, [@CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4}}, @CTA_SYNPROXY={0x4}, @CTA_MARK={0x8}]}, 0x28}}, 0x0) recvmsg(r6, &(0x7f0000000e00)={&(0x7f0000000ac0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000b40)=""/72, 0x48}, {&(0x7f0000000bc0)=""/151, 0x97}, {&(0x7f0000000c80)=""/129, 0x81}], 0x3, &(0x7f0000000d40)=""/132, 0x84}, 0x0) [ 883.231777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 883.243166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 883.293114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:47 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getdents64(r0, &(0x7f0000000040)=""/107, 0x18) 03:40:47 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}) 03:40:47 executing program 6: prctl$PR_SET_SECUREBITS(0x1c, 0x0) [ 883.366277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:47 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x82802, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, &(0x7f0000000100)={0x6, 'sit0\x00', {0x59cf49e6}, 0x200}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="f8100000", @ANYRES16=0x0, @ANYBLOB="00022abd7000fedbdf257500000008000300", @ANYRES32=r3, @ANYBLOB="c800f0800a000200656872cfc66c0000050010001f000000040004000a0002009c057450ebd3000005000600c0000000040004000a0002006cfa19bf316d00007d000b004e596dc7bc0d921b0d0f67819ea80d81010698a42d5b06a32a51c703795cb2af64714389f80223e929dbe06245dd90c55856ecc9dba7c537d9a88cacad836cc9a25cf362c5b8328854ae367db2fab7682a3a3fd2c11f5d942aa1f97b10bbd70e65cdd09755c837c2c21e12f887d366ff9b51463a2242a0772e0000000500060005000000d802f0806c010c8003010200abc938badb35e62075cba8ebd05c7e21e3b41e36abbce5fbe6a509f2f42fd38e259f7ee8693a5c06797e2580cb27ea99d11664f4e9a8f51d4a0a9ccfd6e81ba58484b59484055279dffce575c3ef17ffe8c529057b6432b54e2992688d12df0588ba4763797b4667792eed780a3418abda27865cac72964841a292122740c7a9f982734bab88c1d08c76e8f968807525ec7fb5731afdeb6378e40cd3266fc41583c4d3e37941777696a468bc94b55473e964f76c80c29a62f0103433a6c075c0fc9855f96d7684ff0f5971bacf4e45c698f08bd56e0d3297ae96fbf8f642ad5bf58b57b0a6d5e1072225b27eeb8d2a375a3d3e75206e3b18615c985ac701a000640004800a00060008021100000000000a00060008021100000100000a00060008021100000100000a00060008021100000000000a00060008021100000000000a00060008021100000000000a000600ffffffffffff00000a0006000802110000010000050003000800000044010c80050003001f000000340004800a00060008021100000100000a00060008021100000100000a000600ffffffffffff00000a000600ffffffffffff0000030102006289915f4fa2e8b1a5d1d4b68571180782eba3971a2b1a5bc71f3491448c733734fa91121cfb4fdc63afb811da0817080e8f44406f3511fe6aa594d173bc46135b17f22c5cb7e670e152788e4dd73652c6a54cfec91258236748c14ca4c7ac0daed72f165115bf7b8664679a82ccd075fa5f17e476ee0f56061cb67b09a00d1fc1f259785bc7c89e893002ca14d5c1ff5dfe7252f45dbf67cfe1a9a8f8cb31fe0515c4c91df08fb1290851c73473f20ae844084a6e6a996ca9ed7b345d6f273fa1628d5e7fd17850ea0f93c592959cd492b22e98159bfdf1e2fe4e629385fd5646a09dad488a051b1a59dec5ca4aa6bbb5e9d4277e89d9770182565eb9e9760005000300fe00000014000b0081325706e8518ebab16b1721fa761b771002f0800500060000000000fc010c800500030003000000280004800a00060008021100000000000a00060008021100000000000a0006000802110000000000580004800a000600ffffffffffff00000a000600ffffffffffff00000a000600ffffffffffff00000a00060008021100000000000a00060008021100000000000a00060008021100000100000a000600ffffffffffff000003010200d732d6fde2c36e6288219fde8e707082a2b1a5774b9517f5182973cf9e47467d12a32eee2d8db9cdd3846d37687721934a4823211e8f7099ba99cb183d0654871da9caec2a2484263d8f057d0a6b03ee65176300346dc999fa71b1d32518c20426581dc55d412b97cd89f4dbf30b2755a189d3306ab5aab0d4312dc8e5a3c744913bc81add2ba63e157deb751d8e3f652e7dad3d324a545b69fbe66ab4d40f71c3e1765fa6f24c0d56607173a8a545beff81ac51f5e8a0bf37d457a6e0f014ea54c65c2c08f25142e46ae5435fa83ddeabce73318d226cbb21474231cb9f7420f1e18ee9f2dbeb1bb51a7e56ad15f622e14a133c1c5da483b45eecd2571ead00100004800a000600ffffffffffff0000580004800a00060008021100000100000a00060008021100000000000a00060008021100000000000a000600ffffffffffff00000a000600ffffffffffff00000a00060008021100000100000a00060008021100000100000400010005001000020000003c00f0800a0002002efc82dbeb8500000a00080008021100000100001d000b00c1090b1b926ca0418d8a8b53e90c9aedb64c352822319b1e400000000800f08004000400f803f0808c020c8003010200e203fc8dcf358e831dc759dfb6fae852aab10bad5a8af6bef759653c2d25f98156a709f543c7dfc084f9860fa69627bd4ee43fd6f33ee65fd582a030e60c2f44328b2676aead072cb99264cd391f3f60022c2c1b03b203d922ad00960091af6150154d9cc8146f4f9b2aff89051cde736f04c5a8347e9ef9cfd5121222b6f0c7194c0bc59fbf0c2ab793771655c5d9ed4d3d73d619aea361692d4903cd6701cbd31ecd6bedbe32901415831402942e8586367719c72d9ad52a4a86891760236a9f1348e5df6623d87e3171496b43590dc2822610265d23a0253301eddd9c64bbb192de02b7b7a6b4ff238854e06ac8f0641650be55ec140d037744605946bc000400010003010200fc729a17ce2e2111f6731d889bd2c4e2a55fffb6aae67977f385676fca7e7eff324b529e1c044a21da9568b460ed9236fc37b0917e4ef581a313188c9d6744f82a9d6b0d4c69521cecc384172faff20c9e4ebc0e3f5f776f5e1bfec08c62d5a6715491d8b0bc40e9d66bd0c00ed3a4cec31b6020c0faad48f3b6735176b602270d0bb7234554fd17e2a47710fbf31f543371a8617eca9643d5cfeaa49bf9e878ee58e259bc10a85609734d0e6ac2980b24757998c352d4bd4ae2f9c1fda2a436ac1fdfdda8a76f3a0afc3aa4a67583510c39e852738920dba34ff0033547a15bb9c59b3ec9c671ab2a44b10bcea90c0c083b5423e1dcb49ed65f34903ac10500040001001c0004800a000600ffffffffffff00000a000600080211000001000004000100040001004c0004800a00060008021100000000000a00060008021100000000000a00060008021100000100000a00060008021100000000000a000600ffffffffffff00000a0006000802110000010000050003000800000080000e807b0000007f6e09da3988ab70e14b700f66ecf4f1f86e19edb901661c135826c88ffa9ff2ab38e2a6ff07c896efc9471d7a3af5806a455f97edec2f528bf5f2a79c0f56523d424abc03ab1e0e5d0975c82c3f939473d58e9acd4847aff198a532f9792750a9f8a759d9bdc6580e780df3c8b4ea98e47d5e6c86535b00e8000c80040001004c0004800a000600ffffffffffff00000a00060008021100000100000a00060008021100000000000a000600ffffffffffff00000a00060008021100000100000a00060008021100000100007c0004800a00060008021100000000000a00060008021100000100000a000600ffffffffffff00000a00060008021100000100000a00060008021100000100000a00060008021100000000000a00060008021100000100000a000600ffffffffffff00000a00060008021100000100000a000600ffffffffffff000005000300ff000000040001000400010005000300f10000008006f08038050c80050003000200000003010200d90b828e4e9d2beb2ffbc8f97d1d35f20c4cf4a7a2549265ac87cd8cded6a4c8c145f291c83d2cc7d99c304b4fb7d9547672a612e8935418900047df295d369fc7acc15f8aab9cd9f06ea2258db967d4cb8d4fa2b334050a2c64456f7efa7ad86bcdb8285ab5e742af2896181d4bb2c18bd04bb8a5770bb47a09cf952885d637d267de977e81e7842ad2be45afc03b11feb9d45b05f05c8e789e69aa541734b0036140dd56cab48bbda22cc9c48a27efd016b42785dc6eb8eec3326c8721bbfb8584ff2a6a848c413d7f5608cb00ee4858b216481e04254f51d6cf33d643354e9f4e86e62bd4e2d12da35ec34ca5e6dc4e11515eae67792de46ed448ae0d8f0005000300030000000301020080fe4bc10360f2d4c6e77babc459fe8609bcdebdc786c9ee7c99672c601f084342d91329b967618060b8724a7276e8e858dd80aaf58970627dfd4afaac5bb77f3acf883e2c306965e425846050ee969c2054c9bc85bebca0ed077049789d95468a74785e79f10a00b4ef0a461860603bc5edb70c3a90173d64f8e4cc95c487d022e58d24a421e13a8492a33830c8ba78ed7aa4922ca9e9a0bea5d5278f024f8611aed8530b3985afa4725115b1a4d7b852dcda68fb3185f163c2143276014097e51722f9bd2b14d8ccbb887233242388cb377452393c0d68a7f4ce568fed800f583dac24e740f2608811afe8fd255230518718dcd3dcf9a80b5b678ff8535f00050003000500000004000100030102007e6566824dc6ac4dc0edf06c92a7871fd4f7eff2db451eaa5cf9d88818d74ff6452cf08e70582bbdbeffe7da3f9feb38e3bc2a489c16c5f509a7e1e213db0bcd7acd945114214c59cd0bcc8f2da0be6328134e069a8e3ed556743a0e4bba6af0412f37c88e8c3b916717398f3c5f5e1f23246c55f5f82cacbf22be6fe9924f842fcd7e137401455ebe81224db808f435e0ddefaaea091b970dfcca5f7d7c917c65ee6df2549ae82ecff08a7adead2521a1a991a6decbe3c79e8616cfb87e01913bacfb5df68e46b8e3e55e9ac9f048ae3e2c6af71f923801e405b5c05c9fec023d0ba7ec45b4dcb2c1b0791f219ecc0359b96761f91f99fc80741a6e6c791a000301020026dcb7fdd1e7e2ab428989828ab6d32395e02403223e0be02d6d4ba8d9c01f7fa3e2f701e0b5d62a29ada4aca51e73df2c746ccc8fe2b04a292be8250dddb963883c9d4728df2dd4de6cbf4e947bcdc0e5a6575315886eea67442d178fe86dc6ee5ddd99b613227574d151c290ef3bd8feb17a506f1710e655e78f85a16a9ff0a587633e5c8df828be7fed94b2a397d55133f45aa27616748db2f181caf61a3482b92c54873fd7dcf5828766a25cfd9ab2488f0bb67731ebe8b639de0e898aaa61a74f6ea8fc5cdd23227375308d002fbe0f725bd2d93e5c1df198dfeb0fcc47223a516a176398afaa2587edaf193d5b668089790256fa8a99fe884b1c2975000400010003010200a48126874b0040c9085c35e47f97f2297e852ab28360335c60ea30c86e60ac31eb70077cc934275368cdb3fe05a64db8008502d880d3dfb283fdd2188f879f9be1ae8d4f851e3cd2220b6e405cd126d1e141790da69448bfa82ff50a3c3c1c096a2d8c714a57b522cfea716cb9fe425000000296bcb1622aafb6fc1f38a3b9cd3e8065e5af2f4520706803f5384d82e5c6c4e42e1f3fc0eacf16d4d8b6c540876584580ad82d6763d3fa42cc37b2be2f31e9382c1a60c99af2d78f0a0bdaa5340482b65620ca0dde928eab6152eff189a58e468d7c9095a88be13391fece8789d519e7de30371cc995e0292c1013f4df03b4258a357113f3e10420ac3aa71a000a000200af92f771f25c00000400050005000700ff0000001c010c8003010200ffd732067a0898779f4cba3d79ae47740799b757be0eaeb21f1fff58f4ee4d1efd1720507b71984f34d46a0683ef24b4cd4ef7c9de5cdca404d75931aab687cb895d6356e515dc29e9d16e684c386bf9fa131f1166a361c3df75db02884044dafae027075db19786a108a182f757254d444770b587e1fdb286aa8b8672554958ba7e1905ce5528f52c73b6e772e47a86486e141ef942ae6a09e7eaa76acfe0abd92c7799917c0fd4f4273eba5e269bd7bb4d2b4fe7a195207ae07981d7330bbfff6ee5827f997da30a9ba00b85be5ba171d6acb377b651dc9e676e1940278b25ccecd6e519b5a47ca5570043a3ca5044f0d3b46ae623ea6fddf1d751c5023700050003000300000004000100050003001f00000008000a00c200000005000f00810000002000f080050007000200000005000100010000000a000200ba65061672fb00002000f08005000300ff00000004000400050003000000000005000100010000003000f0800a00020042dc59c23f2c000005000f004f00000005001000ff00000004000500040005000500100001000000"], 0x10f8}, 0x1, 0x0, 0x0, 0x20000050}, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="00040000000000001a000008"]) [ 883.435917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 883.456841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:47 executing program 2: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000000)={'syz', 0x3}, &(0x7f0000000280)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xbc, r1) keyctl$read(0xf, r2, &(0x7f0000000340)=""/216, 0xd8) 03:40:47 executing program 0: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000180)='\x00'/11) 03:40:47 executing program 6: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x22b2e88341e40592) 03:40:47 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) io_setup(0x400, &(0x7f0000000000)=0x0) r2 = io_uring_setup(0x1ff, &(0x7f0000000000)) io_submit(r1, 0x2, &(0x7f00000014c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, r2, &(0x7f0000000200)}]) 03:40:47 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}]}, 0x58) setsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f00000001c0)="148ac46e028f79f116680d1e8d164d4a39e6c304", 0xffe8) 03:40:47 executing program 6: r0 = eventfd(0x0) write$eventfd(r0, &(0x7f00000000c0)=0xffffffffffffffff, 0x8) 03:40:47 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x100000001, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, 0x0) 03:40:47 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/24, 0x18}], 0x1) 03:40:47 executing program 2: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000000)={'syz', 0x3}, &(0x7f0000000280)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xbc, r1) keyctl$read(0xf, r2, &(0x7f0000000340)=""/216, 0xd8) 03:40:47 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x82802, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, &(0x7f0000000100)={0x6, 'sit0\x00', {0x59cf49e6}, 0x200}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="f8100000", @ANYRES16=0x0, @ANYBLOB="00022abd7000fedbdf257500000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0x10f8}, 0x1, 0x0, 0x0, 0x20000050}, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="00040000000000001a000008"]) 03:40:47 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) io_setup(0x400, &(0x7f0000000000)=0x0) r2 = io_uring_setup(0x1ff, &(0x7f0000000000)) io_submit(r1, 0x2, &(0x7f00000014c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, r2, &(0x7f0000000200)}]) 03:40:47 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/if_inet6\x00') preadv(r0, &(0x7f0000001680)=[{&(0x7f00000001c0)=""/176, 0xb0}], 0x1, 0x9, 0x0) 03:40:47 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, &(0x7f00000012c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0) 03:40:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="f700000000aec539dcffff48"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r0) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000f80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x28, r3, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffffff81, 0x1d}}}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0xc005) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000a00)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x9, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x34) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000fc0)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee01}}, './cgroup/pids.max\x00'}) sendmsg$NL80211_CMD_ASSOCIATE(r4, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001100)={&(0x7f0000001040)={0x84, r1, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x2c}}}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x81}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}], @NL80211_ATTR_USE_MFP={0x8}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac}]}, 0x84}}, 0x4) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) r5 = creat(&(0x7f0000000040)='./cgroup/pids.max\x00', 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8001) clock_gettime(0x0, &(0x7f0000000e40)={0x0, 0x0}) recvmmsg$unix(r6, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/12, 0xc}], 0x1, &(0x7f0000000540)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000580)=""/193, 0xc1}, {&(0x7f0000000680)=""/20, 0x14}, {&(0x7f00000006c0)=""/148, 0x94}, {&(0x7f0000000780)=""/216, 0xd8}, {&(0x7f0000000880)=""/253, 0xfd}], 0x5, &(0x7f0000000a00)}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000a40)=""/14, 0xe}, {&(0x7f0000000a80)=""/236, 0xec}, {&(0x7f0000000b80)=""/102, 0x66}, {&(0x7f0000000c00)=""/43, 0x2b}], 0x4, &(0x7f0000000c80)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}}], 0x3, 0x40000000, &(0x7f0000000e80)={r7, r8+60000000}) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 884.023304] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:40:47 executing program 2: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000000)={'syz', 0x3}, &(0x7f0000000280)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xbc, r1) keyctl$read(0xf, r2, &(0x7f0000000340)=""/216, 0xd8) [ 884.050719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:47 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec", 0x4c) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r2, &(0x7f0000000900)='^', 0x1) sendfile(r2, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0xfdef) 03:40:47 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) io_setup(0x400, &(0x7f0000000000)=0x0) r2 = io_uring_setup(0x1ff, &(0x7f0000000000)) io_submit(r1, 0x2, &(0x7f00000014c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, r2, &(0x7f0000000200)}]) 03:40:47 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x40000, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736661e36600080820000400008000f80000200040000300000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60}, {&(0x7f0000010100)='RRaA\x00'/32, 0x20, 0x800}, {&(0x7f0000010200)="00000000727241610500000007000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010300)="601c6d6b646f736661e36600080820000400008000f80000200040000300000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60, 0x3000}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x10000}, {&(0x7f0000010500)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x10800}, {&(0x7f0000010600)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x11000}, {&(0x7f0000010700)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x11800}, {&(0x7f0000010800)="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", 0x120, 0x12000}, {&(0x7f0000010a00)="2e20202020202020202020100054e970325132510000e97032510300000000002e2e202020202020202020100054e970325132510000e970325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200054e970325132510000e970325104001a040000", 0x80, 0x16000}, {&(0x7f0000010b00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x1a000}, {&(0x7f0000011000)='syzkallers\x00'/32, 0x20, 0x1e000}, {&(0x7f0000011100)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x26000}], 0x0, &(0x7f0000011200)) 03:40:48 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, &(0x7f00000012c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0) 03:40:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, 0x0, 0x60) 03:40:48 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000, 0x0, 0x3, 0x1}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000, 0x0, 0x3, 0x2}, 0x20) 03:40:48 executing program 2: r0 = eventfd2(0x0, 0x0) io_setup(0x2, &(0x7f0000000080)=0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) io_submit(r1, 0x2, &(0x7f00000007c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x0, r2, 0x0}]) 03:40:48 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000003e80), &(0x7f0000003ec0), &(0x7f0000003f00)) 03:40:48 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2600, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) 03:40:48 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, &(0x7f00000012c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0) 03:40:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x14a}]]}, 0x44}, 0x1, 0x0, 0x0, 0x4800}, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'macsec0\x00', {0x2, 0x0, @loopback}}) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:40:48 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x82802, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, &(0x7f0000000100)={0x6, 'sit0\x00', {0x59cf49e6}, 0x200}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="f8100000", @ANYRES16=0x0, @ANYBLOB="00022abd7000fedbdf257500000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0x10f8}, 0x1, 0x0, 0x0, 0x20000050}, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="00040000000000001a000008"]) 03:40:48 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec", 0x4c) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r2, &(0x7f0000000900)='^', 0x1) sendfile(r2, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0xfdef) 03:40:48 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000400)={{}, "930592c8c9", ['\x00']}, 0x125) [ 884.999190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:48 executing program 1: perf_event_open(&(0x7f0000003740)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:40:48 executing program 2: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 03:40:48 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1a, &(0x7f0000000040)={@private2}, 0x14) sendmmsg$inet6(r0, &(0x7f0000001180)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c, 0x0}}], 0x1, 0x0) [ 885.097080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:48 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, &(0x7f00000012c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0) [ 885.172355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:49 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_stats}) 03:40:49 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000e80)={0xa, 0x0, 0xffffff8f, "c336171f000000000006"}) 03:40:49 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x7ce, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x3c}, 0x0, @in=@dev}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x0, 0x0, @loopback}, 0x1c) 03:40:49 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x6002, 0x0) 03:40:49 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x82802, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, &(0x7f0000000100)={0x6, 'sit0\x00', {0x59cf49e6}, 0x200}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="f8100000", @ANYRES16=0x0, @ANYBLOB="00022abd7000fedbdf257500000008000300", @ANYRES32=r3, @ANYBLOB="c800f0800a000200656872cfc66c0000050010001f000000040004000a0002009c057450ebd3000005000600c0000000040004000a0002006cfa19bf316d00007d000b004e596dc7bc0d921b0d0f67819ea80d81010698a42d5b06a32a51c703795cb2af64714389f80223e929dbe06245dd90c55856ecc9dba7c537d9a88cacad836cc9a25cf362c5b8328854ae367db2fab7682a3a3fd2c11f5d942aa1f97b10bbd70e65cdd09755c837c2c21e12f887d366ff9b51463a2242a0772e0000000500060005000000d802f0806c010c8003010200abc938badb35e62075cba8ebd05c7e21e3b41e36abbce5fbe6a509f2f42fd38e259f7ee8693a5c06797e2580cb27ea99d11664f4e9a8f51d4a0a9ccfd6e81ba58484b59484055279dffce575c3ef17ffe8c529057b6432b54e2992688d12df0588ba4763797b4667792eed780a3418abda27865cac72964841a292122740c7a9f982734bab88c1d08c76e8f968807525ec7fb5731afdeb6378e40cd3266fc41583c4d3e37941777696a468bc94b55473e964f76c80c29a62f0103433a6c075c0fc9855f96d7684ff0f5971bacf4e45c698f08bd56e0d3297ae96fbf8f642ad5bf58b57b0a6d5e1072225b27eeb8d2a375a3d3e75206e3b18615c985ac701a000640004800a00060008021100000000000a00060008021100000100000a00060008021100000100000a00060008021100000000000a00060008021100000000000a00060008021100000000000a000600ffffffffffff00000a0006000802110000010000050003000800000044010c80050003001f000000340004800a00060008021100000100000a00060008021100000100000a000600ffffffffffff00000a000600ffffffffffff0000030102006289915f4fa2e8b1a5d1d4b68571180782eba3971a2b1a5bc71f3491448c733734fa91121cfb4fdc63afb811da0817080e8f44406f3511fe6aa594d173bc46135b17f22c5cb7e670e152788e4dd73652c6a54cfec91258236748c14ca4c7ac0daed72f165115bf7b8664679a82ccd075fa5f17e476ee0f56061cb67b09a00d1fc1f259785bc7c89e893002ca14d5c1ff5dfe7252f45dbf67cfe1a9a8f8cb31fe0515c4c91df08fb1290851c73473f20ae844084a6e6a996ca9ed7b345d6f273fa1628d5e7fd17850ea0f93c592959cd492b22e98159bfdf1e2fe4e629385fd5646a09dad488a051b1a59dec5ca4aa6bbb5e9d4277e89d9770182565eb9e9760005000300fe00000014000b0081325706e8518ebab16b1721fa761b771002f0800500060000000000fc010c800500030003000000280004800a00060008021100000000000a00060008021100000000000a0006000802110000000000580004800a000600ffffffffffff00000a000600ffffffffffff00000a000600ffffffffffff00000a00060008021100000000000a00060008021100000000000a00060008021100000100000a000600ffffffffffff000003010200d732d6fde2c36e6288219fde8e707082a2b1a5774b9517f5182973cf9e47467d12a32eee2d8db9cdd3846d37687721934a4823211e8f7099ba99cb183d0654871da9caec2a2484263d8f057d0a6b03ee65176300346dc999fa71b1d32518c20426581dc55d412b97cd89f4dbf30b2755a189d3306ab5aab0d4312dc8e5a3c744913bc81add2ba63e157deb751d8e3f652e7dad3d324a545b69fbe66ab4d40f71c3e1765fa6f24c0d56607173a8a545beff81ac51f5e8a0bf37d457a6e0f014ea54c65c2c08f25142e46ae5435fa83ddeabce73318d226cbb21474231cb9f7420f1e18ee9f2dbeb1bb51a7e56ad15f622e14a133c1c5da483b45eecd2571ead00100004800a000600ffffffffffff0000580004800a00060008021100000100000a00060008021100000000000a00060008021100000000000a000600ffffffffffff00000a000600ffffffffffff00000a00060008021100000100000a00060008021100000100000400010005001000020000003c00f0800a0002002efc82dbeb8500000a00080008021100000100001d000b00c1090b1b926ca0418d8a8b53e90c9aedb64c352822319b1e400000000800f08004000400f803f0808c020c8003010200e203fc8dcf358e831dc759dfb6fae852aab10bad5a8af6bef759653c2d25f98156a709f543c7dfc084f9860fa69627bd4ee43fd6f33ee65fd582a030e60c2f44328b2676aead072cb99264cd391f3f60022c2c1b03b203d922ad00960091af6150154d9cc8146f4f9b2aff89051cde736f04c5a8347e9ef9cfd5121222b6f0c7194c0bc59fbf0c2ab793771655c5d9ed4d3d73d619aea361692d4903cd6701cbd31ecd6bedbe32901415831402942e8586367719c72d9ad52a4a86891760236a9f1348e5df6623d87e3171496b43590dc2822610265d23a0253301eddd9c64bbb192de02b7b7a6b4ff238854e06ac8f0641650be55ec140d037744605946bc000400010003010200fc729a17ce2e2111f6731d889bd2c4e2a55fffb6aae67977f385676fca7e7eff324b529e1c044a21da9568b460ed9236fc37b0917e4ef581a313188c9d6744f82a9d6b0d4c69521cecc384172faff20c9e4ebc0e3f5f776f5e1bfec08c62d5a6715491d8b0bc40e9d66bd0c00ed3a4cec31b6020c0faad48f3b6735176b602270d0bb7234554fd17e2a47710fbf31f543371a8617eca9643d5cfeaa49bf9e878ee58e259bc10a85609734d0e6ac2980b24757998c352d4bd4ae2f9c1fda2a436ac1fdfdda8a76f3a0afc3aa4a67583510c39e852738920dba34ff0033547a15bb9c59b3ec9c671ab2a44b10bcea90c0c083b5423e1dcb49ed65f34903ac10500040001001c0004800a000600ffffffffffff00000a000600080211000001000004000100040001004c0004800a00060008021100000000000a00060008021100000000000a00060008021100000100000a00060008021100000000000a000600ffffffffffff00000a0006000802110000010000050003000800000080000e807b0000007f6e09da3988ab70e14b700f66ecf4f1f86e19edb901661c135826c88ffa9ff2ab38e2a6ff07c896efc9471d7a3af5806a455f97edec2f528bf5f2a79c0f56523d424abc03ab1e0e5d0975c82c3f939473d58e9acd4847aff198a532f9792750a9f8a759d9bdc6580e780df3c8b4ea98e47d5e6c86535b00e8000c80040001004c0004800a000600ffffffffffff00000a00060008021100000100000a00060008021100000000000a000600ffffffffffff00000a00060008021100000100000a00060008021100000100007c0004800a00060008021100000000000a00060008021100000100000a000600ffffffffffff00000a00060008021100000100000a00060008021100000100000a00060008021100000000000a00060008021100000100000a000600ffffffffffff00000a00060008021100000100000a000600ffffffffffff000005000300ff000000040001000400010005000300f10000008006f08038050c80050003000200000003010200d90b828e4e9d2beb2ffbc8f97d1d35f20c4cf4a7a2549265ac87cd8cded6a4c8c145f291c83d2cc7d99c304b4fb7d9547672a612e8935418900047df295d369fc7acc15f8aab9cd9f06ea2258db967d4cb8d4fa2b334050a2c64456f7efa7ad86bcdb8285ab5e742af2896181d4bb2c18bd04bb8a5770bb47a09cf952885d637d267de977e81e7842ad2be45afc03b11feb9d45b05f05c8e789e69aa541734b0036140dd56cab48bbda22cc9c48a27efd016b42785dc6eb8eec3326c8721bbfb8584ff2a6a848c413d7f5608cb00ee4858b216481e04254f51d6cf33d643354e9f4e86e62bd4e2d12da35ec34ca5e6dc4e11515eae67792de46ed448ae0d8f0005000300030000000301020080fe4bc10360f2d4c6e77babc459fe8609bcdebdc786c9ee7c99672c601f084342d91329b967618060b8724a7276e8e858dd80aaf58970627dfd4afaac5bb77f3acf883e2c306965e425846050ee969c2054c9bc85bebca0ed077049789d95468a74785e79f10a00b4ef0a461860603bc5edb70c3a90173d64f8e4cc95c487d022e58d24a421e13a8492a33830c8ba78ed7aa4922ca9e9a0bea5d5278f024f8611aed8530b3985afa4725115b1a4d7b852dcda68fb3185f163c2143276014097e51722f9bd2b14d8ccbb887233242388cb377452393c0d68a7f4ce568fed800f583dac24e740f2608811afe8fd255230518718dcd3dcf9a80b5b678ff8535f00050003000500000004000100030102007e6566824dc6ac4dc0edf06c92a7871fd4f7eff2db451eaa5cf9d88818d74ff6452cf08e70582bbdbeffe7da3f9feb38e3bc2a489c16c5f509a7e1e213db0bcd7acd945114214c59cd0bcc8f2da0be6328134e069a8e3ed556743a0e4bba6af0412f37c88e8c3b916717398f3c5f5e1f23246c55f5f82cacbf22be6fe9924f842fcd7e137401455ebe81224db808f435e0ddefaaea091b970dfcca5f7d7c917c65ee6df2549ae82ecff08a7adead2521a1a991a6decbe3c79e8616cfb87e01913bacfb5df68e46b8e3e55e9ac9f048ae3e2c6af71f923801e405b5c05c9fec023d0ba7ec45b4dcb2c1b0791f219ecc0359b96761f91f99fc80741a6e6c791a000301020026dcb7fdd1e7e2ab428989828ab6d32395e02403223e0be02d6d4ba8d9c01f7fa3e2f701e0b5d62a29ada4aca51e73df2c746ccc8fe2b04a292be8250dddb963883c9d4728df2dd4de6cbf4e947bcdc0e5a6575315886eea67442d178fe86dc6ee5ddd99b613227574d151c290ef3bd8feb17a506f1710e655e78f85a16a9ff0a587633e5c8df828be7fed94b2a397d55133f45aa27616748db2f181caf61a3482b92c54873fd7dcf5828766a25cfd9ab2488f0bb67731ebe8b639de0e898aaa61a74f6ea8fc5cdd23227375308d002fbe0f725bd2d93e5c1df198dfeb0fcc47223a516a176398afaa2587edaf193d5b668089790256fa8a99fe884b1c2975000400010003010200a48126874b0040c9085c35e47f97f2297e852ab28360335c60ea30c86e60ac31eb70077cc934275368cdb3fe05a64db8008502d880d3dfb283fdd2188f879f9be1ae8d4f851e3cd2220b6e405cd126d1e141790da69448bfa82ff50a3c3c1c096a2d8c714a57b522cfea716cb9fe425000000296bcb1622aafb6fc1f38a3b9cd3e8065e5af2f4520706803f5384d82e5c6c4e42e1f3fc0eacf16d4d8b6c540876584580ad82d6763d3fa42cc37b2be2f31e9382c1a60c99af2d78f0a0bdaa5340482b65620ca0dde928eab6152eff189a58e468d7c9095a88be13391fece8789d519e7de30371cc995e0292c1013f4df03b4258a357113f3e10420ac3aa71a000a000200af92f771f25c00000400050005000700ff0000001c010c8003010200ffd732067a0898779f4cba3d79ae47740799b757be0eaeb21f1fff58f4ee4d1efd1720507b71984f34d46a0683ef24b4cd4ef7c9de5cdca404d75931aab687cb895d6356e515dc29e9d16e684c386bf9fa131f1166a361c3df75db02884044dafae027075db19786a108a182f757254d444770b587e1fdb286aa8b8672554958ba7e1905ce5528f52c73b6e772e47a86486e141ef942ae6a09e7eaa76acfe0abd92c7799917c0fd4f4273eba5e269bd7bb4d2b4fe7a195207ae07981d7330bbfff6ee5827f997da30a9ba00b85be5ba171d6acb377b651dc9e676e1940278b25ccecd6e519b5a47ca5570043a3ca5044f0d3b46ae623ea6fddf1d751c5023700050003000300000004000100050003001f00000008000a00c200000005000f00810000002000f080050007000200000005000100010000000a000200ba65061672fb00002000f08005000300ff00000004000400050003000000000005000100010000003000f0800a00020042dc59c23f2c000005000f004f00000005001000ff00000004000500040005000500100001000000"], 0x10f8}, 0x1, 0x0, 0x0, 0x20000050}, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="00040000000000001a000008"]) [ 885.330763] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 885.341185] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO 03:40:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x1ff, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 03:40:49 executing program 6: syz_emit_ethernet(0x26, &(0x7f0000000000)={@empty, @empty, @val={@void}, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @remote, "", @local}}}}, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000880)=""/66) 03:40:49 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10008, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) 03:40:49 executing program 5: prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) 03:40:49 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$cgroup(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="756e6c6f636b206e6f6e650080e2"], 0xc) 03:40:49 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) 03:40:49 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f00000001c0)={0x0, 0x0, 0x41, 0x8, 0x0, r0, 0x0}]) 03:40:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000040)='./cgroup/pids.max\x00', 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8001) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000040)={0x38, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0xfe, 0x5}, {0x4, 0x2}, {0x6, 0x7}, {0x9, 0x2}, {0xac, 0x1}, {0x4}, {0x4, 0x7}, {0x5, 0x4}, {0x33, 0x5}, {0x81}, {0x5, 0x1}, {0x1, 0x5}], "c462dc23cd173ef5"}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:40:49 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec", 0x4c) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r2, &(0x7f0000000900)='^', 0x1) sendfile(r2, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0xfdef) [ 885.916051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)={0x28, 0x21, 0x1, 0x0, 0x0, "", [@nested={0x2, 0x0, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0x28}], 0x1}, 0x0) 03:40:49 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast1, @local, @local}, 0xc) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000100)={0x2, {{0x2, 0x0, @multicast1}}}, 0x88) [ 885.990347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:49 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448cb, 0x0) 03:40:49 executing program 7: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)='h', 0x1}, {&(0x7f0000000140)="a9", 0x1}], 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x802, 0x0) [ 886.063148] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 03:40:49 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3) 03:40:50 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROMREADMODE1(r0, 0x5392, &(0x7f0000002380)) 03:40:50 executing program 5: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000200)={{}, 0x0, 0x0, 0x0, {0x0, 0x2a}}) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380), 0xc, 0x0}, 0x0) fsopen(&(0x7f0000000740)='ext3\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000940)={0x3, &(0x7f00000008c0)=[{0x0, 0x0, 0x0, 0x20}, {0x400, 0x1}, {0x80}]}) 03:40:50 executing program 7: r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(r1, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) add_key$fscrypt_v1(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) faccessat2(r0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) 03:40:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x8d6) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:40:50 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/kexec_crash_size', 0x28001, 0x0) write$tcp_mem(r0, &(0x7f0000000280), 0x48) [ 886.505135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 886.570776] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 886.628292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:50 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) write(r0, &(0x7f0000000400)='1', 0x80000) 03:40:50 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401) write$evdev(r0, &(0x7f0000000200)=[{{0x77359400}, 0x1, 0x800}], 0x18) 03:40:50 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={[0x2]}, 0x8}) 03:40:50 executing program 3: r0 = io_uring_setup(0x7ddf, &(0x7f0000000680)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x21, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff]}, 0x1) 03:40:50 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3) 03:40:50 executing program 7: r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) fcntl$getflags(r0, 0x401) 03:40:50 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec", 0x4c) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r2, &(0x7f0000000900)='^', 0x1) sendfile(r2, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0xfdef) 03:40:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000018000d00223a69715fd93238ca4f0cf7ecc521a26bc9ca5988fb08aa6c46e79bf967211f804e74223e888ad52851e56e28939c6685a28e6582fe818af9954d6f9685e4074db953f90d4a78c16991a2e4cd2633e267f6aa6412baa0e00135937ee797815f56d7ce6225d0d519910ef0f640799672d320b84cb6e66cc5cb68db8fe954", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000"], 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f00000007c0)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_b, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0x3}, @val={0x4, 0x6, {0x8, 0x7f, 0x9, 0x1}}, @void, @void, @void, @val={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x40, 0x10}}}, 0x40) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x440, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r5, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000780)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)={0x114, r5, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_RULES={0x5c, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x80000001}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xce89}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7b}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfff}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x88, 0x22, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xf570}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x10000}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffffb}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x121b}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffcfd8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x11b8db55}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x89}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x114}, 0x1, 0x0, 0x0, 0x1}, 0x800) futex(&(0x7f0000000040)=0x2, 0x9, 0x0, &(0x7f0000000100), &(0x7f0000000140)=0x2, 0x2) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_80211_inject_frame(&(0x7f00000004c0)=@broadcast, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 887.164687] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 887.166283] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 03:40:51 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 03:40:51 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401) write$evdev(r0, &(0x7f0000000200)=[{{0x77359400}, 0x1, 0x800}], 0x18) [ 887.216417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:51 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x0) 03:40:51 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3) [ 887.284152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:51 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={[0x2]}, 0x8}) [ 887.353310] netlink: 'syz-executor.4': attribute type 338 has an invalid length. 