010c9371ec9585759c84720feba66a308644896af00c881f9e4cdac71f2a447619f3d60c8078e84ca7f014d64d79958705e288c12626a3e946500f74d9ba30a2209e5b9db3d8d83999462b55e7ec8b877e750308bb80a85b72794c28b5094697213d20627135d393ac7daf777750c6bf42dabc24df1db0d5808788962d473d79f5452646764e3eb467cd31502cfb60d293a5780c437d2f14cf1b84cdfddc2069f374c2b999676e904dce5c8b6db26bb985f41de60966a8e032b6e6d958111f9d191259ab79cbcfb8b744a49fade31ec82d0b6a546019dbc043101df807b11c0bbd8c80b3d76e48fa9fcba3636719c2df2b1d09fe10c5e116dcfd30bb5b18df5", "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"}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 03:49:25 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, @perf_config_ext, 0x11201, 0x0, 0x6, 0x0, 0x800, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="72ac99d1e1010000000008ffe200000100"], 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="a20000000600002fc726696c65300000"]) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x10b840, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1255c2, 0x0) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000003280)={0x0, 0x0, "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", "bc814f1e421304699c87988d578a0a83e359f4c0be15077dc7547e05d8d3e86fd0a544b052031ab5435bfa1d3cb761dcf3cc5ed23c524ee1c3178c0b78972b97712343f0c489b8dc22aebc61c82ede5b06d0e78af78d2c0971f7ddbc5f5698fb66c6bd36db6289222aee97a1cc0492740d3d84eadcfeb2c8965cbeaae9f381cfc6c2849b0371e0ee8119179cf7cd82c855e1ccac83bec9af15fadec7884bf4458259dfc82682c66b53620ff2f6d83326671102337965af980249343ed01173744daff6b3c705225d7faf6c85bf102f18aca5d8e229fd8179954945de7f1ab059a15f9786b194654c5bf732f9fb83e1f985654347ca65022de65f67320a0fb2281737a3ddf710c645ac69a8453c3b70d560ef653514dbc0eb06b73b4f633188a7ab2f36d7e3bbfb71f498dcd599e9fd4e6f73a8e06d625a58bbd0c63cdf50ce7d5064c21e75b92f44506d720b89550cdc8227f32f25510ed8d4e441b132d9f7157acf293ee3c0d44d072b5e81c4c39e2fab668f3f30bf3035931c93df026b41f33c15cb08b55c00ff2d6ef5171a481b0ee2282dc2306971d73c1cbc21bf01b23ca4936e4f4518207e0e94c2973e709b24d13b63657f4d1689f7a4f779640aab3a4e7a6e3b6e4040a71078569f33fdbc35c23e8b030cd07eabbf542244241463937f1189c328a6d0967c65ff5307ba71311ed83289d2a24db12b38ba399932cf0d921bdc2d4ca64bcae4c28622cb69509089aea132e1237f33da2e7ba216cd610a8dfdac60c089260ae5e5e827d133e72deeadccf2dc14bcdaf270aa9d9072b2098ce65738896a1d908e2d6cf42f90216e5e5dc2d48b458d3bf901fa68d4f4bcc95dd145354329baaa5f6d72983b3c5cdb6e6e90e754ea3d9ca286313655ad326ed5f017e1424b7573918e3acf96644835c09be7085b043ec416b97a6eae45df8d312519f14ce8469386f97e85509d5cb90d8b1d66dc72219176ec5022edd76c02ea8e723ec7086f40788f45c37df77eb877d2654b3a2009d603cf223f93b5cd83f846da8e75ecbfffc4d6f11a11a7ddb8744cbd0c82f156e5915a2c879efb00f48afda0580b980ea0143a2bb111cd59371e954e5593fb3f4d14190056333fde9e40806269380381fee347b43bb345e50eb065dfd65e4202bb532bc36742828d898d86337d87416018d2246aa621726b376fcf2d229d8c9703f0f6607703e1b939a5023bbae5528a3aa4a24736a444ca1cb8c3075a110414c1629bbcd5c9c4e4080aa44674a34f5c31347e5bca2052fba2e27ed084449da3314358cb192065e1999982b95cc18a488e3189c404c3ba2262b424553e425ac01a78c7aab15e48b2d78837ca0127b1bf28bdd46e14e58c0717687acea3fef73e035c0b6f482fbfeabace42db1aa83a1f3644f9e63c87afc3afab26090af7e7c4fb1b81f8b01bc4e4814be39b0325a270657954f26af83a20d130ed6220a5212205440bb48fbbbc07a7b18cd0bd96d3a250c66bb93454f074a1ddcb836e3ab6af4153058cd94f16d9641f3929087c2ed87e20527eca22b3b3ac62c00f0620d5f28c518c5d03d8f180fe524bfc79c8e8577cc576192ce0547242e747351cde648664691f455e03064f57196524c8e3370efaa64ac28e09b1f2d2b6d69723885f294ea2df1cec3dd25c87883ab65aee612d325eb04cfaaa41d340f65c5745a14fc541902bf299f97f848034fa5a9968fd052087eb5fe6eebb232146191f1fec644d61aeee0ac3c218fbdc077f5c11ee746bcf9197db06ac78f5aa56b64a361ee6ff35efbf679482673cf5d5c51755f33d7a4af59a06484e787df20d684a78754634e651ca76e042643c0b60a22c2a2815619a958ace318639757e7a16d80add9fa9a61fe8ab4de921736de7b75af95bf9b57417451f9d812ccf4db0dd46acfad3136ad94dda1cc622a83daa02181a9f2e7607c77c3d6fd032289f93a1a18f7508366b96c6cd4d6bbff2b3c249b16d205f6369ac1d5af8a4e81400bdf93c820ae6f3622569b20410973a7f58ea541f64e977fb730c853d5fa809cc57b65c54e786641d28be2750dc637a794332163c972c896ae4d86296ddc39c3d433b546b9d7dbe67bb43c129aad2c32dc68d8dc26e489682e00ab92a16bdbbdd5ad803a0ae91a5af285db0fb6b8d118f2d0f120cc1667530bfb4c32b4fa4caf1192a035aafb458f311a04b6491014f0629d86a712a356ff2bac0df5b6c497ba5852e452b226718bea604d2fef071f443c055318045fcd5eea0062432fcadd11f93f0c152e01ff5d1f510f63b6266ae1b314ce06b4f6a388dbeccb7d257e6f3d82b0c23be3bc134bb127b0bf82bd7dada2c645e37621858fdd650fb213ddf61d07e46b8eb24cfa0b66f38f7a90f7d4d3439e701b8b0e36514b5a333d4b8c3439c3f67f074f45776c888d00f5e2fdfa65c175330253d3e032a9442ea08a54fa661c1784ff4a01d90f28a2936659d2d1bb6a2670438a3ac7864b17ed1cada9ca479045db0162297973861fdf6f6fc724543181133f201dcc4035f75585b3d3fce08eb8454b45b87a8055cb14ebcabd324feeb73c46c57b5d4e0de70863920b422952049f756d578971ee1c583a17467258324e13f349f8d36aa55820a7e76e51c4afa0b8c4f664432c5ad089aa79a39a2a6e4ab46b48f5b69ea6cfc5944b3e058bc837bc556b28351895734acfa3693f1537b58374bd39c5cca45e1ad9232a15554f1046f3cd60cbf78e5819de443b14d4887d83f14e5d944b8fb8fd678d6decafe117f93fc8cc44d3f6190c0f9f66100ee9f58818fa36b5e3e45c53fdf90587f3afeb9e3a62e74a999f1628f55c8980268ab73e66f5403873d0fe421da4eb22dd9afdfea0e1e960f9dcd6383e262151cfd63587d15009a930a44e63b559f063f9cfa75661a7866faedc287c534beb7b9113a01c0ece0e4f18cddbe482b7f4810683a3fdf61ea161c8f24a099310ce3e2e822ae0b659e6bfa78289bef995e2f45805c2881eec6453c5f07067d760c8774495a0c184eb6db75f17a7033ea4b652abbd1e806f668e84f7b8ab761ea4502e78294eeecef8b22760c4936901943b2387682c08459b2ec5a02ce17df9d0327e516aa2284b438acfb5f7e0ab4999114d1e039492a2034dbab39c8f1ca39de84f9fb4bf2ebe267c4510b0b196317e0ea392cfbc216bc51d82671ba50be6bb66a32ab9e5df046be877180e9ec84cd35296881af635f0a3ff4b9f675068e31579be666c0b1989af184aac44101383ca5a6b25c6554cd716c76631bda53456a35466256f02a9aa4587b918e2fad906b8464197b8989f6600a71d77bb51424e5589bfeb3d03e78820e627ace0ef66b74cdb15de646d2c42dfd36a45c751f92ec0ca4735e928f1a83ca8a489cd45f61bab6da8f5fcdafc174d55ee1d1a3c82ddfbe7063162f95545dab3dc82deb11f1819e679707cb8c44c268234057d1cdd8048169355d57c1f524e7e997b085d99655831f72df213772eaf96b71a86719b14fd334bab58b80feba7b9ec5173621367d1937407d7710489d66b84da940b8139aabd13eb484320eea59ada26b5267e3f10d0bbe24af0d99c7527dff570287d1c77e8272ef5aef7745e483acb5854c7f650f229af8e653ad245f3fc30b5401fb2f9da69451b4e6e470dccbb4a8e01a32d5c2b481610fd3d0c918021582f1be03590387cdc4ee70f94a6492afe660d7ee72978574ad92ba4c97181dff483291d8cd89eaaec13ec3e7c4c89040e843b17531f24b406dd3f8aa93e9c5770b2499941f7270ebca618e9ca258c7ebbf90ecf4ad27cfd89e560ef73f74c8cdedce8542fe658050bab5d7f2e32e639c69f2c1663634c6ea9186d9afbb6924489fb60250a2dcf769ccec3a8528c66f5dec199b04fdb4fdef8b9d917667a3ca1950cf970b7b8000bad56b6300d4c0dcc497e0d0d1574ce447c075098cc1d7b4b070833105e718f322694634c2d2734ddd7e61b62163db4f63ab39840fab2090bd75a750855ee9091ee5ead23614e8b04bcf25b718db19d6d38f14cba33548033d6ef99f86e940f55f1fbe001a8f508a82ff6f758b39826b087c274e7b383f1e8825edef09450d7eec345f2b553e1bc3e2404a6acd7d743b4713150c35543b2bab1b3c881baa7855a230986e9c030e7b54a6b8b50419848beb755458efa6142f43a1d3b4d14c482683a9dcce9105a1ee96dbe339f910afc267968d7a05f019d2bf128884ad73dba7257c21a15d7a45b1c11dfe18bd077c6c57377baeae5b87a74101b4467bc26d18131f21f2ef22a46cf80461c118aae318078561af2668f700339665b8d552c182419f816a2d73ab6e64354a198688078ad244a0b91fbc3de5f645971306f4979605ee2c373f8a49e6a8f397ddcd9e952a8695f5326f9ccd365a8b873851c4ad578b57c223b6fde3ea6e8fd5dc9093f5fe190f2d58c76d0d4fe18486403c0abcf55b626c9f935fbcebd30e716d541868a777d3880c4fb47edfcf364246996a24088dfcfafa7c1220efd38c356e5ede5ef9b6b2046937b50523fe4565bb0e08a0514fdae54da25338c316a379c12669d2bdd416632965aa23a137c86cbb0682fa5e84a659753ecd8059bb03c3fdb69fbf1b15f875cb34463fbdbde6b6933730776837b9c5175107227367d1eda9f4a39146b6692e183163ea7159c68aa3bf7d2b33d2bd5d549254cb946a2657cbef0919ab14c87931269698f40d1b389abb63807056bf7e25e1e52b9bd110e09c10baf28722a380a29ee3556236778aa3594d9f4ffff2f9f5072f7891cd3a5c58909ea8f41701604ee58eb1935bf1c0dbc3a98617686043ef2a3abbeacd433ba7a4185a1fa195e77b4ab3f07a617b5ef6cb3d22868c62a5be213765c9aef4ee5a22b241f798a2c89e2fc5155d5ecc2cbb589ed3be1974b21ff8874088236dbaf1f49174a8ce77286086e171c1e80493820734e8bff23341b868816d05e1813239397abe41729ab28eca7af82c75f78bdfa82ef5614cad6612ce43c29364759bbbacbcbb62dd8b11b5be653766143a86bef63dc914f09338bf1dd352804c3cff83b36f4092c960376244ac278aa6f2ab043fcab03e283569d6ac6b485a110c33f6a238cfd7a7d26e2c81698d6c9c86575b5e7ed305a643966fc5424f4d679839a34d3d65a7d561a11f5dfe30ac2732f331aa5120e994996c8ec290fd16c9a50b4763ca33595b081963ab6820b1306556419c3baf600ecdcc27069499986df8592c956168a81b8294155bee6dbf55352d401fcf0acc4f5ac67e9b12af83ec34a8bd4f4d9dedce46cc798c06d7210da9aef6fcb186d00a3a16bbc043cd45d05a72e79b6fdb5f927a3f906ce6603d3c23c7cba45d834c3e6d942ea0ea69ccb9ab65e9be0627ab1351"}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 03:49:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x75, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_MESH_ID, @NL80211_ATTR_IFTYPE={0x0, 0x5, 0x1}, @NL80211_ATTR_4ADDR={0x0, 0x53, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 03:49:25 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, @perf_config_ext, 0x11201, 0x0, 0x6, 0x0, 0x800, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="72ac99d1e1010000000008ffe200000100"], 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="a20000000600002fc726696c65300000"]) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x10b840, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1255c2, 0x0) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000003280)={0x0, 0x0, "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", "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"}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 03:49:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000740)={0x20, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x20}}, 0x0) 03:49:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r5) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940), 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x38, r8, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x7e}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x20008000) sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r8, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6f, 0x6f}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x40800) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 03:49:25 executing program 0: mkdir(&(0x7f0000003b80)='./file0\x00', 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r0, r1, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "1e72251008c1fdab246c33fe298e8d00a5ea68d9e217859f899e54333776a1660869ef2b267d447014af336ff0b81830089cb9297cabffe1356ef01f54140816"}, 0x48, 0xfffffffffffffffb) keyctl$read(0x11, r2, 0x0, 0x0) [ 1271.159449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:49:25 executing program 3: r0 = syz_mount_image$msdos(0x0, 0x0, 0x3f, 0x3, &(0x7f0000000480)=[{&(0x7f0000000300)="f4ed7efa4f5d1dbf13871d905fbbd6e0759a31107dad1332f0cdbf269bf113ed3d", 0x21, 0x7}, {&(0x7f0000000340)}, {0x0, 0x0, 0x57c}], 0x808c0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x1b}, 0x18) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x100a, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000500)}, 0x4000, 0x4000, 0x3, 0x5, 0x2e77, 0xaf7d, 0x36d9, 0x0, 0xfffffffa, 0x0, 0x7}, 0x0, 0x1, r1, 0x2) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f00000006c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000640)={0x58, 0x0, 0x7, 0x801, 0x0, 0x0, {0x7}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}, @NFACCT_FLAGS={0x8}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5e}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004041}, 0x4000) r2 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f00000001c0)='./file0\x00') renameat(r3, &(0x7f0000000140)='./file0/file0\x00', r3, &(0x7f0000000180)='./file1\x00') [ 1271.180680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1271.194427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1271.207550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:49:25 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0xb, 0x0, &(0x7f00000000c0)) 03:49:25 executing program 2: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="fd", 0x1, r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000180)='asymmetric\x00', &(0x7f00000001c0)=@chain) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r2, 0x0) 03:49:25 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup3(r0, r1, 0x0) [ 1271.497325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1271.506659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1271.535259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1271.538265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:49:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000003c0)=@mgmt_frame=@beacon={@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x7f}, @device_a, @device_a, @random="0a81a52871fc", {0x4}}, @ver_80211n={0x0, 0x94, 0x3, 0x2, 0x0, 0x2, 0x1}}, 0x864, @default, 0x1888, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x3, 0x0, {0x3, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x1, 0x3f, 0x3}}, @void, @void, @val={0x76, 0x6, {0x0, 0x1, 0x30, 0x2}}}, 0x54) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) r3 = dup(r0) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x100, 0x0, 0x200, 0x8001, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1bac}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 03:49:25 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, @perf_config_ext, 0x11201, 0x0, 0x6, 0x0, 0x800, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="72ac99d1e1010000000008ffe200000100"], 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="a20000000600002fc726696c65300000"]) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x10b840, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1255c2, 0x0) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000003280)={0x0, 0x0, "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", "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"}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 03:49:25 executing program 7: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xba, 0x40, 0x0, 0x0, 0x0, 0x0, 0x220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x2, 0x0, 0x0, 0x6, 0x0, 0x1000}, 0x0, 0xfffffffffffffff9, 0xffffffffffffffff, 0x0) shmctl$IPC_STAT(0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x1b}, 0x18) r2 = shmget$private(0x0, 0x2000, 0x80, &(0x7f0000fee000/0x2000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000480)=""/85) r5 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x5, 0x400) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000500)=ANY=[@ANYBLOB="04000000d02798f20a798897eecca5450444025de9004c64653f3694f8131ef72ae6614271186942f276a8340fbe4c7903e00bccd877dd6484775ee201ad78749be5b6abec2594faff7418e65364ac69be98a7ac09dc4921082dd990835d5c323b4739af857945de993b4908e069e8d3d7068baf09633ccc7de39b854bca972fc8620b71fdc1d1ec78106f69cc04e11ba7d19cdca414f15f7aeaf0fab30610b455ea6b0952ea16ecdda0d9e189dccf363dacab188a0e173d9ab8dc3f9986af3d851a7be434ac9737a900"/212, @ANYRES32=r3, @ANYBLOB="00000000000000002e7366696c6730001d82b6b815527cba842356630fa301eaf333d8935e5634dfcb0ad4067fd7bc0e60d4fd45312947959a634c5e519030a0b6f46f4adeda5b4c46ff27"]) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x5, 0x9, 0x0, 0x8e, 0x0, 0x200, 0x66204, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0xfffffffffffffffc, 0x3}, 0x40, 0x8, 0x4, 0x7, 0x10000, 0x401, 0x7, 0x0, 0x80, 0x0, 0x2}, r4, 0x40006, r5, 0x9) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)) ioctl$SNAPSHOT_FREE(r3, 0x3305) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) 03:49:25 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup3(r0, r1, 0x0) 03:49:25 executing program 2: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="fd", 0x1, r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000180)='asymmetric\x00', &(0x7f00000001c0)=@chain) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r2, 0x0) 03:49:25 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, @perf_config_ext, 0x11201, 0x0, 0x6, 0x0, 0x800, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="72ac99d1e1010000000008ffe200000100"], 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="a20000000600002fc726696c65300000"]) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x10b840, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1255c2, 0x0) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000003280)={0x0, 0x0, "d010c9371ec9585759c84720feba66a308644896af00c881f9e4cdac71f2a447619f3d60c8078e84ca7f014d64d79958705e288c12626a3e946500f74d9ba30a2209e5b9db3d8d83999462b55e7ec8b877e750308bb80a85b72794c28b5094697213d20627135d393ac7daf777750c6bf42dabc24df1db0d5808788962d473d79f5452646764e3eb467cd31502cfb60d293a5780c437d2f14cf1b84cdfddc2069f374c2b999676e904dce5c8b6db26bb985f41de60966a8e032b6e6d958111f9d191259ab79cbcfb8b744a49fade31ec82d0b6a546019dbc043101df807b11c0bbd8c80b3d76e48fa9fcba3636719c2df2b1d09fe10c5e116dcfd30bb5b18df5", "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"}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 03:49:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f0000000100)) 03:49:25 executing program 3: r0 = syz_mount_image$msdos(0x0, 0x0, 0x3f, 0x3, &(0x7f0000000480)=[{&(0x7f0000000300)="f4ed7efa4f5d1dbf13871d905fbbd6e0759a31107dad1332f0cdbf269bf113ed3d", 0x21, 0x7}, {&(0x7f0000000340)}, {0x0, 0x0, 0x57c}], 0x808c0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x1b}, 0x18) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x100a, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000500)}, 0x4000, 0x4000, 0x3, 0x5, 0x2e77, 0xaf7d, 0x36d9, 0x0, 0xfffffffa, 0x0, 0x7}, 0x0, 0x1, r1, 0x2) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f00000006c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000640)={0x58, 0x0, 0x7, 0x801, 0x0, 0x0, {0x7}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}, @NFACCT_FLAGS={0x8}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5e}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004041}, 0x4000) r2 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f00000001c0)='./file0\x00') renameat(r3, &(0x7f0000000140)='./file0/file0\x00', r3, &(0x7f0000000180)='./file1\x00') [ 1271.965367] random: crng reseeded on system resumption 03:49:25 executing program 2: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="fd", 0x1, r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000180)='asymmetric\x00', &(0x7f00000001c0)=@chain) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r2, 0x0) [ 1271.993912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1272.006793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:49:26 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup3(r0, r1, 0x0) [ 1272.017221] Restarting kernel threads ... done. [ 1272.036646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1272.044987] random: crng reseeded on system resumption 03:49:26 executing program 3: r0 = syz_mount_image$msdos(0x0, 0x0, 0x3f, 0x3, &(0x7f0000000480)=[{&(0x7f0000000300)="f4ed7efa4f5d1dbf13871d905fbbd6e0759a31107dad1332f0cdbf269bf113ed3d", 0x21, 0x7}, {&(0x7f0000000340)}, {0x0, 0x0, 0x57c}], 0x808c0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x1b}, 0x18) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x100a, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000500)}, 0x4000, 0x4000, 0x3, 0x5, 0x2e77, 0xaf7d, 0x36d9, 0x0, 0xfffffffa, 0x0, 0x7}, 0x0, 0x1, r1, 0x2) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f00000006c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000640)={0x58, 0x0, 0x7, 0x801, 0x0, 0x0, {0x7}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}, @NFACCT_FLAGS={0x8}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5e}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004041}, 0x4000) r2 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f00000001c0)='./file0\x00') renameat(r3, &(0x7f0000000140)='./file0/file0\x00', r3, &(0x7f0000000180)='./file1\x00') [ 1272.059837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:49:26 executing program 2: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="fd", 0x1, r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000180)='asymmetric\x00', &(0x7f00000001c0)=@chain) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r2, 0x0) 03:49:26 executing program 7: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xba, 0x40, 0x0, 0x0, 0x0, 0x0, 0x220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x2, 0x0, 0x0, 0x6, 0x0, 0x1000}, 0x0, 0xfffffffffffffff9, 0xffffffffffffffff, 0x0) shmctl$IPC_STAT(0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x1b}, 0x18) r2 = shmget$private(0x0, 0x2000, 0x80, &(0x7f0000fee000/0x2000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000480)=""/85) r5 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x5, 0x400) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000500)=ANY=[@ANYBLOB="04000000d02798f20a798897eecca5450444025de9004c64653f3694f8131ef72ae6614271186942f276a8340fbe4c7903e00bccd877dd6484775ee201ad78749be5b6abec2594faff7418e65364ac69be98a7ac09dc4921082dd990835d5c323b4739af857945de993b4908e069e8d3d7068baf09633ccc7de39b854bca972fc8620b71fdc1d1ec78106f69cc04e11ba7d19cdca414f15f7aeaf0fab30610b455ea6b0952ea16ecdda0d9e189dccf363dacab188a0e173d9ab8dc3f9986af3d851a7be434ac9737a900"/212, @ANYRES32=r3, @ANYBLOB="00000000000000002e7366696c6730001d82b6b815527cba842356630fa301eaf333d8935e5634dfcb0ad4067fd7bc0e60d4fd45312947959a634c5e519030a0b6f46f4adeda5b4c46ff27"]) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x5, 0x9, 0x0, 0x8e, 0x0, 0x200, 0x66204, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0xfffffffffffffffc, 0x3}, 0x40, 0x8, 0x4, 0x7, 0x10000, 0x401, 0x7, 0x0, 0x80, 0x0, 0x2}, r4, 0x40006, r5, 0x9) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)) ioctl$SNAPSHOT_FREE(r3, 0x3305) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) 03:49:26 executing program 2: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ff3000/0x4000)=nil, 0x4000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000140)=""/237) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x15) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)=ANY=[]) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x2) 03:49:26 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup3(r0, r1, 0x0) [ 1272.203475] random: crng reseeded on system resumption [ 1272.242042] Restarting kernel threads ... done. [ 1272.370807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1272.377417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1273.075221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1273.081768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:49:27 executing program 7: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xba, 0x40, 0x0, 0x0, 0x0, 0x0, 0x220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x2, 0x0, 0x0, 0x6, 0x0, 0x1000}, 0x0, 0xfffffffffffffff9, 0xffffffffffffffff, 0x0) shmctl$IPC_STAT(0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x1b}, 0x18) r2 = shmget$private(0x0, 0x2000, 0x80, &(0x7f0000fee000/0x2000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000480)=""/85) r5 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x5, 0x400) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000500)=ANY=[@ANYBLOB="04000000d02798f20a798897eecca5450444025de9004c64653f3694f8131ef72ae6614271186942f276a8340fbe4c7903e00bccd877dd6484775ee201ad78749be5b6abec2594faff7418e65364ac69be98a7ac09dc4921082dd990835d5c323b4739af857945de993b4908e069e8d3d7068baf09633ccc7de39b854bca972fc8620b71fdc1d1ec78106f69cc04e11ba7d19cdca414f15f7aeaf0fab30610b455ea6b0952ea16ecdda0d9e189dccf363dacab188a0e173d9ab8dc3f9986af3d851a7be434ac9737a900"/212, @ANYRES32=r3, @ANYBLOB="00000000000000002e7366696c6730001d82b6b815527cba842356630fa301eaf333d8935e5634dfcb0ad4067fd7bc0e60d4fd45312947959a634c5e519030a0b6f46f4adeda5b4c46ff27"]) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x5, 0x9, 0x0, 0x8e, 0x0, 0x200, 0x66204, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0xfffffffffffffffc, 0x3}, 0x40, 0x8, 0x4, 0x7, 0x10000, 0x401, 0x7, 0x0, 0x80, 0x0, 0x2}, r4, 0x40006, r5, 0x9) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)) ioctl$SNAPSHOT_FREE(r3, 0x3305) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) 03:49:27 executing program 0: ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f00000000c0)={{0x2, 0x0, @remote}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x0, {0x2, 0x0, @dev}, 'sit0\x00'}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x40, &(0x7f0000000080)={@rand_addr, @remote}, 0xc) 03:49:27 executing program 6: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ff3000/0x4000)=nil, 0x4000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000140)=""/237) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x15) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)=ANY=[]) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x2) 03:49:27 executing program 3: r0 = syz_mount_image$msdos(0x0, 0x0, 0x3f, 0x3, &(0x7f0000000480)=[{&(0x7f0000000300)="f4ed7efa4f5d1dbf13871d905fbbd6e0759a31107dad1332f0cdbf269bf113ed3d", 0x21, 0x7}, {&(0x7f0000000340)}, {0x0, 0x0, 0x57c}], 0x808c0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x1b}, 0x18) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x100a, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000500)}, 0x4000, 0x4000, 0x3, 0x5, 0x2e77, 0xaf7d, 0x36d9, 0x0, 0xfffffffa, 0x0, 0x7}, 0x0, 0x1, r1, 0x2) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f00000006c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000640)={0x58, 0x0, 0x7, 0x801, 0x0, 0x0, {0x7}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}, @NFACCT_FLAGS={0x8}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5e}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004041}, 0x4000) r2 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f00000001c0)='./file0\x00') renameat(r3, &(0x7f0000000140)='./file0/file0\x00', r3, &(0x7f0000000180)='./file1\x00') 03:49:27 executing program 2: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ff3000/0x4000)=nil, 0x4000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000140)=""/237) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x15) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)=ANY=[]) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x2) 03:49:27 executing program 5: fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 03:49:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x81}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 03:49:27 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_opts(r0, 0x29, 0x22, 0x0, 0x18) [ 1273.201438] random: crng reseeded on system resumption [ 1273.256985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:49:27 executing program 0: syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000340)={[{@unhide}]}) [ 1273.273011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1273.302050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1273.319393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:49:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x2) connect$netlink(r0, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x1000}, 0xc) 03:49:27 executing program 6: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ff3000/0x4000)=nil, 0x4000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000140)=""/237) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x15) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)=ANY=[]) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x2) 03:49:27 executing program 7: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xba, 0x40, 0x0, 0x0, 0x0, 0x0, 0x220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x2, 0x0, 0x0, 0x6, 0x0, 0x1000}, 0x0, 0xfffffffffffffff9, 0xffffffffffffffff, 0x0) shmctl$IPC_STAT(0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x1b}, 0x18) r2 = shmget$private(0x0, 0x2000, 0x80, &(0x7f0000fee000/0x2000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000480)=""/85) r5 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x5, 0x400) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000500)=ANY=[@ANYBLOB="04000000d02798f20a798897eecca5450444025de9004c64653f3694f8131ef72ae6614271186942f276a8340fbe4c7903e00bccd877dd6484775ee201ad78749be5b6abec2594faff7418e65364ac69be98a7ac09dc4921082dd990835d5c323b4739af857945de993b4908e069e8d3d7068baf09633ccc7de39b854bca972fc8620b71fdc1d1ec78106f69cc04e11ba7d19cdca414f15f7aeaf0fab30610b455ea6b0952ea16ecdda0d9e189dccf363dacab188a0e173d9ab8dc3f9986af3d851a7be434ac9737a900"/212, @ANYRES32=r3, @ANYBLOB="00000000000000002e7366696c6730001d82b6b815527cba842356630fa301eaf333d8935e5634dfcb0ad4067fd7bc0e60d4fd45312947959a634c5e519030a0b6f46f4adeda5b4c46ff27"]) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x5, 0x9, 0x0, 0x8e, 0x0, 0x200, 0x66204, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0xfffffffffffffffc, 0x3}, 0x40, 0x8, 0x4, 0x7, 0x10000, 0x401, 0x7, 0x0, 0x80, 0x0, 0x2}, r4, 0x40006, r5, 0x9) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)) ioctl$SNAPSHOT_FREE(r3, 0x3305) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) 03:49:27 executing program 2: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ff3000/0x4000)=nil, 0x4000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000140)=""/237) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x15) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)=ANY=[]) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x2) [ 1273.447459] random: crng reseeded on system resumption 03:49:27 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x0, 0x0, &(0x7f0000000980)) 03:49:27 executing program 3: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000001200)={0x1}, 0x8, 0x0) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000000280)=""/32) msgsnd(r0, &(0x7f0000000340)={0x0, "da621055a1356fb7170109bbdc85d5b6f2c9469f1c97fd000000000bb628a7672690a8bbff9ec2403b791dce284ecfc3c7e706dba1660400000d652853e1a16bcc9aae45781dd24f5c5f4d631bc7de78272baf2ee6543c9756cf521028898d8a697e2d00cd091368d0683eae7ce3af19fa462bd28d1c92c1ab0ed9525c15a96b4ece0d09bc985bb5c0cb4513813dc65b1aed140585a23b14bbdd429b755cca186e1a011041622c53339021bfca8dd1"}, 0xfffffffffffffe9b, 0x800) msgrcv(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/276], 0xb9, 0x1, 0x3000) r1 = msgget(0x1, 0x84) r2 = msgget(0x3, 0x20) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000400)=""/215) msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000000)=""/146) msgsnd(r1, &(0x7f0000000200)={0x2, "5754a62f690ff84b1f9a50b59d71186cf9d1824455de7b7f73dfae6f70fb84bb53d08083c30a6f56f075646f2dd0887ded01c168d742ebf1ac173695d5b79ab9064cfa58d63b4ff46ec1d8e5f0aa17185066b4e614c0a5b4d0a3fd9a84b56739908d00b5321fd3"}, 0x6f, 0x800) 03:49:27 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000340), 0x6, 0x0, &(0x7f00000003c0), 0x0, 0x2) [ 1273.566265] random: crng reseeded on system resumption 03:49:27 executing program 6: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ff3000/0x4000)=nil, 0x4000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000140)=""/237) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x15) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)=ANY=[]) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x2) [ 1273.634879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1273.649818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1273.703561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1278.440685] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 1280.765440] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1280.773197] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1280.774742] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1280.779632] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1280.782022] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1280.784228] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1282.792626] Bluetooth: hci3: command 0x0409 tx timeout [ 1284.840662] Bluetooth: hci3: command 0x041b tx timeout [ 1286.888587] Bluetooth: hci3: command 0x040f tx timeout [ 1288.936598] Bluetooth: hci3: command 0x0419 tx timeout [ 1304.099404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1304.100622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1304.104071] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1304.192724] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1304.193939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1304.196827] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1304.657665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1304.668336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1304.979008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1304.983763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:49:59 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) 03:49:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000804}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5be861a9", @ANYRES16=r4, @ANYBLOB="00022bbd7000ffdbdf257f0000000c00990000000080280000000a00f500505050505050000014005500010da72c57ccbd1f124e4fbed005b0490a00340002020202020200000a0034000101010101010000"], 0x58}, 0x1, 0x0, 0x0, 0x4044040}, 0x802) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x3) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r9, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_HINT={0xa, 0xc8, @random="bd2876470d18"}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x20}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @from_mac}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, @random=0x16f3}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 03:49:59 executing program 1: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd, 0x0, 0x0, 0x46}, 0x0) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 03:49:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r3 = open(&(0x7f0000000100)='./file0\x00', 0x4000, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 03:49:59 executing program 2: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ff3000/0x4000)=nil, 0x4000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000140)=""/237) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x15) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)=ANY=[]) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x2) 03:49:59 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000040)="f8", 0x1) 03:49:59 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) 03:49:59 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) rmdir(&(0x7f0000000180)='./file0\x00') [ 1305.114226] random: crng reseeded on system resumption [ 1305.120838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:49:59 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r0, &(0x7f00000067c0)=[{{&(0x7f0000000000)=@ieee802154={0x24, @long={0x2}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)='\x00', 0x5cc}], 0x1}}], 0x1, 0x0) 03:49:59 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x24, 0x5, &(0x7f0000ffc000/0x1000)=nil) [ 1305.198761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1305.207258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:49:59 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) rmdir(&(0x7f0000000180)='./file0\x00') [ 1305.230842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:49:59 executing program 3: unshare(0x100) unshare(0x52000400) unshare(0x10040000) unshare(0x8000000) unshare(0x0) unshare(0x2000000) unshare(0x0) unshare(0x30000) unshare(0x50010000) unshare(0x8020000) unshare(0x0) unshare(0x60000) unshare(0x22000800) unshare(0x58000000) unshare(0x200) unshare(0x22000000) unshare(0x4000000) unshare(0x10000) unshare(0x50000) unshare(0x40000000) 03:49:59 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x800f0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 03:49:59 executing program 1: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd, 0x0, 0x0, 0x46}, 0x0) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 03:49:59 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x4d031, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(r0, 0x1, 0x0) 03:49:59 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000003cc0)=[{&(0x7f00000028c0)="276311135f1ea36569efa632920a9fa29b3b", 0x12}, {&(0x7f0000003d40)="a9e377f12644a734928c6e99ebf0dc382c22ae47745e79f83ced4405758bad49ce269a5af67fd5fdb296764fcd805b4e7c442dcef6a7837b1957878d369caf84f9c481d6cc72a6ade577a54795da2b29b32f33b12cd54b8e3739cc8d26440c47ede0d34273b42022ebabefea75e87d980e95cb5a1bab8e85ad70d9c60229c411c82f1ec06e45e634e97e34b85f5871ca3d36e10f7b6937ae760ab66c145f6181629710d45170b4c839da4784913ab51db313dfa9be23cfdcb38ce6089e2131820beac355390b3fb68510d975d8f234b6f4168fd8890735a72247fccc42d6d9097b4e5432ca0ad19922722e63c7e48e7ce632699658b6ee2cd1a15bbaf8c74eb89a45e43232dde4d9a5c9d99bdad7c3d32c4bec3d51d3ce813cb5eac18a5120dd2ed8ec2f2014791c21f7293d9f169b20baba99f5cf9c724fabf074f177c5d43a195ec7c8de53c77882aa091bb649f67a22e929575b3610877f5ab71cffe9e1ae36d357bc5cc30a54815f9ddea08563afac56cf7a7405bebfc486e72de25fbe985f64254452703df42f542ba77d857b0ee85a940dd6976eb1d226234521b991078a60bb9af58d9c2f104be5f7fcb03f3b29c1c0c15644e38ea0f0f5d889f0961a0af19820adf29b0bf2441536bbc9b7cdadc5b152e51bef8e107f2333350a62c00a01927178f19037a9b4538aac3e6e88c4e995cd6ede622b86e5d6af637e0cae057b1a3a6e0a958775f711b1d54867ca2acc3585fe1426bcae6dd484d06d2173781813d5a7bbcd09496145bb5bc551fda45f0281afc2942b02204e927977e254f57946df939cf228c55e1f8178ea668f95660b68785fafde72e976ba62ab249f5e9adb4f9b036ba313eef3a20cdb210ed1e41acb1bd6bb4741c66412694ecf31d647b1c5f9490371553bd6b4ae3dae3bdc8c331cecd5eb574cb7e261432d0a75d2693061807c455429776db91f4ce24536bd11e770401cd469ddd80b3c08f82d1bfd0333767667ce3a8fda6bc10789a4b0d64bb4cb3b78497ccb0b185f80db80fccb862097cc4fd90c4537838ca7d5a0f6eb100ddaafa00742602168ea0ebfd01fd5bde63e22a79c06cd6a68ea199cbfc1e425d85e3ee749135bffafd306ca73b5ee216e903dcaaccd87e3ac770423158908f19cdcdd62f051462d879234cfcc4bf892cc8c805cb79d3083157708f4c9875e0f9f9681c8c4c921191748c6a300d47a993e465c3854a74b845192267f50eb4ad72d236a85a758feaf7ef42db950e6bd133be094f3dd3f6a030328056e8aec703c80616b99ae62c92d4e798378c79aa354126fb34d6e0155d298aa3aa82d5efbc08c979003c4aee0946ca201fa19188e7a6dab7b949d3306bb79919fb8a583ea77773934352c5521bdbdcb809fe909d51a9d240930a79da773889edb8fc3db91d95cb7067d22ff308a593d1dae5f00b186059b77dfb05227581d182a49e992df96142b21b1478dfba6f4598133a7b15a05d2cbf949d98e2991bb798bd477386741078a7fccdb2bf1bb19b7d9c52e161b79698d6d140ba4a5d1dac600bc93b5e1c501aaeface29d74e0e69384b6f944a2987ea92c093ebbdad2ee5fb090cdcc0aff97526c19e7c17bcf54beb399f769fe207fe8f074cf099dba0a43452a5db0e93fc2fe75c0f5fd8dfd7d7b0b596403334fd01c54935e0d814aa538e0120e2da60bcd711f91c057780f3544ceda06c8394b5c90023317b2a282a048c40fccfd3359954467c3d664981925c761d18fec35b070c13ca68b682bd56cfb79bc7c753cf2077310607c5e8008b6b6a950612d0cf259d8fd5ba69a6deaaaa52062e51c1199f646b74c488d2b339426115764e695120d8b93f0ebd6676767fbe326e37dfc0ed00e4342c6a59941f13c540bd143be87d9d3d958d920627447c08c79bc1a262954192d75566cc50dbce886d0dc6973c80423518bb2b008dccaff304378de697af6bc91761d99bb89a6f52a2345bced7990d51d18e66fa5284659e2c922005a9bfc5c4ae1c61536254c3f1212765542b6cb435b2d5d2581a275856fd4e1c213d2e652e5195c802699936bdbe0e788c7e4512aa973390bdccaa25cc31fc5519f676ec615aa8c16622177ce0214f689116f3a2a38440240689c422a36ebbeff29b512dc5aeb0854957a4fef7340561fc94e62bac07e62d23119b3f15ed7ae5dee988ae9dcc10a862ed98caba0397a73977f4472da557f4e48a4c534dfb6db4f5e0d4c42c0c0460c932532e89bcc2fb9989a33da3febe06d1822e0cccb18e7621c1b3fdf50fc5809abbbb1646fec796da02cc4ccf8dec87ec5e326e6316f62bb0087f325d59918ae56fc364c32d7f4d3e33c46f0066a04472b770231c9a15cacfdf5030fa2f843d82abedf201e10e03e79c3286a7156856be711eb4cfca6c7571b4361bbef3dcbd2066735f93c6819835b917c135b23d5375215f944fca9acf1885f37be439135b4db308856f5bb89c4711f4f5f3be4b32ad06d64bcf85fc5dfc9d46eafea2d428f3ee5174d849aeef14ff9d2666fb9f88a9f3bb22f01816efc2b96c0814c80d6dbe2675d82cb649fe8a84b288c1df474ac09ce2251bb6c36aecd2cc4ab35b1b918686e6b27066ea210ffcece88e84c2871e2ff20aca417416cab9f0d443abc496075cfd8891c2d45f35576f43c3bf696c5f35561d1c654098b0797727c18406bf3b25909373d9656f8ce0d128716c06f8015bef819721655f1e2b34b8a33cc109e891cb3573d9ae51b33d6c8dd687b19a64c717e6c99da2b0767cedd56dfc7c34a79a3f9711dd80f3b1f1f67b346a1eed3afd167663cb44683fe524e0d8979bd90c0f90a236841659a6a183554d72a00dadc21896a1f18bbe35f6e7b9a4001faea4f1dac77ce6fb507959517c9dd4853c431b36b8722655d02c4364bb77fcc391f2333a78e10e80a35e07dc06af5858cb2a584c320a290b53e4f16123e37a90ad6cd809d2466b1f6471d0857fcf037f122b4aa99a212c46ecbc611aa2974f1a1beeb31ef93ecfa370bba0d5acec39d8e7b7a29c03660cb8b348bdf60d0fd457dc49f8000010a41c8a00a4b0a4dd1988fb497788ee8ed19e5b4051a4fd3475ccd03a548a694e5a2cfed8c158d8b75143a28c069e87f6f24fc023672b619d9c185c462fed6ed581348cc332c9bd534a846882d9f892be1809310c213453c4c5f4f45d0e51d9a3d31882abf444354788ec0e807c32ad3c4c4ee628f6e28d74d1b022a99bc41a87bff5635a788d8ecf0c56ce1fb3b6aa81e96c6d04bf7500607a81a592b67aca7f03be8b9944149a7db54038c351c77a337bcda9295183c03fb2b3a67e32ddab9dc2b54265e9f754d22ead3db43323d95842b91bf1b8cb8422933c63007ccf81d3d01b5bdc598781ae26d7b40fa9e61f0155bf662a17b8fa74f997870e2d7ab8b9bffb3347fb46c7dc572f28693c1d1bc6e41ef96cccef73ffe8bb0f822039f94579029e583d4a3371f70ceaf03c5f44bab270e7b8d9a5ac847bf75aff799f205acb51752782aaff11070877919c3cf9c42619e4f64a5a8b416a09bf9e237d6c7c13779611dd59a5cfdbbe06504c9ff8fb093236ade0bce7621882c4905bb1b676eaae02238584b915266c14e9c1728db82a606be0484deb8b4b310e584f4ad87812ed1e6f0b3aa97a8f67cc92a92cde95c37bee60ce24fd32198e5c4853f40dfe49c5744abca6c132efb0617886d98fad1970eb394d939b64e1cd423f8f0aa0b05393327553256958a7df7f8e373531a839a0379f31150f8e61c8c9f74a12c71d91f91d7e061e5842cdb4c1df5a6f84d1b50", 0xa8f}, {0x0}], 0x3) 03:49:59 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) rmdir(&(0x7f0000000180)='./file0\x00') [ 1305.536601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1305.552072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1305.615408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1305.648472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1308.237679] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1308.240011] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1308.241683] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1308.245111] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1308.248395] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1308.249971] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1310.312800] Bluetooth: hci1: command 0x0409 tx timeout [ 1310.376604] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 1312.360675] Bluetooth: hci1: command 0x041b tx timeout [ 1314.409613] Bluetooth: hci1: command 0x040f tx timeout [ 1314.792612] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 1316.456753] Bluetooth: hci1: command 0x0419 tx timeout [ 1317.168397] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1317.170330] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1317.174473] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1317.183155] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1317.186948] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1317.197152] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1319.272667] Bluetooth: hci3: command 0x0409 tx timeout [ 1321.320697] Bluetooth: hci3: command 0x041b tx timeout [ 1323.368595] Bluetooth: hci3: command 0x040f tx timeout [ 1325.416688] Bluetooth: hci3: command 0x0419 tx timeout [ 1327.969847] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1327.971034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1327.974404] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1328.058402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1328.059987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1328.062347] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1328.426316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1328.435160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1328.742061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1328.745766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1337.841331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1337.842582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1337.846084] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1337.909687] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1337.910938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1337.914405] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1338.420381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1338.439397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1338.752358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1338.759294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:50:32 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x4b4b, 0x0) 03:50:32 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) rmdir(&(0x7f0000000180)='./file0\x00') 03:50:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="ab3e97380000000000003100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162636465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x4001) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x40, &(0x7f0000000080)={@rand_addr, @remote}, 0xc) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000000)={0xffffffc1, 0x3, 0x2, 0x4, 0x9}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x93b}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 03:50:32 executing program 1: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd, 0x0, 0x0, 0x46}, 0x0) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 03:50:32 executing program 7: prlimit64(0x0, 0x7, &(0x7f0000000080)={0x4, 0x6}, 0x0) fsopen(&(0x7f0000000080)='hugetlbfs\x00', 0x0) syz_io_uring_setup(0x2b2, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000)) 03:50:32 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) 03:50:32 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg(r0, &(0x7f0000001240)=[{{&(0x7f0000000000)=@ll, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg(r1, &(0x7f0000001240)=[{{&(0x7f0000000000)=@ll={0x11, 0x6558, r3}, 0x80, 0x0}}], 0x1, 0x0) 03:50:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r4, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x64}}}}, [@NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x6}, {0x1, 0x5}, {0x80}, {0x8, 0x6}, {0x7, 0x6}, {0x3}, {0x80, 0x4}, {0xb8, 0x2}, {0x9, 0x4}], "ef7dc4ee38cfd926"}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x20090) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) accept(r0, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f00000001c0)=0x80) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000740)={0x2074, r4, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0xd}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x1004, 0xfc, "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"}, @NL80211_ATTR_FILS_ERP_RRK={0x1004, 0xfc, "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"}, @NL80211_ATTR_FILS_ERP_RRK={0xf, 0xfc, "1d1ca9d8b25dd0da6d579c"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x1000}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x0, {0x40, 0x0, 0x1, 0x80}}}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @from_mac=@broadcast}]}, 0x2074}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000540)=@mgmt_frame=@probe_response={@wo_ht={{}, {0x6}, @device_b, @device_a, @from_mac}, 0x0, @random=0x4, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @val={0x4, 0x6, {0xff, 0x1f, 0x1, 0xc000}}, @void, @void, @void, @void}, 0x3e) mq_timedsend(0xffffffffffffffff, &(0x7f0000000440)="5b25377fc7ed9378a5f1d9ca59597caebbabc8cde761d9c14ff370d59441934159e0a98f135dfa2dc6eb8e833e0340ed4564e018589a06d3252d81b56266d7aa1b2b2ee32dd0af3ae98bbe195be42d9c7b0fc4c94bda5afd6d1f059d4bacc58e1c73e7010c1e7616419fe22f31d9880508bffc58a8af0920556afb1644c8ccebe961f0d1f005ada0562562672613fce1a888859ee5e34938fc33b8a56f76c9b0c077", 0xa2, 0x5, &(0x7f0000000500)) [ 1338.945620] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:50:32 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x4b4b, 0x0) [ 1338.984121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1339.014168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1339.061472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:50:33 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000900)=ANY=[@ANYBLOB="01000000010000001800000079987cc354ed60cdd7733ac67e383e13e8876d1eb6b3f0de8c9a30b5c21c9f4a1bea8135272c7088b44568d679eee2598bf88cf1f5025ce8d89b24c4af0e102a1285a6", @ANYRES32=r0, @ANYBLOB="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"]) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x3, 0x1, 0x0, 0x7, 0x0, 0x401, 0x20014, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f00000001c0)}, 0x212d, 0x0, 0x8000, 0x4, 0x0, 0xffff, 0x8, 0x0, 0x4, 0x0, 0x401}, 0xffffffffffffffff, 0x0, r1, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x36) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r3, &(0x7f00000000c0)='9', 0x1, 0x8040000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000140)=0x1) pwrite64(r4, &(0x7f00000000c0), 0x0, 0x8040000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000700)) ioctl$HIDIOCGRAWNAME(r3, 0x80404804, &(0x7f00000003c0)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0xffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000000)=0x3fc) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/vmstat\x00', 0x0, 0x0) fsopen(&(0x7f0000000200)='devpts\x00', 0x0) 03:50:33 executing program 1: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd, 0x0, 0x0, 0x46}, 0x0) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) [ 1339.091802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:50:33 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg(r0, &(0x7f0000001240)=[{{&(0x7f0000000000)=@ll, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg(r1, &(0x7f0000001240)=[{{&(0x7f0000000000)=@ll={0x11, 0x6558, r3}, 0x80, 0x0}}], 0x1, 0x0) 03:50:33 executing program 6: syz_emit_ethernet(0x46, &(0x7f0000000100)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x10, 0x3a, 0x0, @local, @local, {[], @ndisc_ra={0xc0}}}}}}, 0x0) 03:50:33 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x4b4b, 0x0) 03:50:33 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000007680)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="9a", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000480)="f3", 0x1}], 0x1}}], 0x3, 0x4c000) [ 1339.342077] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1339.357422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1339.419152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1339.439150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1339.451650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1341.938612] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1341.945712] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1341.948612] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1341.953258] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1341.956284] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1341.960034] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1343.976629] Bluetooth: hci1: command 0x0409 tx timeout [ 1346.024612] Bluetooth: hci1: command 0x041b tx timeout [ 1348.072580] Bluetooth: hci1: command 0x040f tx timeout [ 1350.120963] Bluetooth: hci1: command 0x0419 tx timeout [ 1365.780134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1365.781431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1365.808806] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1365.842877] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1365.844098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1365.847358] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1366.261454] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1366.269351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1366.280741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1366.591110] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1366.596161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1366.601145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:51:00 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg(r0, &(0x7f0000001240)=[{{&(0x7f0000000000)=@ll, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg(r1, &(0x7f0000001240)=[{{&(0x7f0000000000)=@ll={0x11, 0x6558, r3}, 0x80, 0x0}}], 0x1, 0x0) 03:51:00 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000007680)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="9a", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000480)="f3", 0x1}], 0x1}}], 0x3, 0x4c000) 03:51:00 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x23, 0x0, 0x10) 03:51:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000071000003007d899c4846f3000000004000", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162636465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000380)=@mgmt_frame=@auth={@wo_ht={{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x4}, @device_a, @device_b, @initial, {0x0, 0x1}}, 0x1, 0x3, 0x29, @val={0x10, 0x1, 0x2f}, [{0xdd, 0xa8, "118149f218be191753b2057408158f78e59e55b6ba59c72968face6cf7e14b19e73b73769aa17e113ff70630bf5758a99635b4ba68cbb5a1e009c78d5d3cb7241ab8fb429538dfb2d155aa0179293b49fb039726d5652debcea7f6c4026b4ab1aabb4252009fdc8151395c90dd958b88b0098634168d025b8a0bb5553058bcc89aad251041295ebd3dc7ef1f6446c55a45619e2aeb3cc0b56b6ab72ce85fe9e3d41ae3f563dff2fd"}]}, 0xcb) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x50, r5, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x1c}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x2404e800) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)={0xd8, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x2, 0xd}}}}, [@NL80211_ATTR_VENDOR_DATA={0x90, 0xc5, "4e97abeafe1f8d17867cbe97b81a515d8eb06e2154fd18b8366c1ae08201779efb9707180c0a8cc8691ebfb42f9668e252fd9ffab3b09936d22414e0a83c5eb63652b88f46316d1737a6b3592b38316b658ddb08efb2ebb188c1c74c3a819192150130430544dbdcfd99a55a6e46bae7d8a5d4fc9bb900426765d1551e05f35fa7b1c99a3b91a428365640a3"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x40}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x2}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4004020}, 0x40) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000740)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @void, @void, @void, [{0xdd, 0x9, "017986ccbab2bca67c"}, {0xdd, 0x5f, "3f9fad8ffefbc855a3d394b27bf5f9e36fc9c2ae0f2c7e931c7c20ac4739561368fd107fb89e33e8e99bbe88f18d5411064b8b0e6cf14eeb9b92b6e3cdfdb6067fa906779ba881d694cefa6d66778e93cedde09f8d5f7176359415304a1a45"}, {0xdd, 0xab, "2a7418448338802e481914fb7ba2607b6ae8a60f5115c154bfdbfd80a6512ca573d00e752db462198c41ccf8243dc16551b738f439765df4ef6b7a60d795dccc0a407469e03f2b72db68399c0ec47e42b3178ceaf048ff7cac8a7a1c0427c9ea663e7ad4d315e8339f0af39c5dd548ff7442950678ff0d4a0a6692cf28308eddd8255006cdc15747554dad2b34c79661ebbe89ba860e73aab6da2fd6ddf22c4c001ff80463aab560c65845"}, {0xdd, 0x6b, "e7db2a39fa7016cff091f6f9a40bca89f8b8d9c86f3e0e0fd65c74c2ffc969c80ae1d23ab54b58c699020eb8ea6b6a3e4c9d9afcd7d08e7e27e2f711bace171e3447ba6ec74a5a7ba0ecf072b88e3b9088958c335cd1887ec14c9abb4403a39858380ace7a3b428f74ca1c"}, {0xdd, 0x26, "9de615174d54636c7d621542bae5e8e7d4207476706c17fb7e3e95739ad533e4b73d54141856"}, {0xdd, 0xdb, "c9ef4292452235ba9fbf44c7d9ad6c4b2b5813ad4fdfd43e8dd6bd39b9484c4148f196b16044e2e7b9c8a9f32dccd8118a3a03ec9b4d89d43d881a551e430e30b448094ea18d6734551c5d85cfe953711872010398a0adca1049e89b474e6650119724b33d0f4664df4db657b674295c1f72500eeb6986703db524a31a595fb7dc2935f3952390488b3e632391f4589ef8f3ab7758b762a85bc5997c0a3263f5deaea50afd4c3e559011fa749b755e9c4831e3897381352b56bee1d7b9698fa0fe4e359f6c68b172aa594a449b5fdb64a5fae1f8e2f59a170c9568"}]}, 0x2b7) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f0000000a00)=@mgmt_frame=@beacon={@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6045}, @device_a, @device_b, @from_mac, {0x6, 0x3f}}, @ver_80211n={0x0, 0x3f, 0x2, 0x2, 0x0, 0x2, 0x1, 0x0, 0x1}}, 0x8, @default, 0x548, @void, @val={0x1, 0x7, [{0x1}, {0x1b, 0x1}, {0x6}, {0x36, 0x1}, {0x24, 0x1}, {0x9, 0x1}, {0x18, 0x1}]}, @val={0x3, 0x1}, @void, @void, @val={0x5, 0x6b, {0x7, 0x1b, 0x3, "648039d3293181dc111a6d9fd90851a9f73cceba602c1332e81bd22a805f908f452e4377323a6a623313b3da6eea3b016fa4f7ab5e6321ed67a36e0ec474bd2e39eb3e798e143e41cc9dfd8ad32f7ffcebdde056f9bd229b84e8b45770147300fd01988f8952ff1b"}}, @val={0x25, 0x3, {0x0, 0x64}}, @val={0x2a, 0x1}, @void, @val={0x2d, 0x1a, {0x20, 0x1, 0x3, 0x0, {0x2, 0x9, 0x0, 0x3, 0x0, 0x1, 0x1, 0x3}, 0x800, 0xee, 0x7}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x1, 0x77, 0x1}}, @val={0x76, 0x6, {0x4, 0x42, 0x8, 0x6}}, [{0xdd, 0xde, "087e3834c88e96fcf87ba1b7e3a6542b9de237d5037532e15c89c682da52d4c0be79ce85c4080b7966dee679c85c5a54ba29bb6a71d5d103a323623836387dce1f2538b568125b271c6163855f5f15824f7b03723d5244f76e62a89f6a6a4a0233ac4a5f42c8eadae4165b83dbb553f70f94cd781b24e13f8cea4cea845b82958d742ddc10dabaa460f1436bdf79f98408d52277dbbe29d03445b2c73fe93a14d0c9505d60e69a885ba4794317ddfe0b4352a60fc81d7c0c4f4f8cdcfbe9a487124489ac6c7fe1d578245259ef84dd44542b7250bf83bb380f763f8df941"}, {0xdd, 0xaf, "a7bda4205b26ccde2fdf433dd88eebaac204d2e71f3c58a665da617f16474496507027812be51c66584c3c69fba2ed65d2312d0652d7d5424c8dfcba6a6db0e5db0c9e0d244790a683bd62073e9d9597269157f95cca256ea627df9d4b48849377d91370378e436d2c87e3720a61ae50fc37522307eb6479c558a0541abf429582641f4567d2a487fea8d7e3e29d856c96df5e121d37d515e686007b8613b719fdfc70e72ae956fcbb233729feea97"}, {0xdd, 0x11, "cada9baeea245cdc214c3672b6a7a3590a"}, {0xdd, 0xf5, "3d433443b360cf728c14ec6fb96dd625b602e69d3afcf8e1fd7003ab5e42e47e3d25e6c6c48a9ed2e613c89a1eb5b8c5de4cbe7ce8b48639e9ecdefa1be0bda5f35bf6b4db05968cc76d9b62eda1f0786c41af6a5dda3c9491a800ab041e4ea33243569e78ab9089838d9ddc266ff59f6dbd4d98f02f793b6e243c8f13efb1eea94e8a8d3ba545c67294b86d55485475ce3875f8948cf5d73e73cc1478cabf66a5b166e90878709946f7bad1d2b9dd4d584cfa682972f2426a2d8830ffe1b904e4df1a7d3b46a9465d24cd57689477492f2d4e808229b7a25bff3a1ca4661e969db4fc5f4e5cd5dacee0d4676e46b82e8d795ff45a"}, {0xdd, 0x3d, "09bc0c84a9dd36c2cb4b87e23c8061b8c232aa15975c702a9da0ecd4ad1eabd1a6385e4bb28258b00acc5e6a78f04feff1923d7cc78324230b2771d14b"}]}, 0x3b8) 03:51:00 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x4b4b, 0x0) 03:51:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x40, 0x9, 0x5, 0x0, 0x0, 0x100000001, 0x40000, 0xb, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1000, 0x0, @perf_config_ext={0x5, 0x3}, 0x0, 0x710, 0xd953, 0x0, 0x5d27, 0x7fff, 0x200, 0x0, 0x17, 0x0, 0xffffffffffffff01}, 0x0, 0xf, 0xffffffffffffffff, 0x8) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f00000002c0), &(0x7f0000000380)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r3, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x155}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x16, 0xcd, [0x2, 0xf000, 0x6, 0xd6b7, 0x42, 0xfeb, 0xeec, 0x1ff, 0x20]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x12, 0xcd, [0x0, 0x3, 0xffff, 0x81, 0x200, 0x7, 0x1]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x160, r3, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x8}}}}, [@acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}]}], @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}], @NL80211_ATTR_PBSS={0x4}]}, 0x160}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) 03:51:00 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) 03:51:00 executing program 7: perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_get$uid(0x3, 0x0) [ 1366.729235] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1366.748995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:51:00 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000007680)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="9a", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000480)="f3", 0x1}], 0x1}}], 0x3, 0x4c000) [ 1366.778072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1366.801794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:51:00 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x3a, 0x0, 0x0) 03:51:00 executing program 1: mremap(&(0x7f0000e6d000/0x1000)=nil, 0x7fffdf20f000, 0x1000, 0x3, &(0x7f0000df0000/0x1000)=nil) 03:51:00 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg(r0, &(0x7f0000001240)=[{{&(0x7f0000000000)=@ll, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg(r1, &(0x7f0000001240)=[{{&(0x7f0000000000)=@ll={0x11, 0x6558, r3}, 0x80, 0x0}}], 0x1, 0x0) [ 1366.852709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:51:00 executing program 7: perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_get$uid(0x3, 0x0) 03:51:01 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000007680)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="9a", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000480)="f3", 0x1}], 0x1}}], 0x3, 0x4c000) 03:51:01 executing program 0: ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) 03:51:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000001a00)=[&(0x7f0000000080)={0x0, 0x0, 0xfe, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) [ 1367.134418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1367.149329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1371.688704] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 1374.084875] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1374.089370] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1374.091697] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1374.095698] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1374.097786] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1374.099112] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1376.170707] Bluetooth: hci1: command 0x0409 tx timeout [ 1378.216652] Bluetooth: hci1: command 0x041b tx timeout [ 1380.264591] Bluetooth: hci1: command 0x040f tx timeout [ 1382.312736] Bluetooth: hci1: command 0x0419 tx timeout [ 1395.841982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1395.843292] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1395.846637] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1395.912283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1395.914085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1395.917064] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1396.368134] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1396.375133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1396.379744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1396.393097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1396.397038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1396.704406] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1396.706658] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1396.710900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1396.719468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:51:30 executing program 7: perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_get$uid(0x3, 0x0) 03:51:30 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) 03:51:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x3) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r5, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0x40884}, 0x4040001) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 03:51:30 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000340)=0xeed, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x1ff, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) 03:51:30 executing program 6: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffe000/0x2000)=nil, 0x6000) r0 = perf_event_open(0x0, 0x0, 0xfffffffff7fffff9, 0xffffffffffffffff, 0x0) shmctl$IPC_STAT(0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) shmctl$IPC_INFO(0x0, 0x3, 0x0) syz_open_dev$vcsa(&(0x7f00000003c0), 0x5, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) 03:51:30 executing program 0: ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) 03:51:30 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) 03:51:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r5) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940), 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x38, r8, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x7e}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x20008000) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r8, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0x2, 0x7, 0xf8, 0x6, 0x4, 0x401]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x1, 0x5]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x20000044) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 1396.832061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1396.840417] random: crng reseeded on system resumption [ 1396.875952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:51:30 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r0, 0xff, 0x0, &(0x7f0000000100)="3e0127aa", 0x4) 03:51:30 executing program 7: perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_get$uid(0x3, 0x0) [ 1396.901315] Restarting kernel threads ... done. 03:51:30 executing program 0: ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) [ 1396.940324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1396.951708] random: crng reseeded on system resumption [ 1396.986837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:51:31 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000340)=0xeed, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x1ff, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) 03:51:31 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x8) pwritev(r2, &(0x7f00000017c0)=[{&(0x7f0000000440)="ab", 0x1}], 0x1, 0x0, 0x0) 03:51:31 executing program 1: mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x3) 03:51:31 executing program 0: ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) 03:51:31 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) 03:51:31 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x0, 0x0) pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000240)='./file1\x00', 0x119) 03:51:31 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000340)=0xeed, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x1ff, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) [ 1397.203711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1397.236762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:51:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000001500)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x0, 0x0, "ae41ba3d08ae79cbef4c72343e141dc83dd4a24a447556e055d70b3b61fd7929acb571c66cd984146d66ae44bb567da9a6e26c17246bf5ac5a0b74d1cfdbac75e919f15f27d44a1e807ff95985c6f996"}, 0xd8) [ 1397.327182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:51:31 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) accept4(r0, 0x0, 0x0, 0x0) 03:51:31 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000340)=0xeed, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x1ff, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) 03:51:31 executing program 0: mknod(&(0x7f0000008d80)='./file0\x00', 0x1000, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x20a01, 0x0) 03:51:31 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) fcntl$setstatus(r0, 0x4, 0x2800) socket$inet6(0xa, 0x0, 0x0) 03:51:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="00adfa2ee20fcf0a49ade57f9f8720f99479230f16a9ec6b8500", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000380)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x1}, @broadcast, @device_a, @random="f0cd2cebadfb", {0x0, 0x5}}, {0x3, 0x0, 0x0, 0x0, 0x6}}, {@type11={{0x0, 0x2, 0xf, 0x1, 0x1, 0x1, 0x1}, {0x40}, @device_b, @device_a, @from_mac=@broadcast, {0x3, 0x80}, @broadcast}, {0x4, 0x1, 0x2, 0x1, 0x1}}}, @a_msdu=[{@device_a, @device_b, 0x90, "14ddc4c316b263c53804978e2ae56af45dfdfb0333be46eed8c40655f8a9fb1b968134d577433095143d7ed8a9d63ec3e7c2f632ae002e73582e9853197164600314a9ad7da2b62aa63b46911b53abbead42d707d41a14ecabfe45318c5222b76d0872bafe9467f14ececc300fe1c83d921dfeed301f83a4d13c88634fef45fe7418550b0f9fd12b44d6c03f8c68736f"}, {@broadcast, @device_b, 0x2e, "6075597222df26c13e9faa3b1329426f993320d1b3dd256ce606b72f6d9496666abce9858961f5d1e43087abe66d"}, {@broadcast, @broadcast}, {@broadcast, @device_a, 0x57, "8ec38af5f842d1b83f26e18530f607fdfbc2ad7544df662d29bf9e455492ad2f249930122c3731708c459c973fe3498cc12ffa1546c0079b7cf860eaf794eb4be1d22cd5a3d6a68014e7b5990cecd3983975ae0b8d6122"}, {@device_b, @broadcast, 0x20, "54a060b68e5e4d61abbbcb6a4a2f08b262a12127453d917630d0a5000d1cd670"}, {@device_b, @device_b, 0xfb, "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"}]}, 0x2ca) 03:51:31 executing program 7: r0 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[]) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0]) syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='gid=']) umount2(&(0x7f0000000080)='./file0\x00', 0x4) execveat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x4) 03:51:31 executing program 2: r0 = gettid() perf_event_open(&(0x7f00000007c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 1397.668105] tmpfs: Bad value for 'gid' [ 1397.699089] tmpfs: Bad value for 'gid' [ 1397.706408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:51:31 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='mode=00000000000000000006252']) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x0) 03:51:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) write$binfmt_elf64(r0, &(0x7f0000000040)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 03:51:31 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) accept4(r0, 0x0, 0x0, 0x0) 03:51:31 executing program 3: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = msgget$private(0x0, 0x0) msgrcv(r1, 0x0, 0x0, 0x0, 0x0) 03:51:31 executing program 7: r0 