03:40:51 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) write(r0, &(0x7f0000000400)='1', 0x80000) [ 887.389834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:51 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401) write$evdev(r0, &(0x7f0000000200)=[{{0x77359400}, 0x1, 0x800}], 0x18) 03:40:51 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x0) 03:40:51 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3) 03:40:51 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={[0x2]}, 0x8}) 03:40:51 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401) write$evdev(r0, &(0x7f0000000200)=[{{0x77359400}, 0x1, 0x800}], 0x18) [ 887.727952] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 887.729266] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 03:40:51 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x496, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000080)=0x6) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r1) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000005, 0x13, 0xffffffffffffffff, 0x3000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32]) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0xd2100, 0x0) recvfrom(r2, &(0x7f0000000240)=""/238, 0xee, 0x40002040, 0x0, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x1b2) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x44000) sendfile(r3, r4, 0x0, 0xfdef) 03:40:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="24100000", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:40:51 executing program 0: r0 = perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 03:40:51 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000872000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000875000/0x1000)=nil) 03:40:51 executing program 2: r0 = socket$inet(0x2, 0x80003, 0xff) shutdown(r0, 0x1) sendto$inet(r0, &(0x7f0000000240)="3e0ac342be0d0e771050c2abe23a6603152ef17a", 0x14, 0x0, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) 03:40:51 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={[0x2]}, 0x8}) 03:40:51 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x0) 03:40:51 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) write(r0, &(0x7f0000000400)='1', 0x80000) [ 887.974279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:51 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x0) 03:40:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 888.135374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 888.447280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:52 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) nanosleep(0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0xfffffffffffffffd) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0xfffffffffffffffd) 03:40:52 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0xce24, @empty}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10) listen(r0, 0x0) 03:40:52 executing program 2: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, 0x0) 03:40:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) recvmsg(r0, &(0x7f00000019c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)}, {&(0x7f00000005c0)=""/217, 0xd9}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/153, 0x99}, {&(0x7f0000001780)=""/167, 0xa7}, {&(0x7f0000001840)=""/31, 0x1f}], 0x7, &(0x7f0000001900)=""/134, 0x86}, 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a40), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001a80)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r3) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000001b80)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x44, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:40:52 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00') 03:40:52 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x1) fallocate(r2, 0x20, 0x0, 0x100000000) write(r2, &(0x7f00000001c0)='p', 0x1) dup2(r0, r1) ioctl(0xffffffffffffffff, 0x4, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) 03:40:52 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) write(r0, &(0x7f0000000400)='1', 0x80000) 03:40:52 executing program 1: r0 = getpgrp(0x0) r1 = gettid() clock_gettime(0x0, &(0x7f0000000080)) ppoll(0x0, 0x0, 0x0, &(0x7f0000000140), 0x8) tgkill(r0, r1, 0xb) [ 888.650653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 888.706892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:52 executing program 5: socket$unix(0x1, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x40e5, &(0x7f0000000100), &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x40e5, &(0x7f0000000100), &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) r5 = fcntl$dupfd(r4, 0x0, r3) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x14, &(0x7f0000001480)=[{0x0, 0x6}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x14, &(0x7f0000001480)=[{0x0, 0x6}], 0x1) 03:40:52 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000001400)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x8810) 03:40:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001ac0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x0) [ 888.773007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:52 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000001400)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x8810) 03:40:52 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4000}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:40:52 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) nanosleep(0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0xfffffffffffffffd) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0xfffffffffffffffd) 03:40:52 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) nanosleep(0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0xfffffffffffffffd) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0xfffffffffffffffd) 03:40:52 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000feaa20000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012900)) 03:40:53 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000001400)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x8810) 03:40:53 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000040), 0x4) 03:40:53 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000003c0)) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401) write$evdev(r1, &(0x7f0000000200)=[{{0x77359400}, 0x0, 0x2}], 0x30) 03:40:53 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) nanosleep(0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0xfffffffffffffffd) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0xfffffffffffffffd) 03:40:53 executing program 3: r0 = memfd_create(&(0x7f0000000240)='\x00\x00\x00\x00\x00\x00\x03r\xc7\xde\xeeB\xb0\x17\xcd4\x00\x00Y\xc7\xa6\xfdt\xf5\nL\x9e\f\xb1\x8eK\xc5\x95\xa5_\x9f\xe8nma\x8d~Y[,\xefg\xd7\xc5]Y\x92yy\xfb\x83\x00 W\xe8\x0f]@\xc0\x01\x01\x00\x00\x00\x00\x00\xe7\xfc\x83n\xd8\x81\x8d\xf1\xeb7\xd9\xff\xe3\xea\x15\xeb\xa7\xf3A;lg)c]\xae3\xb5k\xa0\b\xf7;o\xf52I\f\xc5\x95\x1d.\x92\xe9\x8f\\\x19\xf7\n\xab\"\x1e\xeaI\xb1~OO\xb1\x89B\x00'/161, 0xd) io_setup(0x9, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 03:40:53 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) nanosleep(0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0xfffffffffffffffd) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0xfffffffffffffffd) 03:40:53 executing program 1: r0 = timerfd_create(0x8, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r1, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) 03:40:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_secret(0x80000) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d40)={&(0x7f0000000540)={0x7d8, r2, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_PEERS={0x7c4, 0x8, 0x0, 0x1, [{0x53c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x2cc, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x41}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xa}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, 0xfff}}, @WGPEER_A_ALLOWEDIPS={0x23c, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0x284, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_ALLOWEDIPS={0x1a8, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2f}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x8, @mcast2}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e9c09a81b883f65bac747ec826300345bea35eb70696a7e457a682c285416712"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x81}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "dcb40ab6e44870620151f6c674b50bff1a284d069f11dfdf6491ab7a2959bc00"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @private1, 0x5}}]}]}]}, 0x7d8}, 0x1, 0x0, 0x0, 0x24040001}, 0x4008000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000dc0)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0\x00'}) bind$bt_sco(r5, &(0x7f0000000e00)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000e40)=ANY=[@ANYBLOB="10000000080211000001080211000000080211000000200001000000010001088284216594e9929f7903b91ef51f468b960c1218249f7663c7c4b16258e194b8561f1a425c560211b51e864470b63f60e6c94964ad9212f2bcbcf5b4045020d02b1f1752aa1945f5f1d29dfe7bb0c06b0a9afd9f91e899469cb408be29f2f1da1aa96cc2cf2337b76107000000000000000fc82c577effefe53d53969c062720f4688ae33a350cb780"], 0x28) 03:40:53 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x4, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 03:40:53 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) nanosleep(0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0xfffffffffffffffd) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0xfffffffffffffffd) 03:40:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) shutdown(r0, 0x0) 03:40:53 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:53 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) nanosleep(0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0xfffffffffffffffd) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0xfffffffffffffffd) 03:40:53 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000001400)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x8810) 03:40:53 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000003c0)) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401) write$evdev(r1, &(0x7f0000000200)=[{{0x77359400}, 0x0, 0x2}], 0x30) 03:40:53 executing program 7: set_mempolicy(0x2005, 0x0, 0x0) 03:40:53 executing program 1: alarm(0xa9d) alarm(0x0) 03:40:53 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) 03:40:53 executing program 6: syz_emit_ethernet(0x22, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}}}}}, 0x0) 03:40:53 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000870000/0x4000)=nil) 03:40:53 executing program 0: r0 = syz_io_uring_setup(0x7caf, &(0x7f0000000040), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x8, &(0x7f0000000000), 0x1) 03:40:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="08de050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x7a}}}}, [@NL80211_ATTR_HE_OBSS_PD={0x14, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x5}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x3}]}, @NL80211_ATTR_HIDDEN_SSID={0x8}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) syz_80211_inject_frame(&(0x7f0000000640)=@device_b, &(0x7f0000000680)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x9}, @broadcast, @broadcast, @device_a, {0x7}, @broadcast}, @random="d9a84059b531ddea59e000c856df5c146644a299f303ede76618bdf5f7a61488bced11f4b961a00c2a975171020e9f25eab76e5cd28793c05f0ce1136f368385cca550491a90e187710a2f5d68f567b0cd4a4dd6492ab62d802ec6827c216f30cfc9b888b96cd0c823576ae4f21a55ef37dca1ccd64096f01a931c6e7a8d7e86e64e677068e58a71919e9796dbdfd08f55100750f3bd8978b428b7ce6ecae8877715"}, 0xc0) 03:40:53 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000003c0)) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401) write$evdev(r1, &(0x7f0000000200)=[{{0x77359400}, 0x0, 0x2}], 0x30) 03:40:53 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000000)=@ethtool_coalesce={0x1d}}) 03:40:53 executing program 1: acct(&(0x7f0000000000)='\x00') 03:40:53 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000000211"], 0x14}}, 0x0) 03:40:53 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0) [ 889.719016] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 889.736877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:53 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) 03:40:53 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x600, 0x0, 0x0, 0x0, @empty, @broadcast}}}}}, 0x0) [ 889.800683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:53 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000003c0)) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401) write$evdev(r1, &(0x7f0000000200)=[{{0x77359400}, 0x0, 0x2}], 0x30) 03:40:53 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) membarrier(0x40, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40345410, 0x0) [ 889.875950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:53 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000100)={0x0, {{0x2, 0x0, @broadcast}}, 0x0, 0x2, [{{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x0, @loopback}}]}, 0x20002) [ 889.895045] netlink: 'syz-executor.4': attribute type 338 has an invalid length. [ 889.908538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:53 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1880, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xccb9a74c721aaad6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:40:54 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) 03:40:54 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) 03:40:54 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0) 03:40:54 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}, 0x0) 03:40:54 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x80000, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000400000004f8000020004000030000000000000001000000000000000200000001000600000000000000000000000000800029293ac6f153595a4b414c4c4552202046415433322020200e1fbe777cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a0000000000", 0xe0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa5252614100"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="00000000727241610100000007000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="eb58906d6b66732e66617400028020000400000004f8000020004000030000000000000001000000000000000200000001000600000000000000000000000000800029293ac6f153595a4b414c4c4552202046415433322020200e1fbe777cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a0000000000", 0xe0, 0xc00}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4000}, {&(0x7f0000010600)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4200}, {&(0x7f0000010700)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4400}, {&(0x7f0000010800)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4600}, {&(0x7f0000010900)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202010004fec70325132510000ec70325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c453120202020202020004fec70325132510000ec70325105000a00000041660069006c00650032000f00140000ffffffffffffffffffff0000ffffffff46494c453220202020202020004fec70325132510000ec70325106002823000041660069006c0065002e000f00d263006f006c0064000000ffff0000ffffffff46494c457e312020434f4c20004fec70325132510000ec703251070064000000", 0x120, 0x4800}, {&(0x7f0000010b00)="2e2020202020202020202010004eec70325132510000ec7032510300000000002e2e20202020202020202010004eec70325132510000ec70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202020004fec70325132510000ec70325104001a040000", 0x80, 0x14800}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x24800}, {&(0x7f0000011100)='syzkallers\x00'/32, 0x20, 0x34800}, {&(0x7f0000011200)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x54800}], 0x0, &(0x7f0000011300)) 03:40:54 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_tcp(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)) 03:40:54 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000100)={0x0, 0x1, 0x3}, 0x8) 03:40:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c12182420944d20d892e5dfd19f6342e7d5fe1db5f122a64d8105ae69b6f3c9433d320000"], 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="100000000802110000010802110000000802110000000000002bc18d8d18241e5313587dd43d0c633ab99ceb8812f44067f37a39c00cb53b78ffae988dacd084e6ddf00bf34b1ae14810cbee229ea45144b393d9ad311e2d9fd4000000"], 0x28) [ 890.328316] loop0: detected capacity change from 0 to 1352 03:40:54 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f00000018c0)='./file0\x00', 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000001300), 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x4) 03:40:54 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) [ 890.376256] 9pnet_fd: p9_fd_create_tcp (259092): problem connecting socket to 127.0.0.1 [ 890.414682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:54 executing program 3: mlockall(0x7) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) 03:40:54 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0) 03:40:54 executing program 0: syz_emit_ethernet(0x46, &(0x7f0000000080)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x10, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff}}}}}}, 0x0) [ 890.484655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:54 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) 03:40:54 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_tcp(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)) [ 890.510729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:54 executing program 7: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40045201, 0xffffffffffffffff) 03:40:54 executing program 5: madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x66) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) [ 890.589661] 9pnet_fd: p9_fd_create_tcp (259203): problem connecting socket to 127.0.0.1 03:40:54 executing program 7: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r0, &(0x7f00000001c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80) 03:40:54 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_tcp(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)) 03:40:54 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0) 03:40:54 executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup(r0) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x68}}, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000240)) 03:40:54 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0xe, 0x0, "70f6f953e0b4fb7b44103f3300066f5891261d05a3c3321ac1cfb2dcd6a5d55c8117a37cad32de276b15c3d45506fca40fd0f3200bcaa1dd91e9cfb1492575417e004a43fb3aed0ad3779c506c7764f2"}, 0xd8) sendto$inet(r1, 0x0, 0x0, 0x24040841, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) dup3(r0, r1, 0x0) 03:40:54 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) [ 890.729457] 9pnet_fd: p9_fd_create_tcp (259259): problem connecting socket to 127.0.0.1 03:40:54 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0xe, 0x0, "70f6f953e0b4fb7b44103f3300066f5891261d05a3c3321ac1cfb2dcd6a5d55c8117a37cad32de276b15c3d45506fca40fd0f3200bcaa1dd91e9cfb1492575417e004a43fb3aed0ad3779c506c7764f2"}, 0xd8) sendto$inet(r1, 0x0, 0x0, 0x24040841, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) dup3(r0, r1, 0x0) 03:40:54 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_tcp(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)) 03:40:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x248, r1, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x5c, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x7f}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xf39}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x1ff}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1ff}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="1131e56a485b"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="6a55fa8ce8a0"}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x1c4, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, "be029f18"}, @NL80211_BAND_2GHZ={0xb0, 0x0, "83e202292857a80806ab2296a1d1db961ff2053e74ae400a199bbf29be064d31f2284dbd8de39a2d983c0d591cea463fc45687b48d0aacd0b13c196aa2378e098176fb73853cae23a0cff5225494162a0ddcd970f0bf5af500ac64e40a767ca4d2da06aa4b4b7da5e12928af5c1a36bf3cf849a4193ec6e8b43f75ecb9efb2c5f8f16e7395716f26508be0ebc862aab391c153ac8cf6cacb8c6bb4aa8eba0c8146eec827c1b89527ba506429"}, @NL80211_BAND_6GHZ={0x1c, 0x3, "d7d6fe919eb62734943bc3a0ca20fff7cba1f2d17bcb971a"}, @NL80211_BAND_5GHZ={0x56, 0x1, "61f5e36f28f6ac94ecf1ad00aa06a1299b5bd61e4f5d2107c65a9d38b625f616e227b7ebb99c8fd219fa4687ae07f4877fa7501feb4e1716807455e0fbeb16b0980cf4f66a904a22782fb7d8d28b11f63eaa"}, @NL80211_BAND_60GHZ={0x93, 0x2, "82194958b76ad7d118cf1859b1d8fe7c76a807fc7cbb8f978478e96062bf29d96f86f38e7e746250970e4a0f7c3fd193e29a210414ac80cf38d33bd8ddd4aa3bd1e9c57b22cc9711f2f2b3998f2b1d1d082410fdad79cf28e1e346caab824374516b333e30f621bc4eb9c01da329abc0b63f456ffd3196de4ca8fde129979d952fa8204ccb1e26a2e5564610b77f33"}]}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8}]}, 0x248}, 0x1, 0x0, 0x0, 0x41}, 0x40000) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:40:54 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) 03:40:54 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0xe, 0x0, "70f6f953e0b4fb7b44103f3300066f5891261d05a3c3321ac1cfb2dcd6a5d55c8117a37cad32de276b15c3d45506fca40fd0f3200bcaa1dd91e9cfb1492575417e004a43fb3aed0ad3779c506c7764f2"}, 0xd8) sendto$inet(r1, 0x0, 0x0, 0x24040841, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) dup3(r0, r1, 0x0) 03:40:54 executing program 5: clone3(&(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, {0x38}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0) 03:40:54 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r0, 0x560f, &(0x7f0000000200)) 03:40:54 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/88, 0x58}], 0x1) [ 890.961189] 9pnet_fd: p9_fd_create_tcp (259530): problem connecting socket to 127.0.0.1 [ 890.985898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 891.046270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 891.099177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:55 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0xe, 0x0, "70f6f953e0b4fb7b44103f3300066f5891261d05a3c3321ac1cfb2dcd6a5d55c8117a37cad32de276b15c3d45506fca40fd0f3200bcaa1dd91e9cfb1492575417e004a43fb3aed0ad3779c506c7764f2"}, 0xd8) sendto$inet(r1, 0x0, 0x0, 0x24040841, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) dup3(r0, r1, 0x0) 03:40:55 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) 03:40:55 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0xe, 0x0, "70f6f953e0b4fb7b44103f3300066f5891261d05a3c3321ac1cfb2dcd6a5d55c8117a37cad32de276b15c3d45506fca40fd0f3200bcaa1dd91e9cfb1492575417e004a43fb3aed0ad3779c506c7764f2"}, 0xd8) sendto$inet(r1, 0x0, 0x0, 0x24040841, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) dup3(r0, r1, 0x0) 03:40:55 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCXONC(r0, 0x540b, 0x2) 03:40:55 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @random="769a535ffb74"}, 0x10) 03:40:55 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/88, 0x58}], 0x1) 03:40:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) r3 = eventfd2(0xfffff320, 0x80801) read(r3, &(0x7f0000000080)=""/86, 0x56) r4 = fsopen(&(0x7f0000000000)='gfs2meta\x00', 0x1) ppoll(&(0x7f0000000040)=[{r3, 0x80c3}, {r4, 0x202}, {0xffffffffffffffff, 0xd000}], 0x3, &(0x7f0000000540)={0x77359400}, &(0x7f0000000580)={[0x4]}, 0x8) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:40:55 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000040)=@nl=@unspec={0x0, 0x2}, 0xf) [ 891.944189] mac80211_hwsim hwsim31 wlan1: entered promiscuous mode [ 891.949893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 891.951645] mac80211_hwsim hwsim31 wlan1: left promiscuous mode 03:40:55 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0xe, 0x0, "70f6f953e0b4fb7b44103f3300066f5891261d05a3c3321ac1cfb2dcd6a5d55c8117a37cad32de276b15c3d45506fca40fd0f3200bcaa1dd91e9cfb1492575417e004a43fb3aed0ad3779c506c7764f2"}, 0xd8) sendto$inet(r1, 0x0, 0x0, 0x24040841, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) dup3(r0, r1, 0x0) 03:40:55 executing program 6: r0 = memfd_create(&(0x7f00000000c0)='/dev/sr0\x00', 0x0) pwritev2(r0, &(0x7f00000023c0)=[{&(0x7f0000000100)="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", 0xfff}], 0x1, 0x1, 0x0, 0x0) 03:40:55 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0xe, 0x0, "70f6f953e0b4fb7b44103f3300066f5891261d05a3c3321ac1cfb2dcd6a5d55c8117a37cad32de276b15c3d45506fca40fd0f3200bcaa1dd91e9cfb1492575417e004a43fb3aed0ad3779c506c7764f2"}, 0xd8) sendto$inet(r1, 0x0, 0x0, 0x24040841, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) dup3(r0, r1, 0x0) [ 892.023132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="280000002500010000000000000000000c00000002"], 0x28}], 0x1}, 0x0) [ 892.166065] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 892.176212] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 03:40:56 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000000c0), 0x4) 03:40:56 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) socket$nl_xfrm(0x10, 0x3, 0x6) 03:40:56 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x0, 0x0}) 03:40:56 executing program 3: syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)={[{'port'}]}) 03:40:56 executing program 6: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(0x0, &(0x7f0000001f80)='./file0\x00', 0x0, 0x22, &(0x7f0000002000)={'trans=tcp,', {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}}) 03:40:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x2019, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) r3 = creat(&(0x7f0000000040)='./cgroup/pids.max\x00', 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8001) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0xc4, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x12}}}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x21, 0x24, [{0x60, 0x1}, {0x9, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x60, 0x1}, {0x3}, {0x6}, {0x3}, {0x1b}, {0x2, 0x1}, {0x42, 0x1}, {0x36}, {0x3, 0x1}, {0x4}, {0xb, 0x1}, {0x5}, {0x36, 0x1}, {0x60, 0x1}, {0x6, 0x1}, {0x6c}, {0x36, 0x1}, {0x2}, {0xc}, {0x3, 0x1}, {0x24}, {0x6}, {0x30, 0x1}, {0x4, 0x1}]}, @NL80211_ATTR_TX_RATES={0x5c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x2, 0x24, 0x4, 0x3, 0x39]}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x9, 0x36, 0x6c, 0x24, 0x30, 0x30, 0x18, 0x30, 0xc, 0xc, 0x36, 0x1, 0x4, 0x1b, 0x36, 0x9, 0x3, 0x60, 0x16, 0x48, 0xc, 0x36, 0x60, 0x30, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x125, 0x3, 0xc93f, 0x8, 0x200, 0x6, 0x9866]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x330}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xc4}}, 0x0) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:40:56 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/88, 0x58}], 0x1) 03:40:56 executing program 7: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x140181, 0x0) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000400)='\n', 0x1}], 0x1, 0x0, 0x0, 0x0) lseek(r0, 0x0, 0x0) write$P9_RLINK(r0, 0x0, 0x0) 03:40:56 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x800000003}) 03:40:56 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) [ 892.883628] nfs4: Bad value for 'port' [ 892.905028] nfs4: Bad value for 'port' [ 892.966082] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 892.971318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:56 executing program 3: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0004"], 0x8, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x3000) msgctl$IPC_STAT(r0, 0x2, &(0x7f00000000c0)=""/166) 03:40:57 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') unlinkat(r0, &(0x7f0000000400)='./file0\x00', 0x0) 03:40:57 executing program 5: r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x141802, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x145802, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f0000000300)=0xffffffff) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000040)=[0xffffffffffffffff, r0, r0, 0xffffffffffffffff], 0x4) io_submit(0x0, 0x1, &(0x7f00000003c0)=[0x0]) 03:40:57 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') lseek(r0, 0x0, 0x3) 03:40:57 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)) 03:40:57 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7c4666d7035828c4690bca329e3b"], 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) 03:40:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@ctrl_frame=@pspoll={{}, @default, @from_mac=@device_b, @broadcast}, 0x10) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @broadcast, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:40:57 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') lseek(r0, 0x0, 0x3) 03:40:57 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0xb341daa0822653b3, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) [ 893.605722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 893.632275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:57 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) [ 893.723082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:57 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') lseek(r0, 0x0, 0x3) [ 893.791099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:58 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fspick(0xffffffffffffffff, 0x0, 0x0) 03:40:58 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/88, 0x58}], 0x1) 03:40:58 executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000280)) 03:40:58 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)) 03:40:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, r1, 0x703, 0x0, 0x0, {{0x2}, {@void, @val={0xc, 0x99, {0x80000}}}}}, 0x20}}, 0x0) 03:40:58 executing program 5: futex(0x0, 0x100, 0x0, 0x0, 0x0, 0x0) 03:40:58 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') lseek(r0, 0x0, 0x3) 03:40:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x3, 0x2}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x48, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x24008000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002420202020200000a00060008031100000900"/40], 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) clock_gettime(0x2, &(0x7f00000006c0)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee01}}, './file0\x00'}) sendmsg$TIPC_CMD_GET_NETID(r3, 0x0, 0x4040) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x40000) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r3) sendmsg$DEVLINK_CMD_SB_GET(r3, &(0x7f0000000740)={&(0x7f00000005c0), 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x64, r4, 0x400, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}]}, 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x20000880) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x64, r4, 0x400, 0x70bd26, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40048881}, 0x4004000) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0xa0, r4, 0x200, 0x70bd26, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x40810) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000780)=ANY=[@ANYBLOB="1000000008021100326b0c4100010802110000000802110000002000010000000100010882ae7d848b960c121824c8a7cce61787bc8074b13b63916cd1716d14c1c01d420c43a55d328b3f8f6305c0d76c43193d7d3a3734cae9d37369346b05369470763eccf41856265959defe14cea4dca4d2b22858eba629afe402"], 0x28) [ 894.285960] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 03:40:58 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x2000006, 0x12, r0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3) 03:40:58 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') read(r0, 0x0, 0x0) [ 894.369777] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 03:40:58 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)) [ 894.389064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:58 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}], 0x2, 0x0) 03:40:58 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x40181, 0x0) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000400)='0', 0x1}], 0x1, 0x0, 0x0, 0x0) 03:40:58 executing program 7: syz_emit_ethernet(0x82, &(0x7f00000000c0)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x3, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @loopback, {[@cipso={0x86, 0x3d, 0x0, [{0x0, 0xc, "ba4906dca0ac3f21ee4d"}, {0x0, 0xa, "0b1bb9011e61db13"}, {0x0, 0xe, "9fb8dedc4ea32f0be3c4157e"}, {0x0, 0x6, "3f70cd62"}, {0x0, 0xd, "20126d234d2862265a340c"}]}]}}}}}}}, 0x0) 03:40:58 executing program 5: syz_mount_image$ext4(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) rmdir(&(0x7f0000000140)='./file0\x00') 03:40:59 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)) 03:40:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) 03:40:59 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)={0x1c, 0x18, 0x1, 0x0, 0x0, "", [@generic="02a50043e29664b1c6"]}, 0x1c}], 0x1}, 0x0) 03:40:59 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = getpid() kcmp(r0, r1, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) 03:40:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="24001000", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:40:59 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$lock(r0, 0x404, 0x0) 03:40:59 executing program 5: syz_mount_image$ext4(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) rmdir(&(0x7f0000000140)='./file0\x00') 03:40:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x6}, @void}}}, 0x1c}}, 0x0) 03:40:59 executing program 7: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind(r0, &(0x7f0000000080)=@nl=@kern={0x10, 0x0, 0x0, 0x2}, 0x80) [ 895.250246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:59 executing program 5: syz_mount_image$ext4(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) rmdir(&(0x7f0000000140)='./file0\x00') [ 895.322829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:59 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x1a) 03:40:59 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x5446) [ 895.391838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:40:59 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x0, 0x80800) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000000c0)="2af1425e8993e0e8", 0x8}]) 03:40:59 executing program 2: r0 = gettid() getpriority(0x1, r0) 03:40:59 executing program 5: syz_mount_image$ext4(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) rmdir(&(0x7f0000000140)='./file0\x00') 03:40:59 executing program 3: sigaltstack(&(0x7f0000fff000/0x1000)=nil, 0x0) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 03:40:59 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x1a) 03:40:59 executing program 7: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="d9543038a1b282d50a0127a3fe787904192e30be12e051656ca28132eba1a51d12f95180d319eef8bb32a4a5275ed0721e7666ca07423b043d77f268a4db33451cf00ae47cb045f9bc4e0385ab12e07ac5", 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETOWNER(r0, 0x400454d1, 0xffffffffffffffff) 03:40:59 executing program 2: keyctl$read(0xa, 0x0, &(0x7f0000000c00)=""/246, 0xf6) 03:40:59 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 895.850154] audit: type=1326 audit(2000000459.712:94): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=261923 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d29c39b19 code=0x0 03:41:00 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000001c0)="91", 0x1, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x3, r1, 0x0, 0x0) 03:41:00 executing program 2: syz_emit_ethernet(0x233, &(0x7f0000000140)={@local, @empty, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x225, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @local}, {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "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"}, {}, {}, {0x8, 0x6558, 0x0, "f369afc92a3457c1491dd32c124eab4e9ec153ff5ddb"}}}}}}, 0x0) 03:41:00 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x1a) 03:41:00 executing program 5: creat(&(0x7f0000000080)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f0000013c00)) 03:41:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="050000000802110000010802110000000802110000001000000002000000"], 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:41:00 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x0, 0x80800) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000000c0)="2af1425e8993e0e8", 0x8}]) 03:41:00 executing program 3: openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:41:00 executing program 7: r0 = memfd_create(&(0x7f0000000240)='\x00\x00\x00\x00\x00\x00\x03r\xc7\xde\xeeB\xb0\x17\xcd4\x00\x00Y\xc7\xa6\xfdt\xf5\nL\x9e\f\xb1\x8eK\xc5\x95\xa5_\x9f\xe8nma\x8d~Y[,\xefg\xd7\xc5]Y\x92yy\xfb\x83\x00 W\xe8\x0f]@\xc0\x01\x01\x00\x00\x00\x00\x00\xe7\xfc\x83n\xd8\x81\x8d\xf1\xeb7\xd9\xff\xe3\xea\x15\xeb\xa7\xf3A;lg)c]\xae3\xb5k\xa0\b\xf7;o\xf52I\f\xc5\x95\x1d.