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[]) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0]) syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='gid=']) umount2(&(0x7f0000000080)='./file0\x00', 0x4) execveat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x4) [ 1398.012177] tmpfs: Bad value for 'gid' [ 1400.624595] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1400.629911] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1400.635791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1400.639448] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1400.642258] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1400.644669] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1402.665636] Bluetooth: hci1: command 0x0409 tx timeout [ 1404.712716] Bluetooth: hci1: command 0x041b tx timeout [ 1406.760630] Bluetooth: hci1: command 0x040f tx timeout [ 1408.809431] Bluetooth: hci1: command 0x0419 tx timeout [ 1424.962077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1424.963243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1424.966954] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1425.043392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1425.044618] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1425.047319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1425.481081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1425.490141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1425.798906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:51:59 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) accept4(r0, 0x0, 0x0, 0x0) 03:51:59 executing program 0: socket$inet6(0xa, 0x3, 0x87) 03:51:59 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[]) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0]) syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='gid=']) umount2(&(0x7f0000000080)='./file0\x00', 0x4) execveat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x4) 03:51:59 executing program 7: r0 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[]) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0]) syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='gid=']) umount2(&(0x7f0000000080)='./file0\x00', 0x4) execveat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x4) 03:51:59 executing program 3: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = msgget$private(0x0, 0x0) msgrcv(r1, 0x0, 0x0, 0x0, 0x0) 03:51:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x304102, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r1, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8, 0x6b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x92) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) r7 = fork() r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r9 = syz_open_procfs$namespace(r7, &(0x7f0000000080)='ns/pid\x00') sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, r8, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0xac}, 0x1, 0x0, 0x0, 0xd2ec715e064d7316}, 0x20001000) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r4, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x50, r8, 0x300, 0x70bd29, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x84d}, {0x6, 0x16, 0x628f}, {0x5, 0x12, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x24004084) 03:51:59 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) fcntl$setstatus(r0, 0x4, 0x2800) socket$inet6(0xa, 0x0, 0x0) 03:51:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x78, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x8, 0x7b}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_BSS_SELECT={0x24, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x3, 0xd1}}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x3}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x5}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x20000000, {0x8000, 0x7ff, 0x8, 0x7}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x801) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940), 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x38, r8, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x7e}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x20008000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000001a80)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001940)={0xd8, r8, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x529, 0x52}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x99}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffff}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffffff}], @chandef_params, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x92}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xad6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x81}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xff}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x72}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x2004c8d5) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=ANY=[@ANYBLOB="5000000008021100000108021100000008000000640001000006020202020202010882848b960c12182400"/54], 0x36) [ 1425.912364] tmpfs: Bad value for 'gid' [ 1425.919750] tmpfs: Bad value for 'gid' [ 1425.935676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1425.954644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:51:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000140)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x3a, 0x33, @mgmt_frame=@action={@with_ht={{{}, {}, @device_a, @device_a, @random="b15c139a1e1f"}}, @vht_group_id={0x15, 0x1, {0x0, "a090d38fb15b73c39174e3821906771d"}}}}]}, 0x64}}, 0x0) 03:52:00 executing program 3: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = msgget$private(0x0, 0x0) msgrcv(r1, 0x0, 0x0, 0x0, 0x0) 03:52:00 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) accept4(r0, 0x0, 0x0, 0x0) 03:52:00 executing program 7: r0 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[]) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0]) syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='gid=']) umount2(&(0x7f0000000080)='./file0\x00', 0x4) execveat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x4) 03:52:00 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[]) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0]) syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='gid=']) umount2(&(0x7f0000000080)='./file0\x00', 0x4) execveat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x4) [ 1426.053281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1426.065662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1426.165877] tmpfs: Bad value for 'gid' [ 1426.168507] tmpfs: Bad value for 'gid' 03:52:00 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x25, 0x0) 03:52:00 executing program 3: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = msgget$private(0x0, 0x0) msgrcv(r1, 0x0, 0x0, 0x0, 0x0) 03:52:00 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[]) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0]) syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='gid=']) umount2(&(0x7f0000000080)='./file0\x00', 0x4) execveat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x4) 03:52:00 executing program 7: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x202001, 0x0) fcntl$dupfd(r1, 0x0, r0) 03:52:00 executing program 6: set_mempolicy(0x1, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0xb4a5, 0x7f) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x4d031, 0xffffffffffffffff, 0x0) [ 1426.279302] tmpfs: Bad value for 'gid' 03:52:00 executing program 7: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5425, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 1426.410380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1426.421688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1426.550881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1426.561356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:52:00 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000980)={{}, {}, [{}]}, 0x2c, 0x0) 03:52:00 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a940)=[{&(0x7f0000003fc0)={0x28, 0x2e, 0x711, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0xffffffff}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@private}, @typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x28}], 0x1}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001880)}, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) 03:52:00 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040), 0x4) 03:52:00 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) fcntl$setstatus(r0, 0x4, 0x2800) socket$inet6(0xa, 0x0, 0x0) 03:52:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 03:52:00 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)='\"', 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r1, &(0x7f0000000200)='x', 0x1, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x4f) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r2}) 03:52:00 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1) renameat2(r0, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000180)='./file1\x00', 0x5) openat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) 03:52:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r1, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e) [ 1426.729437] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1426.740729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1426.749180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1426.763192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:52:00 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 03:52:00 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000980)={{}, {}, [{}]}, 0x2c, 0x0) 03:52:00 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000002f00)='ext2\x00', &(0x7f0000002f40)='./file1\x00', 0x0, 0x0, 0x0, 0x10, &(0x7f00000041c0)={[{@journal_path={'journal_path', 0x3d, './file1'}}]}) 03:52:00 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000980)={{}, {}, [{}]}, 0x2c, 0x0) 03:52:00 executing program 7: r0 = add_key(&(0x7f0000001280)='user\x00', &(0x7f00000012c0)={'syz', 0x1}, &(0x7f0000001300)='?', 0x1, 0xfffffffffffffffb) keyctl$read(0xb, r0, 0x0, 0x0) 03:52:01 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x483, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000d25000/0xb000)=nil, &(0x7f0000fd0000/0x1000)=nil, &(0x7f0000ccd000/0x3000)=nil, &(0x7f0000d13000/0x9000)=nil, &(0x7f0000d64000/0x3000)=nil, &(0x7f0000fe7000/0x4000)=nil, &(0x7f0000fb2000/0x3000)=nil, &(0x7f0000d55000/0x2000)=nil, &(0x7f0000d26000/0x1000)=nil, &(0x7f0000000400)="8da6a610ab91a837edfb0360c90b79026743aab9f443812dcf350486edf6c16a74a1021ed115bb337b81e279644a90f7f47094c5996fb4a12d29c9c6ed233c883c3445077f8cd0d7e47213b912d7ca372a3094270956209a6b5535b319c0a731b85a36fd65228d9804e32d", 0x6b, r0}, 0x68) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000300)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r2}}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq={'euid', 0x3d, r3}}, {@measure}]}}) sendmmsg$unix(r1, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, r2}}}], 0x38}}], 0x2, 0x0) eventfd2(0x7, 0x1) signalfd(r1, &(0x7f0000002e80)={[0x4a9]}, 0x8) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r5, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r6}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0) lstat(&(0x7f0000002ec0)='./file0\x00', &(0x7f0000002f00)) r7 = getpid() sched_getparam(r7, &(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) 03:52:01 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x15f) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file1', [{0x20, '#! \xa1\xd3\xd2\x9b\x8a\x8f6J\xca\\~\x18\xa8\x98$\xe0`\x89\x8c\xfa\'\x89[i\x98\\\xe74\x14\xb3\x1b\x9f\xa0\xe0a\'\xd2\xbe\xda({\x02\x18\xae|\xec\xb2\'X\x882\xea\xfd\x8a\xc6\x8aP\x84\x93\f\xb3\xd49f\x01g\xa1F\xda\xf1t\x8d\x0e\x89{1\x1f\x87\xdb\xe6\xd8\xf24[\x02H\x8d\x11\x87\xef\xd9\xa1,\xbb\xe9+\x83~r\x9dHY!Tn\x119\x159 \xa0\xd5b;\xf1\x03\x1aifLa\xcd\xb4\x87\xeal\x00\x84m\x91\x8b72p\xe21+\"2\x8f\xae\x82v\xac\xc08A\x9b6'}]}, 0xa4) close(r0) keyctl$chown(0x4, 0x0, 0xee00, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="8b", 0x1, r1) keyctl$KEYCTL_MOVE(0x1e, r2, r1, 0xfffffffffffffffe, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) [ 1426.999184] journal_path: Lookup failure for './file1' [ 1427.000057] EXT4-fs: error: could not find journal device path 03:52:01 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000980)={{}, {}, [{}]}, 0x2c, 0x0) [ 1427.047858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1427.072030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:52:01 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x15f) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file1', [{0x20, '#! \xa1\xd3\xd2\x9b\x8a\x8f6J\xca\\~\x18\xa8\x98$\xe0`\x89\x8c\xfa\'\x89[i\x98\\\xe74\x14\xb3\x1b\x9f\xa0\xe0a\'\xd2\xbe\xda({\x02\x18\xae|\xec\xb2\'X\x882\xea\xfd\x8a\xc6\x8aP\x84\x93\f\xb3\xd49f\x01g\xa1F\xda\xf1t\x8d\x0e\x89{1\x1f\x87\xdb\xe6\xd8\xf24[\x02H\x8d\x11\x87\xef\xd9\xa1,\xbb\xe9+\x83~r\x9dHY!Tn\x119\x159 \xa0\xd5b;\xf1\x03\x1aifLa\xcd\xb4\x87\xeal\x00\x84m\x91\x8b72p\xe21+\"2\x8f\xae\x82v\xac\xc08A\x9b6'}]}, 0xa4) close(r0) keyctl$chown(0x4, 0x0, 0xee00, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="8b", 0x1, r1) keyctl$KEYCTL_MOVE(0x1e, r2, r1, 0xfffffffffffffffe, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 03:52:01 executing program 5: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"7f5d8d47f63003cd59c61599002ba7f9", 0x0, 0x0, {0x10001, 0xfffff800}, {0x3, 0x7fff}, 0x1ff, [0x8, 0xffff, 0xffffffffffffff01, 0x76, 0x401, 0x100000000, 0x280000, 0x7bd, 0x8000, 0x5, 0x7fffffff, 0x6, 0x2, 0x800100000, 0x80000001, 0xfffffffffffffffe]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000380)={"bcd281deac5b48c843b6283491295e5c", 0x0, r0, {0x6fa, 0x8}, {0x80, 0x3}, 0x9, [0x2, 0x20, 0x6, 0x0, 0x0, 0x20, 0x9, 0x5, 0x2, 0xb8, 0x27, 0x8, 0x1, 0x5, 0x4, 0x8]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 03:52:01 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x1, 0x1}, 0xe) 03:52:01 executing program 0: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000800)={0x0, 0x0, 0x20, 0x81, 0x0, 0x89}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) epoll_create(0xff) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1a23}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:52:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x3) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x60000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x401, @media='eth\x00'}}}, ["", ""]}, 0x68}}, 0x20048880) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r5, 0x0, 0x40, &(0x7f0000000080)={@rand_addr, @remote}, 0xc) fcntl$dupfd(r0, 0x0, r5) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 03:52:01 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x15f) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file1', [{0x20, '#! \xa1\xd3\xd2\x9b\x8a\x8f6J\xca\\~\x18\xa8\x98$\xe0`\x89\x8c\xfa\'\x89[i\x98\\\xe74\x14\xb3\x1b\x9f\xa0\xe0a\'\xd2\xbe\xda({\x02\x18\xae|\xec\xb2\'X\x882\xea\xfd\x8a\xc6\x8aP\x84\x93\f\xb3\xd49f\x01g\xa1F\xda\xf1t\x8d\x0e\x89{1\x1f\x87\xdb\xe6\xd8\xf24[\x02H\x8d\x11\x87\xef\xd9\xa1,\xbb\xe9+\x83~r\x9dHY!Tn\x119\x159 \xa0\xd5b;\xf1\x03\x1aifLa\xcd\xb4\x87\xeal\x00\x84m\x91\x8b72p\xe21+\"2\x8f\xae\x82v\xac\xc08A\x9b6'}]}, 0xa4) close(r0) keyctl$chown(0x4, 0x0, 0xee00, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="8b", 0x1, r1) keyctl$KEYCTL_MOVE(0x1e, r2, r1, 0xfffffffffffffffe, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 03:52:01 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x483, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000d25000/0xb000)=nil, &(0x7f0000fd0000/0x1000)=nil, &(0x7f0000ccd000/0x3000)=nil, &(0x7f0000d13000/0x9000)=nil, &(0x7f0000d64000/0x3000)=nil, &(0x7f0000fe7000/0x4000)=nil, &(0x7f0000fb2000/0x3000)=nil, &(0x7f0000d55000/0x2000)=nil, &(0x7f0000d26000/0x1000)=nil, &(0x7f0000000400)="8da6a610ab91a837edfb0360c90b79026743aab9f443812dcf350486edf6c16a74a1021ed115bb337b81e279644a90f7f47094c5996fb4a12d29c9c6ed233c883c3445077f8cd0d7e47213b912d7ca372a3094270956209a6b5535b319c0a731b85a36fd65228d9804e32d", 0x6b, r0}, 0x68) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000300)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r2}}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq={'euid', 0x3d, r3}}, {@measure}]}}) sendmmsg$unix(r1, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, r2}}}], 0x38}}], 0x2, 0x0) eventfd2(0x7, 0x1) signalfd(r1, &(0x7f0000002e80)={[0x4a9]}, 0x8) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r5, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r6}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0) lstat(&(0x7f0000002ec0)='./file0\x00', &(0x7f0000002f00)) r7 = getpid() sched_getparam(r7, &(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) [ 1427.468645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:52:01 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) fcntl$setstatus(r0, 0x4, 0x2800) socket$inet6(0xa, 0x0, 0x0) [ 1427.478979] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1427.536199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1427.547045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:52:01 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x483, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000d25000/0xb000)=nil, &(0x7f0000fd0000/0x1000)=nil, &(0x7f0000ccd000/0x3000)=nil, &(0x7f0000d13000/0x9000)=nil, &(0x7f0000d64000/0x3000)=nil, &(0x7f0000fe7000/0x4000)=nil, &(0x7f0000fb2000/0x3000)=nil, &(0x7f0000d55000/0x2000)=nil, &(0x7f0000d26000/0x1000)=nil, &(0x7f0000000400)="8da6a610ab91a837edfb0360c90b79026743aab9f443812dcf350486edf6c16a74a1021ed115bb337b81e279644a90f7f47094c5996fb4a12d29c9c6ed233c883c3445077f8cd0d7e47213b912d7ca372a3094270956209a6b5535b319c0a731b85a36fd65228d9804e32d", 0x6b, r0}, 0x68) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000300)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r2}}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq={'euid', 0x3d, r3}}, {@measure}]}}) sendmmsg$unix(r1, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, r2}}}], 0x38}}], 0x2, 0x0) eventfd2(0x7, 0x1) signalfd(r1, &(0x7f0000002e80)={[0x4a9]}, 0x8) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r5, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r6}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0) lstat(&(0x7f0000002ec0)='./file0\x00', &(0x7f0000002f00)) r7 = getpid() sched_getparam(r7, &(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) 03:52:01 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x15f) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file1', [{0x20, '#! \xa1\xd3\xd2\x9b\x8a\x8f6J\xca\\~\x18\xa8\x98$\xe0`\x89\x8c\xfa\'\x89[i\x98\\\xe74\x14\xb3\x1b\x9f\xa0\xe0a\'\xd2\xbe\xda({\x02\x18\xae|\xec\xb2\'X\x882\xea\xfd\x8a\xc6\x8aP\x84\x93\f\xb3\xd49f\x01g\xa1F\xda\xf1t\x8d\x0e\x89{1\x1f\x87\xdb\xe6\xd8\xf24[\x02H\x8d\x11\x87\xef\xd9\xa1,\xbb\xe9+\x83~r\x9dHY!Tn\x119\x159 \xa0\xd5b;\xf1\x03\x1aifLa\xcd\xb4\x87\xeal\x00\x84m\x91\x8b72p\xe21+\"2\x8f\xae\x82v\xac\xc08A\x9b6'}]}, 0xa4) close(r0) keyctl$chown(0x4, 0x0, 0xee00, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="8b", 0x1, r1) keyctl$KEYCTL_MOVE(0x1e, r2, r1, 0xfffffffffffffffe, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 03:52:01 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x15f) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file1', [{0x20, '#! \xa1\xd3\xd2\x9b\x8a\x8f6J\xca\\~\x18\xa8\x98$\xe0`\x89\x8c\xfa\'\x89[i\x98\\\xe74\x14\xb3\x1b\x9f\xa0\xe0a\'\xd2\xbe\xda({\x02\x18\xae|\xec\xb2\'X\x882\xea\xfd\x8a\xc6\x8aP\x84\x93\f\xb3\xd49f\x01g\xa1F\xda\xf1t\x8d\x0e\x89{1\x1f\x87\xdb\xe6\xd8\xf24[\x02H\x8d\x11\x87\xef\xd9\xa1,\xbb\xe9+\x83~r\x9dHY!Tn\x119\x159 \xa0\xd5b;\xf1\x03\x1aifLa\xcd\xb4\x87\xeal\x00\x84m\x91\x8b72p\xe21+\"2\x8f\xae\x82v\xac\xc08A\x9b6'}]}, 0xa4) close(r0) keyctl$chown(0x4, 0x0, 0xee00, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="8b", 0x1, r1) keyctl$KEYCTL_MOVE(0x1e, r2, r1, 0xfffffffffffffffe, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 03:52:01 executing program 0: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000800)={0x0, 0x0, 0x20, 0x81, 0x0, 0x89}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) epoll_create(0xff) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1a23}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:52:01 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x15f) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file1', [{0x20, '#! \xa1\xd3\xd2\x9b\x8a\x8f6J\xca\\~\x18\xa8\x98$\xe0`\x89\x8c\xfa\'\x89[i\x98\\\xe74\x14\xb3\x1b\x9f\xa0\xe0a\'\xd2\xbe\xda({\x02\x18\xae|\xec\xb2\'X\x882\xea\xfd\x8a\xc6\x8aP\x84\x93\f\xb3\xd49f\x01g\xa1F\xda\xf1t\x8d\x0e\x89{1\x1f\x87\xdb\xe6\xd8\xf24[\x02H\x8d\x11\x87\xef\xd9\xa1,\xbb\xe9+\x83~r\x9dHY!Tn\x119\x159 \xa0\xd5b;\xf1\x03\x1aifLa\xcd\xb4\x87\xeal\x00\x84m\x91\x8b72p\xe21+\"2\x8f\xae\x82v\xac\xc08A\x9b6'}]}, 0xa4) close(r0) keyctl$chown(0x4, 0x0, 0xee00, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="8b", 0x1, r1) keyctl$KEYCTL_MOVE(0x1e, r2, r1, 0xfffffffffffffffe, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) [ 1427.790894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1427.897048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1427.903826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:52:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f00000000c0)={0x0, 0x4c4b40}, &(0x7f0000000000)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 1428.146900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1428.168139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:52:02 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x15f) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file1', [{0x20, '#! \xa1\xd3\xd2\x9b\x8a\x8f6J\xca\\~\x18\xa8\x98$\xe0`\x89\x8c\xfa\'\x89[i\x98\\\xe74\x14\xb3\x1b\x9f\xa0\xe0a\'\xd2\xbe\xda({\x02\x18\xae|\xec\xb2\'X\x882\xea\xfd\x8a\xc6\x8aP\x84\x93\f\xb3\xd49f\x01g\xa1F\xda\xf1t\x8d\x0e\x89{1\x1f\x87\xdb\xe6\xd8\xf24[\x02H\x8d\x11\x87\xef\xd9\xa1,\xbb\xe9+\x83~r\x9dHY!Tn\x119\x159 \xa0\xd5b;\xf1\x03\x1aifLa\xcd\xb4\x87\xeal\x00\x84m\x91\x8b72p\xe21+\"2\x8f\xae\x82v\xac\xc08A\x9b6'}]}, 0xa4) close(r0) keyctl$chown(0x4, 0x0, 0xee00, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="8b", 0x1, r1) keyctl$KEYCTL_MOVE(0x1e, r2, r1, 0xfffffffffffffffe, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 03:52:02 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x15f) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file1', [{0x20, '#! \xa1\xd3\xd2\x9b\x8a\x8f6J\xca\\~\x18\xa8\x98$\xe0`\x89\x8c\xfa\'\x89[i\x98\\\xe74\x14\xb3\x1b\x9f\xa0\xe0a\'\xd2\xbe\xda({\x02\x18\xae|\xec\xb2\'X\x882\xea\xfd\x8a\xc6\x8aP\x84\x93\f\xb3\xd49f\x01g\xa1F\xda\xf1t\x8d\x0e\x89{1\x1f\x87\xdb\xe6\xd8\xf24[\x02H\x8d\x11\x87\xef\xd9\xa1,\xbb\xe9+\x83~r\x9dHY!Tn\x119\x159 \xa0\xd5b;\xf1\x03\x1aifLa\xcd\xb4\x87\xeal\x00\x84m\x91\x8b72p\xe21+\"2\x8f\xae\x82v\xac\xc08A\x9b6'}]}, 0xa4) close(r0) keyctl$chown(0x4, 0x0, 0xee00, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="8b", 0x1, r1) keyctl$KEYCTL_MOVE(0x1e, r2, r1, 0xfffffffffffffffe, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) [ 1428.478609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:52:02 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x15f) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file1', [{0x20, '#! \xa1\xd3\xd2\x9b\x8a\x8f6J\xca\\~\x18\xa8\x98$\xe0`\x89\x8c\xfa\'\x89[i\x98\\\xe74\x14\xb3\x1b\x9f\xa0\xe0a\'\xd2\xbe\xda({\x02\x18\xae|\xec\xb2\'X\x882\xea\xfd\x8a\xc6\x8aP\x84\x93\f\xb3\xd49f\x01g\xa1F\xda\xf1t\x8d\x0e\x89{1\x1f\x87\xdb\xe6\xd8\xf24[\x02H\x8d\x11\x87\xef\xd9\xa1,\xbb\xe9+\x83~r\x9dHY!Tn\x119\x159 \xa0\xd5b;\xf1\x03\x1aifLa\xcd\xb4\x87\xeal\x00\x84m\x91\x8b72p\xe21+\"2\x8f\xae\x82v\xac\xc08A\x9b6'}]}, 0xa4) close(r0) keyctl$chown(0x4, 0x0, 0xee00, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="8b", 0x1, r1) keyctl$KEYCTL_MOVE(0x1e, r2, r1, 0xfffffffffffffffe, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 03:52:02 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x483, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000d25000/0xb000)=nil, &(0x7f0000fd0000/0x1000)=nil, &(0x7f0000ccd000/0x3000)=nil, &(0x7f0000d13000/0x9000)=nil, &(0x7f0000d64000/0x3000)=nil, &(0x7f0000fe7000/0x4000)=nil, &(0x7f0000fb2000/0x3000)=nil, &(0x7f0000d55000/0x2000)=nil, &(0x7f0000d26000/0x1000)=nil, &(0x7f0000000400)="8da6a610ab91a837edfb0360c90b79026743aab9f443812dcf350486edf6c16a74a1021ed115bb337b81e279644a90f7f47094c5996fb4a12d29c9c6ed233c883c3445077f8cd0d7e47213b912d7ca372a3094270956209a6b5535b319c0a731b85a36fd65228d9804e32d", 0x6b, r0}, 0x68) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000300)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r2}}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq={'euid', 0x3d, r3}}, {@measure}]}}) sendmmsg$unix(r1, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, r2}}}], 0x38}}], 0x2, 0x0) eventfd2(0x7, 0x1) signalfd(r1, &(0x7f0000002e80)={[0x4a9]}, 0x8) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r5, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r6}, {0x2, 0x1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0) lstat(&(0x7f0000002ec0)='./file0\x00', &(0x7f0000002f00)) r7 = getpid() sched_getparam(r7, &(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) 03:52:02 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x15f) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file1', [{0x20, '#! \xa1\xd3\xd2\x9b\x8a\x8f6J\xca\\~\x18\xa8\x98$\xe0`\x89\x8c\xfa\'\x89[i\x98\\\xe74\x14\xb3\x1b\x9f\xa0\xe0a\'\xd2\xbe\xda({\x02\x18\xae|\xec\xb2\'X\x882\xea\xfd\x8a\xc6\x8aP\x84\x93\f\xb3\xd49f\x01g\xa1F\xda\xf1t\x8d\x0e\x89{1\x1f\x87\xdb\xe6\xd8\xf24[\x02H\x8d\x11\x87\xef\xd9\xa1,\xbb\xe9+\x83~r\x9dHY!Tn\x119\x159 \xa0\xd5b;\xf1\x03\x1aifLa\xcd\xb4\x87\xeal\x00\x84m\x91\x8b72p\xe21+\"2\x8f\xae\x82v\xac\xc08A\x9b6'}]}, 0xa4) close(r0) keyctl$chown(0x4, 0x0, 0xee00, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="8b", 0x1, r1) keyctl$KEYCTL_MOVE(0x1e, r2, r1, 0xfffffffffffffffe, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 03:52:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000040), 0xfffffefa) 03:52:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r1, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x6, 0x4, 0x3, 0x9, 0x8000, 0xfff, 0x4, 0x9, 0x1ff, 0xccda, 0x445, 0x7fff, 0x9, 0x28, 0x0, 0x8882]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x50, 0x4, 0x6, 0x5, 0x0, 0x0, {0xb, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000014) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4000009c4acf4851da9da4a0ec8c4bdc9cc8ab00", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="11002a00dd0b6162636465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@device_b}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000100)=@mgmt_frame=@beacon={@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x429}, @device_b, @device_b, @from_mac, {0x8, 0x81}}, @ver_80211n={0x0, 0x2, 0x3, 0x2, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1}}, 0xff5, @random=0x81, 0x4008, @void, @void, @val={0x3, 0x1, 0x3}, @val={0x4, 0x6, {0x77, 0x8, 0x20, 0x3}}, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x0, 0x9, 0x19, 0x800}}, [{0xdd, 0x9, "0a83ded0790521cca0"}, {0xdd, 0x49, "7bfb2cd26e3296b991028d8a1bd629b622a48a3a3a13a155a53682f0aae100751e12153cc106a75c1bcffeee7e9da8dfcda84974c5b31b0d4a823d2dfc99081619e66b13049c9ad789"}]}, 0x99) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=ANY=[@ANYBLOB="500000000802000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c121824"], 0x36) syz_80211_inject_frame(&(0x7f00000001c0)=@broadcast, &(0x7f0000000280)=@mgmt_frame=@deauth={@with_ht={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x217}, @device_b, @broadcast, @initial, {0x5}}, @ver_80211n={0x0, 0x7, 0x3, 0x0, 0x0, 0x1, 0x1}}, 0x14, @void}, 0x1e) 03:52:02 executing program 0: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000800)={0x0, 0x0, 0x20, 0x81, 0x0, 0x89}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) epoll_create(0xff) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1a23}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:52:02 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000bd6fa4450008000340", @ANYRES32=r2], 0x30}}, 0x0) preadv(r0, &(0x7f0000001800)=[{&(0x7f0000000180)=""/106, 0x6a}, {&(0x7f0000001580)=""/136, 0x88}, {&(0x7f0000001640)=""/197, 0xc5}, {&(0x7f0000001740)=""/188, 0xbc}, {&(0x7f0000000200)=""/69, 0x45}, {&(0x7f0000000300)=""/127, 0x7f}, {&(0x7f00000003c0)=""/28, 0x1c}], 0x7, 0x2, 0x100) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2926}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) lstat(&(0x7f0000000380)='./file0\x00', 0x0) acct(0x0) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000480)="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") r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000000)={0x0, 0x0}) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x2, 0xb1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1001, 0x0, 0x0, 0x1}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000440)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000580)=""/4096, 0x1000) [ 1428.632371] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1428.639912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1428.659329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:52:02 executing program 2: openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40000, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect(0xffffffffffffffff, &(0x7f00000000c0)=@phonet={0x23, 0x0, 0x0, 0x2}, 0x80) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) signalfd4(r2, &(0x7f0000001880)={[0xe31a]}, 0x8, 0x80800) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000017c0)={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="94031c855deb"}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) [ 1428.682804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1428.690256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1428.734924] device lo entered promiscuous mode 03:52:02 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_sset_info={0x10}}) 03:52:02 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000bd6fa4450008000340", @ANYRES32=r2], 0x30}}, 0x0) preadv(r0, &(0x7f0000001800)=[{&(0x7f0000000180)=""/106, 0x6a}, {&(0x7f0000001580)=""/136, 0x88}, {&(0x7f0000001640)=""/197, 0xc5}, {&(0x7f0000001740)=""/188, 0xbc}, {&(0x7f0000000200)=""/69, 0x45}, {&(0x7f0000000300)=""/127, 0x7f}, {&(0x7f00000003c0)=""/28, 0x1c}], 0x7, 0x2, 0x100) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2926}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) lstat(&(0x7f0000000380)='./file0\x00', 0x0) acct(0x0) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000480)="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") r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000000)={0x0, 0x0}) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x2, 0xb1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1001, 0x0, 0x0, 0x1}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000440)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000580)=""/4096, 0x1000) [ 1428.859215] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1428.919279] device lo left promiscuous mode [ 1428.930863] device lo entered promiscuous mode 03:52:02 executing program 2: openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40000, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect(0xffffffffffffffff, &(0x7f00000000c0)=@phonet={0x23, 0x0, 0x0, 0x2}, 0x80) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) signalfd4(r2, &(0x7f0000001880)={[0xe31a]}, 0x8, 0x80800) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000017c0)={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="94031c855deb"}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) 03:52:02 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x14, 0x1d, 0x1, 0x0, 0x0, "", [@typed={0x4, 0x0, 0x0, 0x0, @binary}]}, 0x14}], 0x1}, 0x0) clock_gettime(0x0, &(0x7f0000006480)) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40002000, 0x0) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x0) openat(0xffffffffffffffff, &(0x7f0000006500)='./file0\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000006540)={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0xfd, 0x8, 0x0, 0xa9}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000006a00)={0x3, 0x0, 0x8, 0x15, 0x1d8, 0x0}) syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) fchmod(0xffffffffffffffff, 0x20) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000006b00)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x14) clock_nanosleep(0x1, 0x0, &(0x7f0000006b40), &(0x7f0000006b80)) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000006bc0), 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000006c40), 0x1, 0x0) [ 1429.013125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1429.050635] cgroup: fork rejected by pids controller in /syz6 [ 1429.063900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:52:03 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000000)) 03:52:03 executing program 0: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000800)={0x0, 0x0, 0x20, 0x81, 0x0, 0x89}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) epoll_create(0xff) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1a23}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:52:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x1c, 0x18, 0x0, 0x101, 0x0, 0x0, {0x2, 0xc0}, [@typed={0x7, 0x0, 0x0, 0x0, @str='{:\x00'}]}, 0x1c}}, 0x0) 03:52:03 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000bd6fa4450008000340", @ANYRES32=r2], 0x30}}, 0x0) preadv(r0, &(0x7f0000001800)=[{&(0x7f0000000180)=""/106, 0x6a}, {&(0x7f0000001580)=""/136, 0x88}, {&(0x7f0000001640)=""/197, 0xc5}, {&(0x7f0000001740)=""/188, 0xbc}, {&(0x7f0000000200)=""/69, 0x45}, {&(0x7f0000000300)=""/127, 0x7f}, {&(0x7f00000003c0)=""/28, 0x1c}], 0x7, 0x2, 0x100) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2926}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) lstat(&(0x7f0000000380)='./file0\x00', 0x0) acct(0x0) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000480)="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") r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000000)={0x0, 0x0}) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x2, 0xb1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1001, 0x0, 0x0, 0x1}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000440)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000580)=""/4096, 0x1000) 03:52:03 executing program 2: openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40000, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect(0xffffffffffffffff, &(0x7f00000000c0)=@phonet={0x23, 0x0, 0x0, 0x2}, 0x80) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) signalfd4(r2, &(0x7f0000001880)={[0xe31a]}, 0x8, 0x80800) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000017c0)={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="94031c855deb"}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) 03:52:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) r3 = open(&(0x7f0000000000)='./file0\x00', 0x20040, 0x8) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) r5 = memfd_secret(0x80000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x78, r7, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x65}}}}, [@NL80211_ATTR_IE={0x15, 0x2a, [@ssid={0x0, 0x6, @default_ibss_ssid}, @challenge={0x10, 0x1, 0x48}, @chsw_timing={0x68, 0x4, {0x6004, 0x4}}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="4cac43771fae"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="fdf2df26c9e3"}, @NL80211_ATTR_SSID={0x17, 0x34, @random="f8cd722ca55c406ccc05544a243a244d379d97"}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000010}, 0x40) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r4, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) 03:52:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="000000d4ef04cd310028c11bda3133cdda88ecbffcb5b9807cbcaeb37007cf1c0cf054cd44967b42ed6aba198ea91748131d6108689f33a7fef3b81d6e208f30f0d8b86216d78f43e85ea078a6dc06c378d9cbc2abf1e3842bbce448b94182ab455df6ceaf887cc7ce587e9bfe6d1c86a38c9c6d98e04cd71f163cab211060d4c5c7c1fb2eac4e25451d3951294035b7daa19edf5249485258324322e2d08486a492c20faf0f5d9b874cc06794249f5fac2161a601df113bb0", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="c2127837", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263646566677d696a6b10002d800a0000000202020202020000890bcd47b22675a2f4491b6a22b8e4c661f3c71a922ac743aa616069270141eaf2a259c05d73a66a306a5b51bf176169d11321b112609363d8f25af4d4f7fcdbbf839b4c94dbd1c1be3e900d20472f9eabd7f3474342184ee09c6aba6d53fef7747fd5731bcd7010b29046000000"], 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="80ff07000000000000010802110000000802110000000000000000000004008c50086b96bb602100210a"], 0x36) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000180)={r3, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000080)={r3, 0x1, 0x6, @broadcast}, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/gadget', 0x0, 0x2) close(r4) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000080)={r6, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000180)={r6, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000080)={r6, 0x1, 0x6, @broadcast}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000003540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003500)={&(0x7f0000001240)={0xafc, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8b}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x17cd}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x154, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x7, 0x2, 0x9, 0xa9}, {0xde7d, 0x5, 0x4, 0x100000c8}, {0x0, 0x4, 0x20, 0x5}, {0x401, 0x9d, 0x20}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x94be}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x104, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x178, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0xff, 0x14, 0x4}, {0x1, 0x1, 0x7, 0x2}, {0x1, 0x3, 0x1, 0x1}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}]}, 0xafc}}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=ANY=[@ANYBLOB="500000000802110000010802110000000802110000000000000000000000000064001a000006020202020202010882848b960c121824"], 0x36) 03:52:03 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x14, 0x1d, 0x1, 0x0, 0x0, "", [@typed={0x4, 0x0, 0x0, 0x0, @binary}]}, 0x14}], 0x1}, 0x0) clock_gettime(0x0, &(0x7f0000006480)) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40002000, 0x0) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x0) openat(0xffffffffffffffff, &(0x7f0000006500)='./file0\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000006540)={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0xfd, 0x8, 0x0, 0xa9}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000006a00)={0x3, 0x0, 0x8, 0x15, 0x1d8, 0x0}) syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) fchmod(0xffffffffffffffff, 0x20) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000006b00)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x14) clock_nanosleep(0x1, 0x0, &(0x7f0000006b40), &(0x7f0000006b80)) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000006bc0), 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000006c40), 0x1, 0x0) [ 1429.170818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1429.181295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1429.194684] device lo left promiscuous mode [ 1429.203273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1429.209119] device syz_tun entered promiscuous mode [ 1429.217245] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1429.239248] device lo entered promiscuous mode 03:52:03 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x0, 0x53, &(0x7f0000000240)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) openat(r1, &(0x7f0000000300)='./file1\x00', 0xaf03, 0x20) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sysvipc/shm\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file1/file0\x00'}) chroot(&(0x7f0000000000)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 03:52:03 executing program 2: openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40000, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect(0xffffffffffffffff, &(0x7f00000000c0)=@phonet={0x23, 0x0, 0x0, 0x2}, 0x80) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) signalfd4(r2, &(0x7f0000001880)={[0xe31a]}, 0x8, 0x80800) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000017c0)={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="94031c855deb"}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) 03:52:03 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='task\x00') getdents(r0, &(0x7f0000001f40)=""/4096, 0x1000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x8912, &(0x7f0000002e00)) syz_read_part_table(0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x4000, 0x20) getdents(0xffffffffffffffff, &(0x7f0000000180)=""/173, 0xad) syz_open_dev$vcsa(&(0x7f0000000140), 0x202, 0x204102) getdents64(0xffffffffffffffff, &(0x7f0000000040)=""/196, 0xc4) [ 1429.404322] device lo left promiscuous mode 03:52:03 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000bd6fa4450008000340", @ANYRES32=r2], 0x30}}, 0x0) preadv(r0, &(0x7f0000001800)=[{&(0x7f0000000180)=""/106, 0x6a}, {&(0x7f0000001580)=""/136, 0x88}, {&(0x7f0000001640)=""/197, 0xc5}, {&(0x7f0000001740)=""/188, 0xbc}, {&(0x7f0000000200)=""/69, 0x45}, {&(0x7f0000000300)=""/127, 0x7f}, {&(0x7f00000003c0)=""/28, 0x1c}], 0x7, 0x2, 0x100) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2926}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) lstat(&(0x7f0000000380)='./file0\x00', 0x0) acct(0x0) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000480)="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") r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000000)={0x0, 0x0}) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x2, 0xb1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1001, 0x0, 0x0, 0x1}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000440)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000580)=""/4096, 0x1000) [ 1429.423095] device lo entered promiscuous mode [ 1429.446925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1429.463048] device syz_tun left promiscuous mode [ 1429.550171] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 03:52:03 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x14, 0x1d, 0x1, 0x0, 0x0, "", [@typed={0x4, 0x0, 0x0, 0x0, @binary}]}, 0x14}], 0x1}, 0x0) clock_gettime(0x0, &(0x7f0000006480)) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40002000, 0x0) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x0) openat(0xffffffffffffffff, &(0x7f0000006500)='./file0\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000006540)={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0xfd, 0x8, 0x0, 0xa9}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000006a00)={0x3, 0x0, 0x8, 0x15, 0x1d8, 0x0}) syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) fchmod(0xffffffffffffffff, 0x20) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000006b00)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x14) clock_nanosleep(0x1, 0x0, &(0x7f0000006b40), &(0x7f0000006b80)) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000006bc0), 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000006c40), 0x1, 0x0) 03:52:03 executing program 2: r0 = io_uring_setup(0x4f45, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x6, 0x0, 0x1) 03:52:03 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='task\x00') getdents(r0, &(0x7f0000001f40)=""/4096, 0x1000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x8912, &(0x7f0000002e00)) syz_read_part_table(0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x4000, 0x20) getdents(0xffffffffffffffff, &(0x7f0000000180)=""/173, 0xad) syz_open_dev$vcsa(&(0x7f0000000140), 0x202, 0x204102) getdents64(0xffffffffffffffff, &(0x7f0000000040)=""/196, 0xc4) [ 1429.777048] device syz_tun entered promiscuous mode [ 1429.789077] device syz_tun left promiscuous mode 03:52:03 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x203}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x3, 0x0, 0x0, 0x0, 0x3800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) 03:52:03 executing program 0: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001480)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x6) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff}, 0x0, 0xffffffffffffffff, r0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) readahead(0xffffffffffffffff, 0x3, 0x5d3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0xc) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000000000}, 0x0, 0x0, 0x0, 0x6}, r1, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x30, 0x8, 0x80, 0x0, 0x20, 0x200, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x6, 0x6}, 0x8410, 0x3ff, 0x67, 0x9, 0x4, 0x9, 0x200, 0x0, 0x3, 0x0, 0x100000001}, r1, 0x8, r2, 0x3) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x7041, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x9) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) 03:52:04 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='task\x00') getdents(r0, &(0x7f0000001f40)=""/4096, 0x1000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x8912, &(0x7f0000002e00)) syz_read_part_table(0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x4000, 0x20) getdents(0xffffffffffffffff, &(0x7f0000000180)=""/173, 0xad) syz_open_dev$vcsa(&(0x7f0000000140), 0x202, 0x204102) getdents64(0xffffffffffffffff, &(0x7f0000000040)=""/196, 0xc4) 03:52:04 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x14, 0x1d, 0x1, 0x0, 0x0, "", [@typed={0x4, 0x0, 0x0, 0x0, @binary}]}, 0x14}], 0x1}, 0x0) clock_gettime(0x0, &(0x7f0000006480)) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40002000, 0x0) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x0) openat(0xffffffffffffffff, &(0x7f0000006500)='./file0\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000006540)={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0xfd, 0x8, 0x0, 0xa9}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000006a00)={0x3, 0x0, 0x8, 0x15, 0x1d8, 0x0}) syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) fchmod(0xffffffffffffffff, 0x20) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000006b00)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x14) clock_nanosleep(0x1, 0x0, &(0x7f0000006b40), &(0x7f0000006b80)) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000006bc0), 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000006c40), 0x1, 0x0) 03:52:04 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x0, 0x53, &(0x7f0000000240)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) openat(r1, &(0x7f0000000300)='./file1\x00', 0xaf03, 0x20) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sysvipc/shm\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file1/file0\x00'}) chroot(&(0x7f0000000000)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 03:52:04 executing program 0: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001480)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x6) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff}, 0x0, 0xffffffffffffffff, r0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) readahead(0xffffffffffffffff, 0x3, 0x5d3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0xc) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000000000}, 0x0, 0x0, 0x0, 0x6}, r1, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x30, 0x8, 0x80, 0x0, 0x20, 0x200, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x6, 0x6}, 0x8410, 0x3ff, 0x67, 0x9, 0x4, 0x9, 0x200, 0x0, 0x3, 0x0, 0x100000001}, r1, 0x8, r2, 0x3) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x7041, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x9) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) 03:52:04 executing program 1: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001480)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x6) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff}, 0x0, 0xffffffffffffffff, r0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) readahead(0xffffffffffffffff, 0x3, 0x5d3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0xc) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000000000}, 0x0, 0x0, 0x0, 0x6}, r1, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x30, 0x8, 0x80, 0x0, 0x20, 0x200, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x6, 0x6}, 0x8410, 0x3ff, 0x67, 0x9, 0x4, 0x9, 0x200, 0x0, 0x3, 0x0, 0x100000001}, r1, 0x8, r2, 0x3) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x7041, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x9) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) 03:52:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000c40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x114, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5, 0x52}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8aabd7f554a16ca7efc4e890976ca95dc804cfe8e4aa75c6"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "38c4978d7c15234639c2fd6ed6195a756a4f9edf34c7bddd"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "91a4a4fca8b8639479e3a3a3e6c67b7791fe1a884276f469"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d6408e30fd01d88f4624850a5610a6d0a269072404470620"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "872eabdf84c8ad4726d01f0a4c76bc6d9fd811381902c185"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x114}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xb9d89b8d20c11b53}, 0xc, &(0x7f0000000280)={&(0x7f0000000880)={0x1c8, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xff, 0x50}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x10001}, @NL80211_ATTR_VENDOR_DATA={0xa7, 0xc5, "c5eb57313ceede1d4e8adb5cdb548c3069e187d2366f41e446bc00beaee9a759384d977d65a2871cd31e1448781fe87e500bab427d116992f977f99b182825e3ac2565cef7d0068ec6ca848fad1f871a7126c82207b54865b30629e0f384fe6a5e151638924d9aeff685a800793cff2a4bab16e4c99e16a841b7cd9c8b308e5d7652d28763f6a883df5622c6bb53ff3ee645f2ccbd595d918fd537c180d398f10a7f0a"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x68}, @NL80211_ATTR_VENDOR_DATA={0xe6, 0xc5, "d6b137cc99726617bec5388c167fa437440242698103a5dfb0d6fd513d142fd49910817703bed4f1dc47f7d181e53031a08f864cff1933191ad84c1038c56701337c25dfa2665b49f117b9898328534b561753cf3b02c97036d9100a55a75d4f053ce1906b986625c4d1b3f1299e74c77c4e24ef445a6ae523070e2797f9f310aaa254b864fdb35ebc7e06360af3820f2b2d5f482c840e8920fd67607bde45a7029bb90da1882a69bc59840cac4de0eaa55a6867dbae9b9aa3d6fcefc511486b1ad6189288894f824047a6d723e5c7b4e387caac502ea0abe4c9c5ee6ec8a372057c"}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x2000c014}, 0x8000) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r5, &(0x7f0000000640)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)={0x124, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x659}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3ff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x22a4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x81}}]}, 0x124}, 0x1, 0x0, 0x0, 0xa041}, 0x24004000) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x1e8, r1, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x11c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x24, 0x30, 0x2]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x48, 0xc, 0x18, 0x48, 0x60, 0x3, 0x3, 0x76, 0x12, 0x1, 0x3f, 0x6, 0x6, 0x18, 0x18, 0xc, 0x16, 0x60, 0x30, 0x12, 0x24, 0x36]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xffff, 0x9, 0x7ff, 0x6, 0x1ff, 0x8000]}}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3c, 0x2, [{0x0, 0x9}, {0x3, 0x5}, {0x6, 0x2}, {0x7, 0x3}, {0x2, 0x9}, {0x7, 0x1}, {0x3, 0x1}, {0x1, 0x2}, {0x7, 0x9}, {0x4, 0x4}, {0x2, 0x1}, {0x5, 0x9}, {0x0, 0x7}, {0x2, 0xa}, {0x6}, {0x6, 0x7}, {0x1, 0x5}, {0x2, 0x5}, {0x2, 0x9}, {0x2}, {}, {0x1, 0x8}, {0x0, 0x6}, {0x2, 0x1}, {0x0, 0x6}, {0x1, 0x4}, {0x0, 0x5}, {0x7, 0xa}, {0x6, 0xa}, {0x0, 0x1}, {0x1, 0xa}, {0x2, 0x6}, {0x7, 0x5}, {0x1, 0x7}, {0x1, 0x4}, {0x6, 0x5}, {0x1}, {0x1, 0x3}, {0x3, 0x6}, {0x6}, {0x2, 0x5}, {0x5, 0x7}, {0x4, 0x4}, {0x2}, {0x4, 0x3}, {0x7, 0x3}, {0x6, 0x3}, {0x1, 0x5}, {0x3, 0x2}, {0x4, 0x3}, {0x5}, {0x0, 0x6}, {0x4, 0x1}, {0x5, 0x4}, {0x7, 0x4}, {0x0, 0x7}]}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9, 0x20, 0x8001, 0x3f, 0x200, 0x5, 0xa2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe5f, 0x4ff4, 0x1f, 0x90d, 0x1, 0x8, 0x683, 0x8]}}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x7, 0x6}, {0x3, 0x3}, {0x3, 0x3}, {0x3, 0xc}, {0x7}, {0x0, 0x3}, {0x7, 0x6}, {0x2, 0x9}, {0x4, 0x3}, {0x2, 0x7}, {0x3, 0x2}, {0x0, 0x4}, {0x4, 0x8}, {0x5, 0x5}, {0x6}, {0x0, 0x5}, {0x7, 0x2}, {0x1, 0x7}, {0x2, 0x8}, {0x5, 0x7}, {0x6, 0x1}, {0x0, 0x8}, {0x0, 0x9}, {0x5, 0x1}, {0x6, 0x8}, {0x6, 0x3}, {0x2, 0x2}, {0x5, 0x6}, {0x1, 0x4}, {0x1}, {0x1, 0x7}, {0x2}, {0x3, 0x4}, {0x4, 0x7}, {0x7, 0x8}, {0x2, 0xa}, {0x0, 0x5}, {0x5, 0x7}, {0x1, 0x9}, {0x7, 0x3}, {0x5}, {0x4, 0x6}, {0x3, 0x6}, {0x3, 0x2}, {0x0, 0x4}, {0x4, 0x7}, {0x7, 0x4}, {0x6, 0x2}, {0x0, 0x8}, {0x2, 0x8}, {0x5, 0x4}, {0x3, 0xa}, {0x2, 0x4}, {0x7, 0x1}, {0x7, 0x9}, {0x7, 0x9}, {0x5, 0x5}]}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x7, 0x4}, {0x4, 0x8}, {0x3, 0x1}]}]}]}, @NL80211_ATTR_TX_RATES={0xb0, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x0, 0x328, 0x2, 0x0, 0x5, 0x40, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x937b, 0x100, 0x7, 0x1, 0x8, 0x6902, 0x2, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x3, 0x4}, {0x4}, {0x1, 0x2}, {0x6}, {0x0, 0x8}, {0x3, 0x3}, {0x6, 0x1}, {0x6}, {0x1, 0xa}, {0x2, 0x8}, {0x7, 0xa}, {}, {0x6, 0x2}, {0x2, 0x1}, {0x2, 0x6}, {0x1, 0x9}, {0x2, 0x2}, {0x0, 0x3}, {0x1, 0x3}, {0x6, 0x5}, {0x0, 0xa}, {0x6, 0x9}, {0x0, 0x2}, {0x3, 0xa}, {0x7, 0x1}, {0x5, 0x9}, {0x5, 0x5}, {0x3}, {0x6}, {0x4, 0x8}, {0x2, 0x7}, {0x6, 0x8}, {0x1, 0x1}, {0x4, 0x3}, {0x4, 0xa}, {0x1, 0x1}, {0x0, 0x5}, {0x5, 0xa}, {0x0, 0x9}, {0x1, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x5, 0x7}, {0x6, 0x8}, {0x6, 0xa}, {0x0, 0xa}, {0x2, 0x4}, {0x7, 0x2}, {}, {0x1, 0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x7}, {0x2, 0x4}, {0x2, 0x6}, {0x0, 0x8}, {0x5}, {0x1, 0x8}, {0x2, 0x1}, {0x2, 0x6}, {0x0, 0x5}, {0x2, 0x8}, {0x4, 0x3}]}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x7}, {0x7, 0x5}, {0x1, 0xa}, {0x0, 0x3}, {0x0, 0x8}, {0x0, 0x2}, {0x0, 0x3}, {0x0, 0x2}, {0x4, 0x7}, {0x1, 0x9}, {0x4, 0x4}, {0x4, 0x8}, {0x0, 0x9}, {0x2, 0x5}, {0x7, 0x3}, {0x6, 0x5}, {0x2, 0x4}, {0x1}, {0x1, 0x8}, {0x7, 0xa}, {0x1, 0x5}, {0x1, 0x1}, {}, {0x0, 0x6}, {0x7, 0x1}, {0x0, 0x6}, {0x0, 0x4}, {0x3, 0x8}, {0x7, 0x8}, {0x1, 0x4}, {0x4, 0x1}, {0x0, 0x2}, {0x3, 0x8}, {0x3}, {0x0, 0x5}, {0x3, 0x6}, {0x0, 0x7}]}]}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x10040000}, 0x41) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x3) sendmsg$NL80211_CMD_SET_CQM(r7, &(0x7f0000000cc0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f0000000d00)={0x1d0, r1, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x10}}}}, [@NL80211_ATTR_CQM={0x70, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x4, 0xec03, 0x9, 0x3, 0x800, 0x6]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x8, 0x1, 0xb75]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x8, 0x6, 0x1ff]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5d0}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x33dd}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}]}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0xe0, 0x5, 0xb97]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x34}]}, @NL80211_ATTR_CQM={0x28, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xa29}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x86}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x1, 0x0]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8001}]}, @NL80211_ATTR_CQM={0x48, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x7f, 0x9]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0xabbb, 0x2, 0x200, 0xba2f]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x0, 0x3ff, 0x4, 0x61, 0x3ff, 0x94]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x56}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5f}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x20000}]}, @NL80211_ATTR_CQM={0x48, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4a9}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x26}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffffe0}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x15}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7fff}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x200000, 0x100]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1ad}]}, @NL80211_ATTR_CQM={0x54, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x9}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x41}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1a3}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x526}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2c}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x504}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8001}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000) 03:52:04 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x203}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x3, 0x0, 0x0, 0x0, 0x3800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) 03:52:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) r3 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x3c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4001) [ 1430.833440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:52:04 executing program 0: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001480)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x6) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff}, 0x0, 0xffffffffffffffff, r0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) readahead(0xffffffffffffffff, 0x3, 0x5d3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0xc) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000000000}, 0x0, 0x0, 0x0, 0x6}, r1, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x30, 0x8, 0x80, 0x0, 0x20, 0x200, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x6, 0x6}, 0x8410, 0x3ff, 0x67, 0x9, 0x4, 0x9, 0x200, 0x0, 0x3, 0x0, 0x100000001}, r1, 0x8, r2, 0x3) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x7041, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x9) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) 03:52:04 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='task\x00') getdents(r0, &(0x7f0000001f40)=""/4096, 0x1000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x8912, &(0x7f0000002e00)) syz_read_part_table(0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x4000, 0x20) getdents(0xffffffffffffffff, &(0x7f0000000180)=""/173, 0xad) syz_open_dev$vcsa(&(0x7f0000000140), 0x202, 0x204102) getdents64(0xffffffffffffffff, &(0x7f0000000040)=""/196, 0xc4) 03:52:05 executing program 1: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001480)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x6) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff}, 0x0, 0xffffffffffffffff, r0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) readahead(0xffffffffffffffff, 0x3, 0x5d3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0xc) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000000000}, 0x0, 0x0, 0x0, 0x6}, r1, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x30, 0x8, 0x80, 0x0, 0x20, 0x200, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x6, 0x6}, 0x8410, 0x3ff, 0x67, 0x9, 0x4, 0x9, 0x200, 0x0, 0x3, 0x0, 0x100000001}, r1, 0x8, r2, 0x3) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x7041, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x9) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) 03:52:05 executing program 0: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001480)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x6) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff}, 0x0, 0xffffffffffffffff, r0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) readahead(0xffffffffffffffff, 0x3, 0x5d3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0xc) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000000000}, 0x0, 0x0, 0x0, 0x6}, r1, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x30, 0x8, 0x80, 0x0, 0x20, 0x200, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x6, 0x6}, 0x8410, 0x3ff, 0x67, 0x9, 0x4, 0x9, 0x200, 0x0, 0x3, 0x0, 0x100000001}, r1, 0x8, r2, 0x3) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x7041, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x9) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) 03:52:05 executing program 1: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001480)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x6) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff}, 0x0, 0xffffffffffffffff, r0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) readahead(0xffffffffffffffff, 0x3, 0x5d3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0xc) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000000000}, 0x0, 0x0, 0x0, 0x6}, r1, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x30, 0x8, 0x80, 0x0, 0x20, 0x200, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x6, 0x6}, 0x8410, 0x3ff, 0x67, 0x9, 0x4, 0x9, 0x200, 0x0, 0x3, 0x0, 0x100000001}, r1, 0x8, r2, 0x3) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x7041, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x9) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) 03:52:05 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x203}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x3, 0x0, 0x0, 0x0, 0x3800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) 03:52:05 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xf, &(0x7f0000000000), &(0x7f0000000040)=0x4) 03:52:05 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xf, &(0x7f0000000000), &(0x7f0000000040)=0x4) 03:52:05 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1010, 0x0, 0x0, 0x0, 0x2a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) io_submit(0x0, 0x1, &(0x7f0000001a00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}]) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1ff, 0xd6c2, 0x8}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000180)={'\x00', 0x200, 0x5, 0x10000, 0x7, 0x7fff}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) syz_open_procfs(0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x7}) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, r5}, 0xc) [ 1431.752718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1431.819465] device lo left promiscuous mode 03:52:05 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x0, 0x53, &(0x7f0000000240)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) openat(r1, &(0x7f0000000300)='./file1\x00', 0xaf03, 0x20) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sysvipc/shm\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file1/file0\x00'}) chroot(&(0x7f0000000000)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 03:52:05 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x203}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x3, 0x0, 0x0, 0x0, 0x3800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) 03:52:05 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xf, &(0x7f0000000000), &(0x7f0000000040)=0x4) 03:52:06 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xf, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 1434.801055] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1434.803222] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1434.804911] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1434.810871] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1434.814683] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1434.816001] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1434.940729] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1434.943224] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1434.944569] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1434.952456] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1434.954202] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1434.956157] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1436.840606] Bluetooth: hci1: command 0x0409 tx timeout [ 1437.033668] Bluetooth: hci3: command 0x0409 tx timeout [ 1438.889627] Bluetooth: hci1: command 0x041b tx timeout [ 1439.080588] Bluetooth: hci3: command 0x041b tx timeout [ 1440.936642] Bluetooth: hci1: command 0x040f tx timeout [ 1441.128539] Bluetooth: hci3: command 0x040f tx timeout [ 1442.984617] Bluetooth: hci1: command 0x0419 tx timeout [ 1443.176581] Bluetooth: hci3: command 0x0419 tx timeout [ 1448.809858] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1448.810637] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1448.812821] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1448.872383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1448.873006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1448.874870] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1449.202370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1449.211137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1449.520123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1452.815257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1452.816695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1452.849308] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1452.861234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1452.862850] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1452.865372] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1453.331651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1453.343064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1453.662449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:52:27 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x203}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x3, 0x0, 0x0, 0x0, 0x3800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) 03:52:27 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1010, 0x0, 0x0, 0x0, 0x2a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) io_submit(0x0, 0x1, &(0x7f0000001a00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}]) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1ff, 0xd6c2, 0x8}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000180)={'\x00', 0x200, 0x5, 0x10000, 0x7, 0x7fff}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) syz_open_procfs(0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x7}) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, r5}, 0xc) 03:52:27 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1010, 0x0, 0x0, 0x0, 0x2a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) io_submit(0x0, 0x1, &(0x7f0000001a00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}]) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1ff, 0xd6c2, 0x8}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000180)={'\x00', 0x200, 0x5, 0x10000, 0x7, 0x7fff}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) syz_open_procfs(0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x7}) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, r5}, 0xc) 03:52:27 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1010, 0x0, 0x0, 0x0, 0x2a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) io_submit(0x0, 0x1, &(0x7f0000001a00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}]) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1ff, 0xd6c2, 0x8}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000180)={'\x00', 0x200, 0x5, 0x10000, 0x7, 0x7fff}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) syz_open_procfs(0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x7}) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, r5}, 0xc) 03:52:27 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x203}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x3, 0x0, 0x0, 0x0, 0x3800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) 03:52:27 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x0, 0x53, &(0x7f0000000240)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) openat(r1, &(0x7f0000000300)='./file1\x00', 0xaf03, 0x20) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sysvipc/shm\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file1/file0\x00'}) chroot(&(0x7f0000000000)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 03:52:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000740)={0x418, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8131}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x7}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0xd0, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x81, 0x3, 0x63, 0x5, 0xd6, 0x1f, 0x8000]}}]}, @NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x1}, {0x1, 0x7}, {0x7, 0x2}, {0x7, 0x2}, {0x0, 0x2}, {0x7, 0x5}, {0x2, 0x6}, {0x7, 0xa}, {0x1}, {0x5, 0x4}, {0x6, 0x4}, {0x3, 0x5}, {0x2, 0x8}, {0x4, 0x3}, {0x0, 0x7}, {0x6, 0x3}, {0x3, 0x4}, {0x4, 0x9}, {0x3, 0x6}, {0x4, 0x2}, {0x7, 0x6}, {0x5, 0x2}, {0x7, 0x8}, {0x7, 0x7}, {0x3}, {0x1, 0x3}, {0x6, 0x6}, {0x4, 0x9}, {0x4, 0xa}, {0x4, 0x9}, {0x7, 0x3}, {0x5, 0xa}, {0x3, 0xa}, {0x3, 0x2}, {0x2, 0x5}, {0x4, 0x4}, {0x7}, {0x0, 0x3}, {0x4, 0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x7, 0x6}, {0x0, 0x4}, {0x2, 0x5}, {0x2, 0x6}, {0x2, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x5, 0x9, 0x8, 0x7e, 0x7fff, 0x7, 0xed]}}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x4, 0x9}, {0x5, 0x6}, {0x5, 0x3}, {0x0, 