\x92\xe9\x8f\\\x19\xf7\n\xab\"\x1e\xeaI\xb1~OO\xb1\x89B\x00'/161, 0x0) io_setup(0x9, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) [ 896.886495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:41:00 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc0a85322, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) 03:41:00 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@flushpolicy={0x10, 0x1d, 0xe01}, 0x10}}, 0x0) 03:41:00 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x1a) 03:41:00 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x0, 0x80800) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000000c0)="2af1425e8993e0e8", 0x8}]) 03:41:00 executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) signalfd4(0xffffffffffffffff, &(0x7f00000001c0), 0x8, 0x0) pselect6(0x40, &(0x7f0000000240), &(0x7f0000000280)={0x8}, 0x0, &(0x7f0000000300), 0x0) 03:41:01 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000bc0)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @empty}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10d}) 03:41:01 executing program 1: syz_emit_ethernet(0x52, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "7437b8", 0x8, 0x2b, 0x0, @private2, @local, {[@routing={0x88}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 03:41:01 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup3(r0, r1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x16, &(0x7f0000000040)={'filter\x00', 0x2, [{}, {}]}, 0x48) 03:41:01 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x49, &(0x7f0000000080), 0x4) 03:41:01 executing program 3: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000bc0)="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", 0x15f) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x1fe) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000)={0x10001}, 0x0) write$binfmt_script(r1, 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x9) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) 03:41:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0xf8, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEYS={0xc0, 0x51, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4a956174a2172772a255882ef5"}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "4bf15d4205"}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "bea4b39dfe3d668d1b49e0f4fa"}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "739974553f"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0xf8}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000540)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @void, @void, [{0xdd, 0x45, "49fc514f19e50a3fd215872be07f872a0bf74b97824de54e36fec4ef3fb2d56c7fe66ecbe4141c5ee3fd4ec5db68d77b88f29c0a4b1571bf70e1e2f7b6bce37e04c6aee046"}, {0xdd, 0xe5, "090f83ebc4c838f021ac657d12beb600c6008cc7e9e3e16155f58cbc2edb996e6160cfbc74923b9cdbcf458326d2787d6479fb241b607b546d63699427c936bfc5dc576903856c10401a45a8658189883111947c293e5b99797bda007a401cd32c105b08c48aa1e8eeb3f43bde68835d5e21399a5bc511ef95c7209d7b20918e551f787b831d0050728cdf95749d6bcb231e1229fe706d3c240f94d45d9c4b0c6c787d748b866e35ef198e9a5bc6fff31884726b1907f4698123b0bf99b5ce8d038eff3287fb87de187d7a93048f148919f9d18df426c7a5df9561ed413be909ab9f398c16"}]}, 0x14c) 03:41:01 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x14, 0x2e, 0xffffffffffffffff, 0x0, 0x0, "", [@generic='R']}, 0x14}], 0x1}, 0x0) 03:41:01 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x2, &(0x7f0000002a00)) 03:41:01 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x0, 0x80800) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000000c0)="2af1425e8993e0e8", 0x8}]) 03:41:01 executing program 7: syz_emit_ethernet(0x82, &(0x7f00000000c0)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @loopback, {[@cipso={0x86, 0x3d, 0x0, [{0x0, 0xc, "ba4906dca0ac3f21ee4d"}, {0x0, 0xa, "0b1bb9011e61db13"}, {0x0, 0xe, "9fb8dedc4ea32f0be3c4157e"}, {0x0, 0x6, "3f70cd62"}, {0x0, 0xd, "20126d234d2862265a340c"}]}]}}}}}}}, 0x0) [ 897.495372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 897.568032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:41:01 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000001480)=[{&(0x7f00000000c0)="fd43", 0x2}], 0x1}}, {{&(0x7f0000001540)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x43fd}}], 0x2, 0x0) 03:41:01 executing program 5: munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) move_pages(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000000/0x2000)=nil], 0x0, 0x0, 0x0) 03:41:01 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/rpc\x00') getdents(r0, &(0x7f0000000080)=""/4096, 0x1000) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x26c}) 03:41:01 executing program 6: r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$SHM_LOCK(r0, 0xb) 03:41:01 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) get_mempolicy(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2) 03:41:01 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) read(r0, &(0x7f00000001c0)=""/160, 0xa0) 03:41:01 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x6611, 0x0) 03:41:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x54, r4, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 898.095021] netlink: 'syz-executor.4': attribute type 338 has an invalid length. [ 898.118795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 898.182293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 898.243270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:41:02 executing program 7: r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) 03:41:02 executing program 6: keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001540)="a8", 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 03:41:02 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) get_mempolicy(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2) 03:41:02 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/rpc\x00') getdents(r0, &(0x7f0000000080)=""/4096, 0x1000) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x26c}) 03:41:02 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x6611, 0x0) 03:41:02 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) 03:41:02 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) read(r0, &(0x7f00000001c0)=""/160, 0xa0) 03:41:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_USE_RRM={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x329}]]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 898.972273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:41:02 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0xc, 0x0, &(0x7f0000000280)) 03:41:02 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2cb1, &(0x7f00000001c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) io_uring_enter(r0, 0x0, 0x0, 0x6, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x2, &(0x7f0000000080), 0x8) 03:41:02 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) get_mempolicy(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2) [ 899.040239] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:41:02 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/rpc\x00') getdents(r0, &(0x7f0000000080)=""/4096, 0x1000) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x26c}) 03:41:02 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x6611, 0x0) 03:41:03 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x3c, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) 03:41:03 executing program 7: newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r0, 0x0) setfsuid(r0) 03:41:03 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) get_mempolicy(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2) 03:41:03 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x6611, 0x0) 03:41:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2004c080}, 0x10) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100030000000c0004800400fdffffff00000800020002"], 0x30}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r4, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f0000000480)={0x20, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4008001) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@cf_end_cf_ack={{}, {0x8}, @device_a, @device_b}, 0x10) 03:41:03 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) read(r0, &(0x7f00000001c0)=""/160, 0xa0) 03:41:03 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/rpc\x00') getdents(r0, &(0x7f0000000080)=""/4096, 0x1000) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x26c}) 03:41:03 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000007c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "d104e0", 0x44, 0x2f, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback}}}}, 0x0) [ 899.943799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:41:03 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0x0, @fixed, 0xf801}, 0xe) 03:41:03 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) setresuid(0x0, 0xee01, 0x0) ioctl$VT_WAITACTIVE(r0, 0x5607) 03:41:03 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000280)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) [ 900.017419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 900.047705] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 03:41:03 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) fallocate(r0, 0x0, 0x3ffffe00, 0x105) 03:41:03 executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 900.072787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:41:03 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNELS={0x8}, @IEEE802154_ATTR_SCAN_TYPE={0x5}]}, 0x24}}, 0x0) [ 900.100672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:41:04 executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 03:41:04 executing program 0: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) setgroups(0x0, 0x0) 03:41:04 executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 03:41:04 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) fstatfs(r0, &(0x7f0000000180)=""/239) 03:41:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = creat(&(0x7f0000000040)='./cgroup/pids.max\x00', 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8001) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r3, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x81ad554db3133d93}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0xd4, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:41:04 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f0000000080)) 03:41:04 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000005700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) accept(r1, 0x0, 0x0) 03:41:04 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)={0x24, 0x24, 0xa01, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x1}, @nested={0x5, 0x0, 0x0, 0x1, [@generic='K']}]}, 0x24}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000140)={{0x7f}}) fsmount(0xffffffffffffffff, 0x1, 0x80) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000140)={{0x7f}}) accept4$packet(0xffffffffffffffff, &(0x7f00000054c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000005500)=0x14, 0x800) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = getpgid(0x0) r3 = fork() kcmp(r2, r3, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) 03:41:04 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) read(r0, &(0x7f00000001c0)=""/160, 0xa0) [ 901.193377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:41:05 executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 03:41:05 executing program 6: prlimit64(0x0, 0xa540b6410adebd81, 0x0, 0x0) 03:41:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x89b0, &(0x7f0000000cc0)={'wlan1\x00'}) 03:41:05 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) fstatfs(r0, &(0x7f0000000180)=""/239) 03:41:05 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000000dc0), 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x9205, 0x0) 03:41:05 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000005700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) accept(r1, 0x0, 0x0) 03:41:05 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000005700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) accept(r1, 0x0, 0x0) 03:41:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) r3 = creat(&(0x7f0000000040)='./cgroup/pids.max\x00', 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8001) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000005c0)={&(0x7f0000000000), 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r5, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x59f}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x44}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000810}, 0x20000000) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:41:05 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) fstatfs(r0, &(0x7f0000000180)=""/239) 03:41:05 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000140)={0x0, 0x0, 0x873b}) 03:41:05 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000005700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) accept(r1, 0x0, 0x0) 03:41:05 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000005700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) accept(r1, 0x0, 0x0) [ 901.700505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:41:05 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) fstatfs(r0, &(0x7f0000000180)=""/239) [ 901.765701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:41:05 executing program 0: mlockall(0x7) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) close(r0) mlockall(0x3) mlockall(0x0) mlockall(0x3) 03:41:05 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000005700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) accept(r1, 0x0, 0x0) 03:41:05 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ptrace(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) 03:41:05 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="8873d6ab3f00", 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0}) 03:41:05 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x12, 0x0, &(0x7f0000000240)) 03:41:05 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000005700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) accept(r1, 0x0, 0x0) 03:41:05 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() tgkill(r0, r1, 0xb) 03:41:05 executing program 4: sync() r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000000)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @random="276e22ba9253", {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @val={0x2d, 0x1a, {0x1000, 0x0, 0x3, 0x0, {0x1000, 0x5, 0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, 0x1, 0x6, 0x29}}}, 0x44) 03:41:05 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000580)={'sit0\x00', {0x2, 0x0, @multicast1}}) 03:41:05 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="1d", 0x1}], 0x1}, 0x40011) recvmmsg(r2, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:41:06 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)={0x24, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}]]}, 0x24}}, 0x0) 03:41:06 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000580)={'sit0\x00', {0x2, 0x0, @multicast1}}) 03:41:06 executing program 6: timer_create(0x3, 0x0, &(0x7f0000000580)) timer_gettime(0x0, &(0x7f00000005c0)) 03:41:06 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)={0x24, r1, 0xf1b5a43ca6b9a97, 0x0, 0x0, {0x2}, [@NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}]}, 0x24}}, 0x0) 03:41:06 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() tgkill(r0, r1, 0xb) 03:41:06 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() tgkill(r0, r1, 0xb) 03:41:06 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)={0x24, r1, 0xf1b5a43ca6b9a97, 0x0, 0x0, {0x2}, [@NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}]}, 0x24}}, 0x0) 03:41:06 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() tgkill(r0, r1, 0xb) 03:41:06 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="1d", 0x1}], 0x1}, 0x40011) recvmmsg(r2, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:41:06 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = io_uring_setup(0x5053, &(0x7f0000000140)) close(r1) read(r0, 0x0, 0x0) 03:41:06 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() tgkill(r0, r1, 0xb) 03:41:06 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000580)={'sit0\x00', {0x2, 0x0, @multicast1}}) 03:41:06 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() tgkill(r0, r1, 0xb) 03:41:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={r4, 0x3, 0x2}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000040)={r7, 0x3, 0x2}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000e40)={0x0, @loopback, @multicast1}, &(0x7f0000000e80)=0xc) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000ec0)={0xc0, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40000}, 0x10000040) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000540)=@data_frame={@no_qos=@type00={{0x0, 0x2, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @broadcast, @device_a, @initial, {0x5, 0x3a}}, @random="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"}, 0x800) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 902.582183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:41:06 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000580)={'sit0\x00', {0x2, 0x0, @multicast1}}) 03:41:06 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() tgkill(r0, r1, 0xb) 03:41:06 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() tgkill(r0, r1, 0xb) 03:41:06 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)={0x24, r1, 0xf1b5a43ca6b9a97, 0x0, 0x0, {0x2}, [@NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}]}, 0x24}}, 0x0) 03:41:06 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() tgkill(r0, r1, 0xb) 03:41:06 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000100)='./file0\x00', 0x2000000) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f0000000240)='./file0\x00', 0xd4000a8b) inotify_rm_watch(r0, r2) 03:41:06 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)={0x24, r1, 0xf1b5a43ca6b9a97, 0x0, 0x0, {0x2}, [@NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}]}, 0x24}}, 0x0) 03:41:06 executing program 1: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x7}) 03:41:06 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() tgkill(r0, r1, 0xb) 03:41:06 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x140241, 0x0) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000400)='\n', 0x1}], 0x1, 0x0, 0x0, 0x0) 03:41:06 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="1d", 0x1}], 0x1}, 0x40011) recvmmsg(r2, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:41:07 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000100)='./file0\x00', 0x2000000) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f0000000240)='./file0\x00', 0xd4000a8b) inotify_rm_watch(r0, r2) 03:41:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r2 = dup2(r1, r0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000080)=0x21) write$binfmt_aout(r2, &(0x7f0000000300)={{}, "", ['\x00']}, 0x120) 03:41:07 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000100)='./file0\x00', 0x2000000) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f0000000240)='./file0\x00', 0xd4000a8b) inotify_rm_watch(r0, r2) 03:41:07 executing program 7: r0 = getpid() r1 = pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xfffffffa}, 0x0) 03:41:07 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000100)='./file0\x00', 0x2000000) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f0000000240)='./file0\x00', 0xd4000a8b) inotify_rm_watch(r0, r2) 03:41:07 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="1d", 0x1}], 0x1}, 0x40011) recvmmsg(r2, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:41:07 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x25, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@dev, @local}}}}) 03:41:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="df7e5d3d0000150002002e000000081b3dbc6fbdf857a1f5cb4de05ac17bfc128fa2098ae16e78b9e08b15c308", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000"], 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000a00)=ANY=[@ANYBLOB="5000000008020400000008021100000008021100000000000000000000000000640001000006020202020202010882848b960c1218247ad904b062f27653fb685fc7ca037bbe1e2df09ae6d144c5e8b549603a27c90bcbc53bb4e286dd2be10580ca9df02c483574cf9abe1972b2103036d9d61ac669ec21c28302465db9e1dd55fa3fc56525d5b190c1f8e5b0d5a879fd0155546e581af4a71507732671cbc2e6d05d3a76a2979b9dd94bb3b81d1dc92cbcc3fd440cac5c7130882e2726b2d4584fda6445ff061a19506655982e53951debdf5e003a54c74bd974ce4105e2e68402cb2979577c7a7e753458fe07673c214ad1ecf3e5eef4dd5d8b6e482e"], 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f0000000280)=@device_b, &(0x7f0000000540)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0xff}, @random="783dcb541c3f", @device_a, @device_b, {0x9, 0x7}}, @random="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"}, 0x4ae) socket$nl_generic(0x10, 0x3, 0x10) clock_getres(0x7, &(0x7f0000000240)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @initial, {0x0, 0x2}}, 0x8100, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 903.599017] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 903.622172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 903.702424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 903.766960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 903.775686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:41:08 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000100)='./file0\x00', 0x2000000) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f0000000240)='./file0\x00', 0xd4000a8b) inotify_rm_watch(r0, r2) 03:41:08 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000100)='./file0\x00', 0x2000000) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f0000000240)='./file0\x00', 0xd4000a8b) inotify_rm_watch(r0, r2) 03:41:08 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000100)='./file0\x00', 0x2000000) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f0000000240)='./file0\x00', 0xd4000a8b) inotify_rm_watch(r0, r2) 03:41:08 executing program 7: openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x400, 0x0) 03:41:08 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000980)={0x38, 0x0, 0x3}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000980)={0x38}, 0x0) 03:41:08 executing program 3: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x6) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, {0x11, 0x9, 0x0, @dev}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) 03:41:08 executing program 2: set_mempolicy(0x1, 0x0, 0x0) clone3(&(0x7f0000005880)={0x1100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:41:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x17, &(0x7f0000000000)={0x0, 0x1}, 0x4) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) r4 = semget$private(0x0, 0x2, 0x170) semtimedop(r4, &(0x7f0000000040)=[{0x3, 0xc000, 0x1000}, {0x3, 0x5ca, 0x800}, {0x7}, {0x0, 0x3, 0x800}, {0x3, 0xe9cd, 0x1000}, {0x3, 0x8000, 0x1800}, {0x0, 0x5129, 0x1800}, {0x5, 0x5, 0x800}], 0x8, &(0x7f0000000540)={0x0, 0x3938700}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x8001) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r7, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x28, r7, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7fff, 0x7c}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x2204c000}, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) 03:41:08 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={@remote, @ipv4={'\x00', '\xff\xff', @multicast2}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000005}) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000140), 0xc, &(0x7f00000005c0)={0x0, 0xe4}, 0x1, 0x0, 0x0, 0x1}, 0x0) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="c4", 0x7ffffff9}], 0x1, 0x0, 0x0, 0x0) 03:41:08 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000100)='./file0\x00', 0x2000000) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f0000000240)='./file0\x00', 0xd4000a8b) inotify_rm_watch(r0, r2) 03:41:08 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) io_setup(0x4, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000001a80)=[&(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000000200)="8a918fa171f2207bbe774e1841237201d86669d99203f6baf170857d7d95dfd6a8db2db27d89f939347ce541ddcd8396c04cf394ef48190ae1d08f81274b5e6d5e3abe3ce71cd86fc013374b66fa5e00c40c211c64b9fcf1f4ca5410ec2dd7bff608d2b242646f5de0183d764eee8a7ce9c3e51b6503913d025377f64b2b3ae7", 0x80}]) 03:41:08 executing program 7: syz_emit_ethernet(0xfc0, &(0x7f0000000180)={@broadcast, @random="5e52989c7e32", @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0xfb2, 0x0, 0x6000, 0x0, 0x0, 0x0, @dev, @local, {[@generic={0x0, 0x2}]}}, "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"}}}}, 0x0) [ 904.386779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:41:08 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000100)='./file0\x00', 0x2000000) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f0000000240)='./file0\x00', 0xd4000a8b) inotify_rm_watch(r0, r2) 03:41:08 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000100)='./file0\x00', 0x2000000) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f0000000240)='./file0\x00', 0xd4000a8b) inotify_rm_watch(r0, r2) 03:41:08 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000980)={0x38, 0x0, 0x3}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000980)={0x38}, 0x0) [ 904.465115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 904.544351] netlink: 'syz-executor.4': attribute type 338 has an invalid length. 03:41:08 executing program 7: perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81202c51}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:41:08 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000980)={0x38, 0x0, 0x3}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000980)={0x38}, 0x0) 03:41:09 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) read(r0, &(0x7f00000015c0)=""/71, 0x47) 03:41:09 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000004c0)=""/226) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0xe0ffff, &(0x7f0000000740)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000007e"], 0x1c}}, 0x0) 03:41:09 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x3c}, 0x0, @in=@dev}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:41:09 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_mr_vif\x00') pread64(r0, &(0x7f0000000240)=""/217, 0xd9, 0x1) 03:41:09 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000980)={0x38, 0x0, 0x3}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000980)={0x38}, 0x0) 03:41:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) r3 = creat(&(0x7f0000000040)='./cgroup/pids.max\x00', 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8001) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000040)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4044800) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:41:09 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={@remote, @ipv4={'\x00', '\xff\xff', @multicast2}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000005}) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000140), 0xc, &(0x7f00000005c0)={0x0, 0xe4}, 0x1, 0x0, 0x0, 0x1}, 0x0) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="c4", 0x7ffffff9}], 0x1, 0x0, 0x0, 0x0) 03:41:09 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={@remote, @ipv4={'\x00', '\xff\xff', @multicast2}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000005}) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000140), 0xc, &(0x7f00000005c0)={0x0, 0xe4}, 0x1, 0x0, 0x0, 0x1}, 0x0) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="c4", 0x7ffffff9}], 0x1, 0x0, 0x0, 0x0) 03:41:09 executing program 7: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd, &(0x7f0000000180)) [ 905.353976] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 905.355220] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 905.356085] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 905.356968] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 00 00 00 00 02 00 [ 905.357832] blk_print_req_error: 70 callbacks suppressed [ 905.357844] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 8 prio class 2 [ 905.359564] buffer_io_error: 110 callbacks suppressed [ 905.359575] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 905.361054] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 905.361958] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 905.362866] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 905.363761] Buffer I/O error on dev sr0, logical block 4, lost async page write [ 905.364656] Buffer I/O error on dev sr0, logical block 5, lost async page write [ 905.365548] Buffer I/O error on dev sr0, logical block 6, lost async page write [ 905.366422] Buffer I/O error on dev sr0, logical block 7, lost async page write [ 905.384184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:41:09 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000)=0x5, 0x4) [ 905.440311] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 905.445460] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 03:41:09 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 03:41:09 executing program 7: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r0, 0x0, 0x0) r2 = dup3(r1, r0, 0x0) sendmsg$unix(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 03:41:09 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r3 = dup2(r0, r2) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000080)=0x80000001, 0x4) listen(r1, 0x0) 03:41:09 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x5385, &(0x7f00000010c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x9, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:41:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000540)=ANY=[@ANYBLOB="500000000802510000010802110000002702110000000000000064000100000602d594916df0cacc95028326f502020202010882628b960c120c91055a01501a37a89eb634a95a610d947c510e040fc604889b5c2f9975db9b02c9694e6091b45010912f00c76cc05f90a80042945ceae0f888d0105b60b10bf31a"], 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:41:09 executing program 5: fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x2) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 03:41:09 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x8, 0x0, &(0x7f00000011c0)=0x7) [ 905.838363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 905.904540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 905.958785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:41:10 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) finit_module(r0, 0x0, 0x0) 03:41:10 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000002380)=[{&(0x7f0000000100)="889f", 0x2}], 0x1}, 0x48d0) 03:41:10 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) setresuid(0x0, 0xee01, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000140), &(0x7f0000000180)=@v3, 0x18, 0x0) 03:41:10 executing program 2: unshare(0x40000) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:41:10 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={@remote, @ipv4={'\x00', '\xff\xff', @multicast2}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000005}) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000140), 0xc, &(0x7f00000005c0)={0x0, 0xe4}, 0x1, 0x0, 0x0, 0x1}, 0x0) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="c4", 0x7ffffff9}], 0x1, 0x0, 0x0, 0x0) 03:41:10 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x3c}, 0xa, @in=@dev, 0x0, 0x1}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x0, 0x0, @loopback}, 0x1c) 03:41:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x140) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, 0x1, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x50}, 0x80) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:41:10 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={@remote, @ipv4={'\x00', '\xff\xff', @multicast2}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000005}) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000140), 0xc, &(0x7f00000005c0)={0x0, 0xe4}, 0x1, 0x0, 0x0, 0x1}, 0x0) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="c4", 0x7ffffff9}], 0x1, 0x0, 0x0, 0x0) [ 906.359112] Invalid ELF header magic: != ELF 03:41:10 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000001840)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000003640)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) [ 906.442333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:41:10 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000002380)=[{&(0x7f0000000100)="889f", 0x2}], 0x1}, 0x48d0) 03:41:10 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f0000000180)={0x0, 0x1, 0x6, @multicast}, 0x10) [ 906.502386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:41:10 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000001840)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000003640)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) [ 906.561971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:41:10 executing program 1: r0 = socket$inet(0x2, 0x3, 0x26) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000080)=0x7ffd, 0x4) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000400)=0x2, 0x4) pwrite64(r0, &(0x7f00000001c0)="73d39b70733a7371a9f4c75560f525570849afed3135b5b19f3d11289a52c453a665439c3c0e7022a51c40c13913ac01ef4fa599c1357a72b414961da77c61fa782b5f2d75476984de9684db9fe6a064586d77233a47fe1bdca2b68f943fd3ba0f21ebabf07ea3316d70fa55a0e98dbc1726930d97a1ff21083369b96d43286a11d940515117856484ecc13698f99ea831165f4ea782a79a891ca96f091fc61c37d53ec9baacdb40d3fff0130a208c24b93ba9bd29dba579df656bafafcc2aa732dc3d321889e3d69a55265ba1931541337b4da708e6a9d8a34039ce0ef339779251a8fe1e14da9c6294d9c2c95623cbf328e9f26f4c2e5d7e", 0xf9, 0x6) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80}}, './file0\x00'}) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}}) sendto$inet(r2, &(0x7f00000002c0)="5550363002bb95a84025e48385fae22c37b103c638dbf8adeba6d4b0762eb62ae933fd0212f1bc276b307f1d9290e28566d947f3c5c9d212ab3ff1a5e7eabe6a65eb673adfb3f81ea9ac8668334c512e766a8b73deed99b9d147ab2295b10d12d17ffe8c1edf22cdf68db836bb89b35087e013501ac8493888aa1111d147b046630a7bf88541bb118a0cb3f4d8e563e440c0e0514bd5b4271d0f80b2fe266eb6ea32068fca46da94c256d4bdd978db1abdcc70dbc134af800275814d39392b843cb941c83da304700a450e2e552f61b2184db2dc172eff035ffbc835a33963749e6c20f91e3b0224", 0xe8, 0x40, &(0x7f0000000040)={0x2, 0x4e24, @broadcast}, 0x10) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xfff, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 907.004356] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 907.004871] I/O error, dev sr0, sector 32767 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 907.006154] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 907.006626] I/O error, dev sr0, sector 32767 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 907.008159] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 907.009497] I/O error, dev sr0, sector 32767 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 907.012053] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 907.013114] I/O error, dev sr0, sector 32767 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 03:41:10 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81202ff0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='!dev/rtc0\x00') 03:41:10 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000001840)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000003640)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 03:41:10 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={@remote, @ipv4={'\x00', '\xff\xff', @multicast2}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000005}) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000140), 0xc, &(0x7f00000005c0)={0x0, 0xe4}, 0x1, 0x0, 0x0, 0x1}, 0x0) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="c4", 0x7ffffff9}], 0x1, 0x0, 0x0, 0x0) 03:41:10 executing program 2: unshare(0x40000) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:41:10 executing program 1: r0 = socket$inet(0x2, 0x3, 0x26) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000080)=0x7ffd, 0x4) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000400)=0x2, 0x4) pwrite64(r0, &(0x7f00000001c0)="73d39b70733a7371a9f4c75560f525570849afed3135b5b19f3d11289a52c453a665439c3c0e7022a51c40c13913ac01ef4fa599c1357a72b414961da77c61fa782b5f2d75476984de9684db9fe6a064586d77233a47fe1bdca2b68f943fd3ba0f21ebabf07ea3316d70fa55a0e98dbc1726930d97a1ff21083369b96d43286a11d940515117856484ecc13698f99ea831165f4ea782a79a891ca96f091fc61c37d53ec9baacdb40d3fff0130a208c24b93ba9bd29dba579df656bafafcc2aa732dc3d321889e3d69a55265ba1931541337b4da708e6a9d8a34039ce0ef339779251a8fe1e14da9c6294d9c2c95623cbf328e9f26f4c2e5d7e", 0xf9, 0x6) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80}}, './file0\x00'}) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}}) sendto$inet(r2, &(0x7f00000002c0)="5550363002bb95a84025e48385fae22c37b103c638dbf8adeba6d4b0762eb62ae933fd0212f1bc276b307f1d9290e28566d947f3c5c9d212ab3ff1a5e7eabe6a65eb673adfb3f81ea9ac8668334c512e766a8b73deed99b9d147ab2295b10d12d17ffe8c1edf22cdf68db836bb89b35087e013501ac8493888aa1111d147b046630a7bf88541bb118a0cb3f4d8e563e440c0e0514bd5b4271d0f80b2fe266eb6ea32068fca46da94c256d4bdd978db1abdcc70dbc134af800275814d39392b843cb941c83da304700a450e2e552f61b2184db2dc172eff035ffbc835a33963749e6c20f91e3b0224", 0xe8, 0x40, &(0x7f0000000040)={0x2, 0x4e24, @broadcast}, 0x10) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xfff, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:41:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x50, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x90) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:41:10 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={@remote, @ipv4={'\x00', '\xff\xff', @multicast2}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000005}) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000140), 0xc, &(0x7f00000005c0)={0x0, 0xe4}, 0x1, 0x0, 0x0, 0x1}, 0x0) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="c4", 0x7ffffff9}], 0x1, 0x0, 0x0, 0x0) 03:41:10 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000002380)=[{&(0x7f0000000100)="889f", 0x2}], 0x1}, 0x48d0) 03:41:11 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81202ff0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='!dev/rtc0\x00') [ 907.189118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:41:11 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000001840)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000003640)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 03:41:11 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000002380)=[{&(0x7f0000000100)="889f", 