0x9}, {0x4, 0x5}, {0x3, 0x5}, {0x6}, {0x7, 0x9}, {0x4, 0x6}, {0x0, 0x7}, {0x7, 0x9}, {0x4, 0x4}, {0x7, 0xa}, {0x1, 0x9}, {0x2, 0x1}, {0x0, 0x2}, {0x5, 0x5}, {0x1, 0x8}, {0x2, 0x6}, {0x6, 0x4}, {0x0, 0xa}, {0x3, 0x8}, {0x0, 0x1}, {0x6, 0x1}, {0x0, 0xa}, {0x0, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5, 0x0, 0x5, 0x6bc8, 0x8, 0xff, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffc1, 0x0, 0x84, 0x5, 0x40, 0x401, 0x40, 0xda]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x48, 0x30, 0x4, 0x48, 0x18, 0x5, 0x1, 0x3, 0x2, 0x9, 0x16, 0x5, 0x36, 0x60, 0x24, 0x18]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_TX_RATES={0x268, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x6}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x6, 0x36, 0x1, 0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x3f, 0x8001, 0x1, 0x4, 0x5, 0x9, 0xa29]}}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x7, 0x5}, {0x5, 0x4}, {0x0, 0x7}, {0x5}, {0x1, 0x5}, {0x2, 0x3}, {0x1, 0x3}, {0x3, 0x9}, {0x5, 0x5}, {0x5, 0x9}, {0x4, 0x9}, {0x3, 0x9}, {0x1, 0x3}, {0x1, 0x9}, {0x7, 0x1}, {0x0, 0xa}, {0x3, 0x3}, {0x7, 0x5}, {0x1, 0x4}, {0x1, 0xa}, {0x6, 0x9}, {0x1, 0x3}, {0x2}, {0x6, 0x5}, {0x4, 0x6}, {0x0, 0x6}, {0x0, 0x2}, {0x1, 0x1}, {0x2, 0x3}, {0x0, 0x5}, {0x6, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x7, 0x4}, {0x7, 0xa}, {0x3, 0x5}]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x24, 0x36, 0x6bd10b3f18dabe61, 0x60, 0x18, 0x5, 0x6, 0x16, 0x36, 0xb, 0x5]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x5, 0x30, 0xc]}]}, @NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x15, 0x2, [{0x5, 0x9}, {0x1, 0x8}, {0x4, 0x7}, {0x0, 0x6}, {0x6, 0x9}, {0x7}, {0x5, 0x6}, {0x5, 0x5}, {0x2, 0x7}, {0x5, 0x1}, {0x2}, {0x6, 0x4}, {0x2, 0x3}, {0x0, 0x5}, {0x0, 0x5}, {0x5, 0xa}, {0x7, 0xa}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x3f, 0x36, 0xb, 0x1, 0x1b, 0x12, 0x2, 0x6, 0xb, 0x1b, 0xc, 0x60, 0x60, 0x36, 0xc, 0x4, 0x4, 0x48, 0x1b, 0x0, 0xb, 0x6, 0xc, 0x48, 0x18, 0x60]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x70, 0x1ff, 0xb7c, 0x3949, 0x6b9, 0x7fff, 0x1, 0x1]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x18, 0x3, 0xc, 0x1d, 0xa5a2a6cc0439c569, 0x5, 0x6, 0x2, 0x1e, 0x24, 0x36, 0xf, 0xc, 0x24, 0x1b, 0x1b, 0x30, 0x1b, 0x2, 0x1b, 0x24, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x6b, 0x1, 0x0, 0xfff, 0xe187, 0x2, 0x7c6e]}}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7, 0x9, 0x708f, 0x1, 0x0, 0x2034, 0x81]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x37, 0x40, 0x1, 0x6, 0x40, 0x2, 0x3]}}]}, @NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb2, 0x3ff, 0xca5, 0x401, 0x40, 0x4, 0x57e]}}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x6, 0x2}, {0x4, 0xa}, {0x7, 0x4}, {0x3, 0xa}, {0x1, 0xa}, {0x3, 0x4}, {0x4, 0x2}, {0x7, 0x5}, {0x0, 0x1}, {0x3, 0x7}, {0x2, 0x2}, {0x6, 0x9}, {0x1, 0x3}, {0x2, 0x4}, {0x6, 0x1}, {0x4, 0x3}, {0x1, 0x8}, {0x6, 0x8}, {0x4, 0x1}, {0x4, 0x3}, {0x4, 0x8}, {0x4, 0x4}, {0x0, 0x4}, {0x1, 0x2}, {0x6, 0x3}, {0x0, 0x6}, {0x7, 0x6}, {0x4, 0xa}, {0x2, 0x4}, {0x7, 0x3}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x16, 0x48, 0xb]}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x0, 0x4}, {0x6, 0xa}, {0x1, 0xa}, {0x3, 0x9}, {0x7, 0x7}, {0x6, 0x1}, {0x5, 0x4}, {0x4, 0xa}, {}, {0x5, 0x5}, {0x4}, {0x5, 0x2}, {0x6, 0xa}, {0x5, 0x1}, {0x2, 0x4}, {0x4, 0x1}, {0x4, 0x6}, {0x5, 0x1}, {0x1, 0x2}, {0x3, 0x8}, {0x4, 0x8}]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x4, 0x8}, {0x0, 0x3}, {0x7, 0x6}, {0x0, 0x6}, {0x3}, {0x3, 0x7}, {0x4, 0x1}, {0x3, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1, 0x40, 0xe949, 0x6, 0x5]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x55a, 0x100, 0x3f, 0x7, 0x400, 0x7, 0x15, 0x4]}}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x6, 0x30, 0x36, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x5}, {0x3, 0xa}, {0x0, 0x9}, {0x1, 0x3}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0x6}, {0x7, 0x8}, {0x3, 0x3}, {0x6}, {0x7, 0x8}, {0x6, 0x2}, {0x6, 0x5}, {0x1, 0x4}, {0x4, 0x3}, {0x1, 0x10}, {}, {0x7, 0x5}, {0x6, 0x2}, {0x4, 0x7}, {0x2, 0x7}, {0x0, 0x9}, {0x3, 0x1}, {0x6, 0x4}, {0x5, 0x3}, {0x4}, {0x0, 0x7}, {0x5, 0x4}, {0x5, 0x9}, {0x6, 0x5}, {0x1, 0x1}, {0x5, 0x8}, {0x4, 0x1}, {0x2, 0x3}, {0x6, 0x7}, {0x4, 0x6}, {0x0, 0x7}, {0x1, 0xa}, {0x0, 0x5}, {0x7, 0x1}, {0x2}, {0x0, 0x9}, {0x1, 0x8}, {0x7, 0x2}, {0x0, 0x8}]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x6, 0x30, 0x1b, 0xb, 0x36, 0x6c, 0x30, 0x5, 0x9, 0x24, 0xb, 0x60, 0x60, 0x4, 0x1b, 0xc, 0x6, 0x17610a0c00322308, 0x18, 0x30, 0x48, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x0, 0x1, 0x7ff, 0x0, 0x1, 0x4, 0x7fff]}}]}]}, @NL80211_ATTR_TX_RATES={0x88, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x1ff, 0x0, 0x20, 0x0, 0x0, 0x3f]}}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x0, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x7, 0xa}, {0x0, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xac8, 0x9, 0x4, 0x6, 0x7ff, 0x5, 0x5]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x24, 0x16, 0xc, 0x60, 0x60, 0x9, 0x2, 0x36, 0x0, 0x1b, 0x30]}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x6c, 0x1, 0xb, 0x60, 0xc, 0x16, 0x1b, 0xb, 0x12, 0x4, 0x60, 0x6, 0x30, 0xf, 0x30, 0x48, 0x12, 0x24, 0x1b, 0x36, 0x18, 0x1, 0xc, 0x9, 0x12, 0x24, 0x12, 0x36, 0x5, 0x6c, 0x9, 0x16]}]}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x418}, 0x1, 0x0, 0x0, 0xc004800}, 0x40005) 03:52:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="083bb8790c5a8e0d00050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162636465666768696a6b00000010002d800a000000030000000000000035a4ee3dec5dc24eaad1abcb3d925e394a38ad54ad3ed3e4f967db6b9a48de3fa21997b7d2765ba25823306e454c67fe4da1dcac30df683b824a2bb631a311d825fe4019797c405c01f206bb7f75380211384315e92e8104f473c3783673165366598943b5bac425b85cf92483a540ed302aeafeb0f7cbe53b2617a29fb72a6e194607"], 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f00000004c0)=@broadcast, &(0x7f0000001240)=@mgmt_frame=@beacon={@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x8}, @device_a, @broadcast, @from_mac, {0x9}}, @ver_80211n={0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1, @default, 0x1080, @void, @val={0x1, 0x6, [{0x9, 0x1}, {0xb}, {0x18}, {0x1b}, {0x36, 0x1}, {0x9}]}, @val={0x3, 0x1, 0x40}, @void, @val={0x6, 0x2, 0x8}, @void, @val={0x25, 0x3, {0x1, 0xa5, 0x2}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void, [{0xdd, 0x37, "627c82855701a4e074ef4c8f208ea069d7ce563e7d2539948ebb4b5535a6f2eaa8c687a3671ac001cab81f16045f62b745c098ee13de2d"}, {0xdd, 0xeb, "e226ba771c85737ea36fb559db31a13744c8dd2270c0cc1a796e9cd7f2ab1bdc7d7168c7da9b01f6faae7f924871e61ccd9271b4d18f227b8c30c195cd6cec70f0e476036cee38f062f47408b6c485345a68df0ba265db02f6d342f5a097cbb01803f4030741a4b7b405e2686974f879f9008011dfc9488488ed1d70429266feff73cce8a7944ec262e57a57766ffd646a13b1e7aa27cd3fde61fecb68fe57ccca8f387a3860007d2c28ab4ba8c65c6cb1b8b8d8230d32b1402671a5d36cebf16a53ba0bff7f19bc0b7b2521e02767cc848b5bf6aa3d1b2b2a9994479b38c11c62dcc0121b12d0a60cd795"}, {0xdd, 0x16, "644addb1b5850243c0b7949de8d1042106fc7c7e7f62"}, {0xdd, 0x9, "d03a839b2feb917f65"}, {0xdd, 0xc1, "fef484417990e396c9648bf778b8359d812c948b9291a57af75dd4c389ef067cfea81894bbff282ccd4357d42ebdc4d7bda50b7b8b04da8ec1f9ccbd4bf4adccc937f44b6d8bbadb88f060c72a574f2d2fe13e4bc6b86d6b54c10df2b7be74ca7694fbd149aa8c5b1874e650d659d65424bd821651b9efcbd73ce00974e06e3a8a9e0d4e05f48f1c08750ec58ab2cfe7b7f1418eb5431887f0b7424436e76339cc474f595488783365d57b54fc44c19f948795626b1ec75b22ed03ec9281d1a386"}, {0xdd, 0x82, "477d4565e42e3760191178c0affc741e8a76ee3e5348e4f2a5358d21028a864ff291849032e8459192522de5871f22ea41b5e154240d979be90240a9bd16de70bf10f7571729ddb4fc4d722cfe155701c4ffe8e43ba9d97b4408d9c33eeb0463e1d00fcab48cec8f0fde24ac6ee951df1b5f6642ecce0d10f444c2243975eacb147a"}, {0xdd, 0xe0, "c20dcca071ae24e84faa72efdc4113b7ba91980cf335719df0ad59c53454455dffdce96f28263ba51195f2cbf7291fa3895a021d68cb8a25b4dffda2827a8598442851f9595772a778d6feb0fa6898d2cdfa4320f292db891dcc448489860e288783f25c3adc66410deb070e596ae09cdacdf54dfcc5d37f5ed01aea583b389eb55402ec064dba4b1b284cb82df79ddb542c9cca2dc35f6bd7cab4fceb75baa652a0b1bd346d085a628b047b1b3dcf39f844b2434b0b06099451d32b6726862891f889063cbc4ca93c309a7c3a3519373f91aa3887a868d63b30832b5d932f7f"}, {0xdd, 0xb3, "dd21c9ebde51bcaa6fb9667319acf0366cc094a9afb1a90873b84837470ed50a8c72c324ca4072bb06971648a44d4273b7f6dbac196c912403d2730a7842b20a504190b79e327b40eb6aaf4ca231c366d876a424e4bda551f1f323f662fb5d89bfe2408830302f6b027d113b7f65017445a62521a99cc444896bd6f1883394249b6f20c1bdc76993fcf1f4dbcf357a3bb0d00452fa3cde34b19bb58255822aa34e2451e990027522d3da2313757fbec9e25a40"}, {0xdd, 0x87, "692e40484aff12ea1ab74e9a147a50ad6580f815736672e897d798206e3950aabce08cf44ea2a5b54d40f605eb9f8d9ef7bcf1f3c349742c7d8a0ad7e0422633927817c19f1a486e9faabcb14858654a59bbf91a9be7786466102a6a42cb7664a0ae3bf34a985b5f3e82899aa61bc9d29cebbd540d6c45dfaabf0ccd1c803ba8b131cbfeef2d72"}, {0xdd, 0x6c, "c12a22dac2706d5523ebb6afb351bdf6132904cfa2a2955d11fa3564d88ec1d345fc23130d369dc1b158360fc5700b51cd810679fd1bfc43e51b36cdfe8c31a1e6f4cb0e71530eb320cb7e8dab1acba117d0e1bdb26b212ec7513652daac1eea63d60ca964902faa2cdaba58"}]}, 0x562) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000380)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x5b3}, @device_a, @device_a, @broadcast, {0x2, 0x4}, @broadcast}, @a_msdu=[{@broadcast, @device_b, 0x5e, "60b9b626319f77342e7b71cf3b159f3dca347c554f1fc36857dc406c921616968367d975e2c3cc2ddf84d6886e81351e4c036bfa3f1732ff23c4ef8e1d76348b21c21ed2ee90eb999fceda2397db4ed16bd0aae58db0cc02c4cf0d171ba9"}]}, 0x8a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) [ 1453.787301] device lo left promiscuous mode sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000740)={0xafc, r4, 0x2, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x274, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xf4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x26, 0x2, [{0x4, 0x5}, {0x7, 0x4}, {0x3, 0x6}, {0x4, 0x8}, {0x1, 0x7}, {0x7, 0x7}, {0x0, 0x8}, {0x1, 0x9}, {0x7, 0x8}, {0x1, 0x1}, {0x5, 0x8}, {0x2, 0x8}, {0x6, 0x2}, {0x0, 0x7}, {0x4, 0x9}, {0x4}, {0x5, 0x5}, {0x5, 0x5}, {0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x1, 0x8}, {0x5, 0x8}, {0x4, 0xa}, {0x1}, {0x5, 0x7}, {0x0, 0x3}, {0x0, 0x1}, {0x7, 0x9}, {0x6, 0x1}, {0x2, 0x9}, {0x4}, {0x0, 0x8}, {0x5, 0x3}]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0xc, 0x9, 0x24, 0x2]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x6, 0xa}, {0x5, 0x3}, {0x1, 0x9}, {0x4, 0x2}, {0x4, 0xa}, {0x7, 0x4}, {0x1, 0x9}, {0x6, 0x5}, {0x1, 0x3}, {0x3, 0x8}, {0x1, 0x7}, {0x1, 0x4}, {0x0, 0xa}, {0x6, 0x4}, {0x0, 0x7}, {0x4, 0x7}, {0x1, 0x5}, {}, {0x1, 0x9}, {0x5, 0x8}, {0x2}, {0x2, 0x5}, {0x1}, {0x3, 0x7}, {0x7, 0x8}, {0x3, 0xa}, {0x3, 0x8}, {0x2, 0x5}, {0x2, 0x3}, {0x1, 0x8}, {0x7, 0x8}, {0x6, 0x3}, {0x3, 0x1}, {0x1, 0x2}, {0x7, 0x1}, {0x3, 0x6}, {0x0, 0x8}, {0x3, 0xa}, {0x6, 0x4}, {0x1, 0xa}, {0x4, 0x4}, {0x0, 0x7}, {0x0, 0x2}, {0x0, 0x4}, {0x3}]}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x1, 0x6}, {0x0, 0x1}, {0x6, 0x4}, {0x4, 0x6}, {0x4, 0x2}, {0x6, 0x5}, {0x7, 0x7}, {0x6, 0x4}, {0x0, 0xa}, {0x0, 0x5}, {0x7, 0x5}, {0x0, 0x3}, {0x4, 0x5}, {0x7, 0x6}, {0x0, 0x2}, {0x6, 0x6}, {0x0, 0x1}, {0x7, 0x9}, {0x0, 0xa}, {0x6, 0x9}, {0x2, 0x8}, {0x4, 0x1}, {0x3, 0x7}, {0x4, 0x9}, {0x1, 0xa}, {0x3, 0x7}, {0x0, 0x3}, {0x1, 0x7}, {0x1, 0x1}, {0x5, 0x8}, {0x1}, {0x0, 0x8}, {0x7, 0x1}, {0x1, 0xa}, {0x4}, {0x0, 0x9}, {0x2}, {0x1, 0x5}, {0x4, 0x4}, {0x3, 0x9}, {0x6, 0x6}, {0x5, 0x6}, {0x5, 0x8}, {0x3, 0x4}, {0x0, 0x8}, {0x5, 0x1}, {0x7, 0x6}, {0x3, 0x7}]}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x4, 0x8}, {0x6, 0x8}, {0x1, 0xa}, {0x0, 0x3}, {0x4, 0x7}, {0x1, 0x3}, {0x6}, {0x3, 0x7}, {0x1, 0x7}, {0x1, 0x3}, {0x6, 0x8}, {0x6, 0x7}, {0x7, 0x9}, {0x2, 0x5}, {0x7}, {0x2, 0x4}, {0x0, 0x6}, {0x0, 0x8}, {0x3, 0x8}, {0x2, 0x8}, {0x1, 0x1}, {0x7, 0x3}, {0x4, 0x5}, {0x6, 0x4}, {0x6, 0x8}, {0x6, 0x8}, {0x0, 0x1}, {0x3}, {0x3, 0x4}, {0x0, 0x9}, {0x4, 0x8}, {0x4}, {0x5, 0x5}, {0x0, 0x9}, {0x6, 0x3}, {0x0, 0x8}, {0x6}, {0x3}, {0x2}, {0x0, 0x5}, {0x6, 0x7}, {0x1, 0x9}, {0x1, 0x7}, {0x6, 0x7}, {0x1, 0x4}, {0x5, 0x8}, {0x5, 0x8}, {0x1, 0x8}, {0x2, 0x3}, {0x1, 0x2}, {0x5, 0x6}, {0x1, 0x3}, {0x1, 0xa}, {0x1, 0x7}, {0x1, 0x2}, {0x1, 0x4}, {0x1, 0xa}, {0x1, 0x2}, {0x0, 0x7}, {0x5}, {0x5, 0x2}, {0x6, 0x7}, {0x0, 0x1}, {0x0, 0x8}, {0x0, 0x5}, {0x0, 0xa}, {0x0, 0x3}, {0x6, 0x3}, {0x2, 0x1}, {0x1, 0x3}, {0x1}, {0x1, 0x5}, {0x1, 0x5}, {0x0, 0x2}, {0x5, 0x7}, {0x7, 0x3}]}]}, @NL80211_BAND_6GHZ={0x94, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0xb, 0x5, 0x60, 0x27, 0x2, 0x6, 0x6, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x6, 0x2, 0x8, 0xe22, 0x9, 0x7, 0x1]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x6, 0xb, 0x6, 0x3, 0x36, 0xb, 0x60, 0x12, 0x9, 0x30, 0x3, 0x24]}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x0, 0x5}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x2}, {0x6, 0x1}, {0x7, 0x1}, {0x0, 0x4}, {0x7, 0x3}, {0x2, 0x5}, {0x2, 0x6}, {0x2}, {0x4, 0x1}, {0x1}, {0x2, 0x6}, {0x3, 0x3}, {0x4, 0xa}, {0x0, 0x8}, {0x1, 0x8}, {0x4, 0x3}, {0x0, 0x3}, {0x1, 0x2}, {0x5, 0x2}, {0x6, 0x1}, {0x6, 0x9}, {0x5, 0x4}, {0x3, 0x3}, {0x2, 0x5}, {0x1, 0x4}, {0x5, 0x1}, {0x4, 0x2}, {0x1, 0x1}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe48a, 0x8, 0x9, 0x1, 0x91c, 0x2cb, 0x5, 0xdcf7]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x4, 0x2, 0x9, 0x9, 0x9, 0x1, 0x3, 0x9, 0x1, 0x30, 0x1, 0x1, 0xb, 0x1, 0x5, 0x2, 0x38, 0x36, 0x16, 0x0]}]}, @NL80211_BAND_2GHZ={0xdc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x0, 0x3, 0x7fff, 0x2, 0x16e7, 0x6, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xcd9, 0xfffc, 0x3f, 0xffff, 0x20, 0x1, 0x20, 0xfff9]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x3, 0x5}, {0x1, 0x6}, {0x1, 0x6}, {0x6, 0x8}, {0x0, 0x1}, {}, {0x0, 0x8}, {0x2, 0x8}, {0x5, 0x8}, {0x5, 0x3}, {0x2, 0x4}, {0x7, 0x1}, {0x2, 0x8}, {0x1, 0x6}, {0x1, 0xa}, {0x7, 0x2}, {0x6, 0x9}, {0x1, 0x1}, {0x5, 0x2}, {0x5, 0x3}, {0x7, 0xa}, {0x1, 0x1}, {0x3, 0x3}, {0x0, 0x3}, {0x3, 0x9}, {0x1, 0x2}, {0x2, 0x2}, {0x4, 0x1f}, {0x7, 0x4}, {}, {0x5, 0x2}, {0x7}, {0x0, 0x7}, {0x6, 0x8}, {}, {}, {0x7, 0x3}, {0x4, 0x6}, {0x7, 0x4}, {0x4, 0x2}, {0x6, 0x3}, {0x6, 0x9}, {0x3, 0x5}, {0x4, 0xa}, {0x2, 0x9}, {0x7, 0x4}]}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x1, 0x2}, {0x5, 0x4}, {0x5, 0x9}, {0x3, 0x3}, {0x3, 0x1}, {}, {0x0, 0x9}, {0x1}, {0x1, 0x8}, {0x0, 0x5}, {0x1}, {0x0, 0xa}, {0x1, 0x2}, {0x3, 0x6}, {0x7}, {0x5, 0xa}, {0x2, 0x7}, {0x4}, {0x5, 0x2}, {0x5, 0x2}, {0x4, 0x3}, {0x1, 0xa}, {0x1}, {0x0, 0x6}, {0x2, 0xa}, {0x3, 0x3}, {0x5}, {0x7, 0x8}, {0x5, 0x9}, {0x0, 0x3}, {0x6, 0x1}, {0x1, 0x9}, {0x6, 0x5}, {0x3, 0x4}, {0x5, 0x2}, {0x4, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xbc4, 0x1c, 0x8, 0x1f, 0x4, 0xa14, 0x1f, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x2, 0x1b, 0x24, 0x18, 0x30]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0xc, 0x4, 0x1b, 0x5, 0x9, 0x36, 0xc, 0x1]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x48, 0x2, 0x36, 0xc, 0x3, 0xb, 0x16, 0x30, 0x12, 0x36, 0x8, 0x33, 0x1, 0x3, 0xb, 0x60, 0x12, 0xb, 0x30, 0x24, 0xc, 0x12, 0xf, 0x60, 0x9, 0x1b]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x8, 0x2, [{0x3, 0x6}, {0x4, 0xa}, {0x3, 0x2}, {0x4, 0x6}]}]}]}, @NL80211_ATTR_TX_RATES={0xc0, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x80, 0x7f, 0x4d2, 0x2, 0x5444, 0x1, 0x8000]}}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x5, 0x3}, {0x1, 0x7}, {0x7, 0x9}, {0x2, 0x3}, {0x3, 0x3}, {0x4, 0x2}, {0x6, 0x5}, {0x4, 0x7}, {0x1, 0x1}, {0x5, 0x9}, {0x6, 0x1}, {0x7, 0x6}, {0x1, 0x3}, {0x4, 0x3}, {0x2, 0x8}, {0x5}, {0x3, 0x5}, {0x1, 0x7}, {0x6, 0x8}, {0x2, 0x9}, {0x1, 0x5}, {0x2, 0x7}, {0x3, 0x7}, {0x7, 0x1}, {0x4, 0x9}, {0x6, 0x2}, {0x1, 0x5}, {0x5, 0x9}, {0x5, 0xa}, {0x1, 0x1}, {0x6, 0x2}, {0x0, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xdd0, 0x1, 0x81, 0x2, 0x1f, 0x5, 0x7ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x40, 0x6, 0x1, 0x5, 0x8001, 0x8001, 0x80]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x20, 0x81, 0x1, 0x9, 0x2, 0x200, 0x9]}}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x2, 0x9}, {0x4, 0xa}, {0x0, 0x7}, {0x1, 0x1}, {0x1, 0x7}, {0x1, 0x6}, {0x7, 0x5}, {0x1, 0x8}, {0x6}, {0x7, 0x1}, {0x5, 0x9}, {0x0, 0x1}, {0x7}, {0x6, 0x4}, {0x1, 0x8}, {0x7, 0x2}, {0x5, 0xa}, {0x1, 0x5}, {0x1, 0x4}, {0x1, 0x2}, {0x1, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0xcc, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x5, 0x6}, {0x5, 0x4}, {0x4, 0x5}, {0x1, 0x3}, {0x2, 0x4}, {0x0, 0x7}, {0x4, 0x3}, {0x2, 0x6}, {0x3, 0x5}, {0x7, 0x5}, {0x1, 0x9}, {0x5, 0x8}, {0x2, 0x6}, {0x6, 0x7}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x1}, {0x0, 0x2}, {0x4, 0x2}, {0x0, 0x3}, {0x1, 0x2}, {0x6, 0x2}, {0x5, 0x1}, {0x3, 0x8}, {0x2, 0x8}, {0x1, 0x6}, {0x5, 0x1}, {0x1, 0x7}, {0x1, 0x5}, {0x5}, {0x3, 0x4}, {0x5, 0x8}, {0x6, 0x1}, {0x7}, {0x4, 0x3}, {0x3, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x60, 0x30]}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x12, 0x60, 0x2, 0xb, 0xc, 0x36, 0xc, 0x3]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x12, 0x60, 0x36, 0x6, 0x1b, 0x22, 0x12, 0x6, 0xb]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0xc, 0x16, 0x36, 0x16, 0x48, 0x24, 0xc, 0x5, 0xb, 0x3, 0xc, 0x16, 0x36, 0x1b, 0x30, 0x4, 0x16, 0x6c, 0x24, 0x16, 0x6, 0xc, 0x36, 0x24, 0xb, 0xc, 0x1c, 0x63, 0x1c]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x4, 0x0, 0x5, 0x12e, 0x3, 0xf491, 0x401]}}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0xc]}]}]}, @NL80211_ATTR_TX_RATES={0xe8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xe4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x44, 0x2, [{0x4, 0x2}, {0x2, 0x9}, {0x6, 0x5}, {0x6, 0xa}, {0x1, 0x3}, {0x0, 0x5}, {0x7, 0x8}, {0x3, 0x3}, {0x1, 0x3}, {0x0, 0xa}, {0x0, 0x2}, {0x7, 0x5}, {0x7, 0x9}, {0x7, 0x4}, {0x7, 0x8}, {0x1, 0x5}, {0x0, 0x8}, {0x7, 0x6}, {0x0, 0x5}, {0x1, 0x9}, {0x6, 0xa}, {0x2, 0x5}, {0x4, 0x5}, {0x7, 0x8}, {0x7, 0x8}, {0x1, 0x2}, {0x6, 0x5}, {0x4, 0x7}, {0x7, 0x6}, {0x0, 0xa}, {0x3, 0x3}, {0x3, 0x2}, {0x1, 0x8}, {0x5, 0x6}, {0x0, 0x7}, {0x0, 0x8}, {0x0, 0x4}, {0x5, 0x9}, {0x4, 0x9}, {0x0, 0x5}, {0x1, 0x2}, {0x0, 0x8}, {0x3, 0x3}, {0x0, 0x7}, {0x6, 0x4}, {0x5, 0x8}, {0x5, 0x8}, {0x5, 0x1}, {0x0, 0x4}, {0x1, 0x7}, {0x3, 0x7}, {0x4, 0xa}, {0x5, 0x8}, {0x0, 0x5}, {0x2, 0x8}, {0x7, 0x5}, {0x5, 0xa}, {0x1, 0x2}, {0x0, 0x7}, {0x7, 0x6}, {0x4, 0x5}, {0x2, 0x6}, {0x0, 0x9}, {0x0, 0x9}]}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x4, 0x1}, {0x4, 0x4}, {0x5, 0x7}, {0x1, 0x9}, {0x1, 0x4}, {}, {0x1, 0x2}, {0x5, 0x8}, {0x7, 0x4}, {0x1, 0x2}, {0x1, 0x9}, {0x2, 0x2}, {0x4, 0x7}, {0x2, 0x5}, {0x4, 0x4}, {0x6, 0x7}, {0x6}, {0x4, 0x5}, {}, {0x5, 0x5}, {0x4, 0xa}, {0x6, 0x2}, {0x1, 0xa}, {0x3, 0x3}, {0x7, 0x2}, {0x1, 0x4}, {0x2, 0x6}, {0x1}, {0x7, 0x7}, {0x7, 0x4}, {0x0, 0x8}, {0x2, 0x4}, {0x0, 0x1}, {0x1, 0x4}, {0x3, 0x5}, {0x2, 0x4}]}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x3, 0x2}, {0x7, 0x4}, {0x5, 0x3}, {0x0, 0x6}, {0x6, 0x6}, {0x3, 0x1}, {0x2, 0x2}, {0x0, 0x2}, {0x2, 0x8}, {0x1, 0x4}, {0x2, 0x9}, {0x7, 0x7}, {0x5, 0x8}, {0x7, 0x1}, {0x1, 0xa}, {0x5, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x0, 0x3}, {0x3, 0xa}, {0x4, 0x6}, {0x4, 0x3}, {0x2, 0x3}, {0x1, 0x2}, {0x4, 0x6}, {0x1, 0x1}, {0x1, 0x3}, {0x6, 0x5}, {0x7, 0x2}, {0x1, 0x3}, {0x3, 0xa}, {0x7}, {0x4, 0x1}, {0x1, 0x4}, {0x4, 0x2}, {0x2, 0x7}, {0x1, 0x1}, {0x2, 0x1}, {0x6, 0x9}, {0x5, 0x9}, {0x4, 0x3}, {0x5, 0x3}, {0x1, 0x4}, {0x0, 0x7}, {0x3, 0x6}, {0x5, 0x4}, {0x6, 0x1}, {0x5, 0x4}, {0x7, 0x6}, {0x1, 0x9}, {0x4, 0x7}, {0x2, 0xa}, {0x0, 0xa}, {0x0, 0xa}, {0x0, 0x9}, {0x1, 0x1}, {0x0, 0x5}, {0x3, 0x2}, {0x1, 0x9}, {0x6, 0x3}, {0x1, 0x5}, {0x1, 0x7}, {0x1, 0x3}, {0x1, 0x5}, {0x2, 0x2}, {0x6, 0x6}, {0x7, 0x5}, {0x2, 0x9}, {0x5, 0xa}, {0x6}, {0x0, 0x2}, {0x0, 0x1}]}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x5, 0x4}, {0x7, 0x5}, {0x7, 0x4}, {0x1, 0x9}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x60, 0x30, 0x9, 0x6, 0x16, 0x3, 0x2, 0x18, 0x24, 0x16, 0x1e, 0x1, 0x9, 0x1, 0x4, 0x18, 0x3c, 0x16, 0x5, 0x16, 0x6, 0x6c, 0x36, 0x1, 0x6c, 0x16]}]}]}, @NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8a, 0x3, 0x800, 0xc471, 0x381b, 0x1f, 0xfff]}}]}]}, @NL80211_ATTR_TX_RATES={0x34, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x9, 0x3, 0x12, 0x48, 0x2, 0x5, 0x1e, 0x18, 0x1, 0xc, 0x2, 0x3, 0x9, 0xc, 0x3, 0x0, 0x6, 0xb, 0x30, 0x4, 0x60, 0x36, 0x18, 0x1b, 0x36, 0x6c, 0x5, 0x1a]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x118, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x1}, {0x3, 0x3}, {0x6, 0x9}, {0x7, 0x4}, {0x4}, {0x1, 0x2}, {0x3, 0x4}, {0x5, 0xa}, {0x3, 0x6}, {0x5, 0x1}, {0x2, 0x5}, {0x0, 0x8}, {0x2, 0x9}, {0x4, 0x4}, {0x7, 0x5}, {0x6, 0x8}, {0x5, 0xa}, {0x1, 0x1}, {0x4, 0x5}, {0x5, 0xa}, {0x0, 0x3}, {0x3, 0x1}, {0x1}, {0x7, 0x5}, {0x4, 0x9}, {0x0, 0x4}, {0x0, 0x9}, {0x3, 0xa}, {0x0, 0x4}, {0x6, 0x6}, {0x7, 0x1}, {0x1}, {0x2, 0xa}, {0x7, 0x1}, {0x4, 0x1}, {0x3, 0x8}, {0x4, 0x5}, {0x4, 0x7}, {0x0, 0x4}, {0x2, 0x9}, {0x0, 0x8}, {0x0, 0x1}, {0x6, 0x5}, {0x7}, {0x1, 0xa}, {0x1, 0x3}, {0x0, 0x3}, {0x1, 0x1}, {}, {0x7, 0x3}, {0x0, 0x3}, {0x4, 0x4}, {0x0, 0x2}, {0x3}, {0x5, 0x8}, {0x6, 0x5}, {0x4, 0x5}, {0x7, 0x7}, {0x3, 0x8}, {}, {0x4}, {0x0, 0xa}, {0x0, 0x5}, {0x7, 0x5}, {0x7, 0x1}, {0x7, 0x2}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xb8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x1b, 0x2, 0x24, 0x5, 0x9, 0x1, 0x18, 0x6, 0x30, 0x9, 0x36, 0x19, 0x18, 0x1b, 0x1b, 0x48, 0x1b, 0x1, 0xc, 0x80, 0x9, 0x48, 0x48, 0x3, 0xb, 0x39, 0x6c, 0x24, 0x14, 0xb, 0x48, 0x6]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x3, 0x1}, {0x0, 0x5}, {0x1, 0x9}, {0x0, 0x9}, {0x2}, {0x5, 0x4}, {0x1, 0x2}, {0x0, 0x3}, {0x0, 0x2}, {0x3, 0x4}, {0x2, 0x6}, {0x3, 0x8}, {0x3, 0x8}, {0x0, 0x8}, {0x5, 0x6}, {0x6, 0xa}, {0x0, 0x9}, {0x0, 0xa}, {0x5}, {0x2, 0x3}, {0x1, 0x3}, {0x6, 0x8}, {0x1, 0x7}, {0x1, 0x9}, {0x7, 0x9}, {0x0, 0x5}, {0x5, 0x1}, {0x3, 0x7}, {0x2, 0x2}, {0x6, 0x7}, {0x1, 0x2}, {0x7, 0x8}]}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x4, 0x8}, {0x1, 0x9}, {0x0, 0x2}, {0x1, 0x6}, {0x6, 0x8}, {0x4}, {0x5, 0x4}, {0x5, 0x8}, {0x4, 0x9}, {0x0, 0x7}, {0x2, 0x7}, {0x1, 0xa}, {0x3, 0x6}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x1, 0x12, 0x16, 0x24, 0x6, 0xb, 0x48, 0x1b, 0xb, 0x5, 0x0, 0xc, 0x1b, 0x9, 0x2, 0x30, 0x18, 0x92bf90548c6295f2, 0x24, 0x12, 0x24, 0x1b, 0x1, 0x3, 0x12, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffb, 0x3, 0x8, 0x5, 0x1, 0x5, 0x80, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x5, 0xe3, 0x3, 0xffff, 0x2, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x1, 0x1}]}]}]}, @NL80211_ATTR_TX_RATES={0x378, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x3, 0x0, 0x33, 0x1b, 0x60, 0x26, 0x9, 0x36, 0x0, 0x36, 0x9, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x25f, 0xff80, 0x0, 0x401, 0x2, 0x2, 0x6]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x6c, 0x24, 0x5, 0x0, 0x16]}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x1, 0x6}, {0x0, 0x6}, {0x1, 0x3}, {0x6, 0x6}]}]}, @NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3d, 0x2, [{0x0, 0xa}, {0x5, 0x2}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x4}, {0x3, 0x3}, {}, {0x4, 0x2}, {0x1, 0x3}, {0x5, 0x3}, {0x4, 0x5}, {0x1, 0x4}, {0x7, 0x8}, {0x3, 0xa}, {0x5, 0x7}, {0x6, 0x8}, {0x5}, {0x7, 0x8}, {0x2, 0x8}, {0x0, 0x6}, {0x0, 0x3}, {0x5, 0x5}, {0x0, 0x4}, {0x1, 0x5}, {0x2, 0x3}, {0x5, 0x3}, {0x0, 0x1}, {0x0, 0x6}, {0x6, 0x1}, {0x5, 0x7}, {0x7, 0x5}, {0x0, 0x7}, {0x0, 0x1}, {0x2, 0x8}, {0x2, 0x6}, {0x1, 0x7}, {0x0, 0x3}, {0x4, 0x6}, {0x1, 0x8}, {0x7, 0x1}, {0x1}, {0x1, 0x8}, {0x2, 0x2}, {0x5, 0x8}, {0x3, 0xa}, {0x5, 0x9}, {0x3, 0x7}, {0x0, 0x6}, {0x2, 0x9}, {0x3, 0x6}, {0x5, 0x3}, {0x0, 0x9}, {0x0, 0x5}, {0x3}, {0x3, 0x6}, {0x4, 0x6}, {0x1, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x6, 0x1, 0x6, 0x2, 0x8, 0xa97, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x8, 0x200, 0x50, 0x40, 0x1, 0x401, 0x9]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x36, 0x36, 0x1, 0x1b, 0x9, 0xb, 0x4, 0x18, 0x2, 0x2, 0x1b, 0x18, 0x2, 0xb]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x1, 0x16, 0x6c, 0x1, 0x1b, 0x9, 0x60]}]}, @NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x38, 0x2, [{0x0, 0x5}, {0x5, 0x4}, {0x7, 0x4}, {0x6, 0x9}, {0x2}, {0x3, 0x4}, {0x3, 0xa}, {0x6, 0x4}, {0x4, 0xa}, {0x2, 0x9}, {0x0, 0x1}, {0x2, 0x3}, {0x0, 0x8}, {0x7, 0x8}, {0x3, 0x3}, {0x6, 0x4}, {0x0, 0x3}, {0x4, 0xa}, {0x2, 0x1}, {0x5, 0xa}, {0x6, 0xa}, {0x4, 0x9}, {0x0, 0x2}, {0x4, 0x1}, {0x7}, {0x4, 0x7}, {0x6, 0x6}, {0x5, 0x1}, {0x7, 0x8}, {0x6, 0x1}, {0x1, 0x6}, {0x2, 0xa}, {0x1}, {0x6, 0xa}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x6}, {0x3, 0x6}, {0x0, 0x7}, {0x2, 0x2}, {0x5, 0x3}, {0x6, 0x7}, {0x7, 0x7}, {0x2, 0x1}, {0x4, 0x7}, {0x3, 0x3}, {0x6, 0x2}, {0x3, 0x3}, {0x6, 0x1}, {0x0, 0x1}, {0x3, 0xa}, {0x4, 0x6}]}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x6, 0x2}, {0x2, 0x6}, {0x5, 0xa}, {0x1, 0x6}, {0x1, 0x8}, {0x0, 0x8}, {0x4, 0x8}, {0x5, 0x3}, {0x7, 0x9}, {0x3, 0x2}, {0x0, 0xa}, {0x3, 0x7}, {0x0, 0x2}, {0x3, 0x5}, {0x5, 0x9}, {0x1, 0xa}, {0x2, 0xa}, {0x6, 0x8}, {0x7, 0x5}, {0x7, 0x4}, {0x1, 0xa}, {0x1, 0x8}, {0x6}, {0x7, 0x7}, {0x0, 0x2}, {0x0, 0x3}, {0x4, 0x2}, {0x0, 0x7}, {0x2, 0xa}, {0x7, 0x8}, {0x0, 0x2}, {0x5, 0x8}, {0x6, 0x4}, {0x3, 0x2}, {0x6, 0x6}, {0x1, 0x9}, {0x7, 0x9}, {0x4, 0x1}, {0x1, 0x3}, {0x1, 0x1}, {0x6, 0x1}, {0x1, 0x3}, {0x0, 0x2}, {0x2, 0x3}, {0x5, 0x3}, {0x0, 0xa}, {0x0, 0x8}, {0x2, 0x5}, {0x3}, {0x1, 0xa}, {0x7, 0xa}, {0x6, 0x6}, {0x1, 0x9}, {0x1, 0xa}, {0x0, 0x7}, {0x6, 0x5}, {0x3, 0x8}, {0x1, 0x9}, {0x4, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x71e5, 0x800, 0x82e, 0x0, 0x0, 0x6, 0x7fff, 0x1000]}}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2e, 0x2, [{0x3, 0x7}, {0x3, 0x4}, {}, {0x6, 0x7}, {0x0, 0x1}, {0x3, 0x3}, {0x2, 0x9}, {0x1, 0x3}, {0x4, 0x2}, {0x3, 0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x6}, {0x1, 0x3}, {0x6, 0x8}, {0x7, 0x5}, {0x1, 0x4}, {0x7, 0x8}, {0x2, 0x8}, {0x1, 0x6}, {0x6}, {0x3, 0x1}, {0x3, 0x6}, {0x7, 0x8}, {0x6, 0x1}, {0x0, 0x4}, {0x1, 0x2}, {0x7, 0x3}, {0x3, 0x5}, {0x4, 0x7}, {0x1, 0xa}, {0x5, 0x3}, {0x6}, {0x6, 0x7}, {0x1, 0x1}, {0x1, 0x5}, {0x6, 0x8}, {0x1, 0x7}, {0x0, 0x8}, {0x3, 0x7}, {0x6, 0x4}, {0x3, 0x8}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0xb8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x20, 0x2, 0x1, 0x3, 0x4, 0xff0f, 0xffff]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0xc, 0x3, 0x48, 0x6c, 0x48, 0x60, 0x30, 0x9, 0x3, 0x24, 0x6c, 0x24, 0xf, 0x16, 0x1b, 0x6, 0x24, 0x9, 0xb, 0x6]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x30, 0x2, 0x48, 0x4, 0x48, 0x1b, 0xc, 0x16, 0x1b, 0x1, 0xb, 0xc]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x585, 0x7f, 0x1000, 0xfffb, 0x3, 0x4]}}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x3, 0x1}, {0x7, 0xa}, {0x0, 0x6}, {0x5, 0x7}, {0x1, 0x8}, {0x0, 0x6}, {0x7, 0x8}, {0x4, 0x2}, {0x6, 0x4}, {0x6, 0x8}, {0x7, 0x3}, {0x6, 0x7}, {0x6, 0x2}, {0x0, 0x7}, {0x0, 0x8}, {0x3, 0x8}, {0x2, 0x3}, {0x0, 0x7}, {0x2, 0x8}, {0x0, 0x7}, {0x6}, {0x1, 0x4}, {0x5, 0x8}, {0x3, 0x6}, {0x7, 0x9}, {0x2, 0x6}, {0x1}, {0x5, 0x4}, {}, {0x5, 0xa}, {0x3, 0x6}, {0x7, 0x4}, {0x3, 0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x7}, {0x1, 0x4}, {0x1, 0x6}, {0x6, 0x8}, {0x1, 0x8}, {0x7, 0x4}, {0x5, 0x7}, {0x3, 0x6}, {0x7, 0xa}, {0x6, 0x9}, {0x3, 0x1}, {0x2, 0x6}, {0x6, 0xa}, {0x7, 0x4}, {0x6, 0xa}, {0x3, 0x8}, {0x4, 0x9}, {0x6}, {0x6, 0xa}, {0x5, 0x7}, {0x5, 0x9}, {0x3, 0x9}, {0x7, 0x4}, {0x6, 0x7}, {0x0, 0x1}, {0x4, 0x7}, {0x3, 0x5}, {0x0, 0x1}, {0x4, 0x2}, {0x5, 0x9}, {0x6}, {0x5, 0x9}, {0x4, 0x1}, {0x7, 0xa}, {0x5, 0x1}, {0x5, 0x6}, {0x2, 0x8}]}]}, @NL80211_BAND_2GHZ={0x118, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x4, 0x6, 0x12, 0x16, 0x24, 0xb, 0x31, 0x60, 0x24, 0x5, 0x12, 0x0, 0xc, 0x9, 0x1, 0x3, 0x6, 0x36, 0x1b, 0x24, 0x9, 0x60, 0x60]}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x0, 0x9}, {0x7, 0x7}, {0x7, 0x6}, {0x5, 0x3}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0x4}, {0x5, 0x8}, {0x4, 0x7}, {0x4, 0x5}, {0x5, 0x3}, {0x4, 0xa}, {0x4}, {0x3, 0x3}, {0x2}, {0x0, 0x3}, {0x0, 0x2}, {0x1, 0xa}, {0x0, 0x9}, {0x6}, {0x7, 0x7}, {0x0, 0x2}, {0x1, 0xa}, {0x4, 0x8}, {0x0, 0x7}, {0x3, 0x6}, {0x3, 0x5}, {0x2, 0xa}, {0x0, 0x6}, {0x2, 0x2}, {0x1, 0x6}, {0x3, 0x9}, {0x4, 0x5}, {0x5, 0x1}, {0x6, 0x1}, {0x6, 0xa}, {0x2, 0x6}, {}, {0x1, 0x3}, {0x4, 0x5}, {0x1, 0x4}, {0x4, 0x1}, {0x6, 0x9}, {0x6, 0x5}, {0x6, 0xa}, {0x1, 0x8}, {0x7, 0x1}, {0x1, 0x8}, {0x3, 0x7}, {0x6, 0x4}, {0x3, 0x3}, {0x0, 0x4}, {0x4, 0x7}, {0x7, 0x2}, {0x1, 0x1}, {0x0, 0x8}, {0x6, 0x1}, {0x4, 0x9}, {0x0, 0x8}, {0x2, 0x6}, {0x1, 0x9}, {0x7, 0x2}, {0x7}, {0x3, 0x9}, {0x6, 0x4}, {0x7, 0xa}, {0x4, 0x4}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x6}, {0x6, 0x4}, {0x5, 0x6}, {0x5, 0x8}, {0x3, 0x4}, {0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xf8, 0xfff9, 0x7fff, 0xf66, 0x81, 0x81, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xcb, 0x6, 0x2, 0x8001, 0x200, 0x0, 0x1, 0x240]}}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x6, 0x6}, {0x1}, {0x0, 0x5}, {0x3, 0x2}, {0x7, 0x7}, {0x2, 0x6}, {0x1, 0xa}, {0x0, 0xa}, {0x3}, {0x6, 0x6}, {0x6}, {0x4, 0x9}, {0x4, 0x4}, {0x4, 0x4}, {0x7, 0x7}, {0x1}, {0x3, 0x5}, {0x4, 0x3}, {0x4, 0x3}, {0x4, 0x9}, {0x7, 0x4}, {0x1, 0x4}, {0x5, 0x9}, {0x2, 0xa}, {0x0, 0x9}, {0x5, 0x1}, {0x6, 0x5}, {0x4}, {0x3, 0x5}, {0x5}, {0x5, 0x7}, {0x4, 0x1}, {0x5, 0x2}, {0x2, 0x5}, {0x0, 0x4}, {0x2}, {0x0, 0x5}, {0x1, 0x7}, {0x1, 0x8}, {0x5, 0xa}, {0x0, 0x6}, {0x0, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x2, 0x3}, {0x2, 0xa}, {0x1, 0x5}, {0x1, 0x2}, {0x4, 0xa}, {0x3, 0x7}, {0x4, 0x3}, {0x7, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x3}, {0x7, 0x5}, {0x2}, {0x3, 0x7}, {0x6, 0x7}, {}, {}, {0x3, 0x5}]}, @NL80211_TXRATE_HT={0x19, 0x2, [{}, {0x6, 0x2}, {0x1}, {0x5, 0x3}, {0x2}, {0x1, 0x9}, {0x1, 0x8}, {0x6}, {0x1, 0x6}, {0x2, 0x1}, {0x6, 0x3}, {0x1, 0x9}, {0x6, 0x4}, {0x4, 0xa}, {0x7, 0x5}, {0x3, 0x8}, {0x4, 0x1}, {0x0, 0x9}, {0x3, 0x5}, {0x4}, {0x5, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x4, 0x0, 0x2, 0x1, 0x800, 0x119a, 0xffe0]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x16, 0x8, 0x1b, 0x60, 0x2d]}]}]}, @NL80211_ATTR_TX_RATES={0x120, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x4, 0x24, 0x1b, 0x60, 0x60, 0xb, 0x24, 0x36, 0xb, 0x18, 0x36, 0x6c, 0x9, 0xc, 0x10, 0xc, 0x1b, 0xc, 0x5, 0x1, 0x1, 0x48, 0x24, 0x16, 0xc, 0x54, 0x3, 0x5, 0x4]}]}, @NL80211_BAND_60GHZ={0xf4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x1, 0x5}, {0x4, 0x1}, {0x1, 0x6}, {0x3, 0x4}, {0x6, 0x8}, {0x1, 0x2}, {0x1, 0x4}, {0x7}, {0x1, 0xa}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x4}, {0x1, 0xa}, {0x2, 0x2}, {0x1, 0x9}, {0x0, 0x7}, {0x4, 0xa}, {0x6, 0x8}, {0x0, 0x4}, {0x0, 0x3}, {0x7, 0x7}, {0x1, 0xa}, {0x1}, {0x2, 0x8}, {0x1, 0x5}, {0x1, 0xa}, {0x0, 0x8}, {0x7, 0x2}, {0x2, 0x1}, {0x4, 0xa}, {0x4, 0x9}, {0x1, 0x5}, {0x0, 0x4}, {0x2, 0x1}, {0x3, 0x9}, {0x2, 0x6}, {0x2, 0xa}, {0x1, 0x5}, {0x4, 0x1}, {0x6, 0x2}, {0x6, 0x6}, {0x3, 0xa}, {0x7, 0xa}, {0x4, 0x6}, {0x3, 0x5}, {0x0, 0x6}, {0x7, 0x3}, {0x2, 0x5}, {0x2, 0x5}, {0x3, 0x8}, {0x4}, {0x5, 0x1}, {0x6, 0xa}]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x0, 0x7}, {0x7, 0x6}, {0x6, 0x3}, {0x1, 0x6}, {0x2, 0x4}, {0x1, 0x4}, {0x1, 0x7}, {0x1, 0x2}, {0x0, 0x7}, {0x0, 0x4}, {0x2, 0x2}, {0x0, 0xa}, {0x4, 0x8}, {0x4, 0x8}, {0x1, 0x8}, {0x2, 0x8}, {0x0, 0xa}, {0x0, 0x3}, {0x2, 0x3}, {0x1, 0x2}, {0x3, 0x1}, {0x5, 0x9}, {0x4, 0x7}, {0x6, 0x2}, {0x3, 0x5}, {0x6, 0x9}, {0x6}, {0x4, 0x1}, {0x7, 0x4}, {0x0, 0x4}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x70, 0x0, 0xb, 0x36, 0xc, 0x24, 0x3, 0x1b, 0x6c, 0x36, 0x6c, 0x48, 0x5, 0x2, 0x4, 0x30, 0x16, 0x18, 0x4, 0x12, 0x6, 0x12, 0x36, 0xb]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x7, 0x4}, {0x0, 0x4}, {0x1, 0xa}, {0x2, 0x7}, {0x7, 0x1}, {0x5, 0x2}, {0x0, 0xa}, {0x0, 0xa}, {0x1, 0x9}, {0x4, 0x2}, {0x7}, {0x5, 0x8}, {0x1, 0x1}, {0x4, 0x6}, {0x2, 0x7}, {0x3, 0xa}, {0x5, 0x2}, {0x1, 0x9}, {0x7, 0x2}, {0x6, 0x8}, {0x5, 0x4}, {0x2, 0x4}, {0x0, 0x1}, {0x5, 0x5}, {0x6, 0x7}, {0x7, 0x1}, {0x1, 0x4}, {0x2, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x7, 0x3}, {0x5, 0x3}, {0x5, 0x2}, {0x7, 0xa}, {0x2, 0x1}, {0x1, 0x9}, {0x4, 0x4}, {0x3, 0x8}, {0x1, 0x7}, {0x3, 0x9}, {0x4, 0x8}, {0x3, 0x2}, {0x0, 0x7}, {0x3, 0xa}, {0x6, 0x5}, {0x2, 0x1}, {0x1, 0x2}, {0x3, 0x7}, {0x5, 0x4}, {0x0, 0x6}, {0x7, 0x6}, {0x4, 0x6}, {0x7, 0x9}, {0x2, 0x9}, {0x7, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x7}, {0x4, 0x6}, {0x0, 0x5}, {0x0, 0x2}, {0x1, 0x3}, {}, {0x5, 0x9}, {0x0, 0x5}, {0x0, 0x2}, {0x2, 0x6}, {0x4}, {0x7, 0x7}, {0x3, 0x2}, {0x2, 0xa}, {0x1, 0x6}, {0x3, 0x8}, {0x1, 0x8}, {0x5, 0x7}, {0x5, 0x1}, {0x2, 0x9}, {0x3, 0xa}, {0x1, 0x4}, {0x6, 0x4}, {0x4, 0x2}, {0x3, 0x9}, {0x2, 0x9}]}]}]}]}, 0xafc}}, 0x20000000) nanosleep(&(0x7f0000000280), 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 1453.894640] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1453.912564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1453.946780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1453.994131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:52:28 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1010, 0x0, 0x0, 0x0, 0x2a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) io_submit(0x0, 0x1, &(0x7f0000001a00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}]) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1ff, 0xd6c2, 0x8}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000180)={'\x00', 0x200, 0x5, 0x10000, 0x7, 0x7fff}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) syz_open_procfs(0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x7}) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, r5}, 0xc) 03:52:28 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1010, 0x0, 0x0, 0x0, 0x2a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) io_submit(0x0, 0x1, &(0x7f0000001a00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}]) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1ff, 0xd6c2, 0x8}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000180)={'\x00', 0x200, 0x5, 0x10000, 0x7, 0x7fff}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) syz_open_procfs(0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x7}) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, r5}, 0xc) 03:52:28 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1010, 0x0, 0x0, 0x0, 0x2a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) io_submit(0x0, 0x1, &(0x7f0000001a00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}]) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1ff, 0xd6c2, 0x8}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000180)={'\x00', 0x200, 0x5, 0x10000, 0x7, 0x7fff}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) syz_open_procfs(0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x7}) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, r5}, 