0x2}], 0x1}, 0x48d0) 03:41:11 executing program 1: r0 = socket$inet(0x2, 0x3, 0x26) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000080)=0x7ffd, 0x4) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000400)=0x2, 0x4) pwrite64(r0, &(0x7f00000001c0)="73d39b70733a7371a9f4c75560f525570849afed3135b5b19f3d11289a52c453a665439c3c0e7022a51c40c13913ac01ef4fa599c1357a72b414961da77c61fa782b5f2d75476984de9684db9fe6a064586d77233a47fe1bdca2b68f943fd3ba0f21ebabf07ea3316d70fa55a0e98dbc1726930d97a1ff21083369b96d43286a11d940515117856484ecc13698f99ea831165f4ea782a79a891ca96f091fc61c37d53ec9baacdb40d3fff0130a208c24b93ba9bd29dba579df656bafafcc2aa732dc3d321889e3d69a55265ba1931541337b4da708e6a9d8a34039ce0ef339779251a8fe1e14da9c6294d9c2c95623cbf328e9f26f4c2e5d7e", 0xf9, 0x6) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80}}, './file0\x00'}) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}}) sendto$inet(r2, &(0x7f00000002c0)="5550363002bb95a84025e48385fae22c37b103c638dbf8adeba6d4b0762eb62ae933fd0212f1bc276b307f1d9290e28566d947f3c5c9d212ab3ff1a5e7eabe6a65eb673adfb3f81ea9ac8668334c512e766a8b73deed99b9d147ab2295b10d12d17ffe8c1edf22cdf68db836bb89b35087e013501ac8493888aa1111d147b046630a7bf88541bb118a0cb3f4d8e563e440c0e0514bd5b4271d0f80b2fe266eb6ea32068fca46da94c256d4bdd978db1abdcc70dbc134af800275814d39392b843cb941c83da304700a450e2e552f61b2184db2dc172eff035ffbc835a33963749e6c20f91e3b0224", 0xe8, 0x40, &(0x7f0000000040)={0x2, 0x4e24, @broadcast}, 0x10) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xfff, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:41:11 executing program 2: unshare(0x40000) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 907.258256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 907.323323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:41:11 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81202ff0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='!dev/rtc0\x00') 03:41:11 executing program 1: r0 = socket$inet(0x2, 0x3, 0x26) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000080)=0x7ffd, 0x4) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000400)=0x2, 0x4) pwrite64(r0, &(0x7f00000001c0)="73d39b70733a7371a9f4c75560f525570849afed3135b5b19f3d11289a52c453a665439c3c0e7022a51c40c13913ac01ef4fa599c1357a72b414961da77c61fa782b5f2d75476984de9684db9fe6a064586d77233a47fe1bdca2b68f943fd3ba0f21ebabf07ea3316d70fa55a0e98dbc1726930d97a1ff21083369b96d43286a11d940515117856484ecc13698f99ea831165f4ea782a79a891ca96f091fc61c37d53ec9baacdb40d3fff0130a208c24b93ba9bd29dba579df656bafafcc2aa732dc3d321889e3d69a55265ba1931541337b4da708e6a9d8a34039ce0ef339779251a8fe1e14da9c6294d9c2c95623cbf328e9f26f4c2e5d7e", 0xf9, 0x6) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80}}, './file0\x00'}) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}}) sendto$inet(r2, &(0x7f00000002c0)="5550363002bb95a84025e48385fae22c37b103c638dbf8adeba6d4b0762eb62ae933fd0212f1bc276b307f1d9290e28566d947f3c5c9d212ab3ff1a5e7eabe6a65eb673adfb3f81ea9ac8668334c512e766a8b73deed99b9d147ab2295b10d12d17ffe8c1edf22cdf68db836bb89b35087e013501ac8493888aa1111d147b046630a7bf88541bb118a0cb3f4d8e563e440c0e0514bd5b4271d0f80b2fe266eb6ea32068fca46da94c256d4bdd978db1abdcc70dbc134af800275814d39392b843cb941c83da304700a450e2e552f61b2184db2dc172eff035ffbc835a33963749e6c20f91e3b0224", 0xe8, 0x40, &(0x7f0000000040)={0x2, 0x4e24, @broadcast}, 0x10) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xfff, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:41:11 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81202ff0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='!dev/rtc0\x00') [ 907.463189] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 907.463713] I/O error, dev sr0, sector 32767 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 907.479471] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 907.479930] I/O error, dev sr0, sector 32767 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 907.560469] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 907.560952] I/O error, dev sr0, sector 32767 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 907.566410] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 907.568028] I/O error, dev sr0, sector 32767 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 03:41:11 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81202ff0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='!dev/rtc0\x00') 03:41:11 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000002c00)='net/snmp\x00') pread64(r0, &(0x7f0000000080)=""/203, 0xcb, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)={0x1c, 0x1a, 0x1, 0x0, 0x0, "", [@generic="02a50043e29664b1c6"]}, 0x1c}], 0x1}, 0x0) 03:41:11 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x0, @private}, 0x10, 0x0}}], 0x2, 0x0) 03:41:11 executing program 2: unshare(0x40000) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:41:11 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81202ff0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='!dev/rtc0\x00') 03:41:11 executing program 6: get_robust_list(0xffffffffffffffff, 0x0, 0x0) 03:41:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000740)={0x30, r2, 0xcea008a6e34dc1cb, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}]}, 0x30}}, 0x0) 03:41:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x487f2646e71a36ea}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) r3 = creat(&(0x7f0000000040)='./cgroup/pids.max\x00', 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8001) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x4c, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x3}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xb7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x7ff}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000084}, 0x800) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, 0x1, 0x1, 0x101, 0x0, 0x0, {0x1}, [@CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4}}, @CTA_SYNPROXY={0x4}, @CTA_MARK={0x8}]}, 0x28}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r5, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x74, 0x2, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xaa15}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x20}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3f}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20008840}, 0x80) clock_getres(0x0, &(0x7f0000000740)) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000600), 0x20002, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r6, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r1, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x1) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 907.847094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:41:11 executing program 5: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "7437b8", 0x28, 0x6, 0x0, @private2, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4}, @window={0x3, 0x3}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 03:41:11 executing program 6: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), r0) 03:41:11 executing program 2: r0 = io_uring_setup(0x7ddf, &(0x7f0000000680)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x1e, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff]}, 0x1) 03:41:11 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81202ff0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='!dev/rtc0\x00') 03:41:11 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}}], 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:41:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) [ 907.955856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:41:11 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/4\x00') [ 908.002386] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:41:11 executing program 5: prctl$PR_SET_TSC(0x34, 0x1) 03:41:11 executing program 6: r0 = fsopen(&(0x7f0000000000)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000080)='mand\x00', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) 03:41:11 executing program 2: sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x0, 0x200, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x12, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000100), 0x4723, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r2, 0x0, 0x1) dup2(r2, r0) getdents(r0, &(0x7f0000000200)=""/92, 0x5c) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'wlan0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'/17]}) socket$inet_icmp_raw(0x2, 0x3, 0x1) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) 03:41:12 executing program 3: symlink(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file1\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) chown(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) 03:41:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 03:41:12 executing program 7: socketpair(0x2, 0x3, 0x3, &(0x7f0000000000)) 03:41:12 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000b80), &(0x7f0000000bc0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)={[{@mpol={'mpol', 0x3d, {'local', '=static', @void}}}]}) 03:41:12 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000240)="06d5", 0x2}], 0x1, &(0x7f0000000a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}], 0x20}}, {{&(0x7f0000000040), 0x10, 0x0, 0x0, &(0x7f0000000c40)=[@ip_retopts={{0x14, 0x0, 0x34, {[@timestamp_prespec={0x44, 0x4}]}}}], 0x18}}], 0x2, 0x0) 03:41:12 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='^@:,\x00') 03:41:12 executing program 2: sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x0, 0x200, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x12, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000100), 0x4723, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r2, 0x0, 0x1) dup2(r2, r0) getdents(r0, &(0x7f0000000200)=""/92, 0x5c) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'wlan0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'/17]}) socket$inet_icmp_raw(0x2, 0x3, 0x1) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) 03:41:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000002600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000025c0)={&(0x7f0000000540)={0x2050, r1, 0x300, 0x5, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x290, 0x11d, 0x0, 0x1, [{0x26c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7c}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x23c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x7, 0x4, 0x7, 0x2, 0x1, 0x8000, 0x7]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x2, 0xc, 0x1b, 0x16, 0x9, 0x36, 0x2, 0x24, 0x6c, 0x2, 0x3]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x24, 0x44, 0x6c]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x0, 0x2}, {0x4, 0x6}, {0x4, 0x4}, {0x6, 0x1}, {0x6, 0x9}, {0x0, 0x5}, {0x3, 0x2}, {0x3, 0x8}, {0x5, 0x7}, {0x7, 0xa}, {0x3, 0x2}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x0, 0x5}, {0x3, 0x3}, {0x4, 0xa}, {0x4, 0x6}, {0x1, 0x4}, {0x0, 0x4}, {0x1}, {0x0, 0x4}, {0x0, 0x7}, {0x5, 0x8}, {0x7, 0x8}]}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xffff, 0xff, 0x1, 0x6, 0x0, 0x8, 0x7]}}]}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x4, 0x66de, 0x0, 0x8be3, 0x8, 0x8001]}}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x4, 0x3}, {0x1, 0x5}, {0x5, 0x4}, {0x1, 0x7}, {0x4, 0x6}, {0x5, 0x8}, {0x1, 0x1}, {0x2, 0x3}, {0x2, 0x6}, {0x2, 0x1}, {0x0, 0xa}, {0x2, 0x1}, {0x1, 0x4}, {0x7, 0x5}, {}, {0x1, 0x7}, {0x6, 0x6}, {0x5, 0x7}, {0x0, 0xa}, {0x7, 0x7}, {0x3}, {0x1, 0x5}, {0x2}, {0x4, 0x9}, {0x1, 0x5}, {0x1, 0x2}, {0x7, 0x8}, {0x2, 0x5}, {0x2}, {0x7, 0x8}, {0x5, 0x4}, {0x0, 0xa}, {0x0, 0x7}, {0x1, 0x3}, {0x2, 0x5}, {0x5, 0x2}, {0x2, 0x6}, {0x5, 0x1}, {}, {0x1, 0x5}, {0x3}, {0x0, 0xa}, {0x3, 0x9}, {0x0, 0x5}, {0x6, 0x2}, {0x6, 0x1}, {0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4}, {0x0, 0x9}, {0x0, 0x1}, {0x2, 0x7}]}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xfe01, 0x1de, 0x100, 0xdef, 0xbc, 0x3, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x33, 0x1, 0x8d2, 0x7, 0x8, 0xff97, 0x200, 0x3]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x2, 0x4, 0x1, 0x1b]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x12, 0xb, 0xb, 0x18, 0x4, 0x1b, 0x12, 0x16, 0x12, 0xb, 0xfd935834f9679dc0, 0x60]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x1, 0x2}, {0x4, 0x8}, {0x5, 0x8}, {0x6, 0x4}, {0x5, 0x4}, {0x0, 0x9}, {0x3, 0xe}, {0x1, 0x5}, {0x4, 0x8}, {0x0, 0x8}, {0x7, 0x4}, {0x4}, {0x4, 0x1}, {0x2, 0x8}, {0x0, 0x1}, {0x1, 0x5}, {0x2, 0x1}, {0x3, 0x4}, {0x2, 0x8}, {0x4, 0x5}, {0x0, 0x1}, {0x4, 0xa}, {0x7, 0x5}, {0x6, 0x1}, {0x4, 0x2}]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x9, 0x6, 0x1, 0x48, 0x5, 0xc, 0x18, 0x1, 0x2, 0x1, 0x6, 0x1, 0x0, 0x18, 0x1b]}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x34, 0x2, [{0x5, 0x4}, {0x0, 0x7}, {0x0, 0x1}, {0x1, 0x1}, {0x7, 0x8}, {0x0, 0x2}, {0x5, 0x3}, {0x4}, {0x6}, {0x3, 0x6}, {0x6, 0x2}, {0x7, 0x2}, {0x6, 0x6}, {0x5, 0x7}, {0x4, 0x8}, {0x0, 0x1}, {0x2, 0x9}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x8}, {0x6}, {0x0, 0xa}, {0x1}, {0x5, 0x2}, {0x5, 0x4}, {0x4, 0x8}, {0x4, 0x7}, {0x0, 0x7}, {0x6, 0x2}, {0x5, 0x5}, {0x1, 0x5}, {0x6, 0x5}, {0x3, 0xa}, {0x1, 0xa}, {0x0, 0x2}, {0x6, 0x3}, {0x0, 0x7}, {0x0, 0xa}, {0x5, 0x4}, {0x6, 0x5}, {0x5, 0x6}, {0x0, 0x8}, {0x2, 0x6}, {0x5, 0x8}, {0x0, 0xa}, {0x0, 0x9}, {0x5, 0x4}, {0x7, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x3, 0x1, 0xff, 0x8, 0x2, 0x9, 0xfffe]}}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0x1a, 0x81, 0x8, 0x0, 0x2, 0x7f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x460a, 0x100, 0x800, 0x2, 0x5, 0x1f, 0x7ff]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x1b, 0x12, 0x1b, 0x30, 0x6, 0x6, 0x6c, 0x3, 0x24, 0x18, 0xb, 0x9, 0x6, 0x3, 0x16, 0x1b, 0xc, 0x24, 0xe, 0x9, 0x6c, 0x6b, 0x60, 0xb, 0x12, 0x2, 0x18, 0x18, 0x0]}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x4, 0x5, 0x0, 0x5, 0xf421, 0x6, 0xff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xf45, 0x6b8, 0x4, 0x40, 0x3, 0x9, 0x1f]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x12, 0x1b, 0x9, 0x1, 0x3, 0x24, 0x30]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x74}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x744, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x82}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x308, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2ec, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xd8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9b6, 0xffc0, 0x1000, 0xef, 0x32e2, 0x7, 0x5, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0xb, 0x6, 0x60, 0x6c, 0x4, 0x48, 0xc, 0x4, 0x0, 0x16, 0x9, 0x1, 0x18, 0xb, 0x1, 0x60, 0x30, 0xb, 0x36, 0x5, 0x2, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x5, 0x3}, {0x5, 0x2}, {0x1, 0x1}, {0x4, 0x7}, {0x2, 0x8}, {0x0, 0x9}, {0x1, 0x9}, {0x5, 0xa}, {0x4, 0x4}, {0x0, 0x8}, {0x3, 0x7}, {0x6, 0x6}, {0x2, 0xa}, {0x3, 0x3}, {0x6, 0x9}, {0x2, 0x4}, {0x0, 0x6}, {0x4, 0x3}, {0x1, 0x7}, {0x5, 0x6}, {0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0x7}, {0x2, 0x7}, {0x1, 0x2}, {0x7, 0x1}, {0x4, 0x8}, {0x1, 0x2}, {0x1, 0x7}, {0x4, 0x4}, {0x1, 0x4}, {0x6, 0x5}, {0x1, 0x8}, {0x5, 0x9}, {0x1, 0xa}, {0x1, 0x2}, {0x6, 0xa}, {0x4, 0x7}, {0x1, 0xa}, {0x7, 0x9}, {0x0, 0xa}, {0x5, 0x4}, {0x1, 0x8}, {0x2}, {0x2, 0x8}, {0x5, 0x2}]}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x5, 0x5}, {0x7, 0x3}, {0x3}, {0x2}, {0x7, 0xa}, {0x6, 0xa}, {0x5, 0x8}, {0x2}, {0x0, 0xa}, {0x5, 0x3}, {0x6, 0x3}, {0x5, 0x3}, {0x5, 0xa}, {0x1, 0x2}, {0x2, 0x9}, {0x6, 0x8}, {0x4, 0x9}, {0x3, 0xa}, {0x0, 0x3}, {0x6, 0x8}, {0x3, 0x4}, {0x1}, {0x5, 0x9}, {0x3, 0x6}, {0x1, 0x8}, {0x2, 0x3}, {0x2, 0x2}, {0x0, 0x5}, {0x3, 0x7}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x2, 0x6}, {0x7, 0x6}, {0x2, 0x3}, {0x3, 0xa}]}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x6}, {0x3, 0x1}, {0x7, 0x5}, {0x3, 0x6}, {0x4, 0x5}, {0x1, 0x8}, {0x7, 0x2}, {0x2, 0x9}, {0x4, 0x3}, {0x3, 0x1}, {0x2, 0x7}, {0x5, 0x7}, {0x5, 0x6}, {0x7, 0x7}, {0x7, 0x9}, {0x2, 0x4}, {0x6, 0x5}, {0x0, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x6, 0xa}, {0x4, 0x8}, {0x4, 0x1}, {0x2, 0x4}, {0x2, 0x7}, {0x0, 0x2}, {0x5, 0x8}, {0x0, 0x7}, {0x6, 0x5}, {0x0, 0xa}, {0x1, 0x8}, {0x3, 0x1}, {0x5, 0x9}, {0x6, 0x1}, {0x0, 0x2}, {0x3, 0x8}, {0x7}, {0x1, 0x7}, {0x5, 0x5}, {0x1, 0x4}, {0x0, 0x7}]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7, 0x6, 0xff, 0xff31, 0x7, 0x6, 0x3]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1, 0x3, 0xb, 0x30, 0x2]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x3, 0x2, 0x60, 0x18, 0x4, 0x74, 0x2, 0x1b, 0x12, 0x24, 0x24, 0x2, 0x2, 0x6c]}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x2, 0x9}, {0x1, 0x7}, {0x7, 0x7}, {0x1, 0x9}, {0x4, 0x7}, {0x6, 0x7}, {0x0, 0x2}, {0x6, 0xa}, {0x3, 0x6}, {0x4, 0x3}, {}, {0x0, 0x7}, {0x2, 0x7}, {0x0, 0x1}, {0x3, 0x7}, {0x6, 0x8}, {0x0, 0xa}, {0x0, 0x8}, {0x5, 0x19}, {0x3, 0x8}, {0x6, 0x3}, {0x1, 0x5}, {0x6, 0x6}, {0x2, 0x8}, {0x5, 0x3}, {0x0, 0xa}, {0x2, 0xa}, {0x3, 0x9}, {0x1, 0x6}, {0x6, 0x8}, {0x2, 0xa}, {0x2}, {0x6, 0x4}, {0x1, 0x4}, {0x0, 0x8}, {0x0, 0x4}, {0x6, 0x6}, {0x6, 0x4}, {0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x39, 0x3f, 0x2d, 0x4, 0x8, 0x3f, 0x1, 0x8]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x3, 0x16, 0x18, 0x9, 0x6c, 0x3, 0xc]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x8, 0x759b, 0x84, 0x2529, 0x8, 0x7fff]}}]}, @NL80211_BAND_2GHZ={0xac, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x48, 0x3, 0x9, 0x2, 0x36, 0x16, 0x3, 0x5, 0x5, 0x6, 0xb, 0xb, 0x48, 0x36, 0x60, 0x2, 0x6c, 0x24, 0x0, 0x36]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xb, 0x24, 0x36, 0xc, 0x48, 0x60, 0x24, 0x30, 0x2, 0x18, 0x19, 0x1, 0x60, 0x30, 0x24, 0x2, 0x6c, 0x36, 0x36, 0x18, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x2, 0x1ff, 0x1000, 0x2, 0x5, 0x3f, 0x7f]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x7, 0x4}, {0x1, 0x4}, {0x1, 0x4}, {0x7}, {0x0, 0x1}, {0x1, 0x5}, {0x0, 0x9}, {0x6, 0x2}, {0x4, 0x3}, {}, {0x6, 0x1}, {0x3, 0x9}, {0x1, 0x8}, {0x0, 0x8}, {0x5, 0x8}, {0x2, 0xa}, {0x5, 0x4}, {0x5, 0x4}, {0x1, 0x3}, {0x1, 0x8}, {0x4, 0x9}, {0x3, 0x5}, {0x1, 0x2}, {0x2, 0xa}, {0x0, 0x1}, {0x7, 0x4}, {0x0, 0x2}, {0x0, 0x9}, {0x1, 0x4}, {0x1, 0x9}, {0x5, 0x7}, {0x1, 0x3}, {0x7, 0x4}, {0x2, 0x3}, {0x1, 0x4}, {0x1, 0x2}, {0x5, 0x6}, {0x0, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x0, 0x7, 0x2, 0x3, 0xffff, 0x6, 0x500]}}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x19, 0x60, 0x6]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x2, 0x5, 0x200, 0x101, 0x6, 0x0, 0x6]}}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2e, 0x2, [{0x3, 0x6}, {0x6, 0x8}, {0x7, 0x3}, {0x3, 0x4}, {0x1, 0x1}, {0x6, 0x6}, {0x1, 0x5}, {0x1}, {0x5, 0x1}, {0x7, 0x2}, {0x1, 0xa}, {0x2, 0xa}, {0x7, 0x4}, {0x4, 0x2}, {0x7, 0xa}, {0x1, 0xa}, {0x5, 0x5}, {0x1, 0x6}, {0x0, 0x2}, {0x6, 0x8}, {0x1, 0xa}, {0x5, 0x9}, {0x2, 0x3}, {0x4, 0x6}, {0x7}, {0x3, 0x7}, {0x0, 0x3}, {0x4, 0xa}, {0x1, 0x2}, {0x6, 0x8}, {0x2}, {0x4}, {0x0, 0x5}, {0x1, 0x1}, {0x7, 0x9}, {0x4, 0x6}, {0x5, 0x9}, {0x3, 0x5}, {0x0, 0x7}, {0x1, 0x1}, {0x0, 0xa}, {0x7, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1, 0x0, 0x8001, 0x3, 0x7, 0x2, 0xf800]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1, 0x8, 0xaf2, 0x6c1, 0xfff8, 0x7, 0x8000]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x25}]}, {0x334, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2f4, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xf8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x6, 0x5, 0x4, 0x36, 0x6c, 0x4, 0x24, 0xb, 0x18, 0x1b, 0x12, 0xb, 0x2, 0x16, 0x4, 0x5, 0x60, 0x60, 0x5, 0x16, 0x2, 0x6c, 0x38, 0x60, 0x2, 0x30]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x4, 0xa}, {0x2, 0xa}, {0x3, 0x8}, {0x5, 0x6}, {0x2, 0x2}, {0x2}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x8}, {0x0, 0x8}, {0x2, 0x6}, {0x4, 0x5}, {0x2}, {0x5, 0x9}, {0x6, 0x1}, {0x2}, {0x1, 0x3}, {0x0, 0x8}, {0x5, 0xa}, {0x6, 0x2}, {0x0, 0x2}, {0x1, 0xa}, {0x6, 0x7}, {0x5, 0x3}, {0x0, 0x8}, {0x6, 0x7}, {0x7, 0x1}, {0x4, 0xa}, {0x0, 0x8}, {0x0, 0x6}]}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x1, 0x1}, {0x2, 0x4}, {0x1, 0x2}, {0x7, 0x3}, {0x4, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0xa}, {0x3, 0x5}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7ff, 0x5c79, 0x9b53, 0x400, 0x13, 0x28, 0x100]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x36, 0x1, 0xb, 0xb, 0x4, 0x6c, 0x24, 0x5, 0x2e, 0x36, 0x48, 0x16, 0x16, 0x18, 0x2, 0x18, 0x0, 0x24, 0x24, 0x526b459b7d326aeb, 0x12]}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x2}, {0x7, 0x1}, {0x7, 0x5}, {0x2, 0xa}, {0x0, 0x9}, {0x0, 0x5}, {0x1, 0x8}, {0x5, 0x5}, {0x1, 0x1}, {0x5, 0x7}, {0x5, 0x8}, {0x4, 0x4}, {0x1, 0x8}, {0x4, 0x2}, {0x2, 0x3}, {0x6, 0x5}, {0x5, 0x2}, {0x0, 0x6}, {0x3, 0x5}, {0x2, 0x3}, {0x5, 0x2}, {0x0, 0x6}, {0x7, 0x7}, {0x7, 0x4}, {0x6}, {0x1, 0x7}, {0x6}, {0x1, 0x3}, {0x1}, {0x4, 0x2}, {0x6, 0x2}, {0x2, 0x2}, {0x2, 0x6}, {0x2, 0x7}, {0x1, 0x1}, {}, {0x2, 0x8}, {0x3, 0x5}, {0x6, 0x7}, {0x2, 0x5}, {0x2, 0x4}, {0x1, 0x3}, {0x2, 0x5}, {0x2, 0x9}, {0x2, 0x8}, {0x5, 0x8}, {0x7, 0x9}, {0x0, 0x4}, {0x0, 0x2}, {0x0, 0x2}, {0x7, 0x4}, {0x1, 0x1}, {0x5, 0xa}, {0x4, 0x4}, {0x5, 0x9}, {0x0, 0x1}, {0x5}, {0x5}, {0x3, 0xa}, {0x1, 0x4}, {0x4, 0x9}, {0x2, 0x4}, {0x3, 0x2}, {0x0, 0x5}, {0x4, 0x4}, {}, {0x1}, {0x5, 0x2}, {0x5, 0x8}, {0x3, 0xa}, {0x1, 0x8}]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x3, 0x4, 0xb, 0x6c, 0x36, 0x6c, 0x24, 0x3, 0x0, 0x60, 0x18, 0x6c, 0xb]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x30, 0x4, 0x30]}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1c, 0x2, [{0x2, 0xa}, {0x2, 0x9}, {0x2, 0x2}, {0x3}, {0x1, 0x3}, {0x0, 0x9}, {0x7, 0xa}, {0x5, 0x2}, {0x3, 0x7}, {0x0, 0x6}, {0x5, 0x1}, {0x0, 0x9}, {0x6}, {0x3, 0x2}, {0x1, 0x9}, {0x3, 0x9}, {0x4, 0x9}, {0x1, 0x9}, {}, {0x6, 0x8}, {0x4, 0x5}, {0x7}, {0x1, 0x3}, {0x6, 0x8}]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x3, 0x4, 0x1, 0x30, 0x9, 0x36, 0x6, 0x48, 0x1, 0x18, 0x30, 0x1b, 0x12, 0x60, 0x18, 0x3, 0x41, 0x3, 0x12, 0x60, 0x60, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7ff, 0x3, 0x1, 0xb0, 0x6, 0x2]}}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x18, 0x16, 0x1, 0xf, 0x60, 0x72, 0x0, 0x12]}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x4, 0x5}, {0x5, 0x4}, {0x2, 0x1}, {0x1, 0x5}, {0x0, 0xa}, {0x7, 0x9}, {0x2, 0x7}, {0x3, 0x8}, {0x6, 0x1}, {0x0, 0xa}, {0x3}, {0x3, 0x5}, {0x4, 0x4}, {0x6}, {0x7, 0x3}, {0x0, 0x8}, {0x4, 0x4}, {0x1, 0x2}, {0x0, 0x7}, {0x1, 0x5}, {0x6, 0x4}, {0x1, 0x7}, {0x0, 0x5}, {0x5, 0x9}, {0x0, 0x8}, {}, {0x5, 0x1}, {0x6, 0x1}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x2}, {0x3, 0x7}, {0x1, 0x1}, {0x0, 0x5}, {0x1, 0x6}, {0x6}, {0x5, 0x1}, {0x3, 0x2}, {0x2, 0x9}, {0x1, 0x1}, {0x0, 0x8}, {0x7, 0x2}, {0x7, 0x8}, {0x5, 0x9}, {0x0, 0xa}, {0x1, 0x1}, {0x7, 0x6}, {0x6, 0x7}, {0x0, 0x8}, {0x1, 0xa}, {0x0, 0x3}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xb, 0x60, 0x6c, 0x36, 0x6c, 0x36, 0x2, 0x16, 0x36, 0x24, 0x24, 0x9, 0x6, 0x30, 0x12, 0x48, 0x36, 0x1, 0x4, 0x2, 0x4, 0x1, 0x30, 0x6c, 0x1]}]}, @NL80211_BAND_5GHZ={0xa4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xae57, 0x2, 0x5, 0xc4, 0xa3, 0x1, 0x8000]}}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x1, 0x1}, {0x1, 0x6}, {0x5, 0x5}, {0x4, 0x6}, {0x4, 0xa}, {0x3, 0xa}, {0x5}, {0x5, 0x4}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x4, 0x4}, {0x4, 0x4}, {0x3, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0xb, 0x1b, 0x6, 0x36, 0x30, 0x4, 0x3, 0xb]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x4, 0x8}, {0x2, 0x7}, {0x1, 0x9}, {0x7, 0x1}, {0x6}, {0x7, 0x5}, {0x4, 0x8}, {0x0, 0x9}, {}, {0x4, 0xa}, {0x0, 0xa}, {0x7, 0x7}, {0x1, 0xa}, {0x4, 0x4}, {0x2, 0x8}, {0x3, 0x1}, {0x6, 0x8}, {0x5}, {0x0, 0xa}, {0x6, 0x3}, {0x0, 0x6}, {0x3, 0x1}, {0x6, 0xa}, {0x4, 0x8}, {0x1, 0x7}, {0x4, 0x3}, {0x7, 0x1}, {0x1, 0x5}, {0x1, 0x5}, {0x6, 0x7}, {0x1, 0x8}, {0x1}]}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x7, 0x7}, {0x1, 0x7}, {0x2, 0x9}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x3}, {0x3, 0x5}, {0x7, 0x8}, {0x5, 0x7}, {0x2, 0x7}, {0x4, 0x2}, {0x3, 0x7}, {0x0, 0x8}, {0x1, 0xa}, {0x3, 0x8}, {0x0, 0x6}, {0x5, 0x6}, {0x3, 0x2}, {0x4, 0x5}, {0x2, 0x6}, {0x7, 0x6}, {0x1, 0x6}, {0x0, 0x8}, {0x6, 0x9}, {0x7, 0xa}, {0x1, 0x6}, {0x7, 0xa}, {0x2, 0x5}, {0x1, 0x9}, {0x0, 0x1}, {0x1, 0x9}, {0x1, 0x2}, {0x6, 0x7}, {0x1, 0x2}, {0x3, 0x8}, {0x3, 0x7}, {0x7, 0x4}, {0x6, 0x2}]}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x22, 0x2, [{0x1, 0x4}, {0x5, 0x9}, {0x0, 0x4}, {0x0, 0x6}, {0x6, 0x7}, {0x5, 0xa}, {0x1, 0x6}, {0x5, 0x5}, {0x2, 0x2}, {0x3, 0x4}, {0x4, 0x4}, {0x0, 0x1}, {0x7, 0x7}, {0x1, 0x8}, {0x6, 0xa}, {0x1, 0xa}, {0x1, 0x7}, {0x3, 0x2}, {0x2, 0x5}, {0x1, 0x6}, {0x4, 0x5}, {0x1, 0xa}, {0x7, 0xa}, {0x7}, {0x4, 0x2}, {0x0, 0x4}, {0x7, 0x8}, {0x4, 0x3}, {0x4, 0x4}, {0x2, 0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x2, 0x7}, {0x3, 0x2}, {0x0, 0x8}, {0x6, 0x5}, {0x4, 0x7}, {0x2, 0x8}, {0x4, 0x3}, {0x7, 0x3}, {0x1, 0xa}, {0x3, 0x7}, {0x4, 0xa}, {0x7, 0x1}, {0x0, 0x9}, {0x6, 0x7}, {0x1, 0x6}, {0x2, 0x1}, {0x6, 0x3}, {0x6, 0x2}, {0x0, 0x1}, {0x4, 0x4}, {0x7}, {0x1, 0x4}, {0x5, 0x1}, {0x2, 0x9}, {0x0, 0x7}, {0x3, 0x1}, {0x6, 0x4}, {0x1}, {0x7, 0x3}, {0x3, 0x8}, {0x0, 0x4}, {0x4, 0x2}, {0x0, 0x4}, {0x3, 0x7}, {0x2, 0x2}, {0x7}, {0x1, 0x8}, {0x6, 0x1}, {0x0, 0x6}, {0x0, 0x1}, {0x1, 0x3}, {0x6, 0xa}, {0x2, 0x6}, {0x1, 0x2}, {0x5, 0xa}, {0x6}, {0x2, 0xa}, {0x0, 0x1}, {0x6, 0xa}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x5]}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x21}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x72}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5e}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6d}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xee}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x78}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7d}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x99}]}]}, @NL80211_ATTR_TID_CONFIG={0x5c, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8d1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcf}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x498, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x39}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa1}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf6}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x40}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x10}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xf8}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10000}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}]}, {0x3dc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xfc}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x3ac, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xa8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3c, 0x2, [{0x1, 0x2}, {0x1, 0xa}, {0x6, 0x9}, {0x7, 0xa}, {0x6, 0x3}, {0x4, 0x1}, {0x0, 0x4}, {0x1}, {0x4, 0x8}, {0x0, 0x6}, {0x1, 0x7}, {0x1, 0x2}, {0x7, 0x9}, {0x5, 0x8}, {0x2, 0x2}, {0x2, 0x7}, {0x2, 0x3}, {0x6, 0x5}, {0x1, 0x8}, {0x3, 0xa}, {0x1, 0x8}, {0x1, 0x4}, {0x2, 0x1}, {0x1, 0x4}, {0x1}, {0x7, 0x7}, {0x5, 0x1}, {0x4, 0x8}, {0x5, 0xa}, {0x1, 0x1e}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x8}, {0x6, 0x9}, {0x0, 0x5}, {0x4}, {0x4}, {0x0, 0x3}, {0x1, 0x8}, {0x0, 0x7}, {0x4, 0x3}, {0x1, 0x8}, {0x0, 0x4}, {0x6, 0x6}, {0x0, 0x1}, {0x5, 0x3}, {0x0, 0x3}, {0x7, 0x6}, {0x6, 0x5}, {0x7, 0x1}, {0x0, 0x1}, {0x2, 0x5}, {0x0, 0x8}, {0x1, 0x4}, {0x7, 0x4}, {0x3, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x31, 0xfff8, 0x200, 0x3, 0x0, 0x2, 0x1fe0]}}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x4, 0x7}, {0x1, 0x6}, {0x3, 0x5}, {0x1, 0x1}, {0x6, 0x6}, {0x7, 0x8}, {0x1, 0x7}, {0x7, 0xa}, {0x0, 0x8}, {0x2}, {0x2, 0x8}, {0x7, 0x2}, {}, {0x7, 0x5}, {0x3, 0xa}, {0x0, 0x3}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x6, 0x0, 0x9, 0x81, 0x5, 0xbc69, 0x4cd6]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x48, 0x30, 0x5, 0x60, 0x60, 0x16, 0x3f, 0x16, 0xb, 0x30, 0xc, 0x30, 0x9, 0x16, 0x24, 0x3, 0x9, 0x6c, 0x4, 0x29, 0x2, 0x16, 0x1b, 0x6, 0x18, 0x9]}]}, @NL80211_BAND_5GHZ={0x110, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x20, 0x2, [{0x6, 0x6}, {0x2, 0x4}, {0x1, 0x8}, {0x5, 0x3}, {0x5, 0x2}, {0x6, 0x4}, {0x2, 0x7}, {0x7}, {0x5, 0x8}, {0x5, 0x4}, {0x7, 0x7}, {0x4, 0x6}, {0x5, 0x2}, {0x5, 0x3}, {0x3, 0x1}, {0x4, 0x2}, {0x6}, {0x2, 0x5}, {0x6, 0x2}, {0x1, 0x4}, {0x2, 0x1}, {0x1, 0x5}, {0x5, 0x1}, {0x6, 0x8}, {0x2, 0x2}, {0x5, 0x3}, {0x0, 0x2}, {0x5, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1, 0x20, 0x7fff, 0xff7f, 0x100, 0x7fff, 0x800]}}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x5, 0x6}, {0x2, 0x2}, {0x2, 0x6}, {0x5, 0x6}, {0x7, 0x8}, {0x6, 0x5}, {0x7, 0x5}, {}, {0x5, 0x8}, {0x7, 0x8}, {0x4, 0x6}, {0x1, 0x2}, {0x0, 0x2}, {0x6, 0xa}, {0x6, 0x7}, {0x7, 0x7}, {0x0, 0x5}, {0x0, 0x7}, {0x7, 0x5}, {0x1, 0xa}, {0x0, 0x6}, {0x0, 0x6}, {0x0, 0x2}, {0x6}, {0x6, 0x2}, {0x0, 0x1}, {0x3}, {0x3, 0x5}, {0x4, 0x9}, {0x5, 0x7}, {0x1, 0x4}, {0x1, 0x9}, {0x6, 0x1}, {0x4, 0x9}, {0x0, 0x1}, {0x2, 0x9}, {}, {0x0, 0x7}, {0x2, 0x1}, {0x1, 0x1}, {0x7}, {0x3, 0x8}, {0x6, 0x2}, {0x1, 0x5}, {0x5, 0x5}]}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x5, 0x2}, {0x6, 0x4}, {0x0, 0x4}, {0x5}, {0x3, 0x7}, {0x4, 0x4}, {0x1, 0x6}, {0x0, 0x8}, {0x0, 0x9}, {0x1, 0x5}, {0x2, 0x3}, {0x5, 0x6}, {0x0, 0x5}, {0x5, 0x1}, {0x0, 0xa}, {0x5, 0x5}, {0x2, 0xa}, {0x2, 0x6}, {0x0, 0x9}, {0x1, 0x6}, {0x5, 0x6}, {0x2}, {0x4, 0x7}, {0x6, 0x9}, {0x2, 0x2}, {0x1, 0xa}, {0x6, 0x1}, {0x2, 0xa}, {0x0, 0x1}, {0x1, 0x7}, {0x0, 0x6}, {0x7, 0xa}, {0x2, 0x4}, {0x1, 0x6}, {0x0, 0x6}, {0x1, 0x3}, {0x1, 0x7}, {0x7, 0x1}, {0x3, 0x6}, {0x3, 0x1}, {0x1}, {0x4}, {0x6, 0x6}, {0x1, 0x2}, {0x6, 0x9}, {0x1, 0x3}, {0x6, 0x4}, {0x3, 0x2}, {0x6, 0x6}, {0x0, 0x2}, {0x4, 0x7}, {0x6, 0x6}, {0x3}, {0x1, 0x4}, {0x5, 0x9}, {0x1, 0x6}, {0x3, 0xa}, {0x4, 0x7}, {0x1, 0x5}, {0x0, 0x8}, {0x7, 0x5}, {0x5, 0x6}, {0x5, 0x2}, {0x6, 0x2}, {0x3, 0x1}, {0x7, 0x2}, {0x2, 0x7}, {0x6, 0x9}, {0x1, 0x6}, {0x7}, {0x2}, {0x4, 0x8}, {0x5}, {0x4, 0x8}, {0x4, 0x6}, {0x1, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x2, 0x9}, {0x0, 0x7}, {0x5, 0x5}, {0x1, 0xa}, {0x6, 0x2}, {0x0, 0x5}, {0x2, 0x6}, {0x4, 0x3}, {0x2, 0x6}, {0x7, 0x5}, {0x7, 0x4}, {0x2, 0xa}, {0x2, 0x9}, {0x1, 0x3}, {0x0, 0x1}, {0x2, 0x7}, {0x4, 0x15}, {0x0, 0x4}, {}, {0x1, 0x9}, {0x1, 0x2}, {0x2, 0x5}, {0x0, 0x7}, {0x5, 0xa}, {0x6, 0xa}, {0x2, 0x3}, {0x1, 0x2}, {0x0, 0xa}, {0x6, 0xa}, {0x4}, {0x1, 0xa}, {0x1, 0x9}, {0x7, 0x5}, {0x6, 0xa}, {0x5, 0x3}, {0x1, 0x9}, {0x1, 0xa}, {0x4, 0xa}, {0x2, 0x4}, {0x1, 0xa}, {0x4, 0xa}, {0x6, 0x6}, {0x5, 0x9}, {0x5, 0x5}, {0x7, 0x2}, {0x4, 0x8}, {0x7}, {0x4, 0x9}, {0x0, 0x5}, {0x4}, {0x6, 0x4}, {0x3, 0xa}, {0x0, 0x5}, {0x1, 0x3}, {0x4, 0x9}, {0x5, 0x1}, {0x3, 0xa}, {0x3, 0x5}, {0x5, 0x5}, {0x2, 0x3}, {0x3, 0x3}, {0x7}, {0x2, 0x9}, {0x1, 0x7}, {0x0, 0x5}, {0x2, 0x1}, {0x6, 0x7}]}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x40, 0x2, [{0x7, 0x7}, {0x7, 0x8}, {0x4, 0xa}, {0x0, 0xa}, {0x4, 0x2}, {0x5, 0x2}, {0x7, 0x3}, {0x7, 0x3}, {0x3, 0x8}, {0x6, 0x1}, {0x5, 0x7}, {0x4, 0x9}, {0x6, 0x9}, {0x0, 0x9}, {0x0, 0x7}, {0x3, 0x8}, {0x1}, {0x0, 0x1}, {0x2, 0x8}, {0x4, 0x4}, {0x3, 0x3}, {0x4, 0x2}, {0x0, 0x1}, {0x3, 0x6}, {0x7, 0x1}, {0x6, 0x1}, {0x5, 0x8}, {0x0, 0x9}, {0x2, 0x3}, {0x6, 0x1}, {0x7, 0x3}, {0x4, 0x9}, {0x4, 0x3}, {0x5, 0x5}, {0x2, 0x4}, {0x6, 0x7}, {0x4, 0x8}, {0x6, 0x8}, {0x5, 0xa}, {0x4, 0x9}, {0x0, 0x5}, {0x7, 0x3}, {0x3, 0x5}, {0x0, 0x9}, {0x5, 0xa}, {0x6, 0x1}, {0x0, 0x3}, {0x6, 0x5}, {0x2, 0xa}, {0x0, 0x4}, {0x4, 0x4}, {0x6, 0x5}, {0x1, 0x5}, {0x3, 0xa}, {0x0, 0xa}, {0x7}, {0x2, 0x6}, {0x5, 0x8}, {0x2, 0x7}, {0x7, 0x3}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x6c, 0x1b, 0x30, 0x1, 0x4, 0xb, 0x52276c285d54dd65, 0x1b, 0x60, 0x12, 0x5a, 0x9, 0x48, 0x24, 0x1b, 0x6, 0x6c, 0x9, 0xb, 0x16, 0x2, 0x1b, 0x2, 0x24, 0x16, 0x3, 0x5, 0x18, 0xc, 0x52, 0xd, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1f5, 0x20, 0x1, 0x1, 0x1e, 0xfb7e, 0x8]}}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x36, 0x36, 0x11, 0x0, 0x48, 0xb, 0x3, 0x2, 0x60, 0x12, 0x4, 0x4, 0x30, 0x5, 0x60, 0x1b, 0x3]}]}, @NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xdd, 0x101, 0x7, 0x2, 0xfff9, 0x6, 0x1000, 0x1]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x2, 0xb, 0x57, 0x5, 0x48, 0x4, 0x6c, 0x6, 0x12, 0xc, 0x12, 0xb, 0x807347fd9b51efe4, 0x9, 0x4, 0x2, 0x60, 0xb, 0x36, 0x30, 0x30, 0x16]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x0, 0x18, 0x30, 0x4, 0x4, 0x60, 0x5, 0x18, 0x16, 0x1b, 0x60, 0x1, 0x12, 0x2, 0x1b, 0x4, 0xc, 0x1b, 0x12, 0x1, 0x1, 0x9, 0x9, 0x30, 0xe, 0x2, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xfff, 0x110, 0x6, 0x7, 0x4, 0x7869, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffe, 0x8, 0x80, 0xfd6f, 0xffff, 0x1f, 0x8, 0x3]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x5, 0x1, 0x9, 0x5, 0x16, 0x6c, 0x9, 0x1a, 0x6, 0x2, 0x6c]}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x7, 0xa}, {0x1, 0x5}, {0x4, 0xa}, {0x7}, {0x6, 0xa}, {0x5, 0x9}, {0x2, 0x7}, {0x5, 0x7}, {0x2}, {0x1}, {0x4}, {0x2, 0x3}, {0x3, 0xa}, {0x5}, {0x5, 0x3}, {0x1}, {0x2, 0x6}, {0x5, 0x8}, {0x1, 0x9}, {0x2, 0x9}, {0x7, 0x8}, {0x4, 0x3}, {0x5, 0xa}, {0x0, 0x2}, {0x7}, {0x0, 0x7}, {0x7, 0x6}, {0x7, 0x3}, {0x1, 0x5}, {0x7, 0x2}, {0x4, 0x1}, {0x1, 0x3}, {}, {0x2, 0x5}, {0x4, 0xa}, {0x0, 0x7}]}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xffe0, 0x8, 0x8000, 0x200, 0x8, 0x3, 0x40]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x9, 0x9, 0xb, 0xc, 0x36, 0x6, 0x28]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7f, 0x3, 0x9, 0x0, 0x6, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x24, 0x2, [{0x4, 0x17}, {0x2, 0x6}, {0x0, 0xa}, {0x4}, {0x2, 0x4}, {0x0, 0xa}, {0x1, 0xa}, {0x5, 0x1}, {0x5, 0x9}, {0x6, 0x8}, {0x1, 0x5}, {0x2, 0x7}, {0x3, 0x1}, {0x7}, {0x0, 0x3}, {0x5, 0x9}, {0x5, 0x6}, {0x1}, {0x7, 0x6}, {0x6, 0x2}, {0x6, 0x4}, {0x7}, {0x6, 0x1}, {0x2, 0x1}, {0x1, 0xa}, {0x2, 0x8}, {0x2, 0x4}, {0x2, 0x1}, {0x0, 0x3}, {0x3, 0x3}, {0x1, 0x1}, {0x6, 0x7}]}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x3, 0x6}, {0x0, 0x7}, {0x3, 0xa}, {0x0, 0xa}, {0x4, 0x9}, {0x4, 0x1}, {0x5}, {0x5, 0x9}, {0x1, 0xa}, {0x0, 0x6}, {0x4, 0x2}, {0x7, 0x7}, {0x0, 0xa}, {0x2, 0x8}, {0x1, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x8e, 0x7, 0x22a, 0x3, 0x57, 0x7, 0xb]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xed}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}]}]}, @NL80211_ATTR_TID_CONFIG={0xc4, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9d15}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xec}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1ff}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5f}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x12}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x32c, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x2f0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x2c8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x2, 0x7}, {0x5, 0x6}, {0x3, 0x5}, {0x5, 0x6}, {0x5, 0x7}, {0x0, 0x9}, {0x4}, {}, {0x1, 0x7}, {0x0, 0x4}, {0x3}, {0x1, 0xa}, {0x6}, {0x7, 0x3}, {0x4, 0x3}, {0x6, 0xa}, {0x5, 0x4}, {0x7, 0x7}, {0x6, 0x6}, {0x0, 0x1}, {0x0, 0x7}, {0x3, 0x9}, {0x2, 0x7}, {0x7}, {0x7, 0x1}, {0x5, 0x7}, {0x1}, {}, {}, {0x6, 0x1}, {0x0, 0x9}, {0x0, 0x5}, {0x0, 0x4}, {0x1, 0xa}, {0x0, 0x5}, {0x2, 0x4}, {0x1, 0xa}, {0x3, 0xa}, {0x0, 0x4}, {0x3, 0x4}, {0x1, 0x9}, {0x4, 0xa}, {0x1, 0x6}, {0x2, 0x5}, {0x5, 0x3}, {0x5, 0x7}, {0x2, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x0, 0x25, 0x0, 0x0, 0x8000, 0x7f, 0xf743]}}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x3, 0x7}, {0x0, 0x9}, {0x6, 0x4}, {0x2, 0x2}, {0x0, 0x5}, {0x7, 0x7}, {0x1, 0x7}, {0x5, 0x3}, {0x6, 0x4}, {0x2, 0x7}, {0x0, 0x5}, {0x0, 0x5}, {0x6, 0x6}, {0x0, 0x3}, {0x3, 0xa}]}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x3, 0xa}, {0x1, 0x8}, {0x0, 0x7}, {0x2, 0x7}, {0x0, 0x5}, {0x7, 0x8}, {0x3, 0x4}, {0x1, 0x8}, {0x6, 0x5}, {0x7, 0xa}, {0x3, 0x4}, {0x1, 0x8}, {0x3, 0x1}, {0x1}, {0x6, 0x9}, {0x1, 0xa}, {0x2, 0x7}, {0x1, 0x7}, {0x5, 0x1}, {0x3, 0x4}, {0x5, 0x4}, {0x7, 0x5}, {0x7, 0x9}, {0x7, 0xa}, {}, {0x0, 0xa}, {0x0, 0x8}, {0x3}, {0x5, 0x7}, {0x1, 0x7}, {0x4, 0x8}, {0x3, 0x6}, {0x5, 0x5}, {0x2, 0x7}]}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x1, 0x6}, {0x4, 0x2}, {0x0, 0x8}, {0x0, 0x1}, {0x6, 0x8}, {0x2, 0x8}, {0x7, 0x1}, {0x2, 0x5}, {0x2, 0x6}, {0x4, 0x8}, {0x1, 0x9}, {0x3, 0x3}, {0x4, 0x3}, {0x3, 0x2}, {0x1}, {0x3, 0x3}, {0x7, 0x6}, {0x4, 0x8}, {0x5, 0x4}, {0x7, 0xa}, {0x3, 0x2}, {0x0, 0x8}, {0x2, 0x9}, {0x3, 0x5}, {0x0, 0x8}, {0x3, 0x9}, {0x6, 0x1}, {0x7, 0x2}, {}, {0x7, 0xa}, {0x3, 0x6}, {0x0, 0x6}, {0x3, 0x8}, {0x1, 0x2}, {0x6, 0x2}, {0x0, 0x2}, {0x4, 0xa}, {0x5, 0x7}, {0x6, 0x2}, {0x0, 0xa}, {0x3, 0xa}, {0x1, 0x3}, {0x5, 0xa}, {0x1, 0x7}, {0x6, 0x1}, {0x1, 0x3}, {0x7, 0x1}, {0x7}, {0x0, 0x8}, {0x2, 0x6}, {0x5, 0xa}, {0x6, 0x3}, {0x0, 0x3}, {0x2, 0x1}, {0x0, 0x1}]}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x20, 0x2, [{0x1, 0x9}, {0x6, 0x3}, {0x3, 0x9}, {0x0, 0x6}, {0x6, 0x3}, {0x0, 0x4}, {0x1, 0x3}, {0x6, 0x6}, {0x6, 0x5}, {0x7, 0x8}, {0x1}, {0x0, 0x8}, {0x4, 0x1}, {0x2, 0x5}, {0x3, 0x2}, {0x2, 0x6}, {0x7, 0x3}, {0x1, 0x2}, {0x1, 0x8}, {0x0, 0x3}, {0x0, 0x2}, {0x1, 0x3}, {0x6, 0x4}, {0x4, 0xa}, {0x0, 0x6}, {0x4}, {0x1, 0x7}, {0x0, 0x8}]}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x5, 0x0, 0x48, 0x18, 0x0, 0xc, 0xb, 0x3, 0x12, 0x30, 0x24, 0x48, 0x9, 0x12, 0x6c, 0xc, 0xc, 0x9, 0x16, 0x12, 0x5, 0x36, 0x6c, 0x1, 0x6, 0x30, 0xb]}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x3, 0x9}, {0x5, 0x3}, {0x0, 0x7}, {0x4, 0x7}, {0x0, 0x7}, {0x5, 0xa}, {0x3, 0x3}, {0x2, 0x2}, {}, {0x1, 0x8}, {0x0, 0x3}, {0x0, 0x7}, {0x3, 0xa}, {0x7, 0x4}, {0x0, 0xa}, {0x2, 0x7}, {0x3, 0x8}, {0x6}, {0x2, 0x7}, {0x6}, {0x1, 0x1}, {0x3, 0x8}, {0x4, 0x1}, {0x5}, {0x1, 0x5}, {0x1, 0x2}, {0x1, 0xa}, {0x2, 0xa}, {0x7, 0x3}, {0x5, 0xa}, {0x0, 0x7}, {0x7, 0x1}, {0x7, 0xa}, {0x0, 0x4}, {0x4, 0x8}, {0x0, 0x4}, {0x3, 0xa}, {0x2, 0x3}, {0x7, 0x9}, {0x2}, {0x3, 0x8}, {0x1, 0x4}, {0x2, 0x6}, {0x6}, {0x0, 0xa}, {0x0, 0x5}, {0x7, 0x2}, {0x4, 0xa}, {0x2, 0xa}, {0x7, 0x2}, {0x0, 0x4}, {0x4, 0x4}, {0x2, 0x7}, {0x1, 0x1}, {0x4, 0x8}, {0x7}, {0x1, 0x3}, {0x2, 0x2}, {0x0, 0xa}, {0x1}, {0x2, 0x6}, {0x5, 0x8}, {0x7, 0x4}, {0x1, 0x2}, {0x0, 0xa}, {0x1}, {0x7, 0x5}, {0x6, 0x9}, {0x5, 0x4}, {0x6, 0x2}, {0x2, 0x5}, {0x7, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}]}, @NL80211_BAND_6GHZ={0xb0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x26, 0x2, [{0x3, 0x3}, {0x5, 0x4}, {0x6, 0x2}, {0x6, 0x4}, {0x4, 0x4}, {0x3, 0x8}, {0x0, 0x7}, {0x1, 0x5}, {0x3, 0x4}, {0x2, 0x1}, {0x3}, {0x2, 0x3}, {0x1, 0xa}, {0x2, 0xd}, {0x6, 0x2}, {0x0, 0x8}, {0x1, 0x5}, {0x2, 0x3}, {0x2}, {0x4, 0x5}, {0x7, 0x8}, {0x7, 0x7}, {0x6}, {0x1, 0x7}, {0x1, 0x1b}, {0x0, 0x9}, {0x5, 0x5}, {0x2, 0x5}, {0x6, 0x2}, {0x7, 0x5}, {0x0, 0x9}, {0x0, 0xa}, {0x7, 0xa}, {0x6, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3ff, 0x7ff, 0x4, 0x7ff, 0x1, 0x200, 0x6]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x4, 0x1b, 0x36, 0x12, 0x18, 0x4, 0x60, 0x9, 0x1d, 0xb, 0xc, 0x16, 0x4, 0x36, 0x36, 0xc, 0x12, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x81, 0x37, 0x0, 0xd5, 0x3, 0x5]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x3, 0x5, 0x4, 0x30, 0x60, 0x22, 0x36, 0x60, 0x5, 0x1, 0x16, 0x1b, 0x3, 0x18, 0x35, 0xc, 0x2, 0x48, 0x18]}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x3, 0x1}, {0x3, 0x2}, {0x2, 0x7}, {0x0, 0x5}, {0x1, 0x4}, {0x7, 0x3}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {}, {0x5, 0xa}, {0x0, 0x3}, {0x5, 0x6}, {0x5, 0xa}, {0x6, 0x5}, {0x1, 0x2}, {0x2, 0x5}, {0x6, 0x7}, {0x4, 0x7}, {0x4, 0x8}, {0x5, 0x4}, {0x3, 0x8}, {0x0, 0xa}, {0x0, 0x4}, {0x0, 0x6}, {0x7}, {0x4, 0x4}, {0x7, 0x2}, {0x4, 0x3}, {0x3, 0x8}, {0x5, 0x3}, {0x0, 0x3}, {0x5, 0x6}, {0x5}, {0x2, 0x5}, {0x1, 0x4}, {0x0, 0x1d}, {0x7, 0x6}, {0x3, 0x7}, {0x5, 0x4}]}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6, 0x4, 0xb, 0x6f, 0x48, 0x18, 0x12, 0x6, 0x18, 0xc, 0x2, 0x6, 0x6, 0x36, 0x7, 0x6c, 0x6c, 0x6c, 0x42, 0x4, 0x36, 0x1, 0x18, 0x1b, 0x1b, 0x6, 0x6, 0x2]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x16, 0x24, 0x4, 0x18, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa1ba, 0x1, 0x6a, 0x80, 0x9, 0x8, 0xf8c5]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x2, 0xf427, 0x7fff, 0x20, 0x0, 0x7, 0x9]}}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x1, 0x2}, {0x7, 0x2}, {0x3, 0x8}, {0x2, 0x3}, {0x3, 0x4}, {0x6, 0x1}, {0x3, 0x1}, {}, {0x6, 0x4}, {0x4, 0x4}, {0x6, 0x5}, {0x1, 0x8}, {0x5, 0x1a}, {0x5, 0x9}, {0x0, 0x4}, {0x4, 0x1}, {0x7, 0x3}, {0x3, 0x6}, {0x3, 0x8}, {0x3, 0x4}, {0x0, 0x6}, {0x4, 0xa}, {0x1, 0x3}, {0x5}, {0x3, 0x5}, {0x4, 0x7}, {0x5, 0x8}, {0x5, 0x3}, {0x0, 0x3}, {0x2, 0x1}, {0x4, 0x3}, {0x2, 0x5}, {0x0, 0x4}, {0x3, 0x7}, {0x1, 0x8}, {0x7}, {0x1, 0x4}, {0x7, 0x2}, {0x2, 0x9}, {0x2, 0x2}, {0x1}, {0x0, 0x5}, {0x2, 0xa}, {0x6, 0x9}, {0x1, 0x7}, {0x1, 0x4}, {0x1, 0x6}, {0x3, 0x4}, {0x2, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffe1, 0x80, 0xfff7, 0x1, 0x1ff, 0x6, 0x5d, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x21}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}]}]}, @NL80211_ATTR_TID_CONFIG={0x6c, 0x11d, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffffff7}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x93c, 0x11d, 0x0, 0x1, [{0x180, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x16c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x94, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x24, 0x9, 0x5, 0x18, 0x12, 0x1, 0x2, 0x6, 0x2, 0x18, 0x1b, 0x18, 0x0, 0x1b, 0x0, 0x46, 0x3, 0x1, 0x6, 0x60, 0x44, 0x48, 0x30, 0x5, 0x36, 0xb, 0x30, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x0, 0x992e, 0xfff9, 0x1, 0xffff, 0x9ff5, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x0, 0x3}, {0x1}, {0x6, 0x2}, {0x3, 0x3}, {0x5, 0xa}, {0x6, 0x6}, {0x6, 0x4}, {0x0, 0x3}, {0x0, 0x6}, {0x3, 0x5}, {0x7, 0x5}, {0x4}, {0x2, 0x9}, {0x4, 0x5}, {0x1, 0x8}, {0x6, 0x1}, {0x3, 0x1}, {0x1, 0x9}, {0x4, 0xa}, {0x1, 0x3}, {0x3, 0x4}, {0x4, 0x6}, {0x4, 0x4}, {0x1, 0x9}, {0x1, 0x3}, {0x3, 0x1}, {0x5}, {0x0, 0x7}, {0x0, 0xa}, {0x3, 0x7}, {0x2, 0x5}, {0x2, 0x1}, {0x1, 0x5}, {0x0, 0x3}, {0x6}, {0x0, 0x6}, {0x4, 0xa}, {0x2, 0x9}, {0x0, 0x5}, {0x5, 0x6}, {0x0, 0x7}, {0x0, 0x1}, {0x7, 0xa}, {0x7, 0x4}, {0x0, 0x4}, {}, {}, {0x6, 0xa}, {0x7, 0x4}, {0x2, 0xa}, {0x5, 0x1}, {0x6, 0x9}, {0x0, 0x9}, {0x6, 0x9}, {0x3, 0x1}, {0x3, 0x6}, {0x5}, {0x7, 0x4}, {0x5, 0x5}, {0x7, 0x6}, {0x2, 0x2}, {0x2, 0x1}, {0x6, 0x7}, {0x1, 0x6}, {0x6, 0x7}, {0x4, 0xa}, {0x0, 0x9}, {0x7, 0x8}, {0x3, 0x1}, {0x0, 0x9}]}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1, 0x7, 0x2, 0x8, 0x2, 0x1, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f, 0xe6, 0x1ff, 0x2, 0x0, 0x7ff, 0x2, 0x4]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x101, 0xff, 0x7ff, 0x2, 0x83d2, 0x35f, 0x101]}}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x2, 0x6}, {0x4, 0x6}, {0x7, 0x6}, {0x6, 0x5}, {0x7, 0x5}, {0x1, 0x4}, {0x0, 0x8}, {0x4}, {}, {0x3, 0x4}, {0x3, 0x3}, {0x6, 0x9}, {0x6, 0x17}, {0x6, 0x8}, {0x6, 0x9}, {0x0, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x3, 0x8}, {0x0, 0x4}, {0x1}, {0x1, 0x3}, {0x0, 0x4}, {0x2, 0x7}, {0x4, 0x6}, {0x1, 0x5}, {0x1, 0x4}]}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x5, 0xa}, {0x4, 0x6}, {0x3, 0x8}, {0x1, 0xa}, {0x7, 0x6}, {0x3, 0x1}, {0x2, 0x8}, {0x7, 0x6}, {0x2, 0x6}, {0x4, 0x2}, {0x0, 0x6}, {0x0, 0x8}, {0x5, 0x2}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x8}, {0x7, 0xa}, {0x2, 0x2}, {0x0, 0x7}, {0x1, 0x1}, {0x4, 0xa}, {0x5, 0x8}, {0x6}, {0x5, 0x7}, {0x5, 0x3}, {0x1, 0x5}, {0x7, 0x7}, {0x4, 0x2}, {0x7, 0x7}, {0x4, 0x4}, {0x6, 0x5}, {0x6, 0x3}, {0x0, 0x5}]}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x3}, {0x1, 0x8}, {0x4, 0xa}, {0x1, 0x4}, {0x5, 0x1}, {0x4, 0x2}, {0x6, 0x4}, {0x2, 0x7}, {0x6, 0x7}, {0x3, 0x3}, {0x2, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xfffa, 0x3, 0x3770, 0x1, 0x1, 0x3, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1c, 0x6, 0x3, 0x3, 0x1, 0x5, 0x2, 0x800]}}]}]}]}, {0x238, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb7}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x75}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x214, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x3, 0x4}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x1}, {0x1, 0x3}, {0x5, 0x5}, {0x0, 0x7}, {0x4, 0xa}, {0x0, 0xa}, {0x0, 0x2}, {0x4, 0x1}, {0x6, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x4, 0x8}, {0x6, 0x8}, {0x5, 0x6}, {0x4, 0x1}, {0x2, 0x9}, {0x5, 0x5}, {0x5, 0x6}, {0x4, 0x3}, {0x0, 0x4}, {}, {0x1, 0x8}, {0x0, 0x8}, {0x6, 0x2}, {0x3, 0x6}, {0x3, 0x6}, {0x2, 0x7}, {0x6, 0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x5, 0x8}, {0x0, 0x6}, {0x5, 0x7}, {0x2}, {0x7}, {0x7, 0x7}, {0x2, 0x2}, {0x1}, {0x2, 0x6}, {0x3, 0x4}, {0x6, 0xa}, {0x4, 0x2}, {0x5}, {0x1, 0x5}, {0x4, 0x1}, {0x0, 0x9}, {0x1, 0x1}, {0x0, 0x6}, {0x1, 0x9}, {0x3, 0x4}, {0x7, 0x5}, {0x4, 0x4}, {0x1}, {0x1, 0x4}, {0x0, 0x3}, {0x7}, {0x3, 0x1}, {0x4, 0x5}, {0x1, 0x2}, {0x6, 0x3}, {0x6, 0x9}, {0x0, 0x8}, {0x1, 0x3}, {0x5, 0x6}, {0x0, 0x4}, {0x6, 0x4}, {0x2, 0x1}]}]}, @NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x6, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x81, 0x7f, 0x5, 0x4, 0x400, 0x1ff, 0x7fff]}}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x1}, {0x0, 0x5}, {0x2, 0x9}, {0x6, 0x9}, {0x4}, {0x1, 0x2}, {0x6, 0x9}, {0x1, 0x7}, {0x0, 0x4}, {0x4, 0x1}, {0x4, 0x9}, {0x0, 0x3}, {0x0, 0x5}, {0x1, 0x9}, {0x4, 0x7}, {0x7, 0x7}, {0x0, 0x2}, {0x2, 0x4}, {0x1, 0x9}, {0x4, 0x3}, {0x5, 0x5}, {0x4, 0x3}, {0x1, 0x1}, {0x5, 0x9}, {0x6, 0x8}, {0x7, 0x6}, {0x7, 0x4}, {0x4, 0x4}, {0x4}, {0x0, 0x3}, {0x4, 0x5}, {0x2}, {0x2, 0x4}, {0x6, 0x6}, {}, {0x6, 0x6}, {0x1, 0x5}, {0x7, 0x6}, {0x7, 0x3}, {0x7, 0x6}, {0x3, 0xa}, {0x5, 0x6}, {0x0, 0x3}, {0x5, 0xa}, {0x5, 0x7}, {0x7, 0x5}, {0x1, 0x7}, {0x6}, {0x2, 0x4}, {0x0, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x1, 0x0, 0x4829, 0x4d62, 0xffc1, 0x1000, 0x9]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x1b, 0x24]}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x7, 0x6}, {0x0, 0x1}, {0x3, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x20, 0x18, 0x3ff, 0x71, 0x0, 0x59a, 0x8001]}}]}, @NL80211_BAND_2GHZ={0xb4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0xb, 0xc, 0xe, 0x1b, 0x24, 0x5, 0x1b, 0xb, 0xc, 0x48, 0x6c, 0xc, 0x0, 0x18, 0x24, 0x12, 0x24, 0x60, 0x2, 0x0]}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x3, 0x3}, {0x7, 0x1}, {0x6, 0x4}, {0x6, 0x8}, {0x2, 0x2}, {0x5, 0x7}, {0x0, 0x1}, {0x5, 0xa}, {0x4, 0xa}, {0x7, 0x2}, {0x3, 0xa}, {0x6, 0x4}, {0x0, 0x8}, {0x5, 0x8}, {0x4, 0xa}, {0x5, 0x2}, {0x1}, {0x4, 0x4}, {0x0, 0x8}, {0x0, 0x6}, {0x5}, {0x6, 0x6}, {0x1, 0x4}, {0x6}, {0x7}, {0x6, 0x2}, {0x3, 0x3}, {0x0, 0x1}, {0x5}, {0x6, 0x1}, {0x6, 0x4}, {0x2, 0x3}, {0x1, 0x3}, {0x5}, {0x1, 0x7}, {0x2, 0x5}, {0x7, 0x2}, {0x6, 0x8}, {0x4}, {0x6, 0x9}, {0x6, 0x4}, {0x4}, {0x4, 0x2}, {0x0, 0xa}, {0x3, 0x7}, {0x7, 0x2}, {0x4, 0x5}, {0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x49e2, 0x9, 0x98, 0x7ff, 0x1, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0xfffe, 0x9, 0x100, 0x20, 0x6, 0x8]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x4, 0x9}, {0x7, 0x7}, {0x5, 0x9}, {0x3, 0x7}, {0x7, 0x7}, {0x7, 0x5}, {0x7, 0x1}, {0x7}, {0x1, 0x5}, {0x1, 0x2}, {0x1, 0x8}, {0x6, 0x6}, {0x7, 0x1}, {0x4, 0xa}, {0x1, 0x9}, {0x5, 0x2}, {0x3, 0x6}, {0x0, 0x9}, {0x4, 0xa}, {0x0, 0x3}, {0x7}]}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x3, 0x9}, {0x6, 0x2}, {}, {0x7}]}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6, 0x7, 0x2, 0x9, 0x0, 0x6, 0x1]}}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x7, 0x5}, {0x7}, {0x6, 0x7}, {0x1, 0x7}, {0x7, 0x1}, {0x5, 0x8}, {0x4, 0x5}, {0x2, 0xa}, {0x1, 0x8}, {0x0, 0xa}, {0x1, 0x3}, {0x1, 0x3}, {0x7}, {0x6, 0x8}, {0x2}, {0x1, 0x2}, {0x6, 0x6}, {0x1, 0x4}, {0x4, 0xa}, {0x2, 0x1}, {0x2, 0x7}, {0x6, 0x4}, {0x4}, {0x6, 0x1}, {0x0, 0x7}, {0x6, 0x6}, {0x6, 0x9}, {0x4, 0x8}, {0x6, 0x5}, {0x3, 0x7}, {0x5, 0x4}, {0x0, 0x4}, {0x0, 0x3}, {0x0, 0x6}, {0x0, 0x8}, {0x2}, {0x5, 0x2}, {0x5, 0x1}, {0x0, 0x5}, {0x2}, {0x1, 0x3}, {0x4, 0x8}, {0x1, 0x2}, {0x1, 0x8}, {0x0, 0x5}, {0x2, 0x3}, {0x7, 0x9}, {0x1, 0x9}, {0x3, 0x7}, {0x4, 0x9}, {0x5, 0x2}, {0x1, 0x4}, {0x5, 0x3}, {0x0, 0x9}, {0x6}, {0x0, 0x2}, {0x4, 0x5}, {0x7, 0x4}, {}, {0x7, 0x4}, {0x1, 0xa}, {0x6, 0x6}, {0x1, 0x6}, {0x0, 0x5}, {0x1, 0x6}, {0x7, 0x3}, {0x6, 0x3}, {0x7, 0x1}, {0x0, 0x4}, {0x1, 0xa}, {0x6, 0x9}]}]}, @NL80211_BAND_5GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0xc4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xc0, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xbc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1f, 0x2, [{0x1, 0x2}, {0x3, 0x2}, {0x5, 0xa}, {0x2}, {0x0, 0xa}, {0x2, 0xa}, {0x7, 0x7}, {0x3, 0x4}, {0x1, 0xa}, {0x7}, {0x3, 0x5}, {0x4, 0x2}, {0x4, 0x8}, {0x2, 0x4}, {0x2, 0x6}, {0x4, 0x2}, {0x6, 0x9}, {0x6, 0x5}, {0x7, 0x4}, {0x4, 0xa}, {0x0, 0x4}, {0x4, 0x7}, {0x4, 0x1}, {0x0, 0x9}, {0x4, 0x1}, {0x0, 0xa}, {0x1, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xc000, 0x5, 0x3f, 0xffff, 0x5, 0x7, 0x5]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x24, 0x16, 0xb, 0x12, 0x16, 0x6c, 0x1, 0x3, 0x24, 0x60, 0x6c, 0x12, 0x3, 0x4, 0xb, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xff, 0x50, 0x8, 0x1000, 0x0, 0x1000, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xac, 0x0, 0x6, 0x401, 0x1a0d, 0x4, 0xffff, 0x7]}}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x7, 0x1}, {0x2, 0x4}, {0x2, 0x5}, {0x1, 0xa}, {0x1, 0x5}, {0x4, 0x9}, {0x1, 0x5}, {0x7, 0x5}, {0x2}, {0x7, 0xa}, {0x7, 0x2}, {0x4, 0x6}, {0x7, 0x1}, {0x6, 0x8}, {0x7, 0x4}, {0x5, 0xa}, {0x6, 0x9}, {0x2, 0x7}, {0x3, 0x2}, {0x0, 0x1}, {0x0, 0x2}, {0x3, 0x9}, {0x2, 0x8}, {0x0, 0x6}, {0x6, 0x9}, {0x6, 0x2}, {0x1, 0xa}, {0x2, 0x2}, {0x4}, {0x6, 0x8}, {0x3}, {0x6, 0x1}, {0x6, 0x7}, {0x0, 0x7}, {0x5, 0xa}, {0x3, 0x8}, {0x4, 0x1}, {0x3, 0x2}, {0x2}, {0x7, 0x2}, {0x1, 0x8}, {0x7, 0x2}, {0x6}, {0x5, 0x5}, {0x3, 0x9}, {0x4, 0x1}, {0x0, 0x7}, {0x3, 0x7}, {0x7, 0x9}, {0x0, 0xa}, {0x2, 0x8}, {0x0, 0x6}, {0x3, 0x2}, {0x3, 0x7}, {0x7, 0xa}, {0x5, 0xa}, {0x3}, {0x1, 0x8}, {0x1}, {0x0, 0x5}, {0x3, 0x1}, {0x4, 0x3}, {0x1, 0xa}, {0x1, 0x7}, {0x2, 0x8}]}]}]}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7b}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x95}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x30}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x1d0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xfa}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x198, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x4, 0x5, 0x30, 0x24, 0x5, 0x4, 0x7c, 0xc, 0x18, 0x36, 0x12, 0x1b, 0x30, 0x16, 0x89790144fce33342, 0x12, 0x28, 0x16, 0x2, 0x4, 0x60, 0x60, 0xc, 0x6, 0x18]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xbf, 0xfffa, 0x1000, 0x1780, 0x2863, 0x800, 0x7]}}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x4, 0x1}, {0x0, 0x8}, {0x5, 0x6}, {0x3, 0x9}, {0x7, 0x6}, {0x7, 0x8}, {0x3}, {0x7, 0x1}, {0x2, 0x1}, {0x2, 0x9}, {0x1}, {0x5, 0x2}, {0x3, 0x2}, {0x0, 0xa}, {0x2, 0x7}, {0x6, 0xa}, {0x5, 0x5}, {0x7, 0x1}, {0x4, 0x9}, {0x1, 0x4}, {0x5, 0x8}, {0x1}, {0x7, 0x5}, {0x5, 0x9}, {0x0, 0x4}, {0x1, 0x4}, {0x4, 0x9}, {0x2, 0x2}, {0x5, 0x3}, {0x4, 0x1}, {0x0, 0x9}, {0x2, 0x9}, {0x4, 0x9}, {0x2, 0x5}, {0x7}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x16, 0x3, 0x1b, 0x36, 0xb, 0x3, 0x12]}]}, @NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x55, 0x2, 0x401, 0x2, 0x7, 0x3, 0x9, 0x51]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3b, 0xdffa, 0x0, 0xffff, 0x40, 0x87, 0x2]}}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x2, 0x8}, {0x7}, {0x5, 0x8}, {0x1}, {0x6, 0x4}, {0x2, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x7}, {0x6, 0x2}, {0x1, 0xa}, {0x6, 0x2}, {0x6, 0x8}, {0x6, 0x5}, {0x2, 0x9}, {0x0, 0x1}, {0x0, 0x8}, {0x0, 0x1}, {}, {0x3, 0x6}, {0x1, 0xa}, {0x4, 0xa}, {0x3, 0x8}, {0x0, 0x5}, {0x6, 0xa}, {0x6, 0x7}, {0x7, 0x4}, {0x4, 0x4}, {0x1, 0x7}, {0x3, 0x5}, {0x1, 0x8}, {0x6, 0x2}, {0x2, 0x3}, {0x6, 0x1}, {0x0, 0x1}, {0x4, 0x6}, {0x0, 0x6}, {0x5, 0x1}, {0x5, 0x4}, {0x1, 0x1}, {0x6, 0x2}, {0x1, 0x8}, {0x3, 0x4}, {0x1, 0x5}, {0x3, 0x7}]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x60, 0x6, 0x3, 0x36, 0x24, 0x3, 0x1b]}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0xfff, 0xf2d2, 0x4, 0x3, 0xa1f5, 0xffb4, 0x1000]}}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x5, 0x5}, {0x0, 0x9}, {0x7, 0x3}, {0x5, 0x8}, {0x4, 0x9}, {0x4, 0x2}, {0x2, 0xa}, {0x6, 0x6}, {0x1, 0x8}, {0x2, 0x6}, {0x7, 0x5}, {0x5, 0x5}, {0x1, 0x3}, {0x3, 0x5}, {0x6, 0x9}, {0x1, 0x6}, {0x2, 0x2}, {0x0, 0xa}, {0x5, 0x4}, {0x2, 0x7}, {0x3, 0x1}, {0x1, 0x3}, {0x2, 0x6}, {0x4, 0x4}, {0x2, 0x1}, {0x1, 0x8}, {0x0, 0x1}, {0x4, 0x6}, {0x3, 0x4}, {}, {0x7, 0x1}, {}, {0x7, 0x3}, {0x3, 0x4}, {0x7, 0x5}, {0x3, 0x5}, {0x7, 0x9}, {0x2}, {0x0, 0x9}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x1}, {0x2, 0x6}, {0x2, 0x1}, {0x3, 0x2}, {0x6, 0x4}, {0x6, 0x1}, {0x1}, {0x1}, {0x6, 0x2}, {0x7, 0x4}, {0x0, 0x8}, {0x1, 0xa}, {0x2, 0x7}, {0x5, 0x5}, {0x2, 0x4}, {0x5, 0x3}, {0x0, 0x9}, {0x4, 0x8}, {0x1, 0x1}, {0x0, 0x2}, {0x0, 0x2}, {0x4, 0x4}, {0x7, 0x4}, {0x0, 0xa}, {0x3, 0x9}, {0x0, 0x6}, {0x7, 0x5}, {0x7, 0x7}, {0x6, 0x7}, {0x7, 0x2}]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x1f0, 0x4, 0x4, 0x7fff, 0x44, 0x0, 0x8]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xff, 0x3ff, 0x81, 0x1, 0x8000, 0x7, 0x7f]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x36}]}, {0x268, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x264, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x62, 0x7, 0x9, 0x4, 0x3, 0x1, 0x4, 0x9]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x6, 0x6c, 0x12, 0x6c, 0x2, 0x36, 0x30, 0x6, 0x6c, 0x6, 0x4, 0x3, 0x5, 0x1, 0x0, 0x2, 0xc, 0x30, 0x48, 0x36, 0x6, 0x24]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x5, 0x16, 0x9, 0x2]}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x6, 0x1}, {0x7, 0x9}, {0x2, 0x4}, {0x6, 0x6}, {0x1, 0x5}, {0x0, 0x5}, {0x2, 0x4}, {0x0, 0x8}, {0x1, 0x8}, {0x4, 0x8}, {0x6, 0x1}, {0x4, 0x5}, {0x0, 0x4}, {0x2, 0x7}, {0x2, 0x2}, {0x4, 0x9}, {0x0, 0x3}, {0x4, 0x2}, {0x0, 0x1}, {0x3, 0x9}, {0x2, 0x3}, {0x3, 0x4}, {0x0, 0x2}, {0x4}, {0x1, 0x9}, {0x0, 0x4}, {0x7, 0x7}, {0x2, 0x1}, {0x5, 0x7}, {0x6, 0x3}, {0x7, 0x3}, {0x1, 0x7}, {0x2}, {0x1, 0xa}, {0x2, 0x9}, {0x7, 0x3}, {0x5, 0xa}, {0x3, 0x3}, {0x0, 0x2}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x2}, {0x1, 0x6}, {0x5, 0x8}, {0x2, 0x1}, {0x6, 0x8}, {0x3, 0x7}, {0x0, 0x5}, {0x6, 0x9}, {0x5, 0x7}, {0x0, 0x2}, {0x4, 0x1}, {0x1, 0xa}, {0x0, 0x2}, {0x1, 0x8}, {0x2, 0x4}, {0x7, 0x6}, {0x4, 0x9}, {0x5, 0x6}, {0x1, 0x2}, {0x6, 0x6}, {0x5, 0x1}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x24, 0x3b, 0x48, 0x18, 0xd91e89045120b478, 0xb, 0x24, 0x16, 0x9, 0x4, 0x9, 0x2, 0x9, 0x4, 0x24, 0x9, 0x30, 0x30, 0x16, 0x1, 0x5, 0x6c, 0x16, 0x60]}]}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x6c, 0x36, 0x3, 0x4, 0x60, 0xf, 0xc, 0x24, 0x1, 0x9, 0x3, 0x2, 0x2, 0x24, 0x4, 0x18, 0x12, 0xb, 0x18]}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x160a, 0x9, 0x8a, 0x4, 0x1, 0x9, 0x7fff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1a, 0x2, 0x8, 0x100, 0xfe00, 0x3, 0x8]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0x600, 0x1f, 0xf3cc, 0xfffe, 0x276b, 0x7]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x5, 0x12, 0x2, 0x48, 0x48, 0x30, 0x12, 0x5, 0x30, 0x12, 0x18, 0x9, 0x6, 0x16, 0x12, 0x18, 0x1b, 0x48, 0x30, 0x1b, 0x36, 0x12, 0x1, 0x9, 0x4, 0x36, 0x5, 0x9, 0x24, 0x36, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x5, 0x6c]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x6c, 0x1b, 0x2, 0x24, 0x24, 0x48, 0x6c, 0x24fc224c60fe8f5f]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x1, 0x2, 0x16, 0x8, 0x30, 0x5, 0x9, 0x6, 0x60, 0x12, 0x2, 0x60, 0x6, 0x6c, 0x36, 0x4c1dcd577b260a47, 0x6, 0x36, 0x1b, 0x36, 0xd, 0x2, 0x1b, 0x12, 0x12, 0x21, 0x30, 0x3a]}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x48, 0x36, 0xc, 0x24, 0x36, 0x41, 0x5, 0x24, 0xc, 0x12, 0x16, 0x0, 0x30, 0x30, 0x3f, 0x6, 0x16, 0x5, 0x35, 0x60, 0x18]}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x24, 0x60, 0x5, 0x1]}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x5, 0x3}, {0x3, 0x2}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa1e, 0x2, 0x0, 0x3f, 0x9, 0x7ff, 0x1000, 0xfffb]}}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x1, 0x6}, {0x7, 0x1}, {0x6, 0x3}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf001, 0x5, 0x1000, 0x1, 0x0, 0x7, 0x2, 0xd]}}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x48, 0x6c, 0x6c, 0x48, 0x6, 0x60, 0x1b, 0x9, 0x12, 0x9, 0x6, 0x5, 0xc, 0x3]}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x3, 0x1}, {0x1, 0xa}, {0x7}, {0x6, 0x3}, {0x7, 0x9}, {0x7, 0x7}, {0x2, 0xa}, {0x3, 0x8}, {0x1, 0x5}, {0x1, 0x2}, {0x3, 0x5}, {0x0, 0x8}, {0x3, 0x6}, {0x6, 0xa}, {0x1, 0x6}, {0x7, 0x3}, {0x7, 0x8}, {0x1, 0x4}, {0x6, 0x2}, {0x1}, {0x7, 0xa}, {0x4, 0x6}, {0x3, 0x9}, {0x1}, {0x1}, {0x0, 0x6}, {0x2, 0x8}, {0x3, 0x7}, {0x2, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x81, 0x2, 0x80, 0x4, 0x5, 0x8, 0x2]}}]}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xee}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x3a8, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80000001}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x38}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x53}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8c}]}, {0xe8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xc8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4b, 0x2, [{0x4, 0x2}, {0x0, 0x7}, {0x1, 0x9}, {0x3, 0x9}, {0x5, 0x2}, {0x6, 0x6}, {0x0, 0xa}, {0x1, 0x3}, {0x4, 0x8}, {0x5, 0x8}, {0x0, 0x7}, {0x1, 0xa}, {0x5, 0x8}, {0x7, 0x5}, {0x2, 0x4}, {0x4, 0x5}, {0x1}, {0x3, 0x2}, {0x5, 0x4}, {0x3, 0x9}, {0x1, 0x9}, {0x2, 0x4}, {0x7, 0x8}, {0x1, 0x5}, {0x4, 0x9}, {0x6, 0xa}, {0x1, 0xa}, {0x1, 0xa}, {0x1, 0x2}, {0x3, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x6, 0x2}, {0x2, 0xa}, {0x3, 0xa}, {0x1, 0x4}, {0x3, 0x3}, {0x5}, {0x3, 0x4}, {0x4, 0x5}, {0x4, 0x8}, {0x2, 0x4}, {0x0, 0x6}, {0x5, 0xa}, {0x5, 0x6}, {0x6, 0x8}, {0x1, 0x5}, {0x4, 0xa}, {0x4, 0x2}, {0x0, 0x8}, {0x7, 0x8}, {0x7, 0x8}, {0x1}, {0x2, 0x2}, {0x2, 0x4}, {0x6, 0x9}, {0x1, 0x5}, {0x0, 0x5}, {0x4, 0x7}, {0x3, 0x5}, {0x4}, {0x1, 0x7}, {0x4}, {0x0, 0x6}, {0x2, 0x6}, {0x5, 0x7}, {0x6, 0x9}, {0x1, 0x4}, {0x7, 0x8}, {0x4, 0x5}, {0x6, 0x7}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x2, 0x41dd, 0x4, 0x9, 0x4, 0x1, 0x8]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x60, 0x16, 0x1b, 0x24, 0x16, 0x2, 0x24, 0x0]}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x14, 0x2, [{0x1, 0x6}, {0x5, 0x9}, {0x0, 0x7}, {0x2, 0x1}, {0x4}, {0x4, 0x7}, {0x4, 0x9}, {0x4, 0x5}, {0x5, 0x7}, {0x1, 0x1}, {0x2, 0x3}, {0x4, 0x2}, {0x1, 0x6}, {0x0, 0x2}, {0x3, 0x4}, {0x3, 0x5}]}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, [{0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x6, 0x1}, {0x4, 0x4}, {0x5, 0x9}, {0x2, 0x8}, {0x2, 0x1}, {0x4, 0x9}, {0x6, 0x1}, {0x0, 0x2}, {0x5, 0x5}, {0x3, 0x2}, {0x6, 0x4}, {0x1, 0x6}, {0x2, 0x4}, {0x7, 0x2}, {0x1, 0x5}, {0x4, 0xa}, {0x3, 0x3}, {0x4, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xea5, 0x7, 0x6, 0x9, 0xb2d1, 0xf5d9, 0x4c8c, 0x5]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x230, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xc4, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xf9ad, 0x5, 0x7fff, 0xfffa, 0x6, 0x3, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd02, 0xfff, 0x7ff, 0x9, 0x1, 0x0, 0x1, 0x1e83]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x36, 0x24, 0x18, 0x36, 0x5, 0x0, 0x60, 0xc, 0x64, 0x30, 0xb, 0x60, 0x48, 0x2, 0x30, 0x12, 0x2, 0x6, 0x16, 0xb, 0xb, 0x48, 0xb, 0x4c]}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1a, 0x2, [{0x0, 0x4}, {0x5, 0x1}, {0x1, 0x4}, {0x4, 0x5}, {0x1}, {0x5, 0xa}, {0x5, 0x6}, {0x0, 0x6}, {0x1, 0x1}, {0x0, 0x1}, {0x6, 0x7}, {0x2, 0x6}, {0x1, 0x3}, {0x7, 0x7}, {0x0, 0x3}, {0x4, 0x5}, {0x5, 0x8}, {0x3, 0x9}, {0x6, 0x9}, {0x6, 0x9}, {0x1, 0x5}, {0x0, 0x3}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0xc, 0x1, 0x60, 0x18, 0x60, 0x9, 0x3, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x0, 0x7, 0x4, 0x8e51, 0x44f6, 0x1ff, 0x7ff]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x8a, 0x3db, 0xb7, 0x6, 0x800, 0x0, 0x3f]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x160, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xdc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xc89, 0xfff, 0xfff, 0x9, 0x3, 0x1, 0x1f, 0x3f]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x0, 0x6}, {0x0, 0x5}, {0x5, 0x1}, {0x6, 0x2}, {0x0, 0x6}, {0x2, 0x6}, {0x3, 0x3}, {0x0, 0x2}, {0x5, 0x8}, {0x1, 0x3}, {0x1, 0x6}, {0x1, 0x6}, {0x7, 0x2}, {0x0, 0x9}, {0x1, 0x3}, {0x7, 0x6}, {0x1, 0x6}, {0x2, 0x5}, {0x3}, {0x7, 0x6}, {0x7}, {0x7, 0x4}, {0x4, 0x7}, {0x6, 0x3}, {0x4, 0xa}, {0x4, 0xa}, {0x3, 0x9}, {0x0, 0x1}, {0x2, 0xa}, {0x4, 0x6}, {0x3, 0x1}, {0x3, 0x3}, {0x1, 0x5}, {0x0, 0x6}, {0x0, 0x5}, {0x1, 0x4}, {0x3, 0xa}, {0x5, 0x4}, {0x7}, {0x0, 0x5}, {0x4, 0x3}, {0x6, 0x6}, {0x0, 0x7}, {0x3, 0x2}, {0x7, 0xa}, {0x6, 0x6}, {0x3, 0x7}, {0x4, 0x6}, {0x6, 0x4}, {0x4, 0x4}, {0x1, 0x7}, {0x0, 0x9}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x6}, {0x6, 0x5}, {0x7, 0x9}, {0x6, 0x9}, {0x4}, {0x6, 0x2}, {0x7, 0x6}, {0x3, 0x1}, {0x5, 0x7}, {0x6, 0x3}, {0x5, 0x6}, {0x2, 0x4}, {0x1, 0xa}, {0x6}, {0x3, 0x3}, {0x5, 0x5}, {0x4, 0x1}, {0x0, 0x2}, {0x5, 0x1}, {0x5, 0x8}, {0x3, 0x6}]}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x6, 0x8}, {0x0, 0x3}, {0x2, 0x6}, {0x6, 0x7}, {0x4, 0x7}, {0x5, 0x4}, {0x1, 0x5}, {0x0, 0x5}, {0x6, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x5, 0x2, 0x1ff, 0x8000, 0x40d3, 0x8001, 0x5]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0xd2e291507e65c241, 0x1b, 0x12, 0x48, 0x4, 0x60, 0x4, 0x48, 0x66, 0x3, 0x10, 0x9, 0x1c, 0x3, 0xb, 0x0, 0x0, 0x6c, 0x16, 0x1b, 0x2, 0x24, 0xb, 0x9, 0x18, 0x48, 0x12, 0x18, 0x60]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xbd, 0xede5, 0xfffe, 0x4, 0x3ff, 0x1ff, 0x40, 0x9]}}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x4, 0x48, 0x30, 0x6c, 0x36, 0x6c, 0xb, 0x18, 0x12, 0x9, 0x3, 0x5, 0x6, 0x16, 0xc, 0x16, 0x2, 0x12, 0xb, 0x5, 0x16, 0xc, 0x24, 0x30, 0xc, 0x12, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xffff, 0x6, 0x7, 0x81, 0x545, 0x9, 0x6]}}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x6, 0x9}, {0x0, 0xa}, {0x7}, {0x6, 0x2}]}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x5, 0x2}, {0x5, 0xa}, {0x2, 0xa}, {0x3}, {0x4, 0x1}, {0x0, 0xa}, {0x6, 0xa}, {0x1}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x2}, {0x6, 0xa}, {0x7, 0xa}, {0x1, 0xa}, {0x0, 0x8}, {0x3, 0x9}, {0x1, 0x9}, {0x0, 0x6}, {0x2, 0x5}, {0x4, 0xa}, {0x3, 0x9}, {0x4, 0x4}, {0x6, 0x5}, {0x3, 0x5}, {0x6, 0x1}, {0x7, 0x6}, {0x2, 0x4}, {0x3, 0x8}, {0x0, 0x6}, {0x0, 0x7}, {0x5, 0x5}, {0x0, 0xa}, {0x2, 0x8}, {0x4, 0x7}, {0x3, 0x3}, {0x6, 0xa}, {0x0, 0x3}, {}, {0x4, 0x3}, {}, {0x4, 0x9}, {0x6, 0x4}, {0x1}, {0x5, 0x1}, {0x0, 0x3}, {0x7, 0x4}, {0x2, 0x3}, {0x0, 0x9}, {0x5, 0xa}, {0x1, 0x4}, {0x6, 0x2}, {0x0, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x0, 0xa}, {0x1, 0xa}, {0x2, 0x3}, {0x6, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe8}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x86}]}]}, @NL80211_ATTR_TID_CONFIG={0x2c, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1000}]}]}]}, 0x2050}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004000) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) clock_getres(0x6, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 908.361174] tmpfs: Bad value for 'mpol' [ 908.365930] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 908.368141] tmpfs: Bad value for 'mpol' [ 908.387072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:41:12 executing program 7: socketpair(0x2, 0x3, 0x3, &(0x7f0000000000)) 03:41:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 03:41:12 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x2916, 0x4) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x0) recvmsg(r0, &(0x7f0000001880)={0x0, 0x0, 0x0}, 0x2000) [ 908.448063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 908.462991] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:41:12 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000140)={{}, {0x10}}, 0x24, 0x0) 03:41:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000d00)) 03:41:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 03:41:12 executing program 7: socketpair(0x2, 0x3, 0x3, &(0x7f0000000000)) [ 908.507110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:41:12 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x4c, &(0x7f00000000c0), 0x4) [ 908.563254] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:41:12 executing program 3: r0 = shmget(0x1, 0x1000, 0x200, &(0x7f0000cea000/0x1000)=nil) shmat(r0, &(0x7f0000995000/0x3000)=nil, 0x7000) shmctl$IPC_RMID(r0, 0x0) 03:41:12 executing program 6: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_audit(0x10, 0x3, 0x9) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) 03:41:12 executing program 5: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x3, r0, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x3}) 03:41:12 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, "5fa1c0"}) 03:41:12 executing program 2: sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x0, 0x200, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x12, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000100), 0x4723, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r2, 0x0, 0x1) dup2(r2, r0) getdents(r0, &(0x7f0000000200)=""/92, 0x5c) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'wlan0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'/17]}) socket$inet_icmp_raw(0x2, 0x3, 0x1) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) 03:41:12 executing program 7: socketpair(0x2, 0x3, 0x3, &(0x7f0000000000)) 03:41:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f00000006c0)=0x5, 0x4) 03:41:12 executing program 3: r0 = shmget(0x1, 0x1000, 0x200, &(0x7f0000cea000/0x1000)=nil) shmat(r0, &(0x7f0000995000/0x3000)=nil, 0x7000) shmctl$IPC_RMID(r0, 0x0) 03:41:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="100000000802110000010802110000000802110080002000010000000100010882848b960c121824"], 0x28) [ 908.897790] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 908.903624] Bluetooth: hci0: Opcode 0x0401 failed: -22 03:41:12 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x52, &(0x7f0000000140)={0x0, 0x0}, 0x10) 03:41:12 executing program 5: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x3, r0, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x3}) 03:41:12 executing program 3: r0 = shmget(0x1, 0x1000, 0x200, &(0x7f0000cea000/0x1000)=nil) shmat(r0, &(0x7f0000995000/0x3000)=nil, 0x7000) shmctl$IPC_RMID(r0, 0x0) 03:41:12 executing program 7: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x3, r0, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x3}) [ 909.029228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:41:12 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000300)={@random="0100", @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @broadcast}}}}, 0x0) 03:41:12 executing program 2: sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x0, 0x200, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x12, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000100), 0x4723, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r2, 0x0, 0x1) dup2(r2, r0) getdents(r0, &(0x7f0000000200)=""/92, 0x5c) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'wlan0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'/17]}) socket$inet_icmp_raw(0x2, 0x3, 0x1) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) 03:41:12 executing program 5: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x3, r0, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x3}) [ 909.093500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:41:12 executing program 5: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x3, r0, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x3}) [ 909.179066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:41:13 executing program 3: r0 = shmget(0x1, 0x1000, 0x200, &(0x7f0000cea000/0x1000)=nil) shmat(r0, &(0x7f0000995000/0x3000)=nil, 0x7000) shmctl$IPC_RMID(r0, 0x0) 03:41:13 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x0, 0x0) lseek(r0, 0x0, 0x0) 03:41:13 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:41:13 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x22cf, 0x4) sendmsg$inet(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x0) recvmsg(r0, &(0x7f0000001880)={0x0, 0x0, 0x0}, 0x2000) 03:41:13 executing program 7: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x3, r0, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x3}) 03:41:13 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) 03:41:13 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000019140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000190c0)=ANY=[@ANYBLOB="1800000004010102"], 0x18}}, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:41:13 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @mcast2}, 0x1c) [ 909.656301] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 909.666242] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 03:41:13 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8040) sendmmsg$inet6(r0, &(0x7f0000009140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:41:13 executing program 5: lsetxattr$security_ima(0x0, &(0x7f0000000700), 0x0, 0x0, 0x0) [ 909.725379] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 909.726040] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x104000 phys_seg 127 prio class 2 [ 909.726958] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 909.727753] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 909.735847] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 909.764970] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 909.772870] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 03:41:13 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, 0x1c) 03:41:13 executing program 7: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x3, r0, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x3}) [ 909.801511] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 909.809070] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 909.834502] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 909.844010] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 909.870302] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 03:41:13 executing program 4: socket$inet(0x2, 0x1, 0x6) [ 909.878382] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 909.917396] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 909.924667] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 03:41:13 executing program 0: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x141200, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) [ 909.951072] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 909.958299] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 909.984084] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 909.991520] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 910.016695] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 910.023591] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 910.050756] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 910.057580] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 910.081236] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 910.088200] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 910.117342] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 03:41:13 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 03:41:13 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) [ 910.124011] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 03:41:14 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='{{*\x00', 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) dup2(r0, r1) [ 910.149544] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 910.156116] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 910.179230] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 910.185576] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 910.211338] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 910.218182] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 910.240130] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 910.246496] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 910.269955] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 910.276243] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 910.290902] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 910.297848] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 910.327487] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 03:41:14 executing program 4: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x14, r1, 0x1, 0x0, 0x0, {0x25}}, 0x14}}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) [ 910.333881] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 910.361209] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 910.361706] blk_print_req_error: 37 callbacks suppressed [ 910.361715] I/O error, dev sr0, sector 4826 op 0x1:(WRITE) flags 0x104000 phys_seg 127 prio class 2 [ 910.362903] buffer_io_error: 4824 callbacks suppressed [ 910.362911] Buffer I/O error on dev sr0, logical block 4826, lost async page write [ 910.363988] Buffer I/O error on dev sr0, logical block 4827, lost async page write [ 910.364646] Buffer I/O error on dev sr0, logical block 4828, lost async page write [ 910.365286] Buffer I/O error on dev sr0, logical block 4829, lost async page write [ 910.365945] Buffer I/O error on dev sr0, logical block 4830, lost async page write [ 910.366604] Buffer I/O error on dev sr0, logical block 4831, lost async page write [ 910.367314] Buffer I/O error on dev sr0, logical block 4832, lost async page write [ 910.367992] Buffer I/O error on dev sr0, logical block 4833, lost async page write [ 910.368655] Buffer I/O error on dev sr0, logical block 4834, lost async page write [ 910.369304] Buffer I/O error on dev sr0, logical block 4835, lost async page write 03:41:14 executing program 7: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, &(0x7f00000002c0)) [ 910.375532] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 910.375986] I/O error, dev sr0, sector 4953 op 0x1:(WRITE) flags 0x104000 phys_seg 127 prio class 2 [ 910.399074] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 910.399575] I/O error, dev sr0, sector 5080 op 