0xc) 03:52:28 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1010, 0x0, 0x0, 0x0, 0x2a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) io_submit(0x0, 0x1, &(0x7f0000001a00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}]) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1ff, 0xd6c2, 0x8}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000180)={'\x00', 0x200, 0x5, 0x10000, 0x7, 0x7fff}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) syz_open_procfs(0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x7}) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, r5}, 0xc) [ 1457.138439] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1457.149817] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1457.151765] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1457.157927] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1457.161963] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1457.163688] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1457.224360] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1457.229860] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1457.231362] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1457.235689] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1457.237882] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1457.249777] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1459.176669] Bluetooth: hci1: command 0x0409 tx timeout [ 1459.305726] Bluetooth: hci3: command 0x0409 tx timeout [ 1461.224721] Bluetooth: hci1: command 0x041b tx timeout [ 1461.352595] Bluetooth: hci3: command 0x041b tx timeout [ 1463.272559] Bluetooth: hci1: command 0x040f tx timeout [ 1463.400616] Bluetooth: hci3: command 0x040f tx timeout [ 1465.321648] Bluetooth: hci1: command 0x0419 tx timeout [ 1465.449582] Bluetooth: hci3: command 0x0419 tx timeout [ 1473.501065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1473.501799] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1473.503667] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1473.567398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1473.568771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1473.572392] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1474.032357] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1474.038558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1474.048625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1474.052827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1474.076048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1474.387320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1474.396059] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1474.401148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1475.143408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1475.144896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1475.180362] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1475.199252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1475.201069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1475.204083] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1475.690045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1475.699834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1476.015134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1476.019217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:52:50 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1010, 0x0, 0x0, 0x0, 0x2a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) io_submit(0x0, 0x1, &(0x7f0000001a00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}]) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1ff, 0xd6c2, 0x8}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000180)={'\x00', 0x200, 0x5, 0x10000, 0x7, 0x7fff}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) syz_open_procfs(0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x7}) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, r5}, 0xc) 03:52:50 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x203}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x3, 0x0, 0x0, 0x0, 0x3800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) 03:52:50 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1010, 0x0, 0x0, 0x0, 0x2a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) io_submit(0x0, 0x1, &(0x7f0000001a00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}]) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1ff, 0xd6c2, 0x8}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000180)={'\x00', 0x200, 0x5, 0x10000, 0x7, 0x7fff}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) syz_open_procfs(0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x7}) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, r5}, 0xc) 03:52:50 executing program 7: prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0) epoll_create1(0x0) prlimit64(0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000003b80), 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0xf7, 0x0, 0x80, 0x4, 0x0, 0x4, 0x48c00, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff}}, 0x0, 0xb, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000003bc0)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_create(0x0) 03:52:50 executing program 2: r0 = syz_open_dev$rtc(&(0x7f00000007c0), 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x80287010, &(0x7f0000000180)) 03:52:50 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x0, r1}) sendfile(r1, r0, 0x0, 0x10000) 03:52:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x4c, r4, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x3e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 03:52:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000100)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, [{0xdd, 0xf, "87bd00d94d5662f898acb2437d78f1"}]}, 0x47) [ 1476.145689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1476.167263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1476.254420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:52:50 executing program 7: syz_emit_ethernet(0x82, &(0x7f0000000140)={@local, @dev, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "32cc1a", 0x4c, 0x2f, 0x0, @remote, @rand_addr=' \x01\x00', {[@routing={0xa6}]}}}}}, 0x0) 03:52:50 executing program 2: r0 = syz_open_dev$rtc(&(0x7f00000007c0), 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x80287010, &(0x7f0000000180)) [ 1476.372775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:52:50 executing program 6: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r0, 0xee00, 0x0) keyctl$setperm(0x5, r0, 0x2c101a08) keyctl$chown(0x4, r0, 0x0, 0x0) 03:52:50 executing program 2: r0 = syz_open_dev$rtc(&(0x7f00000007c0), 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x80287010, &(0x7f0000000180)) [ 1476.531033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:52:50 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) 03:52:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0107000000000000000020ffec0008000300", @ANYRES32=r2], 0x30}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000001340), r0) 03:52:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=ANY=[@ANYBLOB="70000000080211000001000211000000080211000000000000000027d15c762e0721f18b960c121824"], 0x36) 03:52:50 executing program 6: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0) write$binfmt_aout(r0, &(0x7f0000000040), 0x20) [ 1476.719867] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1476.765326] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1476.819547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1476.842949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1477.167411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1479.358775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1479.363126] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1479.364471] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1479.369364] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1479.371405] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1479.373666] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1481.384640] Bluetooth: hci1: command 0x0409 tx timeout [ 1483.432672] Bluetooth: hci1: command 0x041b tx timeout [ 1485.480553] Bluetooth: hci1: command 0x040f tx timeout [ 1487.529127] Bluetooth: hci1: command 0x0419 tx timeout [ 1502.784957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1502.786538] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1502.789786] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1502.854556] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1502.855798] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1502.858550] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1503.375738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1503.394678] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1503.703843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:53:17 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000002380), 0x121800, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000000)) 03:53:17 executing program 2: r0 = syz_open_dev$rtc(&(0x7f00000007c0), 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x80287010, &(0x7f0000000180)) 03:53:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0107000000000000000020ffec0008000300", @ANYRES32=r2], 0x30}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000001340), r0) 03:53:17 executing program 6: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0) write$binfmt_aout(r0, &(0x7f0000000040), 0x20) 03:53:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0107000000000000000020ffec0008000300", @ANYRES32=r2], 0x30}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000001340), r0) 03:53:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0107000000000000000020ffec0008000300", @ANYRES32=r2], 0x30}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000001340), r0) 03:53:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfffffffd, 0xe}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8000010}, 0x800) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 03:53:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000380)=@mgmt_frame=@auth={@with_ht={{{}, {0x22c}, @device_a, @device_a, @from_mac, {0x3, 0xf81}}, @ver_80211n={0x0, 0x4, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1}}, 0x1, 0x1, 0x2b, @void, [{0xdd, 0x94, "219d4fd11d536939442a4ba2dfa7ccdb0295b589de215912155e485c75841573e185ff9b69506131caaacaa2336501b0eedcfd59f3d168308bc416c781ec26706265ef7a2b6da716f9be8ea5686c73808cbc3841a1e1bc9111c4d130ea84c77ec094ef0f7166892c5904ecfa616095aff76b1ad5472ad0f0ae44b3d1c346eae2f510181c6838dee00886b9342e4da7d697bb162d"}, {0xdd, 0x8f, "c87388dc0b41f850e45aef0c1c60950caee9eb0dc2f7436fafecb44e9e939b8930710559a88b48c10d89f8610fcaae4e4b4ec83af56fa562a2fc658866d55ec85a8666e012e2796ba2a201ca29d55d1c7ec213ba9c6354e8579bfd3c4389488d543745e7772a22858bbd07cedb7567457158f4841b092704cb9379d45f978e5ebb07c630c5a0fba310c11dcb82876b"}, {0xdd, 0xb, "092a56cdc993c894ac048c"}, {0xdd, 0x32, "02489b8c88549e862f783f135034a0f0539462d1bf2b111bd09d3c204786dbf2ef22136e0543d96c8a24d91bf4993fb174b4"}, {0xdd, 0x31, "801adbe2a76a750cdb7e95c4d7397a89927f527fb8758fb5c33d05c40223ca6219fff7b41bede50399dbe3781ec45e2432"}, {0xdd, 0x49, "ebc5e7792b1891e559cb1a076991789c8a6a4e888bd6a0768668fcc1f22742c5565c8990d8acb1ad750978f6d68db1ddd702bce4a06abfd019e369e9a58a4b29f6e141be6413c77856"}]}, 0x208) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 03:53:17 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) [ 1503.825342] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1503.837220] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1503.838440] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1503.854129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1503.877367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:53:17 executing program 6: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0) write$binfmt_aout(r0, &(0x7f0000000040), 0x20) 03:53:17 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x13, 0x0, 0x0) [ 1503.924046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:53:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0107000000000000000020ffec0008000300", @ANYRES32=r2], 0x30}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000001340), r0) 03:53:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0107000000000000000020ffec0008000300", @ANYRES32=r2], 0x30}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000001340), r0) 03:53:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0107000000000000000020ffec0008000300", @ANYRES32=r2], 0x30}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000001340), r0) [ 1503.941203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1504.027980] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 03:53:18 executing program 6: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0) write$binfmt_aout(r0, &(0x7f0000000040), 0x20) [ 1504.059863] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1504.066325] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 03:53:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0107000000000000000020ffec0008000300", @ANYRES32=r2], 0x30}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000001340), r0) 03:53:18 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000002380), 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, 0x0) 03:53:18 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) 03:53:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0107000000000000000020ffec0008000300", @ANYRES32=r2], 0x30}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000001340), r0) [ 1504.210207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1504.271903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1504.305758] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1504.342165] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1504.490775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:53:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0107000000000000000020ffec0008000300", @ANYRES32=r2], 0x30}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000001340), r0) 03:53:18 executing program 6: r0 = epoll_create(0x3) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) 03:53:18 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) 03:53:18 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x9006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0x2}], 0x1}, 0x0) 03:53:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000740)=@mgmt_frame=@assoc_req={@with_ht={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x81}, @broadcast, @device_a, @initial, {0x5, 0x5}}, @ver_80211n={0x0, 0x52, 0x0, 0x2, 0x0, 0x2, 0x1}}, 0x14, 0x42, {0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x3, [{0xb}, {0x18}, {0x2, 0x1}]}, @val={0x2d, 0x1a, {0x1000, 0x3, 0x2, 0x0, {0x7, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}, 0x800, 0x7, 0x7}}, [{0xdd, 0x73, "97088c975d5bdbd6d65e329f501e004c51a87ef9a577eddf029b4982a5f35ebd556c500bcf5a2f931ad4305c953f2312ac247a5da985e492efe2497c0fa4eb8a0cb463467e43ad207c52f6b96d09da33ab8e9097fce565f8f2dc2f17f57c88ee30d01a71af55e12354546e60011fc6f66350ed"}, {0xdd, 0xf5, "915f53219481409c34699d7419cdc292a371f51e9077e4e1f955e56a255f19650564f7546177763d6019f52a5266544cae38ceb2be173aa0a59bd24e0ddcd73a2d1fb70453dc4896f82d6ce0748921670cc48dd23f2cb2c0a95c6d970cb5815181f11bfdc98a66808adc8bb5ba1407a0470e66644e8d62bac69f198f9ec1196497b4f900f7d0618a6fe06cee1938b6f5aa78edeb31f2546b36a0c19fa22462b0aff41ae23a6a58b6092b4dd85fc1444a43e78b209893b6fb3caeddccf93c68bac0988266a52db00a0ff470cd8de78ff7e85ed3e8dd44a740f1604eb534d24d8266249f7f45519284674643b825cae9ebd2c92806cc"}, {0xdd, 0x50, "1d851e623c7b8a501ded80b442a7457d3f2e0919f493bf50d614392e548a7d3679a7712d23d9f3b6a064df95a14d03d71c2ecb71fef953d166055c61e0166fbf629eef42d21eed8ff661fd03b8d952ff"}, {0xdd, 0xa6, "91cfe47f228b5438c6e291ee295c3214c9713571eac0cb62dbdbe5e845356c94dc934c9e67fd0dfcbf5d6fb33415d249e5fa76a16092bfcc4a432c93dd59fd24dba75e68959427c5845aeed16cf11b1d9d1ed53689a97c8a53e00b895642d52973dcb3d9194231826522b0f9f1de5b6c93ed20580d2217d8b8d703df6a6258a4e9ff06ce636d923e046e213ad650206b1d17784e1eeaf312f9d3fb4c4af48868da4c912e2859"}, {0xdd, 0xc9, "1f966f92d0b8eec1b1ca42d7cad564718972c9276073f26e6d0cd6b9e337c1b010d8e7688feb5284769e19a4e3c5f782ab642e68c0865cd574a21da0d71db6d54e0e56dd0ac7bc5b08fbdeb9ca59e18c78d693f7ad926f0ab48274ceb34bb56b64baf919f5570d45c9ca7b1082de75cd47232e2392faa62d9734c7155cb5eaf353bfc7e29b1ad6b93cadb2a3cbf4625e37d3ac144d0bfc9c4b4fc3509860728b627dcd39792b4c31b87e9995b54c2c1860a385c9995efb92263f3d424d364eca7f92cc32b2b06d3628"}, {0xdd, 0xf5, "0b5e2f4bef893184ce691027a8f5c09f1b897b274539bea60a7ce743ab186b6618679335d5cfaca9b6bc0f8456ce6df897d7de44ec276683eab5280bffaf42de1d741fbe3c774d78be1d914e83f61485be56f5fd053f6d06d53d40ebaad6c69752669e67dec1e3f75d00b9e06b06960103b6aed5c752a51fc80e3b90a7c12583c5769cfc27e192bd244e80e226f1e6b082f260ae624179b17dccf5ac853fd391bc33fff813aa373847fe7102d9891b5125bb0dca58c459a7cb0327ca078aeb687a3b4b8b405697e410668cd5b38f7e19a928554275a6930eb33d4ecfbb39dfb9b195642a65b47cc2f6d1bd1c1537a024e9ed120eaa"}]}, 0x471) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000bc0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x150, r5, 0x0, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x43}, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xff}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x5910}, @NL80211_ATTR_VENDOR_DATA={0xfc, 0xc5, "7a42ff61f8725c81680f74b439bc02b5b31a8750dea43a294ea678dc49da362a860718c0a68eff61ddfa0772100017a5a89472ca3600047e1c7677aaa2c5bbb6c7a92e8166b1177c092ecbf0d5a70c725bb947c93317148a2038d3d21c374b5c017a3a99909d61a49e79235d45ec27f5d09e248559d742e14d0f31e03406815a81e18cb4d2eca2120f73a9fb82b685a556c5286016df119914e16630f76927cc617e8cd837625358c257e5ef37a84cccdcd51fd5abc7b9f2dd753252d8e1fed36b07aa53f16a6fe2a8f4e31c78bc1ce79d2022c1b64c0f68cfde78594ddcb0f10306ac93e7404e9bb11f789cd939753f9a30f766f4a1cb48"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xfffffffc}]}, 0x150}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendfile(r3, r4, 0x0, 0x3) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r7, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x31}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x40) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x8c, r8, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "efddecd4d2b3e7b39c5dc32735f33d6eec0e3d9bf0153719"}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}]}, 0x8c}, 0x1, 0x0, 0x0, 0x801}, 0x4) syz_80211_inject_frame(&(0x7f0000000380)=@device_b, &(0x7f0000000340)=@mgmt_frame=@deauth={@with_ht={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_a, @device_a, @random="c29e20341788", {0x2, 0x80}}, @ver_80211n={0x0, 0x68a8, 0x3, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x33, @void}, 0x1e) 03:53:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r1) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940), 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x38, r4, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x7e}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x20008000) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x840000}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)={0x550, r4, 0x820, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x1d}}}}, [@NL80211_ATTR_FRAME={0x527, 0x33, @reassoc_req={@wo_ht={{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x81}, @broadcast, @device_a, @initial, {0x4, 0xc1}}, 0x1423, 0x6fa5, @device_a, {0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x5, [{0x36}, {0x60, 0x1}, {0x24}, {0x18}, {0x6, 0x1}]}, @void, [{0xdd, 0xcc, "0cf481da70cb1e9994c682e4fd6a0c8177d6c2165e4418d3303a4c63028caea2a340931617e720432baef214957e0f4d8b1dac7c9c273192e17407099eaf8e39d416ffed0a3743134cec18aa1e0673e9b61db7314b6422080d650a12b2a9be966ec47a58085be057b71661833a01a7da0844462bedb3054a3fcbdbd298cb65c822d3be2739f0811c8e2ef906fb0b4c1360e63612f18a05744f76f6cb9241541e5bdf0019608c76e9d6a6513a15bb322b4cc7e0795950595f95295d8deb9d876a9948be2603c10549d87331b6"}, {0xdd, 0xdc, "e8f28be25577dfe5246f18bfe05b560b54968e38837d597b3a50dcc1e94edce0baaded10a5a02332f1a760723edfaeb0970ac72cbe00ae5965f6b996639909ce239093aad56cecd2cd66e7618934831ffa10ad936e901a8e655f36877aac40fd8e7ea0eecf50628222e2e7e1c95106c7af473eca59d04d2e0075e33d53c622fdadee41e1ae8e44f06ad695084acaccfbbd3b09bfa50ff4dab52d1f908dc382422f38c22dac3196ddec6d88aabd9ec34d232e2ca53778567fe59ab189013f040dc5087d7cfe4a54b2238bb1eb78c405d1cb650dd6ca253a6292b25d1a"}, {0xdd, 0xd0, "724086c30792b89ad6e378a82c7e621335cb4575998c5e2d8e59af44d0feeafe87a842eb6e2d5ae16652821d5f2a609c01a5eda514d8b0c8f977cc396f77adb342620250dc4c1464dd859c4819f4c41b342138ae62693a9d25f73222d10947044387cc2029619559de3928d4c9020f7f47190f29443107938071da251a25ea5055697f9bf5b55c40b7bd83c9ecd59462f87c957b51739b8cbb9cd1d3e571fabf7a401d4dd58d8c4fc38733e52ea5e96fa80aa16f1c527aacde8531587906b4d64e7393fd201eea28c70af07a83931971"}, {0xdd, 0xd0, "ccd9459352d9099a609d3f3bad10d840daa8415faae96059a2ba28b1cd3ee2db076b86368e67ff10a35b097f37ef88e91d3f222f474370f8bd6fccf9e8a8e104001c10ee98f28efad92c667f0aed3e0f8ca086406378ce258b1768ca4fc7aa7b0113a71edcfdf4807b245b36adb0618b23b80563b63c48edc30401b902d29d42036a3cd88b4db32bee822faff74780e81928bbb993fdba218fafbca7ce6edccf8b462d239aa2b6ac598acdf6356739a5f17ebc10edb7f08a9a05767bf5a4ebf7b71e730ed87a089a44b33ab2751ca669"}, {0xdd, 0x18, "96cd7d63fd4311c41faa5785074a0bd53be6b5b941ca48c8"}, {0xdd, 0xb7, "399d4b45893e4c7a446c92e2ae89d3d15f20276cb039788d264177f52fd41700a3855e9c29a71574bcf07c2aee45035c58170b34798e8daa5f4497f5804aaf7a2c24bcb5f9cb26f93e9419ee26d67af52a92a9c24f1609fd7190884a334e3b18e1a332ad4da6cc845f16a497ca29cd2d1b6bb4c318ddbf48127fae8d566dd714cf28f8ff5efbd00089a66cf3e8600878166f62eedd40c648efa607122e142c425961499622d7af6fc65c576ce542e5c28cf582a586e948"}, {0xdd, 0xcd, "f18e99bb2f76b1c83eb9a10f8aed24d40b84eb69f7da55dfb9ca2e8409648429fa11b32abe58a73bd30433d7eb5d1750b3387856e7965554cc105b8fbbc5af86ce4d58c9633124a531aba02e191fde8e0acc5848f6d2a262e27c4d1cbfbe546987b7ccfedf3c50fb15dcc9f1f13611f02d4d8a92cd93961ed7d137b563b2458fd5ee24aec0437aa5ec98c0c85115de44733cdff0f2b91c9c400f2fa6a9ab2a960e1fa2fc24ed8828b2c7ac77de14edec131c63a5732088ad7d78419f7fd51fc0b3e3d3783aa66df614f623c2c7"}]}}]}, 0x550}, 0x1, 0x0, 0x0, 0x4044050}, 0x22000800) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000100)=@mgmt_frame=@action_no_ack={@with_ht={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x7}, @broadcast, @broadcast, @from_mac=@device_b, {0x4, 0x1}}, @ver_80211n={0x0, 0x2, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}}, @sp_mp_close={0xf, 0x3, {{0x72, 0x6}, {0x75, 0x16, {0x1, 0xffff, @val=0x20, @void, @val="8241bc91a061a0a02d1f86ed73803d78"}}}}}, 0x3e) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 03:53:18 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f00000012c0)=""/4093, 0xffd) [ 1504.506916] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1504.555946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1504.568661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1504.569504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1504.587584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:53:18 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000000), 0x6e) 03:53:18 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffdb, 0x0, 0x4}, 0xc) 03:53:18 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000880)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000580)=""/222, 0xde}], 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x14, 0x1d, 0x1, 0x0, 0x0, "", [@typed={0x4, 0x0, 0x0, 0x0, @binary}]}, 0x14}], 0x1}, 0x0) fcntl$notify(r0, 0x402, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x40000020) 03:53:18 executing program 7: r0 = gettid() ioprio_get$pid(0x2, r0) 03:53:18 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) 03:53:18 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x2405, &(0x7f0000000040)='-:{-:\':-%-\x00') 03:53:18 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x42, 0x0, &(0x7f0000000040)) 03:53:18 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='auxv\x00') read$hiddev(r0, 0x0, 0x0) 03:53:18 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) r2 = getpgid(0x0) r3 = getpgid(0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f0000000080)={r0, r1}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x8, 0x0, 0x40}) 03:53:18 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000000), 0x6e) 03:53:18 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000000), 0x6e) 03:53:18 executing program 1: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000) shmat(0x0, &(0x7f0000ff3000/0x4000)=nil, 0x4000) shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x81}, 0x8, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x4) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffc000/0x2000)=nil) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x1, 0x8a, 0x20, 0xa9, 0x0, 0x0, 0x8, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0xa000000000000000, 0xa8f}, 0x3a00, 0x5, 0x80000000, 0x4, 0x0, 0x6, 0x3c3f, 0x0, 0x6, 0x0, 0x3}, 0x0, 0x7, 0xffffffffffffffff, 0x2) openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000700)=""/4096) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x2, 0x3f, 0x5, 0x3, 0x0, 0x89d9, 0x1000, 0xc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x8}, 0x8040, 0x1, 0x400, 0x6, 0xa2, 0x0, 0x7, 0x0, 0x4, 0x0, 0x239b}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) 03:53:19 executing program 2: pkey_mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', &(0x7f0000001300), 0x0, 0x0) [ 1505.163426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1505.167170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:53:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000100)=@ctrl_frame=@ack={{}, {0x5}, @broadcast}, 0xa) 03:53:19 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000000), 0x6e) 03:53:19 executing program 7: r0 = syz_io_uring_setup(0x4efe, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x8}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x6dc25b09) io_uring_enter(r0, 0x6c64, 0x0, 0x0, 0x0, 0x0) 03:53:19 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000000), 0x6e) 03:53:19 executing program 2: r0 = syz_io_uring_setup(0x1a8a, &(0x7f0000000100), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_FILES(r0, 0x10, 0x0, 0x0) [ 1505.312629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1505.331088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1505.334939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1505.643338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1505.649847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:53:19 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000880)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000580)=""/222, 0xde}], 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x14, 0x1d, 0x1, 0x0, 0x0, "", [@typed={0x4, 0x0, 0x0, 0x0, @binary}]}, 0x14}], 0x1}, 0x0) fcntl$notify(r0, 0x402, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x40000020) 03:53:19 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000000), 0x6e) 03:53:19 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000000), 0x6e) 03:53:19 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, 0x115}) 03:53:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x100, 0x4) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 03:53:19 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f0000000040)) 03:53:19 executing program 1: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000) shmat(0x0, &(0x7f0000ff3000/0x4000)=nil, 0x4000) shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x81}, 0x8, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x4) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffc000/0x2000)=nil) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x1, 0x8a, 0x20, 0xa9, 0x0, 0x0, 0x8, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0xa000000000000000, 0xa8f}, 0x3a00, 0x5, 0x80000000, 0x4, 0x0, 0x6, 0x3c3f, 0x0, 0x6, 0x0, 0x3}, 0x0, 0x7, 0xffffffffffffffff, 0x2) openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000700)=""/4096) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x2, 0x3f, 0x5, 0x3, 0x0, 0x89d9, 0x1000, 0xc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x8}, 0x8040, 0x1, 0x400, 0x6, 0xa2, 0x0, 0x7, 0x0, 0x4, 0x0, 0x239b}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) 03:53:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = memfd_secret(0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0xc0, r4, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x1d}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xd2}]}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x5}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x3}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x52}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}]}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x1}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x20}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xfc}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x18}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x14}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}]]}, 0xc0}, 0x1, 0x0, 0x0, 0x40800}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x4, 0x3, 0x40, 0x364f, 0x48, @mcast2, @local, 0x7800, 0x40, 0xfd, 0x4}}) [ 1505.754724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1505.767683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:53:19 executing program 2: io_setup(0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) 03:53:19 executing program 3: r0 = syz_io_uring_setup(0x2b2, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x2, 0x184}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_io_uring_setup(0x2175, &(0x7f0000000680)={0x0, 0x1df2, 0x4, 0x102, 0x285}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x2004, @fd_index=0x7, 0x4, 0x483e, 0xffffffe0, 0x1, 0x1, {0x1, r4}}, 0x6) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r1, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800, 0x0, {0x0, r5}}, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz1\x00', 0x200002, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000800)=[r6, r7], 0x2) setsockopt$inet_tcp_int(r1, 0x6, 0x4, &(0x7f0000000140)=0x23ca, 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1/file0\x00', 0x0, 0x2c) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r9, 0x0, 0x0, 0x87ffffc) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x6, 0x4, 0x2, 0x2, 0x0, 0x7fff, 0x10048, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x9}, 0xc41, 0x3, 0x0, 0x4, 0x5bd, 0x8, 0x4, 0x0, 0x4, 0x0, 0x9}, 0xffffffffffffffff, 0xa, r8, 0xa) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 03:53:19 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 03:53:19 executing program 6: mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff8000/0x4000)=nil) mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) 03:53:19 executing program 1: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000) shmat(0x0, &(0x7f0000ff3000/0x4000)=nil, 0x4000) shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x81}, 0x8, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x4) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffc000/0x2000)=nil) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x1, 0x8a, 0x20, 0xa9, 0x0, 0x0, 0x8, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0xa000000000000000, 0xa8f}, 0x3a00, 0x5, 0x80000000, 0x4, 0x0, 0x6, 0x3c3f, 0x0, 0x6, 0x0, 0x3}, 0x0, 0x7, 0xffffffffffffffff, 0x2) openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000700)=""/4096) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x2, 0x3f, 0x5, 0x3, 0x0, 0x89d9, 0x1000, 0xc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x8}, 0x8040, 0x1, 0x400, 0x6, 0xa2, 0x0, 0x7, 0x0, 0x4, 0x0, 0x239b}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) 03:53:20 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/3, 0x3, 0x0) 03:53:20 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 03:53:20 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\x00', 0x0) sync_file_range(r0, 0x0, 0x80, 0x1) [ 1506.211892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1506.224133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1506.228050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1506.547130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:53:20 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000880)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000580)=""/222, 0xde}], 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x14, 0x1d, 0x1, 0x0, 0x0, "", [@typed={0x4, 0x0, 0x0, 0x0, @binary}]}, 0x14}], 0x1}, 0x0) fcntl$notify(r0, 0x402, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x40000020) 03:53:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x40, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1000, 0x7e}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x40}}, 0x240001a0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="8000000008021100000108021100000008021100000100000000000000000000640001000006020202020202010882848b960cc51824"], 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000740)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x5}, @device_b, @broadcast, @from_mac=@broadcast, {0xb, 0xd80}}, {0x7, 0x0, 0x3, 0x0, 0x40}}, {@type01={{}, {0x1}, @broadcast, @initial, @random="dffd85585fdc", {0x9, 0xbdc}}, {0xe, 0x1, 0x0, 0x1, 0xff}}}, @a_msdu=[{@broadcast, @broadcast, 0x1e, "0521ae70e68dd90e6ddb4b6e5af00a101f7c7fd85c045877b8951207c254"}, {@device_b, @broadcast, 0x9f, "2348d3155975ea5d16c6c0171dcc800ef3e81028a4ce8b25adc34b053cf5d99350dd7cc9a57c22e51adb075332acbd9dec51fba73c97bce6ca73c990962ba9fb697d01624590695edbbab671ea3dd2c77ae61c189a49bb91ed334da67dfe3ce0a960545f99611d498d15e78c6404fa7994591c0d161509ac284775bf671fff92acd5e0e73c4b78041767bce0ea04cedcf1c83a1b49febe48002019634b1990"}, {@broadcast, @broadcast, 0x1000, "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"}, {@device_a, @broadcast, 0x58, "18ca61ab45cef64659afdee9ad590036279b20242bde09e1824d06e2b05fe28f2d25e5c4fe5c57dfc5075eee85745bc3da70dc557d43bf94220a63c3c2d41bde203d9a622bbb3ca971283a86e699f169aa3e7b8c1d4fb218"}, {@device_b, @device_a, 0xef, "a90e0e7b0c54250dd481fd9150ea80b9d484368891b6c22f6bc30377a854186682a348ed6d0630ce7ab9545e78cc0bf44ee22e7bca8c208de5cb3b883dd8735990f7c08c3f647f386bfc8abe9a99a11350c61f4e36314458c65ba44de1b9df0dd87de1974667c526a3eb1741cafa78b731536c325b941acea3afb7d43bd44ff0374fbf042b6efd927b69965781acc1945749e0d4e1d1087e265da4b31c554da563e72472f524dca0390f8be629d984c8eccedfafd625ef3719bff225c994b1af28f780a18e67c176ea684520885bb0728251149b56b8a4f69b77a5bffa2687421b20cf09b5d9fa19fc722404fe5997"}]}, 