0x1:(WRITE) flags 0x104000 phys_seg 127 prio class 2 [ 910.406363] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 910.406867] I/O error, dev sr0, sector 5207 op 0x1:(WRITE) flags 0x104000 phys_seg 127 prio class 2 03:41:14 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(0x0, 0x0) [ 910.429076] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 910.429621] I/O error, dev sr0, sector 5334 op 0x1:(WRITE) flags 0x104000 phys_seg 127 prio class 2 [ 910.436198] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 910.436685] I/O error, dev sr0, sector 5461 op 0x1:(WRITE) flags 0x104000 phys_seg 127 prio class 2 [ 910.460380] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 910.460909] I/O error, dev sr0, sector 5588 op 0x1:(WRITE) flags 0x104000 phys_seg 127 prio class 2 [ 910.467583] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 910.468037] I/O error, dev sr0, sector 5715 op 0x1:(WRITE) flags 0x104000 phys_seg 127 prio class 2 [ 910.490042] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 910.490540] I/O error, dev sr0, sector 5842 op 0x1:(WRITE) flags 0x104000 phys_seg 127 prio class 2 [ 910.496997] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 910.497484] I/O error, dev sr0, sector 5969 op 0x1:(WRITE) flags 0x104000 phys_seg 127 prio class 2 [ 910.519591] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 910.526286] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 910.548905] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 03:41:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000002840)=0xffffffffffffffff, 0x4) sendmmsg$inet6(r0, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="90aa43646add8f24879febf43971599392c04daafaad102be80336f0e66d6b50c80194fa4e4fc47d60a22ebc1c1569b7002c593c6457ff7b53fc273d96a33cb4b7df85cf5d05b532121d741dabf3ea03d1c04c7fafd72f197c7603c170c42e5214c75a6c9b764010e264b853d8473e1d8f714af53384b1039da9d437fdb18bbf6712e9dc97301ce66f5c0c7fc0f508352ce55c5228c2e5e0de035ebd", 0x9c}, {&(0x7f0000000180)="8614d7bce96c5ebeeb30ac8f0b9bcaf1bb5950729c899a5ff877e0b6405b6ce79bbca3c5e364a90736a6fd778144", 0x2e}, {&(0x7f0000000200)="dfecf8cd45f23a3b4424d2696a5b8393b28a5f4816cb98dbd2ec0486f9bb6556226ba709e25087eedb29e95374b95339779df356fbb26b8899a541358a29497c3892e8e208a49b751c442a7590639b0cd21dc4e8058278480b71a277ad6ce99caf8b61b4d3133ec7290109a02d56ad3b89f88e1455410fe4b10e4e9deee8557f7636ebbc1817358ba584d856e3ffabd717", 0x91}, {&(0x7f00000002c0)="bbed49d6c172cc5d8e39568f7213f073bd2005221f8354f31d84a8844904e95d005dc342c2061a0e833563cadbe5867f1d1fc32c7751876c", 0x38}, {&(0x7f0000000300)="a316b9bad8f289a625d558960d76d9e71010c97844c5e7dc12eb0b0e696ff62c6c73570cf8948b95f13c7c088001c8a5f6a4c3b327f2c33eee736feaa1f803f8abc8c009c8a7058290aa1f70c253d74c658a1bfb61f71bf4d73d6f35221162ae9ea153159dc06144bb08ec332d", 0x6d}, {&(0x7f0000000380)="2209074c5d1357bcf0312026f82569b03def14e70df4e753bd9866fdc8c1d803975f7df0e92843203f4ec2d1427eb8cef2d0c74113b436cd0ca99186c2db2362c6e491e2c6a0587a4e01f7abeb2d982bbaea53c51043b70329c516de6be8a34d56d1c4522621bf243abd2ede1c258fcd51dec2d86dd35f4e", 0x78}], 0x6}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000680)="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", 0xbc9}], 0x1}}], 0x2, 0x0) close(r0) [ 910.555323] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 910.578496] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 910.585964] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 910.610963] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 03:41:14 executing program 6: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r3, r1, 0x0) splice(r2, 0x0, r0, 0x0, 0x801, 0x0) 03:41:14 executing program 2: syz_mount_image$nfs4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='mountinfo\x00') r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000017c0), 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000001780), 0x0, &(0x7f0000001800)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 910.617269] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 910.782982] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 910.785275] kernel write not supported for file /vcsu (pid: 39919 comm: kworker/1:3) [ 910.795920] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 910.837305] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 910.851615] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 910.902882] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 910.914712] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 910.936940] Bluetooth: hci0: command tx timeout [ 910.971543] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 910.978141] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 911.026249] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=1s [ 911.027705] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 911.028827] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 911.030001] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 07 f0 00 00 10 00 [ 913.769736] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 913.775171] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 913.777933] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 913.784125] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 913.789276] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 915.865621] Bluetooth: hci2: command tx timeout [ 916.337770] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 916.338742] blk_print_req_error: 17 callbacks suppressed [ 916.338758] I/O error, dev sr0, sector 8192 op 0x1:(WRITE) flags 0x104000 phys_seg 127 prio class 2 [ 916.340938] buffer_io_error: 3356 callbacks suppressed [ 916.340952] Buffer I/O error on dev sr0, logical block 8192, lost async page write [ 916.342931] Buffer I/O error on dev sr0, logical block 8193, lost async page write [ 916.344150] Buffer I/O error on dev sr0, logical block 8194, lost async page write [ 916.345346] Buffer I/O error on dev sr0, logical block 8195, lost async page write [ 916.346545] Buffer I/O error on dev sr0, logical block 8196, lost async page write [ 916.347764] Buffer I/O error on dev sr0, logical block 8197, lost async page write [ 916.348969] Buffer I/O error on dev sr0, logical block 8198, lost async page write [ 916.350175] Buffer I/O error on dev sr0, logical block 8199, lost async page write [ 916.351480] Buffer I/O error on dev sr0, logical block 8200, lost async page write [ 916.352723] Buffer I/O error on dev sr0, logical block 8201, lost async page write [ 916.364199] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 916.365204] I/O error, dev sr0, sector 8319 op 0x1:(WRITE) flags 0x104000 phys_seg 127 prio class 2 [ 916.429784] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 916.430725] I/O error, dev sr0, sector 8446 op 0x1:(WRITE) flags 0x104000 phys_seg 127 prio class 2 [ 916.443010] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 916.443902] I/O error, dev sr0, sector 8573 op 0x1:(WRITE) flags 0x104000 phys_seg 127 prio class 2 [ 916.487603] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 916.488570] I/O error, dev sr0, sector 8700 op 0x1:(WRITE) flags 0x104000 phys_seg 127 prio class 2 [ 916.503601] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 916.504472] I/O error, dev sr0, sector 8827 op 0x1:(WRITE) flags 0x104000 phys_seg 127 prio class 2 [ 916.538236] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 916.539195] I/O error, dev sr0, sector 8954 op 0x1:(WRITE) flags 0x104000 phys_seg 127 prio class 2 [ 916.551368] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 916.552242] I/O error, dev sr0, sector 9081 op 0x1:(WRITE) flags 0x104000 phys_seg 127 prio class 2 [ 916.610903] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 916.611924] I/O error, dev sr0, sector 9208 op 0x1:(WRITE) flags 0x104000 phys_seg 127 prio class 2 [ 916.624214] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 916.625101] I/O error, dev sr0, sector 9335 op 0x1:(WRITE) flags 0x104000 phys_seg 127 prio class 2 [ 916.666395] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 916.678145] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 916.723165] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 916.735408] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 916.775810] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 916.787575] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 916.824181] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 916.835977] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 916.884159] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 916.896870] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 916.940560] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 916.952498] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 916.994071] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 917.006028] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 917.050672] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 917.062537] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 917.107727] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 917.124117] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 917.172687] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 917.186252] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 917.236993] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 917.250544] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 917.297157] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 917.310392] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 917.363269] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 917.376798] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 917.427566] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 917.440966] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 917.484110] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 917.497558] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 917.545609] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 917.558340] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 917.601313] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 917.613528] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 917.664268] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 917.676674] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 917.723270] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 917.739575] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 917.785135] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 917.798155] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 917.855247] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 917.867965] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 917.911850] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 917.924819] Bluetooth: hci2: command tx timeout [ 917.925916] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 917.971938] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 917.983566] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 918.025986] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 918.041159] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 918.085961] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 918.099278] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 918.149005] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 918.160757] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 918.209636] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 918.221379] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 918.274678] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=1s [ 918.275863] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 918.276827] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 918.277736] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 0f f0 00 00 10 00 [ 918.283041] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 918.314382] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 918.323414] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 918.354015] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 918.362781] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 918.393137] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 918.401543] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 918.430894] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 918.439035] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 918.468382] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 918.476296] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 918.503890] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 918.511567] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 918.537616] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 918.545295] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 918.574550] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 918.581916] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 918.607071] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 918.614735] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 918.640737] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 918.647946] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 918.684677] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 918.691656] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 918.716659] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 918.723419] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 918.746807] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 918.753956] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 918.778617] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 918.785012] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 918.807277] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 918.813692] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 918.839513] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 918.846153] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 918.874985] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 918.882643] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 918.936280] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 918.949541] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 918.996537] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 919.008667] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 919.050948] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 919.069826] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 919.120981] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 919.133562] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 919.179966] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 919.194222] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 919.241806] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 919.255369] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 919.305496] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 919.319235] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 919.367903] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 919.381927] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 919.433694] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 919.447211] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 919.484391] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 919.490937] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 919.521666] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 919.528756] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 919.558612] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 919.565025] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 919.588691] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 919.595027] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 919.616756] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 919.623349] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 919.646315] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 919.652753] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 919.676018] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 919.682454] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 919.705518] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 919.712019] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 919.734486] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 919.740787] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 919.763673] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 919.770225] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 919.792608] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 919.798996] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 919.823228] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 919.829856] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 919.853167] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 919.859701] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 919.881607] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 919.888082] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 919.910307] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 919.916709] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 919.940184] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 919.946695] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 919.960741] Bluetooth: hci2: command tx timeout [ 919.976158] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 919.982914] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 920.016180] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 920.022596] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 920.059698] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 920.071565] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 920.085317] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 920.118711] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 920.125149] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 920.155631] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 920.162382] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 920.194668] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 920.201154] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 920.233008] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 920.239361] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 920.270627] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 920.277184] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 920.313344] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 920.325154] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 920.361590] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 920.369714] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 920.405970] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 920.413508] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 920.440409] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 920.447896] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 920.472215] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 920.479375] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 920.503537] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 920.510524] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 920.535275] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 920.542389] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 920.565626] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 920.572532] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 920.596116] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 920.603033] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 920.631908] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 920.639206] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 920.662747] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 920.669319] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 920.693191] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 920.699745] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 920.721339] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 920.727771] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 920.771010] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=1s [ 920.772153] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 920.773173] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 920.774193] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 1f e0 00 00 1e 00 [ 922.008544] Bluetooth: hci2: command tx timeout [ 935.288340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 935.289701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 935.334710] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 935.335876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 03:41:39 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) set_mempolicy(0x1, &(0x7f0000000280)=0xffffffffffffffe1, 0x8) clone3(&(0x7f0000005880)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:41:39 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='{{*\x00', 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) dup2(r0, r1) 03:41:39 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) 03:41:39 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='{{*\x00', 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) dup2(r0, r1) 03:41:39 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0x0, 0x0, 0xffffffb8}) 03:41:39 executing program 6: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x14, r1, 0x1, 0x0, 0x0, {0x25}}, 0x14}}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 03:41:39 executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x14, r1, 0x1, 0x0, 0x0, {0x25}}, 0x14}}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 03:41:39 executing program 4: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x14, r1, 0x1, 0x0, 0x0, {0x25}}, 0x14}}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) [ 935.564246] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 03:41:39 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='{{*\x00', 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) dup2(r0, r1) 03:41:39 executing program 6: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x14, r1, 0x1, 0x0, 0x0, {0x25}}, 0x14}}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 03:41:39 executing program 7: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x10b302, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x200000001000) 03:41:39 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) dup3(r1, r0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 03:41:39 executing program 4: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x14, r1, 0x1, 0x0, 0x0, {0x25}}, 0x14}}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 03:41:39 executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x14, r1, 0x1, 0x0, 0x0, {0x25}}, 0x14}}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 03:41:40 executing program 7: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x10b302, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x200000001000) 03:41:40 executing program 1: socket$inet(0x2, 0xa, 0x8) socket$inet(0x2, 0xa, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000280)={@local, @empty, @val, {@mpls_uc={0x8847, {[], @ipv4=@generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) 03:41:40 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='{{*\x00', 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) dup2(r0, r1) 03:41:40 executing program 6: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x14, r1, 0x1, 0x0, 0x0, {0x25}}, 0x14}}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 03:41:40 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='{{*\x00', 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) dup2(r0, r1) 03:41:40 executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x14, r1, 0x1, 0x0, 0x0, {0x25}}, 0x14}}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 03:41:40 executing program 4: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x14, r1, 0x1, 0x0, 0x0, {0x25}}, 0x14}}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 03:41:40 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) 03:41:40 executing program 4: r0 = semget$private(0x0, 0x5, 0x0) semctl$GETNCNT(r0, 0x6595f8bbd5a80d53, 0xe, 0x0) 03:41:40 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5419, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "26f954d5b7b3eb7a"}) 03:41:40 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='{{*\x00', 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) dup2(r0, r1) 03:41:40 executing program 1: timer_create(0x9, &(0x7f00000001c0)={0x0, 0xb, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x77359400}, {0x0, 0x989680}}, 0x0) 03:41:41 executing program 7: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x10b302, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x200000001000) 03:41:41 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x0, "5eff7f0000002200090000ee00"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)) 03:41:41 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fcntl$addseals(r0, 0x409, 0x0) 03:41:41 executing program 5: r0 = epoll_create(0x2b) r1 = epoll_create(0xdc) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) r2 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000180)) r3 = epoll_create(0x8001) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0) dup3(r4, r2, 0x0) 03:41:41 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={[{@nr_inodes={'nr_inodes', 0x3d, [0x6d]}}, {@size={'size', 0x3d, [0x67, 0x0]}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) 03:41:41 executing program 6: arch_prctl$ARCH_GET_CPUID(0x1011) 03:41:41 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x19, 0x0, 0x0) 03:41:41 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@mpol={'mpol', 0x3d, {'prefer', '', @void}}}, {@mpol={'mpol', 0x3d, {'bind', '=relative', @void}}}]}) [ 937.795967] tmpfs: Bad value for 'mpol' [ 937.813738] tmpfs: Bad value for 'mpol' 03:41:41 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_ACTIVATE(r0, 0x5608, 0x8) 03:41:41 executing program 5: perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:41:41 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000019c0)=[{{&(0x7f0000000100)={0x2, 0x4e21, @private}, 0x10, 0x0, 0x0, &(0x7f0000001500)=[@ip_ttl={{0x14, 0x0, 0x34, 0x7}}], 0x18}}], 0x1, 0x0) 03:41:41 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@mpol={'mpol', 0x3d, {'prefer', '', @void}}}, {@mpol={'mpol', 0x3d, {'bind', '=relative', @void}}}]}) 03:41:41 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x0, "5eff7f0000002200090000ee00"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)) 03:41:41 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000080)) 03:41:41 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000006c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) [ 938.078041] tmpfs: Bad value for 'mpol' 03:41:42 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x14, &(0x7f0000000300), 0x31) 03:41:42 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0x0) 03:41:42 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@mpol={'mpol', 0x3d, {'prefer', '', @void}}}, {@mpol={'mpol', 0x3d, {'bind', '=relative', @void}}}]}) 03:41:42 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x0, "5eff7f0000002200090000ee00"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)) 03:41:42 executing program 1: io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) 03:41:42 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x11, r1, 0x0) 03:41:42 executing program 7: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x10b302, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x200000001000) 03:41:42 executing program 3: process_vm_writev(0x0, &(0x7f00000013c0)=[{&(0x7f0000000000)=""/229, 0xe5}, {&(0x7f0000000100)=""/189, 0xbd}, {&(0x7f00000001c0)=""/83, 0x53}, {&(0x7f0000001440)=""/122, 0x70}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/71, 0x47}, {&(0x7f0000001340)=""/109, 0x6d}], 0x7, 0x0, 0xffffffffffffff02, 0x0) [ 938.678099] sock: sock_set_timeout: `syz-executor.5' (pid 272782) tries to set negative timeout [ 938.686553] sock: sock_set_timeout: `syz-executor.5' (pid 272782) tries to set negative timeout [ 938.718364] tmpfs: Bad value for 'mpol' 03:41:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x10, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) 03:41:42 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x0, "5eff7f0000002200090000ee00"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)) 03:41:42 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x1200, 0xe94b}) 03:41:42 executing program 1: write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0x0, 0x0, "1e", "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:41:42 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@mpol={'mpol', 0x3d, {'prefer', '', @void}}}, {@mpol={'mpol', 0x3d, {'bind', '=relative', @void}}}]}) 03:41:42 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') mknodat$null(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) 03:41:42 executing program 5: keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000900)='enc=', 0x0) 03:41:42 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, 0xffffffffffffffff) [ 938.962719] tmpfs: Bad value for 'mpol' 03:41:43 executing program 6: pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$KDSIGACCEPT(r0, 0x541b, 0x1fffffffffffffd) 03:41:43 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, 0xffffffffffffffff) 03:41:43 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) shutdown(r0, 0x0) 03:41:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x14, r1, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) 03:41:43 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x11, r1, 0x0) 03:41:43 executing program 1: syslog(0xa, 0x0, 0x0) 03:41:43 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0x6d) 03:41:43 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@mpol={'mpol', 0x3d, {'local', '=relative'}}}]}) 03:41:43 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:41:43 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r0, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) read(r0, &(0x7f0000000380)=""/235, 0xeb) [ 939.705308] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO 03:41:43 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, 0xffffffffffffffff) 03:41:43 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0xe1, 0x0, 0x405}}}, 0x7) syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="03c80024d0a4f59906c11a26eaec30126ea2650838b69877c8fa4b2915a255a1000801000700a23b012515fc1a260979e1003e5ec1134905ae3527ff6192"], 0x3e) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="041817aaaaaaaaaa0700e438ee911bb1d0df659ca82b567cf6025f6040aa5b39fb79b4b77e157e8ac9dfb9a77b4815697f1c7b73b3b892"], 0x1a) init_module(0x0, 0xfffc2, 0x0) init_module(&(0x7f00000001c0)=')^{}\xdc)\'-\x00', 0x9, &(0x7f0000000200)='-\x00\x02T\xb0V>\x8d\x99\xcb\x94\xd5\xb0\x01\x98\x01\xa5x\xf7v8q\xf1P\xf4(\x7f\xbc\r\x1e$\r\xcf\'\x8aGQR`\xad\x1fT\xfc\x1a\x06\xe7\xb8vva\x11\xb7\x19\xd8\xc9\xa35D\xf6g\xa2\x8fU<\xcc\x01\x9b~2\x12\xc3y\x87>\xbc\xbd\xf8\xc7\x86\xaa\xcaHv)l\xc4\x1b$\x8e}\xe5\xdb,') syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x7, 0x0, 0x406}}}, 0x7) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) r1 = syz_open_dev$vcsa(&(0x7f0000000400), 0x8, 0x40000) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000440)=0x1, 0x4) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x40, 0xc9}}}, 0x6) bind$802154_dgram(r1, &(0x7f0000000100)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x14) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000200)={0x81}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000600)) syz_emit_vhci(&(0x7f0000000480)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xb8}, "d133c9e09cc40737df92573b1a92858ddbbec0d4db659b3492aa8d5c8c20b4d42ea8c08637dea9f54deb236116de135f75e9aecd02db1587641c58a591cb3d4fc86475e0a748b4683d76e41f04444e6080d0dbf85f9325de44a36cc630d66a51438b12e2ca5c5a064094988853d562ff7b4fd17598b2990c7c2588f7790c00bb9d288b1776dc401022626fb5cff26509372de57addd5530615adc98ad0cf6a422e0be3a6bc8ba64b8e4de6fb197d89b9ac4a04b63ed76a3a"}, 0xbc) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa) close_range(r2, r1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x3e9e}) [ 939.767909] tmpfs: Bad value for 'mpol' [ 939.775140] tmpfs: Bad value for 'mpol' 03:41:43 executing program 6: mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 03:41:43 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, 0xffffffffffffffff) 03:41:43 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x894a, &(0x7f0000000c80)={'sit0\x00', 0x0}) 03:41:43 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000000c0), 0x4) 03:41:43 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x11, r1, 0x0) 03:41:43 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:41:43 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:41:43 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCADDDLCI(r0, 0x89e0, &(0x7f0000000000)={'bond0\x00'}) 03:41:43 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0x6d) 03:41:43 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setresuid(0x0, 0xee01, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8913, &(0x7f0000000000)={'bridge0\x00'}) 03:41:43 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x100003c) umount2(&(0x7f0000000180)='./file0\x00', 0x0) [ 940.079142] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO 03:41:43 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x11, r1, 0x0) 03:41:43 executing program 7: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000200)={0x0, {0x2, 0x0, @multicast2}, {0x2, 0x0, @local}, {0x2, 0x0, @private}, 0x85, 0x0, 0x0, 0x0, 0x7f, &(0x7f00000001c0)='vxcan1\x00'}) 03:41:44 executing program 6: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 03:41:44 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:41:44 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0x6d) 03:41:44 executing program 0: semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) 03:41:44 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:41:44 executing program 4: r0 = epoll_create(0x2b) r1 = socket$inet6_udp(0xa, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)) r3 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r3, &(0x7f0000000040)=""/156, 0x9c, 0x0) 03:41:44 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x100003c) umount2(&(0x7f0000000180)='./file0\x00', 0x0) 03:41:44 executing program 7: msgrcv(0x0, 0x0, 0x0, 0x8000000000000000, 0x0) 03:41:44 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x40000c4) [ 940.363121] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO 03:41:44 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 03:41:44 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x100003c) umount2(&(0x7f0000000180)='./file0\x00', 0x0) 03:41:44 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0x6d) [ 940.596547] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO 03:41:44 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:41:44 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:41:44 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x100003c) umount2(&(0x7f0000000180)='./file0\x00', 0x0) 03:41:44 executing program 0: syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, {0x0, 0x0, 0x7, 0x0, @wg=@response={0x2, 0x0, 0x0, "912c684f2a808e748e0d03fb3a04dadcd5b61d00", "3e5454d4891c54ecf2f4042ead654623", {"c9df1d92fdba9d2c7fafc401eee65512", "be89216b442023102034790295f5310e"}}}}}}}, 0x0) 03:41:44 executing program 7: msgrcv(0x0, 0x0, 0x0, 0x8000000000000000, 0x0) 03:41:44 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001240), r1) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r2, 0x109, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0) 03:41:44 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$lock(r0, 0x25, &(0x7f0000000180)={0x1}) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}) fcntl$lock(r0, 0x25, &(0x7f0000000100)) 03:41:44 executing program 2: r0 = io_uring_setup(0x24e5, &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) 03:41:44 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0xe, &(0x7f0000003440)={0x0, 0x2000}, 0x4) 03:41:44 executing program 7: msgrcv(0x0, 0x0, 0x0, 0x8000000000000000, 0x0) 03:41:44 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x5413, &(0x7f0000000000)) 03:41:44 executing program 6: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000400), 0x8, 0x0) r1 = epoll_create1(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) signalfd(r0, &(0x7f0000000240), 0x8) 03:41:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f00000005c0)=ANY=[], 0x20) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) 03:41:44 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') close_range(r0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') 03:41:44 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3) 03:41:45 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000300), 0x8080, 0x0) 03:41:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x25}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x30}}, 0x0) 03:41:45 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001240), r1) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r2, 0x109, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0) 03:41:45 executing program 7: msgrcv(0x0, 0x0, 0x0, 0x8000000000000000, 0x0) 03:41:45 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') getdents(r0, &(0x7f0000000000)=""/249, 0x18) getdents(r0, &(0x7f00000001c0)=""/24, 0x18) 03:41:45 executing program 6: write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7c4666d7035828c4690bca329e"], 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth0_vlan\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) 03:41:45 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fchown(r0, 0xffffffffffffffff, 0xffffffffffffffff) 03:41:45 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getpeername(r0, 0x0, &(0x7f0000000080)) [ 941.203906] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:41:45 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x17, &(0x7f0000000000)={0x0, 0x1}, 0x4) 03:41:45 executing program 5: mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0xa, 0x3, 0x6) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) ioctl$SNAPSHOT_S2RAM(r0, 0x80083314) [ 941.330261] random: crng reseeded on system resumption 03:41:45 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001240), r1) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r2, 0x109, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0) 03:41:45 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r0, &(0x7f0000004180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) 03:41:45 executing program 7: syz_emit_ethernet(0x3a, &(0x7f0000000180)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, {[@generic={0x44, 0x4, "c7e8"}]}}, @timestamp}}}}, 0x0) 03:41:45 executing program 6: perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:41:45 executing program 5: mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0xa, 0x3, 0x6) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) ioctl$SNAPSHOT_S2RAM(r0, 0x80083314) 03:41:45 executing program 1: mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0xa, 0x3, 0x6) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) ioctl$SNAPSHOT_S2RAM(r0, 0x80083314) 03:41:45 executing program 0: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000640)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @val={0x4, 0x6, {0x5, 0x0, 0x6, 0x3}}, @void, @val={0x5, 0x4, {0x1, 0x0, 0x0, '\n'}}, @void, @void, @void, @void, @void, @void, @void, [{0xdd, 0xb3, "10ac56a3c2b7cf79ce79164dd4bec838adb6132a851ab82a2dba78a67f5ae512c3f1f7413bc160ff56b023f8987f0404bceabadecfd4a641b333dbc7fc4687ce51494a100c8044c3eba825a99c337ef784eae1de725617482ae0e972fd60fdd0614bb5dd5a704d7e293452b2ea0cc2ad466448b944e364722b939cf980e22f9d4c70355e3d03359676ac20256f9dae2f7a04e6f021a81af02ae30f83cd4d9fff784636b7f6619a39aa64c7ae98925dd3a4ea32"}, {0xdd, 0x5b, "43881349163cb14c85504bd45ec25ba85044f25de6deaafc305d4420b153a961f304b523d85866f3153f61fe81d7239726b2edafe443f7c3d75e1cac1c2fbb6b3f80171ed442d8a0e4ffbab44c85d7e2b372a179452f24c81d7480"}, {0xdd, 0x4c, "a786e1562fcdcb0f869b4bb2b66a539405a92c5d1782e23d94881f0feb4d06442ea2e11b35aa4572950446376965673a5acb1a9f8cd1727967a05e08a4cf9bf18ed8a56e6271239060d2eebe"}, {0xdd, 0xc7, "042f42ed0b795636b83108eaf9e3fbd40aa14c5633152b7b71223b1455488b2f46b5943bb582547c8176285c7080e5e4c5ed41969a6256181d17ec87f0dd2746b8ea50391719a52c1b8abf57b6ee05ebeb5c567af99a80b1ebde83e0860056e5ade32b0962907b9e9d26db039a3fd980c4bd28d30ed02bfb3c6b14eff7671292a04ae2f89f1c3431ca081cf0fb92ca3ffeb7a3c6cbef46fcd5b1117a8b1bd0f98407a0f087716dd04716e9570e8f68c9eb9a42136b40a1e63648f269e095d69f9f5bdf196a8ad0"}]}, 0x265) 03:41:45 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001240), r1) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r2, 0x109, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0) 03:41:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x28, r3, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) [ 941.558207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 941.596486] random: crng reseeded on system resumption 03:41:45 executing program 1: mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0xa, 0x3, 0x6) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) ioctl$SNAPSHOT_S2RAM(r0, 0x80083314) [ 941.602612] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING) 03:41:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f0000000040)) 03:41:45 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) 03:41:45 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x4e, 0x0, 0x0) 03:41:45 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/reserved_size', 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/246, 0xf6, 0x0) socket$inet(0x2, 0x0, 0x0) 03:41:45 executing program 1: mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0xa, 0x3, 0x6) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) ioctl$SNAPSHOT_S2RAM(r0, 0x80083314) 03:41:45 executing program 5: mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0xa, 0x3, 0x6) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) ioctl$SNAPSHOT_S2RAM(r0, 0x80083314) [ 941.802849] random: crng reseeded on system resumption 03:41:45 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d, 0xffffffffffffffff}}]}}) 03:41:45 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000040)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x8, 0x2c, 0x0, @empty, @mcast2, {[], @time_exceed={0x5, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "887b00", 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}}}}}, 0x0) [ 941.866878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 941.883206] 9p: Unknown access argument 18446744073709551615: -34 03:41:45 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffd68, 0x0}}], 0x2, 0x0) 03:41:45 executing program 5: mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0xa, 0x3, 0x6) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) ioctl$SNAPSHOT_S2RAM(r0, 0x80083314) 03:41:45 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) r0 = getpid() r1 = pidfd_open(r0, 0x0) fstat(r1, &(0x7f0000001580)) 03:41:45 executing program 6: futex(0x0, 0xc, 0x0, 0x0, 0x0, 0x0) 03:41:45 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) 03:41:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x28, r3, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 03:41:45 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:41:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000006a80)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="d4", 0x1}], 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="78000000000000002900000039000000870c02d700000000200100000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000ff02000000000000000000000000000100000000000000000080000000000000fe8000000000000000000000000000432400000000000000290000003200000000000000000000000000000000000001", @ANYRES32, @ANYBLOB="00000000140000000000000029000000430000000000010000000000480000000000000029000000390000005d0601ff00000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000ffffac1414bb580000000000000029000000390000003c0800020000000000000000000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000001fe8000000000000000000000000000bb14000000000000002900000008000000060000000000000028000000000000002900"], 0x198}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000600)='^', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x800) close(r0) [ 942.100013] random: crng reseeded on system resumption 03:41:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000880)={0x2c, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @nested={0x10, 0x0, 0x0, 0x1, [@typed={0x9, 0x13, 0x0, 0x0, @str='l2tp\x00'}]}]}, 0x2c}], 0x1}, 0x0) [ 942.183545] netlink: 'syz-executor.3': attribute type 19 has an invalid length. [ 942.188381] netlink: 'syz-executor.3': attribute type 19 has an invalid length. 03:41:46 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ppoll(&(0x7f0000000340)=[{r0}], 0x1, &(0x7f0000000540)={0x0, 0x3938700}, 0x0, 0x0) 03:41:46 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa40024, &(0x7f0000000040)=ANY=[]) mknodat$loop(r0, &(0x7f0000000180)='./file0\x00', 0x6000, 0x1) fchmodat(r0, &(0x7f0000000000)='./file0\x00', 0x0) 03:41:46 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="340000002a00f97fff7f0000000000000c0000000154"], 0x34}], 0x1}, 0x0) 03:41:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x101342, 0x0) write$binfmt_script(r0, &(0x7f0000002340)={'#! ', './cgroup/cgroup.procs/file0', [], 0xa, "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"}, 0x1001) 03:41:46 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:41:46 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="340000002a00f97fff7f0000000000000c0000000154"], 0x34}], 0x1}, 0x0) 03:41:46 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x21, &(0x7f0000000000)={0xffffffff, {{0x2, 0x0, @multicast2}}}, 0x88) 03:41:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x28, r3, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 03:41:46 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:41:46 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="340000002a00f97fff7f0000000000000c0000000154"], 0x34}], 0x1}, 0x0) 03:41:46 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'wlan0\x00', &(0x7f0000000180)=@ethtool_sfeatures={0x3b, 0x2, [{}, {}]}}) 03:41:46 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0x1c, 0x0, 0x199, &(0x7f00000003c0)}) 03:41:46 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:41:46 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000008b00)={0x0, 0x0, 0x0}, 0x10142) 03:41:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x28, r3, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 03:41:46 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000100)=""/102400, 0x19002, 0x0) write$P9_RREADLINK(r0, 0x0, 0x0) 03:41:46 executing program 3: socket(0x2b, 0x0, 0x0) 03:41:46 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) 03:41:46 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="340000002a00f97fff7f0000000000000c0000000154"], 0x34}], 0x1}, 0x0) 03:41:46 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)={[{@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x35, 0x2d, 0x33, 0x2f]}}}}]}) 03:41:46 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) 03:41:46 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000008b00)={0x0, 0x0, 0x0}, 0x10142) 03:41:46 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) read(r0, &(0x7f0000000140)=""/179, 0xb3) 03:41:46 executing program 3: epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x0) 03:41:46 executing program 6: symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/155, 0x9b) 03:41:46 executing program 7: setresuid(0xee01, 0xee00, 0x0) setreuid(0xee01, 0x0) [ 942.819679] tmpfs: Bad value for 'mpol' [ 942.823537] tmpfs: Bad value for 'mpol' 03:41:46 executing program 3: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 03:41:46 executing program 7: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') setns(r0, 0x0) 03:41:46 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000008b00)={0x0, 0x0, 0x0}, 0x10142) 03:41:46 executing program 6: symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/155, 0x9b) 03:41:46 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0x1c, 0x0, 0x199, &(0x7f00000003c0)}) 03:41:46 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) read(r0, &(0x7f0000000140)=""/179, 0xb3) 03:41:46 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000040)) socket$nl_xfrm(0x10, 0x3, 0x6) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x2c380) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) dup(0xffffffffffffffff) 03:41:46 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) 03:41:46 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000008b00)={0x0, 0x0, 0x0}, 0x10142) 03:41:46 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000800000008000300", @ANYRES32, @ANYBLOB="28000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000100080026006c09000008000c006400000008000d01"], 0x74}}, 0x0) 03:41:46 executing program 6: symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/155, 0x9b) 03:41:46 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000040)) socket$nl_xfrm(0x10, 0x3, 0x6) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x2c380) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) dup(0xffffffffffffffff) 03:41:47 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/meminfo\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/186, 0xba, 0x9) 03:41:47 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) read(r0, &(0x7f0000000140)=""/179, 0xb3) 03:41:47 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0x1c, 0x0, 0x199, &(0x7f00000003c0)}) 03:41:47 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) 03:41:47 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x3}, 0x6) 03:41:47 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000040)) socket$nl_xfrm(0x10, 0x3, 0x6) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x2c380) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) dup(0xffffffffffffffff) 03:41:47 executing program 6: symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/155, 0x9b) 03:41:47 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) read(r0, &(0x7f0000000140)=""/179, 0xb3) 03:41:47 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigaction(0x20, 0x0, 0x0, 0x8, &(0x7f0000000340)) 03:41:47 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents(r0, &(0x7f0000000280)=""/205, 0xf5) getdents64(r0, &(0x7f0000000080)=""/127, 0x7f) 03:41:47 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000040)) socket$nl_xfrm(0x10, 0x3, 0x6) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x2c380) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) dup(0xffffffffffffffff) 03:41:47 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) 03:41:47 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 03:41:47 executing program 6: ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff80000000, 0x9]}) r0 = syz_io_uring_setup(0x3a2d, &(0x7f0000000480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), &(0x7f0000000340)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/56, 0x38}], 0x5) 03:41:47 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40086607, &(0x7f0000000080)=ANY=[]) 03:41:47 executing program 3: fgetxattr(0xffffffffffffffff, &(0x7f00000001c0)=@known='trusted.overlay.impure\x00', 0x0, 0x0) 03:41:47 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x22, 0x0, &(0x7f0000000140)) 03:41:47 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents(r0, &(0x7f0000000280)=""/205, 0xf5) getdents64(r0, &(0x7f0000000080)=""/127, 0x7f) 03:41:47 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents(r0, &(0x7f0000000280)=""/205, 0xf5) getdents64(r0, &(0x7f0000000080)=""/127, 0x7f) 03:41:47 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 03:41:47 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0x1c, 0x0, 0x199, &(0x7f00000003c0)}) 03:41:47 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40086607, &(0x7f0000000080)=ANY=[]) 03:41:47 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 03:41:47 executing program 6: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r0, 0x1, 0x0, 0x0, {0x28}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 03:41:47 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f00000001c0)={0x8001, 0x80}) 03:41:47 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x100) unlink(&(0x7f0000000340)='./file0\x00') read(r0, &(0x7f00000000c0)=""/208, 0xd0) 03:41:47 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000840)=[{&(0x7f0000000580)="578c9b4247ee84ed", 0x8}, {0x0}, {&(0x7f00000011c0)="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", 0x6fe}], 0x3) 03:41:47 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents(r0, &(0x7f0000000280)=""/205, 0xf5) getdents64(r0, &(0x7f0000000080)=""/127, 0x7f) 03:41:47 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 03:41:47 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001a00), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a40)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) 03:41:47 executing program 2: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="d9543038a1b282d50a0127a3fe787904192e365d99dfc335cf588132eba1a51d12f95180d319ee1e7666ca07423b043d77f268a4db33451cf00ae47cb045f9bc4e0385ab32e07ac5000000000000000032", 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ipvlan1\x00'}) ioctl$TUNSETTXFILTER(r0, 0x4b47, 0x0) 03:41:47 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2}, 0x14) 03:41:47 executing program 0: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x6aff, &(0x7f0000000140)) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:41:47 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) shutdown(r0, 0x0) recvmmsg$unix(r0, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 03:41:47 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000400), 0x4) 03:41:47 executing program 2: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="d9543038a1b282d50a0127a3fe787904192e365d99dfc335cf588132eba1a51d12f95180d319ee1e7666ca07423b043d77f268a4db33451cf00ae47cb045f9bc4e0385ab32e07ac5000000000000000032", 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ipvlan1\x00'}) ioctl$TUNSETTXFILTER(r0, 0x4b47, 0x0) 03:41:47 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 03:41:47 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40086607, &(0x7f0000000080)=ANY=[]) 03:41:47 executing program 4: r0 = getpid() r1 = pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, 0x0) 03:41:48 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x8, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) 03:41:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000002840)=0xffffffffffffffff, 0x4) sendmmsg$sock(r0, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001940)=[@timestamping={{0x14, 0x1, 0x25, 0x45c348f0}}], 0x18}}], 0x2, 0x4000000) 03:41:48 executing program 4: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x14, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x4}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x2c}}, 0x0) 03:41:48 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r0, 0x5607, 0x1) 03:41:48 executing program 0: r0 = syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7005, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x958) 03:41:48 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080000000100010002"], 0x0) 03:41:48 executing program 2: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="d9543038a1b282d50a0127a3fe787904192e365d99dfc335cf588132eba1a51d12f95180d319ee1e7666ca07423b043d77f268a4db33451cf00ae47cb045f9bc4e0385ab32e07ac5000000000000000032", 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ipvlan1\x00'}) ioctl$TUNSETTXFILTER(r0, 0x4b47, 0x0) 03:41:48 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40086607, &(0x7f0000000080)=ANY=[]) 03:41:48 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2}, 0x14) 03:41:48 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000200)={0x9}) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) 03:41:48 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080000000100010002"], 0x0) 03:41:48 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(r1, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x20}}], 0x2, 0x0) 03:41:48 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x43, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) 03:41:48 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401) write$evdev(r0, &(0x7f0000000200)=[{{0x77359400}, 0x1}], 0x30) 03:41:48 executing program 5: futex(&(0x7f0000000880)=0x2, 0xc, 0x1, 0x0, &(0x7f0000001b40), 0x2) 03:41:48 executing program 2: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="d9543038a1b282d50a0127a3fe787904192e365d99dfc335cf588132eba1a51d12f95180d319ee1e7666ca07423b043d77f268a4db33451cf00ae47cb045f9bc4e0385ab32e07ac5000000000000000032", 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ipvlan1\x00'}) ioctl$TUNSETTXFILTER(r0, 0x4b47, 0x0) 03:41:48 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2}, 0x14) 03:41:48 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080000000100010002"], 0x0) 03:41:48 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000000)={0x0, 0x0, 0x0, {0x7}, 0x0, 0x80000000}) 03:41:48 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r1, 0x0) sigaltstack(&(0x7f0000ffc000/0x3000)=nil, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 03:41:48 executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup(r0) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000040)=""/194, 0xc2}], 0x1) 03:41:48 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080000000100010002"], 0x0) 03:41:48 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') 03:41:48 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={0x0}}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x58}, 0x0) 03:41:48 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401) write$evdev(r0, &(0x7f0000000200)=[{{0x77359400}, 0x1}], 0x30) 03:41:48 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2}, 0x14) 03:41:48 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401) write$evdev(r0, &(0x7f0000000200)=[{{0x77359400}, 0x1}], 0x30) 03:41:48 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x50a8, &(0x7f0000000000)={0x0, 0xf66b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000002400)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1) 03:41:48 executing program 7: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) 03:41:48 executing program 2: r0 = memfd_create(&(0x7f0000000140)=':^\t\x00d\x8c\x0fO\xb96=\x0f-@O\xe9\xf3\xd3\xf2i&\a\x19\xe2]H\v\xe8n\x8b\xb3\xd9\xe3\xd3J\x00\x00\x00\x00\x00\x00\x00\x7f \xf2\x90~f\x97{\xcf/*\x1a;X\x18\x18\x95\xd6k\x97\xc8\xc9C\xaf\xa4+g\xc3;\x9b\xd8\xc4\f\x80\xa0\xf3\rLh\x97\xafY\x95#\xc2\a\x93\xdbV-1\x0eG\xb4\xb2c\xc73x\xeb\xb3\x06\xda(Kl\x13\xf1X9*\x97\"C\xa3\xd2 \xe0!I&]\xcfl3\xfc\xef_\xd2m3\x1e\x06;\xa4\x184\xf9\x14b\xbb\xff\xc7D&\x93\xad\x9b\xd0\x8cA\xaf\x02\xde0\xd9\xf3\xae\xac\xbf\x83\xf6\xa9AQyX\r\r\xd7\xda{\xdf\xd2\xa0\xe29\xab\xd3\xc1L\x9b9\xadgK\x16\xbabke\xf2\x9cIT\x8f\x81\x91\xdaG\x7fj\x81oU\xf3{-\xde\x03\xa5\xc2\x96\xd2\x80\x10\x0e\'\xbe>\"(*\x98\x86\xfa\x93\xc7x\a\xa7\'\x0e\x9b\xed\xf7k&}\xda(\xd9\x06\a.\xc3R\xefSQ}8R\x16^[\xf1\x06\x88\xf2;\xb4s\xeb=U\'^\x84\xc6uJ\x8c:\x152\x01\xa8\xc0\x1a\xe9\x85j\x0e\xf4vj(j3\xf8\xb1\x86.\xa5P[pE\xbb\x19 aTQ\x97U%H\xf0\xcb_\xbb\x00\x98\x91\x0f)\x05\xab\xc1577;\x7f\x14\xb0n,I\x80\x95}\xdb\xb9M\x96\xa4\xb1\xfa\xe1\xb9^\xc5\xb0w\xe5\xdet=\xea\b\x87\xf3\x1f\xd5\xb9@\xa5\xd7\x84\x02\x83\xa3\x98ikP\xa1\xb4\xf0+\x18/\n\x98\xa0\x18)B\xa9\xf4\x05r', 0x0) ftruncate(r0, 0x4) ftruncate(r0, 0x0) 03:41:48 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000001700), &(0x7f0000001740)=0xfffffffffffffdff) 03:41:48 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000340), 0x4, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:41:48 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401) write$evdev(r0, &(0x7f0000000200)=[{{0x77359400}, 0x1}], 0x30) 03:41:48 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r3}, 0x14) dup2(r1, r0) 03:41:48 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20102) write(r0, &(0x7f0000000600)="8952001487672c71fbe64d080676101a2ffbce688a623e2911d9b104", 0x1c) 03:41:48 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x1) 03:41:49 executing program 5: syz_emit_ethernet(0x4e, &(0x7f00000002c0)={@link_local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "2f2802", 0x18, 0x0, 0x0, @local, @local, {[@srh={0x0, 0x2, 0x4, 0xf, 0x0, 0x0, 0x0, [@mcast2]}]}}}}}, 0x0) 03:41:49 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000100), 0x4) 03:41:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x60b}, 0x14}}, 0x0) 03:41:49 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r0, 0x0, 0x0) 03:41:49 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') read$char_usb(r0, &(0x7f0000000080)=""/153, 0x99) 03:41:49 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) 03:41:49 executing program 3: statx(0xffffffffffffff9c, &(0x7f0000000240)='\x00', 0x1000, 0x0, &(0x7f0000000280)) 03:41:49 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0xc400, 0x0) 03:41:49 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) 03:41:49 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:41:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x2c}}, 0x0) 03:41:49 executing program 6: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x22, &(0x7f0000002000)={'trans=tcp,', {'port', 0x22}, 0x2c, {[], [{@seclabel}]}}) 03:41:50 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, 0x0, 0x0) creat(0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000000)=0xff) 03:41:50 executing program 2: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0xd4000a8b) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee01, 0xee01) 03:41:50 executing program 7: request_key(&(0x7f00000001c0)='.dead\x00', 0x0, 0x0, 0xfffffffffffffffe) 03:41:50 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5415, 0x0) 03:41:50 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt(r0, 0x5, 0x0, 0x0, &(0x7f0000001140)) 03:41:50 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, 'wfdno\xbf\x05\x9b\x18\xf7P\xfcR\x0e\xb9\f\xf9*\xc2\xb0\xb1O\xbd`O\x11\xe2SRr0L\x8a\xf5GY\xf1c\b\x8a\xd0\xa2\x950xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@aname={'aname', 0x3d, 'wfdno\xbf\x05\x9b\x18\xf7P\xfcR\x0e\xb9\f\xf9*\xc2\xb0\xb1O\xbd`O\x11\xe2SRr0L\x8a\xf5GY\xf1c\b\x8a\xd0\xa2\x950xffffffffffffffff}) recvmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 946.232574] EXT4-fs warning (device sda): ext4_group_extend:1862: can't shrink FS - resize aborted 03:41:50 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8910, &(0x7f0000000080)={'sit0\x00', 0x0}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 03:41:50 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r1, 0x16566fdb4c104121, 0x0, 0x0, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) [ 946.353202] random: crng reseeded on system resumption 03:41:50 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, 'wfdno\xbf\x05\x9b\x18\xf7P\xfcR\x0e\xb9\f\xf9*\xc2\xb0\xb1O\xbd`O\x11\xe2SRr0L\x8a\xf5GY\xf1c\b\x8a\xd0\xa2\x950xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@aname={'aname', 0x3d, 'wfdno\xbf\x05\x9b\x18\xf7P\xfcR\x0e\xb9\f\xf9*\xc2\xb0\xb1O\xbd`O\x11\xe2SRr0L\x8a\xf5GY\xf1c\b\x8a\xd0\xa2\x950xffffffffffffffff}) recvmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:41:50 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) 03:41:50 executing program 5: iopl(0x3) clone3(&(0x7f0000000900)={0x4022500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:41:50 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, 'wfdno\xbf\x05\x9b\x18\xf7P\xfcR\x0e\xb9\f\xf9*\xc2\xb0\xb1O\xbd`O\x11\xe2SRr0L\x8a\xf5GY\xf1c\b\x8a\xd0\xa2\x950xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@aname={'aname', 0x3d, 'wfdno\xbf\x05\x9b\x18\xf7P\xfcR\x0e\xb9\f\xf9*\xc2\xb0\xb1O\xbd`O\x11\xe2SRr0L\x8a\xf5GY\xf1c\b\x8a\xd0\xa2\x950xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="1d", 0x1}], 0x1}, 0x40011) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001040)="ff", 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 946.623008] random: crng reseeded on system resumption 03:41:50 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, 'wfdno\xbf\x05\x9b\x18\xf7P\xfcR\x0e\xb9\f\xf9*\xc2\xb0\xb1O\xbd`O\x11\xe2SRr0L\x8a\xf5GY\xf1c\b\x8a\xd0\xa2\x950xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@aname={'aname', 0x3d, 'wfdno\xbf\x05\x9b\x18\xf7P\xfcR\x0e\xb9\f\xf9*\xc2\xb0\xb1O\xbd`O\x11\xe2SRr0L\x8a\xf5GY\xf1c\b\x8a\xd0\xa2\x950xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, 'wfdno\xbf\x05\x9b\x18\xf7P\xfcR\x0e\xb9\f\xf9*\xc2\xb0\xb1O\xbd`O\x11\xe2SRr0L\x8a\xf5GY\xf1c\b\x8a\xd0\xa2\x950xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@aname={'aname', 0x3d, 'wfdno\xbf\x05\x9b\x18\xf7P\xfcR\x0e\xb9\f\xf9*\xc2\xb0\xb1O\xbd`O\x11\xe2SRr0L\x8a\xf5GY\xf1c\b\x8a\xd0\xa2\x950xffffffffffffffff}) recvmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:41:50 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, 'wfdno\xbf\x05\x9b\x18\xf7P\xfcR\x0e\xb9\f\xf9*\xc2\xb0\xb1O\xbd`O\x11\xe2SRr0L\x8a\xf5GY\xf1c\b\x8a\xd0\xa2\x950xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@aname={'aname', 0x3d, 'wfdno\xbf\x05\x9b\x18\xf7P\xfcR\x0e\xb9\f\xf9*\xc2\xb0\xb1O\xbd`O\x11\xe2SRr0L\x8a\xf5GY\xf1c\b\x8a\xd0\xa2\x950xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, 'wfdno\xbf\x05\x9b\x18\xf7P\xfcR\x0e\xb9\f\xf9*\xc2\xb0\xb1O\xbd`O\x11\xe2SRr0L\x8a\xf5GY\xf1c\b\x8a\xd0\xa2\x950xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@aname={'aname', 0x3d, 'wfdno\xbf\x05\x9b\x18\xf7P\xfcR\x0e\xb9\f\xf9*\xc2\xb0\xb1O\xbd`O\x11\xe2SRr0L\x8a\xf5GY\xf1c\b\x8a\xd0\xa2\x950xffffffffffffffff}) connect$unix(r0, &(0x7f0000000080)=@abs, 0x6e) 03:41:51 executing program 7: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x15, r0, 0x0, 0x0) add_key(&(0x7f0000000280)='keyring\x00', 0x0, 0x0, 0x0, r0) [ 947.262288] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 947.269998] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 03:41:51 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x4000010, r0, 0x12e36000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0}, &(0x7f0000008600)=0xc) setresuid(r1, 0xee01, 0x0) shmctl$IPC_RMID(0x0, 0x0) 03:41:51 executing program 6: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @remote, @local}, @echo_reply={0x12}}}}}, 0x0) 03:41:51 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_NEXT_CMD_LEN(r2, 0x1276, &(0x7f00000000c0)) 03:41:51 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)="f9de6c8a", 0x4}], 0x1}, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) 03:41:51 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setresuid(0x0, 0xee01, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8923, &(0x7f0000000000)={'bridge0\x00'}) 03:41:51 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x30, r1, 0x16566fdb4c104121, 0x0, 0x0, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffffffffffff}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x30}}, 0x0) 03:41:51 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000080)=@abs, 0x6e) 03:41:51 executing program 7: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x15, r0, 0x0, 0x0) add_key(&(0x7f0000000280)='keyring\x00', 0x0, 0x0, 0x0, r0) 03:41:51 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_NEXT_CMD_LEN(r2, 0x1276, &(0x7f00000000c0)) 03:41:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_WOL_MODES={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x1c}}, 0x0) 03:41:51 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x4000010, r0, 0x12e36000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0}, &(0x7f0000008600)=0xc) setresuid(r1, 0xee01, 0x0) shmctl$IPC_RMID(0x0, 0x0) 03:41:51 executing program 4: fchmod(0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/acpi', 0x200000, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:41:52 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb) 03:41:52 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x4000010, r0, 0x12e36000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0}, &(0x7f0000008600)=0xc) setresuid(r1, 0xee01, 0x0) shmctl$IPC_RMID(0x0, 0x0) 03:41:52 executing program 7: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x15, r0, 0x0, 0x0) add_key(&(0x7f0000000280)='keyring\x00', 0x0, 0x0, 0x0, r0) 03:41:52 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000080)=@abs, 0x6e) 03:41:52 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x30, r1, 0x16566fdb4c104121, 0x0, 0x0, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffffffffffff}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x30}}, 0x0) 03:41:52 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_NEXT_CMD_LEN(r2, 0x1276, &(0x7f00000000c0)) 03:41:52 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x4000010, r0, 0x12e36000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0}, &(0x7f0000008600)=0xc) setresuid(r1, 0xee01, 0x0) shmctl$IPC_RMID(0x0, 0x0) 03:41:52 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000440)="85", 0x80000}], 0x1, 0x1000, 0x0) write$P9_RXATTRCREATE(r0, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) 03:41:52 executing program 7: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x15, r0, 0x0, 0x0) add_key(&(0x7f0000000280)='keyring\x00', 0x0, 0x0, 0x0, r0) 03:41:52 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000080)=@abs, 0x6e) 03:41:52 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x30, r1, 0x16566fdb4c104121, 0x0, 0x0, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffffffffffff}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x30}}, 0x0) 03:41:52 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 03:41:52 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r1, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x7fe, 0x0) 03:41:52 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000000)={0x80000000}) 03:41:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000014c0)) 03:41:52 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f00000002c0)=""/239) 03:41:52 executing program 4: fchmod(0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/acpi', 0x200000, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:41:52 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r2 = dup2(r1, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x23, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000001c0)="fbdedd51f209c0809f464d7c53111b138bc6cd46db55f3f29103cf23cc269902deb5b2", &(0x7f0000000240)=""/6, 0x0, 0x0, 0x0, 0x0}) 03:41:52 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pread64(r0, 0x0, 0x0, 0x0) 03:41:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0xb341daa0822653b3, 0x0, 0x0, {0x13}}, 0x14}}, 0x0) 03:41:52 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x30, r1, 0x16566fdb4c104121, 0x0, 0x0, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffffffffffff}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x30}}, 0x0) 03:41:52 executing program 4: fchmod(0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/acpi', 0x200000, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:41:52 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f00000002c0)=""/239) 03:41:52 executing program 1: madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) fork() 03:41:52 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 03:41:53 executing program 4: fchmod(0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/acpi', 0x200000, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:41:53 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 03:41:53 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f00000002c0)=""/239) 03:41:53 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 03:41:53 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) 03:41:53 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 03:41:53 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r2 = dup2(r1, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x23, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000001c0)="fbdedd51f209c0809f464d7c53111b138bc6cd46db55f3f29103cf23cc269902deb5b2", &(0x7f0000000240)=""/6, 0x0, 0x0, 0x0, 0x0}) 03:41:53 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f00000000c0)=""/194, 0xc2, 0x2) 03:41:53 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f00000002c0)=""/239) 03:41:53 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x40, 0x42, 0x6, 0xe7, 0x0, 0x4, 0x48088, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x5, 0x6}, 0x40, 0x1000, 0x0, 0x4, 0x80000000, 0xd34, 0x4000, 0x0, 0x80000001, 0x0, 0x3}, 0x0, 0x8, r0, 0x9) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x29, 0x0, &(0x7f00000023c0)=0x24) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e24, @broadcast}, 0x240, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)='macvlan1\x00', 0x81, 0x100000000, 0x7cd8}) 03:41:53 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 03:41:53 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 03:41:53 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 03:41:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x1a, 0x0, 0x0) 03:41:53 executing program 7: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:41:53 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r2 = dup2(r1, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x23, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000001c0)="fbdedd51f209c0809f464d7c53111b138bc6cd46db55f3f29103cf23cc269902deb5b2", &(0x7f0000000240)=""/6, 0x0, 0x0, 0x0, 0x0}) 03:41:53 executing program 4: syz_emit_ethernet(0x83, &(0x7f0000000400)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "409d26", 0x4d, 0x88, 0x0, @private0, @mcast2, {[], {0x0, 0x0, 0x4d, 0x0, @gue={{0x2}, "37020e94febd24d51dc3e7aa99f4babd49c5a89bb9076365751d31e1db2d9f4806589ffa8c4e0ff7a2172b76deba9435db55aa771dff42662679ca3f79"}}}}}}}, 0x0) 03:41:53 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x3c}, 0x0, @in=@dev}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x0, 0x0, @loopback}, 0x1c) 03:41:53 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 03:41:53 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 03:41:53 executing program 7: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:41:53 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000240)="06d5", 0x2}], 0x1, &(0x7f0000000a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}], 0x20}}, {{&(0x7f0000000040), 0x10, 0x0, 0x0, &(0x7f0000000c40)=[@ip_retopts={{0x10}}, @ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4}]}}}], 0x28}}], 0x2, 0x0) 03:41:53 executing program 3: syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={[{@stripe}]}) [ 