0x1288) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000100)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, 0x8}}}, 0x3f) 03:53:20 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x37, 0x35]}}}}]}) 03:53:20 executing program 1: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000) shmat(0x0, &(0x7f0000ff3000/0x4000)=nil, 0x4000) shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x81}, 0x8, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x4) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffc000/0x2000)=nil) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x1, 0x8a, 0x20, 0xa9, 0x0, 0x0, 0x8, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0xa000000000000000, 0xa8f}, 0x3a00, 0x5, 0x80000000, 0x4, 0x0, 0x6, 0x3c3f, 0x0, 0x6, 0x0, 0x3}, 0x0, 0x7, 0xffffffffffffffff, 0x2) openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000700)=""/4096) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x2, 0x3f, 0x5, 0x3, 0x0, 0x89d9, 0x1000, 0xc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x8}, 0x8040, 0x1, 0x400, 0x6, 0xa2, 0x0, 0x7, 0x0, 0x4, 0x0, 0x239b}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) 03:53:20 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getpid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000004c0)) syz_io_uring_setup(0x0, &(0x7f0000000200)={0x0, 0xdd89, 0x20, 0x2, 0x392}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000140), 0x0) clone3(&(0x7f0000000440)={0x80202800, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000500), {}, &(0x7f0000000180)=""/79, 0x4f, &(0x7f0000004c80)=""/102400, &(0x7f0000000100)}, 0x58) socket$inet6_udplite(0xa, 0x2, 0x88) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:53:20 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/3, 0x3, 0x0) 03:53:20 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 03:53:20 executing program 5: ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000100)={0x2, [0x0, 0x0]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="80000000080211000000080211000000000000000000000000006400d7bc0441b9690401000006020202020202010882fc8b960c121824000000000000"], 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000140)=ANY=[@ANYBLOB="5000000008061100000108021100000008025b9a6074e684e269268e39e42fe611000000000000000000000000008d0f00000000000002020202010882848b960c121824"], 0x36) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) [ 1506.642690] tmpfs: Bad value for 'mpol' [ 1506.652843] tmpfs: Bad value for 'mpol' 03:53:20 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 03:53:20 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000340)=0x1) 03:53:20 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/3, 0x3, 0x0) 03:53:20 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000240)="b1", 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xffff77ff000) 03:53:20 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/3, 0x3, 0x0) 03:53:21 executing program 7: lremovexattr(0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000a40)='./file0/file0\x00', &(0x7f0000000c80)=[&(0x7f0000000a80)='euid', 0x0, 0x0], &(0x7f0000000d40)=[&(0x7f0000000cc0)='uni_xlate=0', &(0x7f0000000d00)='mask'], 0x1000) 03:53:21 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getpid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000004c0)) syz_io_uring_setup(0x0, &(0x7f0000000200)={0x0, 0xdd89, 0x20, 0x2, 0x392}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000140), 0x0) clone3(&(0x7f0000000440)={0x80202800, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000500), {}, &(0x7f0000000180)=""/79, 0x4f, &(0x7f0000004c80)=""/102400, &(0x7f0000000100)}, 0x58) socket$inet6_udplite(0xa, 0x2, 0x88) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1507.127985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1507.133053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1507.142042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1507.153773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1508.195991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1510.343996] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1510.347394] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1510.349451] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1510.354093] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1510.357778] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1510.360752] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1512.424773] Bluetooth: hci1: command 0x0409 tx timeout [ 1514.472565] Bluetooth: hci1: command 0x041b tx timeout [ 1516.520681] Bluetooth: hci1: command 0x040f tx timeout [ 1518.568575] Bluetooth: hci1: command 0x0419 tx timeout [ 1535.002365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1535.003976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1535.042738] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1535.068160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1535.069331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1535.072454] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1535.562978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1535.573435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1535.883824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1535.888924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:53:49 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000880)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000580)=""/222, 0xde}], 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x14, 0x1d, 0x1, 0x0, 0x0, "", [@typed={0x4, 0x0, 0x0, 0x0, @binary}]}, 0x14}], 0x1}, 0x0) fcntl$notify(r0, 0x402, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x40000020) 03:53:49 executing program 6: syz_mount_image$msdos(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x0, 0x0, &(0x7f0000000880), 0x0, &(0x7f0000000900)={[{@fat=@allow_utime}, {@fat=@dos1xfloppy}]}) 03:53:49 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getpid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000004c0)) syz_io_uring_setup(0x0, &(0x7f0000000200)={0x0, 0xdd89, 0x20, 0x2, 0x392}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000140), 0x0) clone3(&(0x7f0000000440)={0x80202800, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000500), {}, &(0x7f0000000180)=""/79, 0x4f, &(0x7f0000004c80)=""/102400, &(0x7f0000000100)}, 0x58) socket$inet6_udplite(0xa, 0x2, 0x88) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:53:49 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000840)='projid_map\x00') 03:53:49 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x2c, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{}, {}]}]}]}]}, 0x2c}}, 0x0) 03:53:49 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000340)=0x1) 03:53:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="8000000008021100000108021100000008021100000000000000000000804d000000000000b346d0a002020201ab960c121824000000"], 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 03:53:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x3) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xc24a007ff86797a2}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r8, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x2f}, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x6, 0x6a}}}}, [""]}, 0x30}}, 0x4010) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r3, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x44}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x8004) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 03:53:50 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000340)={0x1}, 0x8, 0x0) [ 1536.680990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1536.684011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1536.697237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1536.702130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1537.018370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1537.021828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1537.022958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1537.027571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1537.033192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:53:51 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, 0x0, 0x400000, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001640)={0x0, 0x0, "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", "12151833e71fad9b0fc9dc715b5dbbbb293e0e368f4f4a4cfd51520ec7567e5a3cc283a0f7bf3d466b6d631ee7ed55f4b460fdfca467f6a9fed074930c71c974f90c9729522f070e5aaa99cb6e7737d1af7758d4fa84b53c486d178102fc4814d85f2bfc817538e8ddab5b98a1113b2a1fefbc61450693e4719a656eb56083ac8351111057162f535a9c64034f5db1c22cf6db8a70c4d974d54f092c4bf62d0d25b13a757bf690f41ca29e1c8a44f26b077d7e433a80437b69de18b0ab29bddad7a995052754ec8da92cf3c3a26e3272edfdf3ff44a8bcbf996e7332da52f5cd42f6e47a09b9c1a58cd2c453ed56e4841fe8a8d24de62d200cfbf5387f4582e6501936f1d17dcd9ec74be8baca69e14effd6ba6dafa5af8409643c35ec7c65956b03852106e0be8b83c1ff0a9975bcdac3a2f9ff7cbb65c057ca20d6a51fb7745f555905e0bb94827a5603cc79412e2a4f35173bc4c80861c561e6a47289e915a030895c8c9e825a6e2b50c10b0fdfe506fbb124c54091e75ca1366fe5f6c3a120d3cbb77ba6fd9638cdb104a0f126df1209819968e6b8574bb07f755c69580ab92c01a95a034ef3ee8ccdc9f308f16985994ae31f3aa84d9f7584dbad12c64fb973aa60f6cd675aba39eb1ef05b99bf789e52214d2b6e2c0c933798373b08697ae3a602d53a9cdcb92a43b3d1ac81da6a53cf47b17dc5d6fe15bb0c54d6941a392b5e445b0379700d14608f5baa65b08c15d13035f1f214085ec9841b7a975e21f284924940c4c8049ed98f73de3ba65d74b02e441eb17e0735735d22dd16558b3af61186d8ba1d273aff2ce6da48c8cd0b8431b558c05eaa0483aea25d3741406868ff5b7263172aa1d342012d441253af6618abd6eb7fabc139171889691ba78a9ca8e30287fc55c0c01e5c3aeb78021ed0701e7250fb66ac60be756a661feca933d3c870f51302e47ceeec943b08821200fc2d10409761050ed0c63b1dcac9b196cc59582286f9fb0d26ede93de63e76d4f0678ab2d9f51fa8a07f74071c1189aeaa387d7fc8c9719686f6e8fe345f556d16c7afaf722bc3568eaafeb9a78ba4c84a3e4272e2789c32455046429c98b76e98c49f7ee34f26c50cb819853c5a221af985227e9b40fb216bf34dec845c14f2c93a05005d3777d1b4e168ab7d9c41efb9e706c33e50cc8860b40662363e330c44f7b3f8c6191d737f7169c198e204fd55ae82f787a993be4d1784ab3717fbd617a40bf66c7c66d7bfbe66c3af15d9d06df96a626e41abcbd28dd4642dbea189196349c3dec77597663e14af4acd5b23b02bb3f5cb526978daffa494b65504e5f79cd0d1bb75e988ee77d6a9db380b6f8d9aaf6aaec2b1c719dfa52124c67bd55b0cea3f7f28306af31db18a5dba092d50976420eaa6a6234992a554192692231690f0d4ca7848e6f3f04ff3b86161fec71a16a29dfef98c49979c683f40d687e785e78f1157fd78e0581795fc0f421865662bfa381d3a45b66751d8fddbac446725f34f8b2e789458a7fbb667670317c803d6e1ba887b2ba260634315d06b89a137adddc2540bd8dc3749209b619d776848712406db79accf2ad61a4daeb3343347a097ffe67318dac8afe3cc2a9c8d1f5868d4fb0b55f64a9efa0d2123c608158caae86aa4b409edb0a42aef67b5b310f11e67eb19c7a17e4086dc7d56518dd809eb11a0cfd5181b3737e6d51ebd03406900e8fb5c482b8a1cbbe8fd8a9f241a64852e166ffbc9dfa248c1c9ae6323b95e93e79440e84ec72d08298c7b8a794cc3e75f8796076499b3f8c540c35966ec868604d7aef536d3872b5775ca625d2bd85aad04a30cc95285b56732f0d7a2e13fa86d890c642465c995fdd372e4337fef1804ef58c5dbc42b6f6ee98789577ce4a4bc18fcc4ff8b41a53016bcd41adf77b2480c7dde09d5a11a0acfba99b6c7e3a98f555e8651292379e5b853d0353b08c754732da18665e8af137470c8adba55c53cd7fb07df0b27b5343fe11c65c72458c60c72dc0ad7b34977a962137ff01c50e939362c15bef413da682374faaac3eae580088d4713e7011fbf8153a73b5b0073ba348e2330a0e36efed0f4d5a74c606d65623408eaf1df6bfed75b0d1d84c6f470c23bce56b307767f6b387c87022272ae09d74e8cdbdd52f7e89e3aa5ffb8b2b1f00fe1643e48af1a44a85003bd584179c036e3aea931068f8039eff8db42096fb66a26a8f8a7d92dadc632aecb7f2795b97758411753f2b8dd9f35cae41002ab967b0e6d6a7f88947caba0e86db96e3561e3b8efda345d9177bb9c34f51a5046050a28a0720a594ba542813bae73bbe653d666a941b876f4fb6b369b67020071ae7258edb7c1acee21b530d2ada5506a508f608606de1c9b42f8e5699e05134e879e7e6a3bf65f4815ecb4b69df9123d450e094c0714ae3c069bdc431be8f1c0fab55d71ea014fcd73b687eedcf2005a2e4c69ebdf83b0999b5e142e10215b78ba587ea7e4fe008fc4df7099c86d319824cb287efaddf6dd351e486da5690d8c76ab568f13b85aa9487577449110598287082a199c241dcdd848e9b903a6539ec2ecc1ff69922e912fa454537e0a59796a7f49c8f1b9718890d17f9142b213687e083f854a41e06e4257ecf8b1439798b2fb15c16630c04bede397276e71911d2a97b73f1a32aa28f3d5e7748fa21ef353ce5dae56d93d4a224723c1e31bfcc84b773c2f3f3f8ce8d82eeb26b36cf158368937835c25aa3478783115776abd4d2f4f1ba12c37f4d8705dd85c1ce612912d9074208545c519e2cbb397602c4e70c496382dc6eccd020c3bd7e40a705b1e62801a4520fd76c0962070ddb319cafb620d5890a013c391b500263887d62dce54c53032f05ca863a243cf8ce9b1a667c53a8a1c91d5461a512fc90c588ae91619bdbe3d913377dcfdefb1d24405ca8d11aa38cbfd0a23eec2aeef361a700bb5d2cad6b2dfd59005ec3cc2d91a727a1bb438d6fccf6739dcc00c5981b3b4611d3fcd941b639c38c80c7dfdebb163f588a7945f5309154b05f43de6557fafea51540d45607021c22b62e3cec2b79912d55d797755552f06eb1055f6ef400bb1b53fa3b8548332f769880ef8cf36b51788d345f7a103e5b927df19609fcfe69f1e30e73ff5d68ac86c930d91cd776c2d189b5631e62adf916a5c6307610a1b13a2472a4079e53ce1c96e43d73ee70ae10a90ba6ed106cdec9775c7f31e8204831b8bc2945f6ebdaf068a9b6ac43e9a25b46cd3306b2850a5bd4f56fa6d85fbeeec76cf86913140114cb52e73e5f4494be3cb762ea83fe000ea9284de8ec5455ff9d97a96184eada4be4cd6dc005775e9c60e5171bbb0e06454e45dd58a474b0a9fe7ddb7d1dac6446ffb087afeebc140d7c8955ca8d3bd46813e84c18efb0ae67d90d2aefb7827e3234ddef7eafbd24eac3e150daff39fb3f1d0b7364ccd11127c55a642680ec7b797bc8fe638a154732fbd7f29029564a039c07406aa13cd4eca83e8065ed1c431a70a7740cf106003c9b6e7265a2881b2bc427a812170955f81e7f80488bf6829b3b27f24ea7d06e35e19845a7fb97125b9f759698baad9631893c73ecbf7b101640fa7dc6a884051b26aa664c09663951f6362f786ab502b5245e1f4b5b1ed6a878802ed5b99d46cb282aefc4d7dff431e888d137d554f67ad64e6bc4ea6b5a1970b026192a78f40c106320a372b123f59bf720f63d784433e8b3e83621858430698b4e9be3beeb2cfda71f949a720e1969ec514d289d4d75a9487d3eddb4b994371ef570694c697f728c99dab069b15a5d23d14115b0688207715c7ed8483a49f2d929051be482dc7b52ca312d048a478a415119aed0371b3fd529a8c9fce2dacb7bd60b80d0955f55fe33c10741cc926e5f1ccbf7ffbb257d7fc48977ceaac159f103d39ba826bbdfb5e4e5ab7c6533a09a86e64f62ebc2302d2d8deb2b0dbadc8f0299f40c261375d8b6941b0b1d8e17d7046ac50275f8299aa9c3b4b5fcf292cf5306ef2d969c7a876c71f944258c6ea9064f877ad77b4ddc328e1895ec8b1625fcbfa883759f868d2b8c31b924c165efe20e3962aaacc849a9179f4db18c9f429364dfefc38b011bba9acb3bd16935c93226fba2ada299e60032b8ab86d96c511aa091cd5b8a3d1c33013cedc362cc74f7d1c4bf3bf7171bfe2eb59aa59617caf3e6b8744cd9672e9d178cde8d889fc031cd79dc8e714a46dfd7dd915b79f811f14fc5b2eda3a4959fb6e4ae54f6b31784c5bc2f486e6c70ddfb43757401704dcdbc892cda8f06ce5ac3c362fdc7cccd65c0a4bcdffc0643dc75c216f5e10caefe110b8695e7aa32cd56e4352ea9c22ce9a3c6d8f8ce42064e93b05e258e258be3f570c54f0156ac004c5bcfe1b12a4ae16a004525b50bfadfe8787bef60a450e7be1ff5a0c90383843e253ae18c00bcbea76d3eb50edc0a69daf741df75cbe3b69a823e8dd1572e95b27dd8afa7c2cecafe29e294f7e9105715a991d449e964aefbc4427dd5dd89aae812acdd7f523d88f005883831d898d11d6c86f73412e28e125ac8cb5c6a37cf60efd980419d38b1215f0ca8259d4f54ce9d111ee713ee6c258c55098c1869eb7a49ebaab566596f29ed132896fc21d47d6b9e428c15a887fe02259ebaeb065b9e54f4cfd125518ee36cf1bed1f0634d230c0dbce0a0f5d281b527894b5ec075097a5c5e80226db89ce132a1d5ccd3db8753c70fea15a8286a846c384ecc85c755d58cf083ed3257ebe52bfabc812b35780af6813bb22e2e8d0226f1056af0d07b64edbf8ffb2b4737110bc7e0e631017f5922f5ce1b1346b2b393522ae7829e84e604cfe75cc04e7bad0826b76c00f24a687acb427715c5ba2bb07f1f8f45924069df2e42f2ffb426669bbdbba20007c38e0f37f3955efd31838b27bebf042502d691586d2404f0c784f57583a6134f5ebe91662f9420ad91111297b94147ea100a6e7a44b0460557d839f7937228ac9415d0b517068109f0e738ad65a32f23015b3f010f011d8a4cbd4e2cb5c6e92511290a9ae7ac19384757b9cb26009d7ac9f199865cb0e2c34c5e43a8d3822ea8529ac5c6569223bd8e5fdee6466b5c8ab035b8cdb301aa6de499ccca94cf9a710acb599e70c1bafed118cfab018adbeef8eb08ce5e0917fed339e21307494766a2826acebc2ef93c42bdb6f36213a397f5a477dcb7faf4b71d9bac61a43126265ee31b92f57340c5bf40ec198d537c5d4e0a4a2bf58d587fd60f51658b0a5f3e0acc494fc2a3eaadc41c1754b14f364e3d0e6f9b38a053f66a60388a03b928df1c54a6171440eaaf82f602d6dcb23bc5cd275e3928ee6f2ec773b61a70c9986d93b1deb863b95f31c99a460fd51d1d10bf30f350175"}) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:53:51 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getpid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000004c0)) syz_io_uring_setup(0x0, &(0x7f0000000200)={0x0, 0xdd89, 0x20, 0x2, 0x392}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000140), 0x0) clone3(&(0x7f0000000440)={0x80202800, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000500), {}, &(0x7f0000000180)=""/79, 0x4f, &(0x7f0000004c80)=""/102400, &(0x7f0000000100)}, 0x58) socket$inet6_udplite(0xa, 0x2, 0x88) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:53:51 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x2c, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{}, {}]}]}]}]}, 0x2c}}, 0x0) 03:53:51 executing program 1: r0 = io_uring_setup(0x454c, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x19, 0x0, 0x1) 03:53:51 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000340)=0x1) 03:53:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}}, 0x0) 03:53:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="80000000021100000000000000020202010882848b960c12182400000003000000000000deffffffffffffff00000000000000000000a352f3a5d21711ef931857db521eabd0e8801116caa0a1e4e288f4df081bc5b3943f5c1e6aaedbf354506a075699c08ed96cebc6e4675aabdb9dfb819c61fb0be41bab251717dcc3f24dd7886b3e08210a7417c826c9556c38b7164672b229a00e3163b12ba2"], 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=ANY=[@ANYBLOB="5000000008021134bea07eadda762900000108021100000008021100000000000000000000000000240001000006020202020202010882848b960c1218240301b6"], 0x39) 03:53:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) pipe(&(0x7f00000002c0)) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0) close(r4) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000080)={r6, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000180)={r6, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000080)={r6, 0x1, 0x6, @broadcast}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x40, 0x7, 0x8000, 0x7, {{0x1c, 0x4, 0x3, 0xe, 0x70, 0x65, 0x0, 0x20, 0x29, 0x0, @multicast2, @private=0xa010102, {[@rr={0x7, 0x23, 0xa5, [@local, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @empty, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @end, @ssrr={0x89, 0x13, 0x57, [@remote, @local, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x24, 0x1e, 0x0, 0xb, [0x4, 0x10001, 0x10001, 0x5, 0x7, 0x4, 0x9, 0x7]}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000440)=0x14) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r3, @ANYBLOB="000329bd7000fddbdf2516000000050002000000000005000400010000000c00018008000100", @ANYRES32=r6, @ANYBLOB="05000200010000005c00018014000200766c616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f6d6163767461700000000800030002000000080003000200000008000100", @ANYRES32=r7, @ANYBLOB="5000010893", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="0500040000000000050004000100000005000200010000000500020000000000"], 0xb4}, 0x1, 0x0, 0x0, 0x4850}, 0x4) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000005c0)=@ctrl_frame=@cf_end_cf_ack={{}, {0x9}}, 0x10) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000380)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x6, 0x20}}}, 0x3f) 03:53:51 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x2c, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{}, {}]}]}]}]}, 0x2c}}, 0x0) [ 1537.210439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1537.214405] device syz_tun entered promiscuous mode 03:53:51 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x24, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4f07}]}, 0x24}}, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1) 03:53:51 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x5) [ 1537.298040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1537.329167] device syz_tun left promiscuous mode [ 1537.909946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1538.228964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1542.568591] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 1544.956920] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1544.960240] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1544.962800] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1544.966603] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1544.969411] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1544.971081] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1547.048636] Bluetooth: hci1: command 0x0409 tx timeout [ 1549.096596] Bluetooth: hci1: command 0x041b tx timeout [ 1551.144607] Bluetooth: hci1: command 0x040f tx timeout [ 1553.192574] Bluetooth: hci1: command 0x0419 tx timeout [ 1567.390448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1567.391911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1567.427673] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1567.446429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1567.447625] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1567.450311] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1567.922733] device syz_tun entered promiscuous mode [ 1567.948242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1567.958397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1567.961396] device syz_tun left promiscuous mode [ 1568.276698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1568.281714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:54:22 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x2c, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{}, {}]}]}]}]}, 0x2c}}, 0x0) 03:54:22 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000340)=0x1) 03:54:22 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x3000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000040)=0x2a) 03:54:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x1c}}, 0x80) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\b\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162636465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x54}, @broadcast, @device_a, @random="d0eb4da4b1cb", {0x6, 0xff}}, 0x6, @random=0x800, 0xc020, @void, @val={0x1, 0x8, [{0x12, 0x1}, {0x4}, {0x9}, {0x36, 0x1}, {0x1, 0x1}, {0x7a}, {0x60}, {0x60, 0x1}]}, @void, @void, @void, @val={0x5, 0x28, {0x4, 0x7b, 0xc6, "5c589e02efa71d98ca0dcb7ed8d7699d8bb0afd9e0c8378502746bc545432bceb966d9499e"}}, @val={0x25, 0x3, {0x0, 0x1, 0x81}}, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0x1, 0xffffffffffffffff, 0x2, 0xff, 0x71}}, @val={0x76, 0x6, {0x1, 0x1, 0x5, 0x7ff}}, [{0xdd, 0x48, "765c298ed6ef13053a0591e495f712f8f3962b1c2aa62c3147a3616da01b833983ac5344c227ebfdb5435cd3bd4d0373e6a8993472b7598115148f1a42edb108436f238c9d3878e0"}, {0xdd, 0x32, "c8b8e474d6d98fb8c3ec5ec7a529fa4f283abfd417877600d9f6c14c486131e57c374bf3525aaf74318a9ba4ebc49e6b05e6"}]}, 0xf4) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=ANY=[@ANYBLOB="5000000008021100000189c841b46e2dc082f3fd51060802110000f3f582bc4582556d0f12000802110000000040000000000000000000640001000006020202020202010882848b960c121824"], 0x36) 03:54:22 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, 0x0, 0x400000, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001640)={0x0, 0x0, "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", "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"}) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:54:22 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendto(r0, &(0x7f0000000000)="10", 0xc0, 0x0, 0xfffffffffffffffc, 0x0) 03:54:22 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x6, 0x0, &(0x7f00000001c0)) [ 1568.387379] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=112968 comm=syz-executor.0 [ 1568.398375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1568.413597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1568.429130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:54:22 executing program 1: getgroups(0x2, &(0x7f0000000140)=[0x0, 0xee00]) setresgid(r0, 0x0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = getgid() r3 = getgid() setresgid(r2, r3, 0x0) sendmsg$netlink(r1, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001940)=[{0x0, 0x10}], 0x1, &(0x7f0000001980)=[@cred={{0x1c}}], 0x20}, 0x0) 03:54:22 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x6, 0x0, &(0x7f00000001c0)) 03:54:22 executing program 0: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000001880)={[0xe31a]}, 0x8, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001780)={'veth0_to_bridge\x00'}) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r3, &(0x7f0000000300)=ANY=[], 0x706) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="94031c855deb"}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) r4 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = signalfd(r4, &(0x7f0000000000)={[0x2]}, 0x8) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) openat(r5, &(0x7f0000000140)='./file0\x00', 0x321002, 0x10) 03:54:22 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @assoc_req={@wo_ht={{}, {}, @device_a, @broadcast, @random='PSProS'}, 0x0, 0x0, {}, @val, @void}}]}, 0x40}}, 0x0) [ 1568.748807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1568.756382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1568.762766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:54:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0xffffffffffffff98}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 03:54:23 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, 0x0, 0x400000, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001640)={0x0, 0x0, "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", "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"}) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:54:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x40, &(0x7f0000000080)={@rand_addr, @remote}, 0xc) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000740)={0x0, 0x1, 0xade}) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000000b40)={0x0, 0x5, {0x3, @usage=0x800, r4, 0xeb8, 0x8, 0x6776, 0x4, 0x9, 0x447, @struct={0x0, 0x8}, 0x1f, 0xffffb50b, [0x3, 0x6, 0x3f, 0x4, 0xff, 0x64]}, {0x9, @usage=0x2, 0x0, 0x9, 0x6, 0xfffffffffffffff9, 0x7fffffff, 0x6b7, 0x0, @usage=0x3, 0x10001, 0x8, [0xfffffffffffffffa, 0x1ff, 0x9365, 0x1ff, 0x1, 0x1]}, {0x8, @usage=0x200, 0x0, 0x7, 0xffffffffffff3e13, 0x0, 0x5, 0xa374, 0x0, @usage=0x536, 0x7f, 0x8001, [0x0, 0x6, 0x4, 0x6, 0x5]}, {0xa91d, 0x9, 0x1}}) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private0}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24004000}, 0x801) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20001000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x98, r1, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x67}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x56}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x25}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = clone3(&(0x7f0000000400)={0x4800, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0x24}, &(0x7f0000000340)=""/14, 0xe, &(0x7f0000000380)=""/35, &(0x7f00000003c0)=[0xffffffffffffffff, 0x0], 0x2}, 0x58) pidfd_open(r5, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0xfd3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x8, 0x0, 0x0, 0x8, 0xffffffffffffcc20}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r6, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006700)=[{{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000000480)="57227f38f27874acbb6fa998c4650414e76ae5972682a2a1d7ef34d535040f5f612a8ddea517b33149f955dfa1d2352de094b16e8568132cee6c787087bd76fecdb48f144ca18cf860ce9d634a84e1002146740c9afa4995273efe06867b514b8a8e8addcb5dde03e989de8bd5d19ebe27cda8295a3f9d7a6096566a55bb52fbf2d8fe1373f53ec5d24fcb26657fc296f781834653a8072ae2e8e83bdade91ab5ba19c898f3cb3338d4ccba61e11900926d0ed4c6e7ec554f496600d3790d4f3821ba6f8a9edc5fd31d64aa43ff9e55bca4beb38686f23555b4509bef17e116eac7480d3cdce175999acc748e5004bdd78390208", 0xf4}, {&(0x7f0000000580)="c6381d341bb6623235ee029962ce53814a304cad05533ca8d8720c17c33a56aa512503fe30385e1f045867478e5a65df9236b9b27462b2ad4cfa75fc6ebdab59c924844f7eda98ff67ac797945527f0968da55acf6994c7831cc0c068ca7bb542bbe6bd7d7de240f94151724c16e69a1c0d088329feb1e3e18e3944efb845561cc2c5732042fa47dcbf4f0c7b7d4ab488b1e", 0x92}, {&(0x7f0000000640)="54addf10a36b99c5d90c760ee7bfe674b6be9cdb812aa1134e99195acbf271e872b31317e37d3a1d1e469cf8be8ec832f17113de6dc94169fe3db8092d4f39ca3dede317fc7a2419115a8d97abdb60e4fbd7ec9012f681381eb75ea039a5745728d1940255482e336807663bbc4703964879146a0b935d46688ed383e7bb5aa8e5d0df2c688f8b32b655c52f67d3acb6b12198ee80f213739ce2abcecc4122f99a01e5f16508d20c6c697d0e2a", 0xad}, {&(0x7f0000000f40)="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", 0x1000}, {&(0x7f0000001f40)="58f4c9d953d10d403e0206436be7ff8baa87783b5bb217e8748bd7bb3b6a024a80712c7634e608cd23df0bc07ca950a48a7ba48cc66910d36e2e", 0x3a}], 0x5, &(0x7f0000002040)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r3]}}, @cred={{0x1c}}], 0x70, 0x4000000}}, {{0x0, 0x0, &(0x7f0000003400)=[{&(0x7f00000020c0)="7f5a169017b62929759f0859cb5a4a941d72e2651a4f98973ae16f09df06bf421b8cd1b08ceb6b8439d76fd89940afb7e3f956", 0x33}, {&(0x7f0000002100)="8352fcf159e3bfe4a7438414d284682f95417330ac77f59bfcd727468031d6e52bdeb88335a3140c9155ae1a9e0a793290877d56ee1580fee13be185b351dfdfa760d82ffa498c3cee0fe5dca2095a", 0x4f}, {&(0x7f0000002180)="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", 0x1000}, {&(0x7f0000003180)="f41a7a5ac626e6267c5498a4d579e0f7b469934dd94bc6eec5e088802c47db298631256e455e4bf6d96ab10b65422d25ec52cbd97d75d03357b4890b46dc07f35b421416d25679e1ff351485b7653816af0bc44308ce2902a86099fa0224a7c02926a028ffdc81cc824ac305d55d625646f5571c171bbd56ab722e1455afe0c97d4904465d6d68dead5f23b1ab3d28a20406eb2d7fc923df1d0d11e1df89d7620bafa5b278", 0xa5}, {&(0x7f0000003240)="954ca61ed89626ba4252759c212991bd6e1f35b3d00fe0dcc5cc17838ee91f67ed3e052e4872d85ec2a9ac21049e22f8c2bfaa1aa862810d94091b9b7dd80e6498f5eb27c3445c16171a3323c2b1d79e8ae7bc3645a0a9451c336e3b3e2594179efb066b3aa876ef41a429016ab5462b8458b35ff37b55b7c509d445", 0x7c}, {&(0x7f00000032c0)="c39618f58e519a3d3b25bfa8246aee37afba8f829ce5b19cef114b5c0107e015d99844d04ff43be9f7b0f895b77af931243d38476817a859c4289c3ffabc4e1385aace38766608de247d5b03886d1531e293c8a8ef89b9f971a294bdb6ad861721d73ec412de45a5d8395f60c4b59e5ce6ea200f4b72b91c27a99cc195101ea4a50079315f784fb28e3c6295395e5db37be5e5300c011620166c3a1279151ca3614aaeb28cd5f345c72ae6f17146f1b359d6f9ac4b062243845af36adc0eec1d0b", 0xc1}, {&(0x7f00000033c0)="3b6d2c48a9851eae0ec2d810e37eae2bb4be3f0bd99d2cc0d7dda48c7d29912cd4474db0ef883a01225dd34ea770c2f2ea998f43cf677ae02e", 0x39}], 0x7, &(0x7f0000003600)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r3]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r3, r0, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff]}}], 0x90, 0x40010}}, {{0x0, 0x0, &(0x7f0000005b40)=[{&(0x7f00000036c0)="80a5491597faff474b3184b9a0bae80d1e1217df84ff6c4cf7c9fb6e9d10e87210900b92aa48cbe8602810a25714f60aa3cf4a4b4c91d622456deda35ce22baed086ea5c7b846872d4f179784c8ea71b0b6d5a98dc44df55367c1b94d23a184c", 0x60}, {&(0x7f0000003740)="f68cfda24c27887f9a83bf116a6e3936afe375ac953664096abbe1dad8bf191a3559b0176cb8bfab6470665050fd10fd6b6cc2cb009424ea8b79cb", 0x3b}, {&(0x7f0000003780)="6ae69511fda386e85cb4612ecbd884635b1c1cf4462037eb17d81f9f961623a1fe807ea1b9482fa14ae86229cfdd07cd85ee960415213f714199cd4a3da84889accb7db997696328956204de96dbfef3eaafb516a4079df9376ebf97603dcf", 0x5f}, {&(0x7f0000003800)="677575b71e9e017253d39f387b84863c54618645939d42a8b34ad26c1a357267435231d9e44d5f2fb583cdadf2e0038ffec4d8a72e0050b0f6ae5912a33ad6e90c19d15be4d826ae346cef3bdefcfadcdb10a30746cd817519587a55c589f8d7f0b29cbb47ef9db62a7c6501c6c7a4b1ae754ed6767bfa32a2116981114dae743098b6d7cff3ebb1cd622e7ffedbb5cfac00789322e30ff5d4ccd86199c95856577a78406b2ce8f3ff26481616f8b6f8df1c385ca91ed1b9a6c77a321697568bbe38483bef01d884f7f96abe5fdd7faff055058427910d26dc3a2e29", 0xdc}, {&(0x7f0000003900)="791fa4322162c89351808771eacd4940bb7014bc0b124107d9beb14fd726c5438729487fc2d5232ea8080abf0dc8e47b47ce7c0b3029ecd116e5b95d9c29049f33e98ec688ab1ef796c943146b3b574fbf1463161633359bb3795cc425c4a1cae042156a2977d69f3fe16f1838e09f49dd181079e3bbff3838b0f19f50bb83450f74d610eb5378523b16d3", 0x8b}, {&(0x7f00000039c0)="d7a0d75cf01ee9b310eb0b543b64d81157d2365bf74136379e8c9c8ab7087324e098f9c0c26fd81d3de18e0eaf8ddd5084c6114a3068ea68135c87416274f46c0723f0329b5acd76e7477cc63a3f943c1a33ad85ddbe8483329e6b3d66d9e4a050cd066e34e5de72530a433fd9d4427e78f8b509", 0x74}, {&(0x7f0000003a40)="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", 0x1000}, {&(0x7f0000004a40)="8c6678afb9565a3218654cbfdbda054f1ae027ea9c03765f506265ae847841a632dea05869941869cc5038d8bd3d4f", 0x2f}, {&(0x7f0000004a80)="e3eb34788b59cf6e21396975113c9c840c00cf7c33a4ec4ec8b356259e6b65d6ef2fc4a67042553fb96ab346db6aa8e772246fb946329e20933b4c6636ae8ea4598c96b02c3576835797bed6dc86ea8750cd6a4109cbae6258981a26c22c22eef3f973e216681554d86572a878c75d4610df050a0c6955295ae943ece70bf0485932d28881445e039224b3d3dfbd1ab0c4803dfd7c357ed31f45cd28b4947fbd06601168d87a4177f68f0940c477d0d3fb9e7a5a", 0xb4}, {&(0x7f0000004b40)="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", 0x1000}], 0xa, 0x0, 0x0, 0x4000}}, {{&(0x7f0000005c00)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000005dc0)=[{&(0x7f0000005c80)}, {&(0x7f0000005cc0)="6dd0c8bcfda76fd6b3800a2ca0279a3175e5d861593e8ab659d54787b2e1fecf86f74a58823fb2e7d0300a9df2b3aef23c2315da809b8d708507f1a9a8e7318a21165ecd036bbcc5003c7a78d67bba07c061607f7bd4547be2de9dc8eb7aeebc10c63b32d795fda5a03f58452a2667cc16b68d0a332d4df96a3f60233bdb66f137b9ac5df3d8bd79c2ba36a085caeae05c1eb01bb5ac4d1c7f182f6cfe6c559859e888ca4b0e8dda723af5865754", 0xae}, {&(0x7f0000005d80)="f4a17590f25d4279534e145d44173a99a3d2884a30f65f5ab713f9f5d6f79c4b2da8d57bb57fe0ed275a1d61293315effc", 0x31}], 0x3, &(0x7f0000006440)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c}}], 0x40, 0x801}}, {{0x0, 0x0, &(0x7f0000006640)=[{&(0x7f0000006480)="a870f43fa1d5fc5935aa75ea2939c80aa0e5898f0cd7914e1977b7e90af83b2187e4bcd82e99f2975c7918944e636e43b61bf2f2de70a460e20a7e1bc815be1a9f1c088759154def2c079f1bd38dc2cbcbb751c0bbb6437ee474711c677286c1bb6199e71fcec471601bdd7a403090556f66573338b97b7c0a88a905e207f16db7b3cc6562d9adcc50c8a17a032267a3e461d9e77ecddc0d3c1d23608c0e85e4f30781752d06fc3912", 0xa9}, {&(0x7f0000006540)="fea930dac42017699e63da751f40e094e79481f18018daae73c5aa2404701fd3db7357df83154f010c779fd05a9f9c39f46491b968cbae4db13f38c2c512d764fe341ee08cafb08dd2b2e2778118d2edbdf9db8d7a8c83fde8d1946ebdcbc88cf4afea051572da1b442a4b346d9cb00ca0a4e7287682eb29570ed2e5a59924fa6d1ce6523aa7f8df64766840015eaf608f461db49dea6d8d52e176c479316126a394395938bf18ba976c6bc85355aee74be1590d089387fb32ddad6e6028fd2f9a", 0xc1}], 0x2, &(0x7f0000006680)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, 0xee01}}}], 0x60, 0x880}}], 0x5, 0x20000000) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 1569.235638] device lo entered promiscuous mode [ 1569.252719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1569.261311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:54:23 