949.647603] No source specified [ 949.650851] No source specified 03:41:53 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) 03:41:53 executing program 7: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:41:53 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = dup2(r1, r0) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) 03:41:53 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x25, 0x0, &(0x7f0000000240)) 03:41:53 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f00000000c0)=0x5) 03:41:53 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_mrelease(0xffffffffffffffff, 0x0) 03:41:53 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) 03:41:53 executing program 7: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:41:53 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r2 = dup2(r1, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x23, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000001c0)="fbdedd51f209c0809f464d7c53111b138bc6cd46db55f3f29103cf23cc269902deb5b2", &(0x7f0000000240)=""/6, 0x0, 0x0, 0x0, 0x0}) 03:41:53 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5396, 0x0) 03:41:53 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000019240)=""/102400, &(0x7f00000000c0)=0x19000) 03:41:53 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x49, &(0x7f0000000100)=0x20, 0x4) 03:41:53 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) 03:41:53 executing program 2: io_cancel(0x0, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 03:41:53 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001dc0)=[{{&(0x7f0000000200)={0x2, 0x4e21, @loopback}, 0x10, 0x0}}, {{&(0x7f0000000dc0)={0x3, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x2, 0x0) 03:41:53 executing program 3: symlink(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='./file0\x00') utime(&(0x7f0000000000)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) 03:41:53 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x14, 0x0, r1) 03:41:53 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) lstat(0x0, &(0x7f0000000180)) fstat(0xffffffffffffffff, 0x0) 03:41:53 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) 03:41:53 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) syz_read_part_table(0x0, 0x0, 0x0) 03:41:53 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000009680)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000011c0)='\n', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000500)="abc82f4b0c65dc65ce5133c7e476076068a83ee92be8e4d3a009928f93cd3bfb040f90f5d1628f91b12b79bb8ba0fd1eb46b1878be284bc3a100eca58bf28ea03d48a1e437744869ff4575ea3868d19605e3457f16e88f76a89efed42659840579a8dfbf55a3d195e32fb6cbbc283b5f15e65d161df3e2612790202e24b9eeac934ab17ed3fcc33835e4b163edc71c58dc1c7fc28a491b4ad14412f6a0419e516588a318", 0xa4}, {&(0x7f00000005c0)="d32b15b258661773fe4339143c26158cbad0c1d15e72bfda8567bae248f941061de2c4aad8fff993890955a4512fbb14fdb5e5d9e02068e1d3ff76dd7b455f3b680c544b6a368b02635b5998982844cd3c9bb255ceeb12489f70ab2f80b05fae6945e9a3c97dc791e0743c13015cb9c41eba959c4a64c7cd6a858fb3fb2b94ce87af21dcf4e580ede5d22335c4c00080f47093a6a4c5fe9669834daaccc7df87abdc5ff6ab79fa4ec7be34abdbb920fd11ecb9f62d8f80a3955ec77c6539849733bdc115cd705cb7424ce488f5cd91859ab9e22395619a614ef5dbb9e2f82d0980e818ab8e5c90a6a64b4434256b6e27af68b34c", 0xf4}, {&(0x7f0000000780)="1bde42f26b32e1ef07c37d01cc092b7572f703299aece9def598b359f731c09eac5eca072b22b23564ad3d92d330567b843c5ff74c061bf31d1e40ca5c5a0e78049218c02781b954a375e6b1ad394b5fc0242c5cbe1e0696cb11948b0d14230a4db98f98fc0c7364c8b99ba93fd4b5f492e5918fde8f8339663949c29a1772bf4aa32c7d73a7c020603b3c5e0234d37c31959e", 0x93}, {&(0x7f0000000840)="7dfb88723da3512e425bed8e80162d0be98da9e941e352729f69dfbe9f1c70ea8a0b1ba55fbf3b6d22089ff98fee7fb7409685cc631f80dba397e00c3e9db0a74d1d58383d5051a99bac57bc51ddda59575c2237c5339eae355eb916b90d53780a43f0aa81d5be3780ea30e3efed286c9ab4d827f4de9d8526d72a21c28872821a7166af627cd6f362af7aeca0e3e8ef8fbb73d8c86924b45afcfdc144281d491594978b3d5dc0f7e94428178611751f03df2b5302f12e49212bd0e1ae9782b2cad49e75b9f8a84d7be9b126adcf74ad39fa69f72646e4742b960890f2a3d52322001e997b6d08b29490", 0xea}, {&(0x7f0000000940)="cea262d51d1621163e229cb550310c7b643b5ab86494c7880d87ba45be49e718af554fb6c9449c96b13d85e8084f6ace9d21493875618e0389b834b3e91436a3efdc7104b44061006ae5a27001669bf298dc3c1ca4075a19443629899129e087a29b5ad75093cb6bd763acccc73c6463da1b5891efcd0a77813831ceb1ef189ac8e28c97c5c4e0eb0b2d06c96d89e83eedab06b2a524707749464f1af2c7d129d8b58015562dbbebff854fbc4af29dfe0a16761f1580a4e9eb1c8790eb735cbb36e18e2a8f94064faf34dd3d0913d31ac9", 0xd1}, {&(0x7f0000003840)="981c778502d4c3eee1b55047bb5e8c2f931d501e78a412d7", 0x18}], 0x6}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000d80)="e3", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000fc0)='s', 0x1}], 0x1}}], 0x3, 0x44009) 03:41:53 executing program 1: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) 03:41:53 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000000040)=ANY=[]) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, 0x0) 03:41:54 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) socket$packet(0x11, 0x2, 0x300) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') pread64(r1, &(0x7f0000000080)=""/203, 0xcb, 0x0) 03:41:54 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x12, r0, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4) 03:41:54 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000880)={0x1, 0x1, 0x0, 0x1, 0x0, &(0x7f0000000480)}) 03:41:54 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xffffffff}]}) 03:41:54 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)={0x28, 0x21, 0x1, 0x0, 0x0, "", [@nested={0x2, 0x0, 0x0, 0x1, [@typed={0x14, 0x100, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0x28}], 0x1}, 0x0) [ 950.392259] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.7'. 03:41:54 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x12, r0, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4) 03:41:54 executing program 0: setuid(0xee01) setfsuid(0x0) 03:41:54 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000100)) 03:41:55 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) accept$unix(0xffffffffffffffff, 0x0, 0x0) 03:41:55 executing program 6: prctl$PR_SET_MM_MAP(0x25, 0x7ffffffff000, 0x0, 0x0) 03:41:55 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)={0x28, 0x21, 0x1, 0x0, 0x0, "", [@nested={0x2, 0x0, 0x0, 0x1, [@typed={0x14, 0x100, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0x28}], 0x1}, 0x0) 03:41:55 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000040)={[{@utf8}]}) 03:41:55 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) [ 951.230860] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.7'. 03:41:55 executing program 6: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r1, &(0x7f0000000040)="5ed0d2", 0x3) write(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendfile(r2, r0, 0x0, 0x3) 03:41:55 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)={0x1c, r2, 0x1, 0x0, 0x0, {0x2}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) 03:41:55 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x12, r0, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4) 03:41:55 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)={0x28, 0x21, 0x1, 0x0, 0x0, "", [@nested={0x2, 0x0, 0x0, 0x1, [@typed={0x14, 0x100, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0x28}], 0x1}, 0x0) 03:41:55 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) 03:41:55 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) accept$unix(0xffffffffffffffff, 0x0, 0x0) [ 951.438182] ieee802154 phy0 wpan0: encryption failed: -22 [ 951.542221] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.7'. 03:41:55 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x80086601, 0xfffffffffffffffe) 03:41:55 executing program 2: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='cgroup2\x00', 0x0, 0x0) lstat(&(0x7f0000001700)='./file0\x00', &(0x7f0000001740)) 03:41:55 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)={0x20, 0x19, 0x1, 0x0, 0x0, "", [@generic="02", @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}]}, 0x20}], 0x1}, 0x0) 03:41:55 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x12, r0, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4) 03:41:55 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)={0x1c, r2, 0x1, 0x0, 0x0, {0x2}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) 03:41:55 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000100)='\\,!X(\\\x00', 0x40, 0x0, &(0x7f0000000140)={0x8, 0xffffffff, 0x1, 0x1}) 03:41:55 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) accept$unix(0xffffffffffffffff, 0x0, 0x0) 03:41:55 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)={0x28, 0x21, 0x1, 0x0, 0x0, "", [@nested={0x2, 0x0, 0x0, 0x1, [@typed={0x14, 0x100, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0x28}], 0x1}, 0x0) [ 951.825658] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 951.829748] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.7'. 03:41:55 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) accept$unix(0xffffffffffffffff, 0x0, 0x0) 03:41:55 executing program 6: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000013c0)='numa_maps\x00') fstatfs(r0, &(0x7f0000000040)=""/158) 03:41:56 executing program 3: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000440)="85", 0x80000}], 0x1, 0x1000, 0x0) 03:41:56 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)={0x1c, r2, 0x1, 0x0, 0x0, {0x2}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) 03:41:56 executing program 7: r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) statx(r0, 0x0, 0x1000, 0xfeffffff, 0x0) 03:41:56 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000340)=@abs, 0x6e) 03:41:56 executing program 4: ioperm(0x0, 0x30, 0x7f) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 03:41:56 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/event_source', 0x0, 0x0) lseek(r0, 0x8000008, 0x0) getdents64(r0, 0x0, 0xfffffffffffffe99) 03:41:56 executing program 0: perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:41:56 executing program 6: remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0xa00, 0x0, 0x0, 0x0) 03:41:56 executing program 4: ioperm(0x0, 0x30, 0x7f) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 03:41:56 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_setup(0x2, &(0x7f0000000680)=0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_submit(r0, 0x2, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x3, r1}]) 03:41:56 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)={0x1c, r2, 0x1, 0x0, 0x0, {0x2}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) 03:41:56 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) 03:41:56 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00') 03:41:56 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r0, &(0x7f0000007d80)) 03:41:56 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:41:56 executing program 4: ioperm(0x0, 0x30, 0x7f) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 03:41:56 executing program 5: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x1000) 03:41:56 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) 03:41:56 executing program 4: ioperm(0x0, 0x30, 0x7f) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 03:41:56 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r0, &(0x7f0000007d80)) 03:41:56 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_secret(0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) 03:41:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)={0x18, 0x15, 0x1, 0x0, 0x0, "", [@generic="02a50043e2"]}, 0x18}], 0x1}, 0x0) 03:41:56 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xc}]}, 0x28}}, 0x0) 03:41:56 executing program 3: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000440)="85", 0x80000}], 0x1, 0x1000, 0x0) [ 953.011375] netlink: 'syz-executor.6': attribute type 11 has an invalid length. [ 953.030608] netlink: 'syz-executor.6': attribute type 11 has an invalid length. 03:41:56 executing program 5: msgrcv(0x0, &(0x7f0000002440)=ANY=[], 0x1008, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) 03:41:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)={0x14, 0x16, 0x3, 0x0, 0x0, "", [@generic='\n']}, 0x14}], 0x1}, 0x0) 03:41:56 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsync(0xffffffffffffffff) 03:41:57 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) 03:41:57 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r0, &(0x7f0000007d80)) 03:41:57 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x32}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x40}}}}}, 0x30}}, 0x0) 03:41:57 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1c, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x2c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 03:41:57 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r0, &(0x7f0000007d80)) 03:41:57 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x2400}, 0x0, 0x1, 0xffffffffffffffff, 0x0) syz_io_uring_complete(0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) sync() openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) sync() process_vm_readv(0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f0000001500)=""/96, 0x60}], 0x2, &(0x7f00000000c0), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') r1 = fork() ptrace(0x10, r1) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) fcntl$setlease(r2, 0x400, 0x1) openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f00000003c0)={{r0}, "a1ca2d42013e88e6a17ded9fea95f145fc8506d928a7c21266d940a4b628fec9260da83cd0b14778b4fc79d35307014a3c01c496bb222b4a505dc83ce22b21b7694f926563e53cf45b179024a663bb16ebde1537243e627a92313eb7f944192ef6c8b7f47750fea8db256e79bf565c980e0a1afc6ad32f7266f8196f3c51f109d1d2377091049953b50c99e4ba5e19565e7b3f257f216700de3608d728c5d3426fd4101dc0dac1a78539791b9696e568226d36b3bdcc170c3fd3bd8005642aee827fd3182157ffcd0b3343552f1c750b7472ca82b0b0b40cf96710a7a65968cc5aaab238034f3a5a83d5544a1b087199e4e4dacef280b59be28105e024900c6fb7cc2eac7fbe5e68fb445c6216e7a9b1a71c952c502e2d67d7783fbb38c37db9759d89ebbfdf557e1bc28374aaf7c55f8be56aa21d714306261183ae20a1d292ac03a4acdff5905deb9279a59aa872aa16c7e5381d746a3dba466b5ba7bd1899482c8570e5417b00d6c6f50e443c81aa1474fa4d420cb0390aa86d0e381f9af73a2267dfb9b07d3e10b9331305eee60d714ebe75fc86acaa9f5646fff032a41c92701f1f7d78c9d05f244c95aad651a8dfb91d22d33114ec33cd5fc52b461a3797ed734955c25ec9bb2a9ffef2c0d0ceaaf205f1e8131152b586933102b3055f5ab493af4addab8179d1d63d5ce62c91cda8b21cf4faab076bf704520d58b7362a67fbea4b3fef194cc7f55045c327553822caad55d7f9bd2ff9d03b2f21bdfcf7b55f8943f41a9d471b646d7f9936035e9749b38b2f876b2d9ea9cad64dd9818d0e67d628e004b67ab9915c3fc64d7bf3745fe725f2018fd71c4bbadf14701474440ae776a55b0bbaa7e556f19802141f4e06ad17a854e2d9166aac374205a8b7bdb1cbff8a856535847bc0153a6ad6f9ffb92301e4fbce9bd9f6153e27a64f5c03b4215b387a07c12f7aec62ac498ffba7a7445edff25b019ddc45d9c305477097ad9473d2d9f011a1471f1c88de2941b1e9dd1d8435c5c2d59adb4fe4caa1a1e16397f68166c75e4f6b4e8f1c0a63db9ad912d1b1dd8ab881a8ff0230299c65ddc572f6b5a13041e4139be8f3c1daa4611bb8b7624c2fec0947fbb46fb1aad50c3beb0455a504f1734f0057a42c326ec1381039f800140457c20ac6e86590ae11cf4c03c6890a4182e9c5d347e7bd6667dd5a56dd7ce7387f99b6ed4b3505482220dea6845afdd3337f62a289c518310a705a16a30c3383f9621e196f5278b2a83ac58d6d2770a55c8b15a3fda2918e225fcf3c4290ab76b9329b62e7cc16da9dab98189242e661157f91beb1d1bd17423bd196c575354e2d8b21a97b4592bb80178d86dadfc921f7ac21825b6e1abc6be5f0a1230be3987eaf803eb77f184ba991a28e9ac3467ff5e9a0ca36f13bf06057601da32b061da44e5b8034389cd4fab9578b9a813caf041652d654d80855820098a30aa1d5fea0aa3fe1022a58c717aa707b162c075a8c0739bc843e5c9cdbfe23ff15a75a8b85a452b35d0387e6027082eee57979e5db941ff1f37a3339602dc347aecdf50146d4f61d8b7e11256152289946f7c8ae2dcfde7914a16d2713cf75b59f4289f7a46fae846086bdce9093b34e3040544ee867e2b85072b00ffc5cc5f414d8550f4e2762637d7f30a0f5f888af40f80a6408167261b063c08b3984d18a1a211903accf5fa52fc646012129b276f2d130dd34837dbaac9065e0c12e2f36dbbdb9e08ca3e363870426d76d36e47a26894167133fc5baa88e781704cc92878a695e20760b27c771854d3fa482b39898abed369791b107cac334447b3f18367ef583da8c4af016db9b489f0317736a7dfab37645c0c6c7c02b6c0ab1f5c8f5b1dceeddf468561d8726e03e0072f4a565dc05aaf6d3346fbec1de21c0144133cc6f32fa8edb974f1a8fdf10fed32379e8df0eda15e1bde9df662372401a0a8be675e4d2f529844e2abe777963fed4cb5ba433fd47a4c753b092f47e06a1cdab4f4545ab10f32dcb1de120c1df49608b7e1f19d7f813fbaa4a3be5977d4f4e662c28318afdbe04bd96b5abe2ab182b55e418f54d820f72e86b47f750727c3f558325542a40529dec0c25420e1b87bb9c5d4b62166ba247e106199248373c72270bd2fffb9aaea2ad87bf6815c39ce524c970ca739f07c9d9982e9d8f7b7518790ecef91ac2b93b2c4d5c7fb45c09c5f21647177b86adcc4c84f557b484f4b9977660923126c6ff7d46d877169b548462b8f75be4c694328c0fc2164195609098d16cf9a9f8525469a85a95d9db17a0dcb5081e3610e1b1eb2822e5621097772e1abeddaf8454c3c014372d3b1db09521b8edcf70d92fe6088d875b527786fee972b62fb8a1995824573779f7ef888fb225c82b214030e42045501a81efa3900f5974215facef3187295c6047eaa6e9945df5d65f5adc37185f04ddbeb221cdca976e109abd3193d26e281588e426cb7096d7733d91220aed5fbd343e6be07cd074b25ab03dce05c56036b98740bfecb320153608120c105210484ba29a94260046e3747743feadf89fdf2fbeb92dec0a4a3eab2d9d3f73e7bcb23c41e38b3fa0afd027a41f6a115450aaccc5ea696fe020b8c8a571ec80a80bbff07be32edb0ecc1717d1efed5ca3125c02bac349f92943bea2913ba95a1e2ddc9e1118f44e1ed239e3ab8001f78c8771c2e97a8402f428cd3423704a1b83ec8142df31e5a547fda7cac4d8304d6d2f6dc55bc46c2b64c67760268cd60916e535593a0b30bc5b2257c3bafcd880feaf25611955121c79ee684e364169d810ed4dcfa062f532cf0a41c7cc88de2a62d7d67d40bd87ec296fca6b573f8484436563a71c29b1d11ab6db838430beee28ce807e1487cb6cfaf08e8a53c43979500045ce37d78f2619db51a034c616caa608bc2af6bac6ea0b193c31f686b6e7193f9730a23af8836f2f9f68eb803a2c800dffc157c89e289dec11e69246664b176ee2f304025d907ab220b36354139a086874d5b418c952a57f968bb7d9b8c7f5d1b0ec7e30dcc207f73dd9644b76d5a77aac90fa1adee66565e9b469584d4d7c81df2546dd341b7955baff5be96fc8625c6398dd33b6485e3e588b91590bbd5c3045ae5bbb5505fcd0c0215879e03fb1717a0f3552ab0d7164418ed49badc3a821958872b0cc403637cc18d28a0529ed481b89ec50f816eabdd9b2a1fb6fe7b7e93229f5c6bb705edf9f830df197a8db7bdf5a96a4b864f7e2e1fdc4b414df3479e9026eb718dac66e11ee3642f6c0a2ad608db9ddc024830eb2b0fa10fe2e2aaae57bdd188891817a2ad6ee2719885542551f14c805691947a3dcf90e8a288b3d423e2c38446f9c4f46c224614c2cab4e286a33c4ef11b090e928c56f6466ab50b3176f493fca9988f30dceb586b167d4016ea5ab1ce60d45a26a76a4bf5e925ab6ee73865a7e96358c8ed3d469a29e274ea410b04c143b311e6070486a18d3214ddf7b0b0ec41475562a7b7eb5afd0b9320072a4b47e49bb72525d02d3fe6c8d0f8b2729a0c9dfab47ec0fd592394a19e47e03f6b3c169036bf0881ca688156f8afabad1f63f1391889d8bd249dc1625af8ded62f21f37d63fc50fe4fbae8e11d51966c76014864ea69bf99c34138f59da025780d391c92ebd4830a01a06adf07c00efae0f902ec5d67e39d93b6105012825386404b1004ce6821572ac5deeb9e97148c69a201ff5ca270db8fcb3f70cbc56c6f7a53f5f2bda99875dda9d2cf11c5f42c3ea08ec02301eeedb3a0b6e677baad136334be3d5baea94849c9ff1fe05a3a99e2e8b16adae8eeab1d03f6b911b0eb712aef76aa81b1fd43a1f8010811a52a76d40c7c75be581b584e2738048f601f7455eb344ab000d033446aa8180a5b0304e67bc768694d79dd3d87a78191e0aa6060f062fc85fb1445c230fbb293e2a5b37122c172403c7daf8e508e57907682d711a547e6c1d19f69790a50c5cd40a494367eff0f7f8983ef024ac2009200a6c12d4d278c7dd7a36a65fdd3524e24db324c109c896468fd335ca084ec8796850e7c5fa4d0778777aa8c0f24b382a1eecf4d563919fd0f473ad1b87d9cd147f16012a910300f28edc2298302de00e2a0dded26bae711a11dc7d1d7c4a8c7fd63c03e76d169fb22b2fed0a64b553e259c25ac7b4c50daba812ad0df2e2461e1a6caf0748d3ba89a89c75da5c7dadcf4747fc824b47b16b3f802166cbce38ec4e16967ef157b183abf119ea8dc3335f664b370ff73c38b9cfc38ae5ad7f82ef4b5c4d35750219f10b7c5c316ad52f0892900084a63bbb573386adfec13609ce4edba84c4d5d3585740f4510b82a325883743b362ec9d5969898ac46615e3f5c46affec2b0ab624a559b12ee91392f9548330ddcb37dc0b3ec50c9e0aaf619a3e54366e52a0d3486cfac79bde077d9c3343a4726d88bd6a5034ac385d617fac61880df140d3ad165e0d86f5caa98aee77a467716b1e0a99ceb2a1136288a08e366abe16f9c9a6cb94ab1f684cb6cc68c6e844c931533ed1dec046a4f1065de791bbdc60cc701ac8fc01bbf0afcaccbb866e006cf263d9de197609829d1693a03953fed3ce276214bf29c5bbe92bdeb972e11019f6bf388cf72862c2558f43fde319c7e82f2cdf6234d54602ad6ac842699e98bd94b22b0a7dcbd4d9c9cfcf03ebfa43ef7ef4f56db2b6ea52e0f42505c75bc1b6f14a943b73af8f1b89101203450c8d2ef7adacae29accde56c7e204f08d9417bb39373f3ae829738c67aa583a3b4e43130b7cdd72f74873d89cd43444fe1d5692fd4f11fb60c79182a3597e41f0a5559ba544a9ef9c9ada699232eb050f5be8ce0405336aa4d0fc1b7cb3b9b8538d1a4a8e78bd23d3928aee6b4d6c55968a6deb3732e0fb8c7f7bffd394e62fdd564946e11cab649794c45c9a488ffd6610932a9d67d1a0036d3746e4c9c04ace680b97d2272f2cbeb9f9c956b1776411731258eb5390322770bad8081f3cc2d431f86fb60aa6b3fe609190dbacd798a08b63334800789f36fa62520c1dca9e9348f1d3ac05ac58435297aa1949cc3885bc27893fa1ba965c4dd471fd472f9f730c3b0dc6c52deea954e37e7cc560877f87d7ca2cb39399a624b28cd64ad1504cdac98cbd52284bb7445ade6296b3eaca3bd3ea4ec7d311f8a547350ea6a2831fa76aa3f032d4850ba5d74aacd6b202b52cdb83657adb418848e13bc8d18f32b40e1e9979674f8905b6bf8d55ac4801ec6069cec74f2ba9749c7334e485f05299fc7098f96bb9afa7063d5b76ac571a6a247d22d2b8c2afaf5b1a9b74950ea87e4524a0646fccb17872c9e1df92b03b91467ebc787bc41b56cff021535e94dd10f2e3aef2570cdae41ef48645ceabab4621c50da2a32892b769afa1f6b925f35566972b34f49039baf5055effd7d5317f9917181149e743b9dc7b6813534d627873f8090060edad32b70b672fe8df5db074aca6004e959f75d5793b73bba39123fe0aca9823d6e0ed064e88385b716b39d8b415ae6df9050804e1f6db52d4738f0933c339a5a2ff7f9ed357785f0218403b177e4d33ea0e7efd5e684bcc0a02ca881b565e2f5d750e679fa81eccc11dc6cbc957d1b9a237b279432638ade683503073754aa5c123f2e7750f0919caef70ef8f6de70a671a773988e0b5f5ee48c0bfc022677ca75e498ac4acce609a1e03661428a597d97082758d4594984b04c8ab900d35369f97ade1bd5b6ec0b32b687ddd1ae1d3529959"}) 03:41:57 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_secret(0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) 03:41:57 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) 03:41:57 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f0000001bc0)=""/119, &(0x7f0000001c40)=0x77) 03:41:57 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r1 = inotify_init1(0x0) dup2(r1, r0) read$hidraw(r0, 0x0, 0x0) 03:41:57 executing program 1: perf_event_open(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0xd2100, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e", 0xba) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) 03:41:57 executing program 3: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000440)="85", 0x80000}], 0x1, 0x1000, 0x0) 03:41:57 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_secret(0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) 03:41:57 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() sendmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x0) recvmmsg(r0, &(0x7f0000001680)=[{{&(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, 0x0}}], 0x1, 0x2, 0x0) 03:41:57 executing program 4: prctl$PR_SET_MM_MAP(0x41, 0xe, 0x0, 0x0) 03:41:58 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 03:41:58 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x4, 0x0, &(0x7f0000000100)) 03:41:58 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_secret(0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) 03:41:58 executing program 5: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) ustat(0x6, &(0x7f0000000040)) 03:41:58 executing program 7: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x40000000, 0x4) 03:41:58 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast1=0xe0000002, @local, @local}, 0xc) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/mcfilter\x00') preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000000)=""/136, 0x88}], 0x1, 0x8000, 0x0) 03:41:58 executing program 6: setpgid(0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x6, &(0x7f00000008c0)=[{0x9, 0x1, 0x1f, 0x7}, {0x535e, 0x1, 0x6, 0x9}, {0x3, 0x2b}, {0xf8, 0x6, 0x0, 0x81}, {0x5, 0x5, 0x2, 0x3}, {0x6, 0xc2, 0x0, 0x81}]}) 03:41:58 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x20}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, 0x0, 0x0) 03:41:58 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='clear_refs\x00') write$P9_RWRITE(r0, &(0x7f0000000000)={0xb}, 0xb) 03:41:58 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x9) ioctl$TCXONC(r0, 0x5437, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 03:41:58 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x25, &(0x7f0000000000)=0x9, 0x4) r1 = dup2(r0, r0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f00000000c0)=0x2148, 0x4) 03:41:58 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0xb341daa0822653b3, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 03:41:58 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x11, r0, 0xee00, 0xee00) 03:41:58 executing program 3: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000440)="85", 0x80000}], 0x1, 0x1000, 0x0) 03:41:58 executing program 0: syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @dev}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x30}}}}}}, 0x0) 03:41:59 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x141001, 0x0) write$binfmt_script(r0, 0x0, 0xfdef) 03:41:59 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x2, 0x0, 0x46) 03:41:59 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000040)={0x1, 0x0, 0x13, 0x1f, 0x170, &(0x7f0000001880)}) 03:41:59 executing program 4: sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000140)) 03:41:59 executing program 0: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38010000100001000000000000000000ff020000000000000000000000000001fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc02000000000000000000000000000000000000320000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004800010077703531322d67656e657269630000000000000000000000000000000000f20000000000000000000000000000000000000000000000000000000028647156008a"], 0x138}}, 0x0) 03:41:59 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x9) ioctl$TCXONC(r0, 0x5437, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 03:41:59 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080), 0x6) write$bt_hci(r0, 0x0, 0x8) 03:41:59 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r0, 0x80, 0x0, 0x8001) 03:41:59 executing program 1: r0 = epoll_create1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x7e, 0x0, 0x0) 03:41:59 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={@mcast1, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x6c, 0x0, 0x0, 0x0, 0x50800a0}) 03:41:59 executing program 4: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="d9543038a1b282d50a0127a3fe787904192e30be12e051656ca28132eba1a51d12f95180d319eef8bb32a4a5275ed0721e7666ca07423b043d77f268a4db33451cf00ae47cb045f9bc4e0385ab12e07ac5", 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x401054d5, 0x0) 03:41:59 executing program 0: r0 = io_uring_setup(0x1ff, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r0, 0x21, 0x0, 0x0) 03:41:59 executing program 2: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)={{0x10b}}, 0x20) 03:41:59 executing program 6: r0 = epoll_create(0x2b) r1 = epoll_create(0x8001) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000080)) 03:41:59 executing program 0: syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @remote, @local, {[@lsrr={0x83, 0x7, 0x6f, [@remote]}, @timestamp={0x44, 0x4}]}}}}}}, 0x0) 03:41:59 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000240)="d0b419c71e5ea5ed5e51ffc84f69880dbdbf762a65badec3c69289cc8f2559a3e9501bab960eeeaa7153aada0c6a896f6d1b48", 0x33}], 0x1) 03:41:59 executing program 2: r0 = memfd_create(&(0x7f0000000000)=':^/\x00', 0x0) finit_module(r0, 0x0, 0x0) 03:41:59 executing program 6: openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) 03:41:59 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000040)={0x1, 0x0, 0x13, 0x1f, 0x170, &(0x7f0000001880)}) 03:41:59 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x9) ioctl$TCXONC(r0, 0x5437, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 03:41:59 executing program 1: r0 = epoll_create1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x7e, 0x0, 0x0) 03:41:59 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000240)="06d5", 0x2}], 0x1, &(0x7f0000000a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}], 0x20}}, {{&(0x7f0000000040), 0x10, 0x0, 0x0, &(0x7f0000000c40)=[@ip_retopts={{0x3e8}}, @ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4}]}}}], 0x28}}], 0x2, 0x0) 03:41:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2) 03:41:59 executing program 6: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x2}) 03:41:59 executing program 2: openat$nvram(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$CDROMREADMODE2(0xffffffffffffffff, 0x530c, 0x0) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000003e80)={0x130005100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:41:59 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000040), 0x4) 03:41:59 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x9) ioctl$TCXONC(r0, 0x5437, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 03:41:59 executing program 6: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0xc0505405, &(0x7f0000000040)={{0x1}}) 03:41:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={r4, 0x3, 0x2}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000040)={r7, 0x3, 0x2}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000e40)={0x0, @loopback, @multicast1}, &(0x7f0000000e80)=0xc) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000ec0)={0xc0, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40000}, 0x10000040) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000540)=@data_frame={@no_qos=@type00={{0x0, 0x2, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @broadcast, @device_a, @initial, {0x5, 0x3a}}, @random="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"}, 0x800) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:42:00 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) r3 = eventfd2(0xfffff320, 0x80801) read(r3, &(0x7f0000000080)=""/86, 0x56) r4 = fsopen(&(0x7f0000000000)='gfs2meta\x00', 0x1) ppoll(&(0x7f0000000040)=[{r3, 0x80c3}, {r4, 0x202}, {0xffffffffffffffff, 0xd000}], 0x3, &(0x7f0000000540)={0x77359400}, &(0x7f0000000580)={[0x4]}, 0x8) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 956.135921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 956.204103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 956.210705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 956.232345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 956.262254] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 956.262965] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 956.265162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 956.286965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 956.287974] wlan1: authenticated [ 956.288606] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 956.362860] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 956.363639] wlan1: associated [ 956.364155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:42:00 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000040)={0x1, 0x0, 0x13, 0x1f, 0x170, &(0x7f0000001880)}) 03:42:00 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x4b65, 0x0) 03:42:00 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) 03:42:00 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) r0 = fork() ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0xf738, &(0x7f0000000100)={0xc, 0x0, 0x1}) 03:42:00 executing program 6: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$tun(r0, &(0x7f00000000c0)={@val, @val, @llc={@llc={0x0, 0x0, 'Y'}}}, 0x11) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000001140)) 03:42:00 executing program 2: openat$nvram(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$CDROMREADMODE2(0xffffffffffffffff, 0x530c, 0x0) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000003e80)={0x130005100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:42:00 executing program 4: r0 = getpgrp(0xffffffffffffffff) tgkill(0x0, r0, 0x0) 03:42:00 executing program 1: r0 = epoll_create1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x7e, 0x0, 0x0) 03:42:00 executing program 2: openat$nvram(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$CDROMREADMODE2(0xffffffffffffffff, 0x530c, 0x0) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000003e80)={0x130005100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:42:00 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x6, 0x4, 0x0, 0x7ffffffff000) 03:42:00 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') setresuid(0x0, 0xee01, 0x0) fchown(r0, 0x0, 0x0) 03:42:00 executing program 6: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x3, 0x0, 0x3, 0x0, 0x0, 0x0}) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0xffffff5d) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000040)=""/102400, 0x19000) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000019440)) 03:42:00 executing program 3: syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "7437b8", 0x14, 0x3b, 0x0, @private2, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 03:42:00 executing program 2: openat$nvram(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$CDROMREADMODE2(0xffffffffffffffff, 0x530c, 0x0) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000003e80)={0x130005100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:42:00 executing program 6: prctl$PR_SET_MM_MAP(0x4a, 0xe, &(0x7f0000000380)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff4000/0x2000)=nil, 0x0}, 0x68) [ 956.905543] audit: type=1400 audit(2000000520.767:95): avc: denied { setattr } for pid=285006 comm="syz-executor.4" name="map_files" dev="proc" ino=106826 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1 03:42:00 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x4b65, 0x0) 03:42:00 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x4b65, 0x0) 03:42:00 executing program 1: r0 = epoll_create1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x7e, 0x0, 0x0) 03:42:00 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') setresuid(0x0, 0xee01, 0x0) fchown(r0, 0x0, 0x0) 03:42:00 executing program 3: get_mempolicy(0x0, &(0x7f0000000040), 0xffff, &(0x7f0000d85000/0x2000)=nil, 0x4) 03:42:00 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x2000000) write$binfmt_aout(r0, &(0x7f0000000d40), 0x20) close(r0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000000)={r2, 0x3, r1, 0x309b}) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x1, 0x0, 0x0, 0x0, &(0x7f0000000380)={[], [{@obj_role={'obj_role', 0x3d, '{@\x8b}&'}}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 03:42:00 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000040)={0x1, 0x0, 0x13, 0x1f, 0x170, &(0x7f0000001880)}) 03:42:01 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') 03:42:01 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') setresuid(0x0, 0xee01, 0x0) fchown(r0, 0x0, 0x0) 03:42:01 executing program 3: openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x40}, 0x18) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000540), 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RSTAT(r1, &(0x7f0000000140)={0x50, 0x7d, 0x0, {0x0, 0x49, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x9, 'trans=fd,', 0x9, 'trans=fd,', 0x3, '9p\x00', 0x1, '&'}}, 0x50) 03:42:01 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x4b65, 0x0) [ 957.186171] nfs4: Unknown parameter 'obj_role' [ 957.208115] nfs4: Unknown parameter 'obj_role' [ 1039.704689] Bluetooth: hci2: command 0x0406 tx timeout VM DIAGNOSIS: 08:41:56 Registers: info registers vcpu 0 RAX=00000000005ef0ab RBX=0000000000000000 RCX=ffffffff84ba95f7 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814c3694 RBP=dffffc0000000000 RSP=ffffffff85a07e00 R8 =0000000000000001 R9 =ffffed100d9c630a R10=ffff88806ce31853 R11=0000000000000001 R12=ffffffff86439c50 R13=1ffffffff0b40fc7 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84ba831e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e55e3000 00000000 00000000 LDT=0000 fffffe6d00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005634eacea098 CR3=000000000d8fa000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=43f6fa9fd16dd731b2c72c1812809122 XMM02=5e54425d8e3f24d43e7408114c7ca255 XMM03=bff2de8ae48864b14463a8737ae75d0f XMM04=306e616c77277b3d2930633030303030 XMM05=15207b5211553e40c91aafaabff17bfd XMM06=6f6f74687465403d2930303030303030 XMM07=bee205f19742773f4a6d20bb06553f1f XMM08=25bbe29dbad4824aa84303636fb7f8f7 XMM09=00000000000000000000000000000000 XMM10=0c0d0e0f08090a0b0405060700010203 XMM11=000000c003cb99b00000000000ea89c0 XMM12=1488f1b379f5d491160919611d1c8f87 XMM13=a71cdbf3f72f2db4465955ccc66ba9ae XMM14=5b17866562e77a6f3e8a16d28bcd1c23 XMM15=13da7d99f8d5ecbf9df10471f31b87b8 info registers vcpu 1 RAX=00000000006639b5 RBX=0000000000000001 RCX=ffffffff84ba95f7 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814c3694 RBP=dffffc0000000000 RSP=ffff888009717e58 R8 =0000000000000001 R9 =ffffed100d9e630a R10=ffff88806cf31853 R11=0000000000000001 R12=ffffffff86439c50 R13=1ffff110012e2fd2 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84ba831e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e56e3000 00000000 00000000 LDT=0000 fffffe6300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f54d86f7010 CR3=000000000d8fa000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004189cd8240000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000