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @assoc_req={@wo_ht={{}, {}, @device_a, @broadcast, @random='PSProS'}, 0x0, 0x0, {}, @val, @void}}]}, 0x40}}, 0x0) 03:54:23 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x6, 0x0, &(0x7f00000001c0)) [ 1569.346390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1569.408913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:54:23 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x9006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x0, &(0x7f0000000040)}, 0x10) 03:54:23 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000080), 0xa}, 0x1000, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x1) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x642201, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @assoc_req={@wo_ht={{}, {}, @device_a, @broadcast, @random='PSProS'}, 0x0, 0x0, {}, @val, @void}}]}, 0x40}}, 0x0) 03:54:23 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x6, 0x0, &(0x7f00000001c0)) 03:54:23 executing program 0: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000001880)={[0xe31a]}, 0x8, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001780)={'veth0_to_bridge\x00'}) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r3, &(0x7f0000000300)=ANY=[], 0x706) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="94031c855deb"}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) r4 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = signalfd(r4, &(0x7f0000000000)={[0x2]}, 0x8) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) openat(r5, &(0x7f0000000140)='./file0\x00', 0x321002, 0x10) [ 1569.671936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:54:23 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @assoc_req={@wo_ht={{}, {}, @device_a, @broadcast, @random='PSProS'}, 0x0, 0x0, {}, @val, @void}}]}, 0x40}}, 0x0) 03:54:23 executing program 2: timer_create(0x2, 0x0, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{}, {0x77359400}}, 0x0) timer_gettime(0x0, &(0x7f0000000480)) 03:54:23 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000029c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x5423, 0x0) [ 1569.830722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1569.964904] device lo left promiscuous mode [ 1569.993313] device lo entered promiscuous mode 03:54:24 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) 03:54:24 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x20) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) [ 1572.669275] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1572.673658] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1572.675250] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1572.679891] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1572.682704] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1572.684319] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1574.760643] Bluetooth: hci3: command 0x0409 tx timeout [ 1576.808642] Bluetooth: hci3: command 0x041b tx timeout [ 1578.856583] Bluetooth: hci3: command 0x040f tx timeout [ 1580.904633] Bluetooth: hci3: command 0x0419 tx timeout [ 1594.258035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1594.258922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1594.260750] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1594.326801] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1594.328041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1594.330002] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1594.795384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1594.804910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1595.114032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:54:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000100)=@mgmt_frame=@probe_response={@with_ht={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0xff}, @broadcast, @device_b, @random="8028f4030386", {0x7, 0x3}}, @ver_80211n={0x0, 0x40, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1}}, 0x7, @random=0x1, 0x202, @void, @void, @void, @void, @val={0x6, 0x2, 0xfbff}, @void, @val={0x72, 0x6}, @void, [{0xdd, 0x70, "074cf39ef5fbe09d91a6e1e6e7dde9caf892ecb9aa3604e8cda831dd75c7ce0acffda4dff95fa030ab2988b57a159374ee811b6390741de06a316988181d7817cd206eafc27e76da1d4cebbbd0d3611b6cb4477a073673747f85582670face4021f7527c9ef35618366963296677a830"}]}, 0xa6) 03:54:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x3) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000002b80)={0x1b14, r1, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xdc, 0xfa, "1111f87a44a5c29493db12abd9cd09dcce8df5680142f09c6ef10689d445d85e2644bf7e89d053f6cdb7a7bc0000978db87f463066d8bc1cae797c3837edff8724ad5bd3ab53a1c375831ed34df9660df3cf682f9bc0d1ad81bc2bef8c65d82269c3c4e70c05f8961f95273516419423b3486f680fe62e73f7fa62f5a2afc9f8297f17a39b50f58bd5cb65225f3b9bb8c45fd8ecfa4629020fa59c99b2113e31bd3d538c72e752a467ebefce2041d8f711735478dc31d610609f1d17cd0a28d70920fcc506a422120afeee85d3346729c3ddfd6399799a05"}, @NL80211_ATTR_FILS_ERP_RRK={0x79, 0xfc, "254b18681b36645f2c61c903038b23b7e17b4631bc2391eea1dfaf9c46eae0f8f81171aba87936d28c407f681dc337c569d4a1f1a65ee9618d82b44293706814fb6c2272f81d8d7c04422e8ac3c11dc34a0e598a0d3ccbadbdc5abe349ea838eb5dd8424816023e9b5d9225d9a5eb097816ade41f9"}, @NL80211_ATTR_FILS_ERP_RRK={0x67, 0xfc, "b54e707eef862c77f9b9cc464e012d73598431611795cae5f38ff958b1005de61621fa0433639ec540f0a428062d6089e4e18a99aa9085380c5394aff0ce3bae724adcfddc7ad1701c3ad3ba6da332cf487cd4b6c60865143665c7062de635216da42f"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x9}, @NL80211_ATTR_FILS_ERP_REALM={0xff, 0xfa, "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"}, @NL80211_ATTR_FILS_ERP_RRK={0xa6, 0xfc, "bb71d40f1d625ca04f358cffeff4a1f1c1a3babf6665dbd1c6ded40b870d9b622467502e3bec04a4247db26f0a32c28ae404cb62ff93c243f9629e3aa4b60a4045e0b8cdb24ca9a42c7df1cfee1956e155fcc8bc76c286e80a51080f32575c7c327ea8a7ac6c1237bbb15b48f619e3232bc1984fd8e0c2c1db1767036b7e7e6e1d79a99cf11dc5c524d3e902699a42865c759d8c524c1927c3ba9e2b74fa70df130b"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xb, 0xf9, "20f18d69e6c83c"}, @NL80211_ATTR_FILS_ERP_RRK={0x8e, 0xfc, "ef37147919f9e23b001cc148cf461ce13cc6877152b15d7855b0b07945409f6c954132bf45397464cdb0f90311f62bd3bba89f4b17f90d3dc5885c9061675aa5912495b98f7f732c9920cf59ce65b7d27622cd5da91bec43a6eed473d55e5300c85563ed88d4d62c8a6c333ff772b86f80b7ac10b9f958775f00e2229f5826d85f9221e53f53af9640ab"}, @NL80211_ATTR_FILS_ERP_REALM={0x8d, 0xfa, "4a2649d45c115b3a80324ad2baea8df802b876ea0ee9374ad21c39ad80a4ed13c78a034a44721c8931a9f535d3649749c028ace86ee74bd6b05b03eebe8e673d0d7053331edda31c4df41a82f11d6d11dfe361623b3222342641e23f167550c60dc0e2f8996b58b92091f35cf3e6a559f5e88dac68352eb558ccfbb19b7a3e6ac591d98ef3fbf3a403"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "295f80"}, @NL80211_ATTR_FILS_ERP_REALM={0x1004, 0xfa, "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"}, @NL80211_ATTR_FILS_ERP_REALM={0xac, 0xfa, "e1f718d62da4e20fcf87b1709e2cd9f993f34900b6eb301f2d9341a06e9861910c481fc388af5f270ac70f860a92b75f9c5fbd8c056dc965bfacd5348126e9db8b22f54513004ac20a78e7dc8366d209b2195e3fa4d9a2fcbb2dd25531a07508add2b2e19b22676929522180dfb98d8dd1670454c9e4c17d0bc43ab4febda0b70ffac0856c6cabd5d1cd8c0fbf308c2cd43f697ed904d3966c3b87b0c1846d141c39c3ce3c9ba0f6"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x8d2}], @NL80211_ATTR_IE={0x25, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x2}, @rann={0x7e, 0x15, {{0x0, 0x2}, 0x1, 0x6, @device_b, 0x8, 0x0, 0x2}}, @challenge={0x10, 0x1, 0x71}, @ibss={0x6, 0x2, 0x8001}]}, @NL80211_ATTR_IE={0xc, 0x2a, [@cf={0x4, 0x6, {0x7, 0x1f, 0x9d2b, 0x6}}]}, @NL80211_ATTR_IE={0xea, 0x2a, [@supported_rates={0x1, 0x1, [{0x30, 0x1}]}, @prep={0x83, 0x25, @ext={{}, 0x0, 0x1f, @device_b, 0x1, @device_b, 0x8, 0x0, @device_b, 0x2}}, @measure_req={0x26, 0xba, {0x29, 0x5, 0x7, "74049c5ecde4f9e0c6725650d94f26352f697afd491a296fec2ec3b6294a62f1a4c79cca44f4ab9758ab7b79f62dd9b08b407d569546afd2efabf33410090b29ccbe152723e768b95273f6f13f5959b893d9ffbf5d7ed83587af1eda321317ee8a4c4be4eda795a975c644a5a691db183d69d2e00f8063512b15bbf3adb5475418fed0cc306451d03dbeebec48b255993d079f3b86106d6eccf422f5efedfbec802bebf461f371a6311b290c4e7afa94d606b761daa934"}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xb, 0xf9, "c3ac97480ef0ab"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x815}, @NL80211_ATTR_FILS_ERP_USERNAME={0x6, 0xf9, "9ddb"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "64ffd6a0ba"}, @NL80211_ATTR_FILS_ERP_REALM={0x4e, 0xfa, "6ac22a490261a3ef273df87b87efb26685cf45fa932a45d4ff34c981a7cbecb7f459021ce69377a4129dc3d642de014aed530e28fd6d4649d114a00b5c57f8cab8fa5336d4e4e9077c5a"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xf801}], @NL80211_ATTR_IE={0x2e, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0xad, 0x81}}, @ht={0x2d, 0x1a, {0x1000, 0x3, 0x7, 0x0, {0xffffffff, 0x6, 0x0, 0x1f, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x1, 0x9, 0x81}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x4, 0x1}}]}, @NL80211_ATTR_IE={0x11a, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0xb7, 0x2}}, @ssid={0x0, 0x6, @default_ap_ssid}, @ibss={0x6, 0x2, 0x9}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @random_vendor={0xdd, 0xe8, "765fb83bff9d97fee4735d3b396d8091ad4fc151ad48d2cf8b3ce2cfbdb8c6acad9614896cdb9a54dbdfcf6887520bc6f2dbe3c33aa19b56cdaebed2759d2f1dd3cd9df2703ae1927971c3592cd2e6f3a6cb0835411e18efa91a41e2de4de6e33d972fafd8e02a8056d1fdff36ae06171c164ac1da5a6557beff520c29059ad534470b0fe09c3a94960f79e97f005d3e1141669a638b58e6c3a0d7fcd52321d080943639f406dd3289398b80c20af731b3f57023327205d013d210065f252a395d7c3a7221603c9371948e38cda57934cd4dd9a5d38bccd0142fb90ed250768a653924131a662f20"}, @peer_mgmt={0x75, 0x16, {0x1, 0x7, @val=0x8000, @void, @val="5b05216d3e43bb54fcd9b982c5bd39e7"}}]}, @NL80211_ATTR_IE={0x102, 0x2a, [@challenge={0x10, 0x1, 0xf2}, @cf={0x4, 0x6, {0x35, 0xae, 0x67, 0x5}}, @measure_req={0x26, 0xf1, {0x0, 0x6, 0x3f, "9d012ef373870af0b05ce0dce433eea22e3389e2cd0801b0c90eca552fe986dc72782bb83dccf93180ab17384b2aff1b1d427dbb2eb40d971c3867a2ab5361352673e11f055bab1b3df3325f4f09cc2053e546468e9c5c1a19cee163fc0c3fe7b20036f1cbb0d38e5fa7e778146b9d280c42159bae5d7438b0e1deecf0929ba3eb3f48d6802e13f58cace91bb64bf2cbc7c20f031004e984c22193f785c460d90d8a5beeae8238bb3ce55d826846c8848e5ee16c858f5394a4f0e906ba6b8b5720a7ceb12f5b9d6883cbbbe369d5566e01a87ded69f44b1180acfd87494786c9bdd5a42e23e64cebebbddeea6844"}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x11, 0xf9, "640a7c50b36d855f8d253460ef"}, @NL80211_ATTR_FILS_ERP_RRK={0xaa, 0xfc, "d621a7b09da74be4778eacaf87a888ae40533a206c5b23c0e0d8a41fb64a8399990738fea73ea31e26c2ccc638d4ccd587f607b3b15126e334599ef2eeae32730516617ec8fe654447aebcf8cce6fdcf6da323a8359f06468b124ec3de7b330977fca4deeb8dce963dcd217b88b3b8dffeb87513a14b2f245e2ce56f38ce9e089fdd3ffdbca13ec1738fe1900faf2f2142f8949fcaf32905d4516aab6775dda9e534cf829983"}, @NL80211_ATTR_FILS_ERP_RRK={0xeb, 0xfc, "763f996e6f960de909d37cc011d6dca8c1c6997404bb16c0cab18159054beca17dfda4163d4f71a2a2fbe73575cac60ec8d7de51c12c40581ad63f473add523600b21a0b7121be1dc4ea7fb65b4fb461c217d4b9c436195ac927b7d179494b2c209ad979612b1e806a1f6c081e5f939605b0526e271e5a6e625d2a7efcc27a5497752cee655b9dde7afd3f79bb7f56ac6b1f93b393cf2ca5b4b23629d0073bf1d4c72b44c0281c366d66ff9437bb36c6e87c42ddac52d7114b64d28f29591a5074a789fe5ea6e62abb5d05fa4e7b991aad095fcf1849e3752ebe8eacdf8de0f207550606aa4b30"}]]}, 0x1b14}, 0x1, 0x0, 0x0, 0x4004}, 0x4804) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x3) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB='@$\x00\x00', @ANYRES16=r8, @ANYBLOB="000825bd7000fcdbdf254b00000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x2440}, 0x1, 0x0, 0x0, 0x4}, 0x40000) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 03:54:49 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0x1829]}, 0x0, 0x8) sendmmsg(r0, &(0x7f0000006700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) rt_sigtimedwait(&(0x7f0000000100)={[0x59bd]}, 0x0, 0x0, 0x8) 03:54:49 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') write$binfmt_misc(r0, 0x0, 0x2b) 03:54:49 executing program 7: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000180)={@multicast2, @private=0xac141400}, 0xc) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000400)) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x44040) 03:54:49 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, 0x0, 0x400000, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001640)={0x0, 0x0, "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", "12151833e71fad9b0fc9dc715b5dbbbb293e0e368f4f4a4cfd51520ec7567e5a3cc283a0f7bf3d466b6d631ee7ed55f4b460fdfca467f6a9fed074930c71c974f90c9729522f070e5aaa99cb6e7737d1af7758d4fa84b53c486d178102fc4814d85f2bfc817538e8ddab5b98a1113b2a1fefbc61450693e4719a656eb56083ac8351111057162f535a9c64034f5db1c22cf6db8a70c4d974d54f092c4bf62d0d25b13a757bf690f41ca29e1c8a44f26b077d7e433a80437b69de18b0ab29bddad7a995052754ec8da92cf3c3a26e3272edfdf3ff44a8bcbf996e7332da52f5cd42f6e47a09b9c1a58cd2c453ed56e4841fe8a8d24de62d200cfbf5387f4582e6501936f1d17dcd9ec74be8baca69e14effd6ba6dafa5af8409643c35ec7c65956b03852106e0be8b83c1ff0a9975bcdac3a2f9ff7cbb65c057ca20d6a51fb7745f555905e0bb94827a5603cc79412e2a4f35173bc4c80861c561e6a47289e915a030895c8c9e825a6e2b50c10b0fdfe506fbb124c54091e75ca1366fe5f6c3a120d3cbb77ba6fd9638cdb104a0f126df1209819968e6b8574bb07f755c69580ab92c01a95a034ef3ee8ccdc9f308f16985994ae31f3aa84d9f7584dbad12c64fb973aa60f6cd675aba39eb1ef05b99bf789e52214d2b6e2c0c933798373b08697ae3a602d53a9cdcb92a43b3d1ac81da6a53cf47b17dc5d6fe15bb0c54d6941a392b5e445b0379700d14608f5baa65b08c15d13035f1f214085ec9841b7a975e21f284924940c4c8049ed98f73de3ba65d74b02e441eb17e0735735d22dd16558b3af61186d8ba1d273aff2ce6da48c8cd0b8431b558c05eaa0483aea25d3741406868ff5b7263172aa1d342012d441253af6618abd6eb7fabc139171889691ba78a9ca8e30287fc55c0c01e5c3aeb78021ed0701e7250fb66ac60be756a661feca933d3c870f51302e47ceeec943b08821200fc2d10409761050ed0c63b1dcac9b196cc59582286f9fb0d26ede93de63e76d4f0678ab2d9f51fa8a07f74071c1189aeaa387d7fc8c9719686f6e8fe345f556d16c7afaf722bc3568eaafeb9a78ba4c84a3e4272e2789c32455046429c98b76e98c49f7ee34f26c50cb819853c5a221af985227e9b40fb216bf34dec845c14f2c93a05005d3777d1b4e168ab7d9c41efb9e706c33e50cc8860b40662363e330c44f7b3f8c6191d737f7169c198e204fd55ae82f787a993be4d1784ab3717fbd617a40bf66c7c66d7bfbe66c3af15d9d06df96a626e41abcbd28dd4642dbea189196349c3dec77597663e14af4acd5b23b02bb3f5cb526978daffa494b65504e5f79cd0d1bb75e988ee77d6a9db380b6f8d9aaf6aaec2b1c719dfa52124c67bd55b0cea3f7f28306af31db18a5dba092d50976420eaa6a6234992a554192692231690f0d4ca7848e6f3f04ff3b86161fec71a16a29dfef98c49979c683f40d687e785e78f1157fd78e0581795fc0f421865662bfa381d3a45b66751d8fddbac446725f34f8b2e789458a7fbb667670317c803d6e1ba887b2ba260634315d06b89a137adddc2540bd8dc3749209b619d776848712406db79accf2ad61a4daeb3343347a097ffe67318dac8afe3cc2a9c8d1f5868d4fb0b55f64a9efa0d2123c608158caae86aa4b409edb0a42aef67b5b310f11e67eb19c7a17e4086dc7d56518dd809eb11a0cfd5181b3737e6d51ebd03406900e8fb5c482b8a1cbbe8fd8a9f241a64852e166ffbc9dfa248c1c9ae6323b95e93e79440e84ec72d08298c7b8a794cc3e75f8796076499b3f8c540c35966ec868604d7aef536d3872b5775ca625d2bd85aad04a30cc95285b56732f0d7a2e13fa86d890c642465c995fdd372e4337fef1804ef58c5dbc42b6f6ee98789577ce4a4bc18fcc4ff8b41a53016bcd41adf77b2480c7dde09d5a11a0acfba99b6c7e3a98f555e8651292379e5b853d0353b08c754732da18665e8af137470c8adba55c53cd7fb07df0b27b5343fe11c65c72458c60c72dc0ad7b34977a962137ff01c50e939362c15bef413da682374faaac3eae580088d4713e7011fbf8153a73b5b0073ba348e2330a0e36efed0f4d5a74c606d65623408eaf1df6bfed75b0d1d84c6f470c23bce56b307767f6b387c87022272ae09d74e8cdbdd52f7e89e3aa5ffb8b2b1f00fe1643e48af1a44a85003bd584179c036e3aea931068f8039eff8db42096fb66a26a8f8a7d92dadc632aecb7f2795b97758411753f2b8dd9f35cae41002ab967b0e6d6a7f88947caba0e86db96e3561e3b8efda345d9177bb9c34f51a5046050a28a0720a594ba542813bae73bbe653d666a941b876f4fb6b369b67020071ae7258edb7c1acee21b530d2ada5506a508f608606de1c9b42f8e5699e05134e879e7e6a3bf65f4815ecb4b69df9123d450e094c0714ae3c069bdc431be8f1c0fab55d71ea014fcd73b687eedcf2005a2e4c69ebdf83b0999b5e142e10215b78ba587ea7e4fe008fc4df7099c86d319824cb287efaddf6dd351e486da5690d8c76ab568f13b85aa9487577449110598287082a199c241dcdd848e9b903a6539ec2ecc1ff69922e912fa454537e0a59796a7f49c8f1b9718890d17f9142b213687e083f854a41e06e4257ecf8b1439798b2fb15c16630c04bede397276e71911d2a97b73f1a32aa28f3d5e7748fa21ef353ce5dae56d93d4a224723c1e31bfcc84b773c2f3f3f8ce8d82eeb26b36cf158368937835c25aa3478783115776abd4d2f4f1ba12c37f4d8705dd85c1ce612912d9074208545c519e2cbb397602c4e70c496382dc6eccd020c3bd7e40a705b1e62801a4520fd76c0962070ddb319cafb620d5890a013c391b500263887d62dce54c53032f05ca863a243cf8ce9b1a667c53a8a1c91d5461a512fc90c588ae91619bdbe3d913377dcfdefb1d24405ca8d11aa38cbfd0a23eec2aeef361a700bb5d2cad6b2dfd59005ec3cc2d91a727a1bb438d6fccf6739dcc00c5981b3b4611d3fcd941b639c38c80c7dfdebb163f588a7945f5309154b05f43de6557fafea51540d45607021c22b62e3cec2b79912d55d797755552f06eb1055f6ef400bb1b53fa3b8548332f769880ef8cf36b51788d345f7a103e5b927df19609fcfe69f1e30e73ff5d68ac86c930d91cd776c2d189b5631e62adf916a5c6307610a1b13a2472a4079e53ce1c96e43d73ee70ae10a90ba6ed106cdec9775c7f31e8204831b8bc2945f6ebdaf068a9b6ac43e9a25b46cd3306b2850a5bd4f56fa6d85fbeeec76cf86913140114cb52e73e5f4494be3cb762ea83fe000ea9284de8ec5455ff9d97a96184eada4be4cd6dc005775e9c60e5171bbb0e06454e45dd58a474b0a9fe7ddb7d1dac6446ffb087afeebc140d7c8955ca8d3bd46813e84c18efb0ae67d90d2aefb7827e3234ddef7eafbd24eac3e150daff39fb3f1d0b7364ccd11127c55a642680ec7b797bc8fe638a154732fbd7f29029564a039c07406aa13cd4eca83e8065ed1c431a70a7740cf106003c9b6e7265a2881b2bc427a812170955f81e7f80488bf6829b3b27f24ea7d06e35e19845a7fb97125b9f759698baad9631893c73ecbf7b101640fa7dc6a884051b26aa664c09663951f6362f786ab502b5245e1f4b5b1ed6a878802ed5b99d46cb282aefc4d7dff431e888d137d554f67ad64e6bc4ea6b5a1970b026192a78f40c106320a372b123f59bf720f63d784433e8b3e83621858430698b4e9be3beeb2cfda71f949a720e1969ec514d289d4d75a9487d3eddb4b994371ef570694c697f728c99dab069b15a5d23d14115b0688207715c7ed8483a49f2d929051be482dc7b52ca312d048a478a415119aed0371b3fd529a8c9fce2dacb7bd60b80d0955f55fe33c10741cc926e5f1ccbf7ffbb257d7fc48977ceaac159f103d39ba826bbdfb5e4e5ab7c6533a09a86e64f62ebc2302d2d8deb2b0dbadc8f0299f40c261375d8b6941b0b1d8e17d7046ac50275f8299aa9c3b4b5fcf292cf5306ef2d969c7a876c71f944258c6ea9064f877ad77b4ddc328e1895ec8b1625fcbfa883759f868d2b8c31b924c165efe20e3962aaacc849a9179f4db18c9f429364dfefc38b011bba9acb3bd16935c93226fba2ada299e60032b8ab86d96c511aa091cd5b8a3d1c33013cedc362cc74f7d1c4bf3bf7171bfe2eb59aa59617caf3e6b8744cd9672e9d178cde8d889fc031cd79dc8e714a46dfd7dd915b79f811f14fc5b2eda3a4959fb6e4ae54f6b31784c5bc2f486e6c70ddfb43757401704dcdbc892cda8f06ce5ac3c362fdc7cccd65c0a4bcdffc0643dc75c216f5e10caefe110b8695e7aa32cd56e4352ea9c22ce9a3c6d8f8ce42064e93b05e258e258be3f570c54f0156ac004c5bcfe1b12a4ae16a004525b50bfadfe8787bef60a450e7be1ff5a0c90383843e253ae18c00bcbea76d3eb50edc0a69daf741df75cbe3b69a823e8dd1572e95b27dd8afa7c2cecafe29e294f7e9105715a991d449e964aefbc4427dd5dd89aae812acdd7f523d88f005883831d898d11d6c86f73412e28e125ac8cb5c6a37cf60efd980419d38b1215f0ca8259d4f54ce9d111ee713ee6c258c55098c1869eb7a49ebaab566596f29ed132896fc21d47d6b9e428c15a887fe02259ebaeb065b9e54f4cfd125518ee36cf1bed1f0634d230c0dbce0a0f5d281b527894b5ec075097a5c5e80226db89ce132a1d5ccd3db8753c70fea15a8286a846c384ecc85c755d58cf083ed3257ebe52bfabc812b35780af6813bb22e2e8d0226f1056af0d07b64edbf8ffb2b4737110bc7e0e631017f5922f5ce1b1346b2b393522ae7829e84e604cfe75cc04e7bad0826b76c00f24a687acb427715c5ba2bb07f1f8f45924069df2e42f2ffb426669bbdbba20007c38e0f37f3955efd31838b27bebf042502d691586d2404f0c784f57583a6134f5ebe91662f9420ad91111297b94147ea100a6e7a44b0460557d839f7937228ac9415d0b517068109f0e738ad65a32f23015b3f010f011d8a4cbd4e2cb5c6e92511290a9ae7ac19384757b9cb26009d7ac9f199865cb0e2c34c5e43a8d3822ea8529ac5c6569223bd8e5fdee6466b5c8ab035b8cdb301aa6de499ccca94cf9a710acb599e70c1bafed118cfab018adbeef8eb08ce5e0917fed339e21307494766a2826acebc2ef93c42bdb6f36213a397f5a477dcb7faf4b71d9bac61a43126265ee31b92f57340c5bf40ec198d537c5d4e0a4a2bf58d587fd60f51658b0a5f3e0acc494fc2a3eaadc41c1754b14f364e3d0e6f9b38a053f66a60388a03b928df1c54a6171440eaaf82f602d6dcb23bc5cd275e3928ee6f2ec773b61a70c9986d93b1deb863b95f31c99a460fd51d1d10bf30f350175"}) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:54:49 executing program 0: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000001880)={[0xe31a]}, 0x8, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001780)={'veth0_to_bridge\x00'}) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r3, &(0x7f0000000300)=ANY=[], 0x706) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="94031c855deb"}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) r4 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = signalfd(r4, &(0x7f0000000000)={[0x2]}, 0x8) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) openat(r5, &(0x7f0000000140)='./file0\x00', 0x321002, 0x10) 03:54:49 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), &(0x7f0000000500)=@v3={0x3000000, [{0x7, 0x5}, {0x5}]}, 0x18, 0x1) getgroups(0x1, &(0x7f0000001b00)=[0xffffffffffffffff]) accept4$packet(0xffffffffffffffff, &(0x7f0000001b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001b80)=0x14, 0x800) socket$netlink(0x10, 0x3, 0x15) syz_open_dev$vcsa(&(0x7f0000001c80), 0x0, 0x400) socket$inet_icmp(0x2, 0x2, 0x1) syz_open_dev$loop(&(0x7f0000001cc0), 0x1, 0x400001) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) getpid() perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x30}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_read_part_table(0x2, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000000)="c9fa09343bb8fd97cd3b2abd40e23eb8b76915848124e29981a1bd8d3fe8b681f3fabb634fac1024abc0f1643d89e733fb348d73aa8350e91c48490251bf7f812e8f5d11", 0x44, 0x100000000}, {0x0, 0xffffffffffffffe4}]) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) [ 1595.228914] device lo left promiscuous mode [ 1595.238346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1595.254189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1595.278089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1595.287040] device lo entered promiscuous mode [ 1595.404151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1595.421207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1595.606773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1595.615251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1595.631280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1595.747252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:54:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = open$dir(&(0x7f0000000200)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000240)=""/120, 0x78) 03:54:49 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0x1829]}, 0x0, 0x8) sendmmsg(r0, &(0x7f0000006700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) rt_sigtimedwait(&(0x7f0000000100)={[0x59bd]}, 0x0, 0x0, 0x8) 03:54:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') getdents64(r0, &(0x7f0000000000)=""/68, 0x44) 03:54:49 executing program 7: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000180)={@multicast2, @private=0xac141400}, 0xc) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000400)) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x44040) 03:54:49 executing program 0: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000001880)={[0xe31a]}, 0x8, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001780)={'veth0_to_bridge\x00'}) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r3, &(0x7f0000000300)=ANY=[], 0x706) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="94031c855deb"}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) r4 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = signalfd(r4, &(0x7f0000000000)={[0x2]}, 0x8) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) openat(r5, &(0x7f0000000140)='./file0\x00', 0x321002, 0x10) 03:54:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="08002bbd7000fbdbdf256b0000000a00060008021100000000000a00060008021100000000000a000600ffffffffffff00000a001a0008021100000100000a001a00ffffffffffff0000de1e29c68c97fe79e84c08d0d6563337dc1e94ef71b1fd5d3ea317c1610a8d112774ef629637cf5a6299dd6299d86b925abce6e0472af9e8be5dc485342f9ee345bee2c15c399e261df320382ff7fc3766943750bc3e439963dee80bfd859e2a03a2789b388f3bbadb7d4ad16098c01ea457f0ac27724793"], 0x50}, 0x1, 0x0, 0x0, 0x4000010}, 0x1) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x3) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000380)=@data_frame={@qos_no_ht={{@type01={{0x0, 0x2, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @from_mac, @device_a, {0x1, 0x40}}, {0x0, 0x1, 0x2, 0x0, 0x2}}, {@type00={{0x0, 0x2, 0xd, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x8}, @broadcast, @broadcast, @initial, {0xd}}, {0x4, 0x1, 0x3, 0x1, 0xf}}}, @a_msdu=[{@device_b, @device_b, 0x0, "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"}]}, 0x36) 03:54:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000000), 0x4, 0x8200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0xff, 0x0, 0x8000]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4006}, 0x8041) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 03:54:49 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000004280)={0x0, 0x0, "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", "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"}) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeb71, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) fcntl$setstatus(r0, 0x4, 0x2800) [ 1595.865618] device lo left promiscuous mode [ 1595.886121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:54:49 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r0, 0xe0, 0x29, 0x0, 0x0) [ 1595.904204] device lo entered promiscuous mode [ 1595.928326] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:54:49 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0x1829]}, 0x0, 0x8) sendmmsg(r0, &(0x7f0000006700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) rt_sigtimedwait(&(0x7f0000000100)={[0x59bd]}, 0x0, 0x0, 0x8) [ 1595.976925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1595.991100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:54:50 executing program 7: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000180)={@multicast2, @private=0xac141400}, 0xc) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000400)) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x44040) 03:54:50 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0x1829]}, 0x0, 0x8) sendmmsg(r0, &(0x7f0000006700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) rt_sigtimedwait(&(0x7f0000000100)={[0x59bd]}, 0x0, 0x0, 0x8) 03:54:50 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) getsockopt$sock_int(r0, 0x1, 0x2a, 0x0, &(0x7f0000000040)) 03:54:50 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x4, 0x6}) ioctl$CDROMREADAUDIO(r0, 0x530e, &(0x7f0000000180)={@msf={0x6, 0x8, 0x9}, 0x1, 0x36, &(0x7f0000000140)=""/54}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) add_key$keyring(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) io_setup(0xd29, &(0x7f0000000780)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r3, 0x0) io_setup(0x400, &(0x7f0000000040)=0x0) io_pgetevents(r4, 0xfffffffffffffffd, 0x0, 0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0), 0x8}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000300)=[{0x20, 0x0, 0x0, 0x3}, {0x6}]}, 0x10) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1bc) io_submit(r4, 0x1, &(0x7f00000001c0)=[0x0]) sendfile(r1, r1, 0x0, 0x5f1) dup2(r1, 0xffffffffffffffff) 03:54:50 executing program 0: io_setup(0xd29, &(0x7f0000000780)=0x0) mq_open(0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x8001, 0x8}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) io_submit(r0, 0x0, &(0x7f0000000040)) r2 = socket$unix(0x1, 0x5, 0x0) io_setup(0x4e, &(0x7f0000000000)=0x0) io_submit(r3, 0x1, &(0x7f0000001740)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ppoll(&(0x7f0000000280)=[{0xffffffffffffffff, 0x2788}, {}, {r2, 0x200}], 0x3, &(0x7f00000002c0)={0x0, 0x3938700}, &(0x7f0000000300)={[0x53]}, 0x8) [ 1596.244059] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:54:50 executing program 7: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000180)={@multicast2, @private=0xac141400}, 0xc) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000400)) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x44040) [ 1596.318809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:54:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x52) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 03:54:50 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @rand_addr=0x64010100}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) 03:54:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r1, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c890}, 0x20000000) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 03:54:50 executing program 3: perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="02b2dccad213e1e6cf54b7a797f8f22a47f25b7658fb110b2e76f95b0f318b8fa745e6ffba4414d29a42bfab524bc5bffb17decc4540a6f00b9772f5f9789a9525790df8d989b23530d0a1398f2ad734c7ff4796", 0x54}], 0x1) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000680)={0x0, 0x20, 0x1, 0x20, 0x2c, "409334394a845720775f6c26427eda19eac4ad", 0x0, 0x15a}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0xc) 03:54:50 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/slab', 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000100)='system_u:object_r:dhcp_state_t:s0\x00', 0x22, 0x2) 03:54:50 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000004280)={0x0, 0x0, "b03a0a89d4875ccf15016bb94a793223af2896d9e99868e90b1cdea9443d257bfc73241298fbc891d4ce70d26e70438fc92ae91351195b1fda70a2061ebedd83708f97007d4afda6d1439d9400421716e0bc9d9259eac610075c7b5169a4af48d4b8c5aa5e352938679e2391914c3d6be1b22d0decce5db1773a09b8b88c538d6ba4ba25f93367fdb9e1810552599a5520a5bcca9bfbb3e50547a60472ff6c827c016e459b598daa6697ef08446dd33d6b1e3cb50dfd4b2357fcefa8eba4abc2062e8d894ffdc3850b3a5cfb30e1570ccf69196c5ecc225065a3728d03bdc0a516a57680f48d334e981b3c7ed76b3b822486e7ab619964fe22fa4de52e33eae5", "66e27c686346d463a5c12d237acff4192845608625de3e00c853ba6db99bdca8ce66b5d2986a3601702f62b704cdf1e3e8815d60724498fe310408bbef0fa4ee3ab93e2eee10adaf7fe25c3cd174494fbb8a8475418e3fd56d207055d4494ed2a34025e9ca172f7ae5388fa786c085f18ce46a27afa2957e87d3e2b1f1a9686e690a558e6d89141d831349af2a8102e281678f33db2f14ff8aea9281aa22c5bfc275faab2882f156fd38cc76835e391932300a5685e3c0ba9187f12117683de169cb3105f334435db81135dd318868c59a2fb19cd813914557f472377ad23a9b4dff26a50cde18a3a6d50b6abb2aec25324123cc37fac8238d63cd0c78d67c9eff7c8a1523b44f3cd514bffa001e05d3180fa830c0f090c6c7cebd2ffaa9546c5be56c3861313c7614c3298fca09c4a8e931e04b6ef44c5000923637dea858cabb882cd5df1252ba30a4b6e02f151375e481b0456ff7c7f97e846951ec0c7fd223df82548aeaf9d920e7539304fde028bb3ba90ef4e6f5d9be225e0ba4fae5988a87adfcfc7e1368edf8170955966e7cbf83657568dd2b1a3c42f0cc20b9190260cc6536051ecca8ffcc02a86267bf5718ad3c0ab285fd41bfa1e7154b3c24e377685a43be2406514cddc45d02ca954ace3729e27c2d3efc154465c248d6438ebecd96af55b9959797b08fc7571f8e053648b30baa53851d16a5418de7bc9831c08bcecd33cfead167fb360b77961331abfcc8ae6c20a4f7277ac081012eac8e2318d32d3bfb4c8bf6a844d467d52d02bf7807bd9704a3ca7ad184cea56f7f459c76652fe48930ca276bceb95b648f042b54ec2af8da5f38e8648e9ca2aacf7a5760e9148b445b6dbbaca8e420e026a7188466a832c8ebc22dda550c2fe1a6ae8f700d41792be7660821d962d995ddcd19e7e72040947c446df6b40618f985a935feb15485168caafc997ec2416908d48de441a6c444f33ac96f22d7f2b13963983e960622e2ffe27a4f496ed5d02eb0c8e28f09e554a38e252e8eb5066b38ff5524c5966c904bc20f5ff48f444ab9c4f54e0171de6ab92082293139ea1cde517b30f4dc8d9ba98256e31cc5ec20d6ca62cbe254b0f3897b58581c4e73b5777cfddd02bbe3b07d5d085d57f20a69f446bdd4b4ab41cd40a38069e0bea6a2717b02e51d139cb0a84a9f863b3ff89195b186bf439c2aacacbe2ef5784690d7028f80b66a10df4716354da85e8fbba87ee78aff91a9041b0a233b79dba28d754d818c84bdc8d96f3fff86566a1f15f4898fe070bc7b35c57ce8f93f58b80a3160985646bdc732934fade924d6e31c2c6e6a2ae643214c4c100b2f66ea6acec03b2cb40f39cb91be1e13211c0327d4d2daf59e414d8bed18bbbe05d85aee69ba68b83875df8b87f8bc90863c38e34c74e8f882bb992e7397ab8704002c14485d4d19915b840690ab13b9ed84d294a0aa74f7feb73ba7618bdd69243ef8670110044e32bd0ea079b745d6591cb61f18090045b426c07ee922ad93a16e209fc94ef8b21454830a65d764d8530f3137dd35a8a7c3b6f1c86721cebeefe01322fc91c3553d558d766b147d14ba6400f0dca309ae8c4865d730c33f3eaf0e2a60be6736a1ff5d2dcca550a700cc7f4d4378bb780dfa934254cd7d39b9d00a250f8f9539260645a0a0056690a454c7f9b31c9a358bed4271b5a192cc371178c0798eeba7c6cb14face65a8bacbb7d74b0b4bf56853b01bb86c937c814bee762933087a816966ac82c6b7d57ec3dfdf3a33834688829f20952020043d29863a4251ddd21e1ef6340f1e450042a82082c36e7e5032dafdd201494b84e5dd290f5bc545d90d0c3695bd5d89616e58b86dadce382fc1cc30c2c7f3f41c456a05e8d2bc8b500855697abd2c0e34e4bdf296fd65ea8213ee0115c661741ef7e60185491b54bc8623d8b8927f6411a324a20ca50043d35c26211faa3e6af590d56cd7b274a55420078b8e034888aee0489b070035c9b3aef475b4086e9ae5f4286aac3df3e5e9367af217a7de0575c7d9400c4a1ea12447c0e549e2ca4db225be99cc0e898b1f29b642575350fdb7c719e070077b210cd231c55cbeffea70cbf5449279d8809977f4d86de391dcd27b08a258963e27910a62da2228b88c33be770337974565e4dfdec85de7c8b46fb1264e5d1e5e7e4c3c490439555c6b550b710e0bed922fb97de7ea379d9308699707f92c3630981fcfac4d8321ab76441f7330135c1689a1e8f941104e4fecb1adcba63dcc1f3173488b1003a930c3b9bce9bd1eab45c3379ba449851c560c88d8e46bd419eac6c8b485db145ff40a417ac8639a74a71147218ee32fc023f5afcce9f223f6ca7da699d52e4b0cec6b354182b6bca7c983c265c348f8be6e45febd48389be41b288d91fa30e3e00fffd334b7b9542e47af657a841673c04ddecbc6df239abcea2d94cdb6fea72f84d43cf677270bd0c6e358add28ff32963509271987591d5f294f8a671881bc2b00f158c4c13c76825d361b810a77ac32d1f1dd7123ffcebb3df9b70cc213912885a80a7c29e0ed6ac492512075dff08bb042521c2495a163987970d2d02a2a4310f8ab5867d23603eab1a893558d04a0080f408ff536b47df5c12238819d7306e532ada3406e98fa9f14f913ec02022ee310662dd6c818d2996f51299764bcf67daf26501f4c79a5fc4d3d5ea1b9972e856789933361069acd6d2145251ab22b4403b1ad1d1c5df811b86fc0350eb771b214ff23419b321914b97b067d90e5a338c3de5bfcd81b638d8afb06ab2c3634420a3f8d6c45f54721b0b8b9ba4c0b12b436ee14cb6d50e623e4d9c594402f0b732b584917e28409a79924c23879762c34944badb44b385bbdcca73998830f9c826d7efcd585ee509491a219e5a8a4510df44db71df4d8576d30951b224748a0f4021998832a68af8b91c57d8631cfff32bd01b6555c33396d2fe8ce69be63480048b9257de136187d0b57c64578089d70b3e6c0b36eab0acc43bf0ebe5019fe4de0551299224480df52e989678157c8e443c7870e85913bce314ddfcd014ded8d172f95f2e2af7327e9380236e3c44e82c76ecca479227f34dbecc55629ffa0f65ee07c10f9de410f563120d07f91c3bd5dd39b053c5f9e4c8e63bf9edf56567bb64225093e76b7d018c348c7e11b86d859b6c5c71380665b93c9a6fca64e4a7da0f589355aca08c09d823caa551ee5cec74383a4d26f2c45cdf55941b4506a7c1068cf27628ceae486dc4a47d6940f99c5a8fa82187a6946fc39f37111ad723dca523ff0b9c38b30ba0bf505a53f85f4c3699c193036d6e5066efe6cb8c7f4f859c6890f72bb5c78f796f15015e97449691d7a61e473935e889c524df1bada8f4e351ac07229e904834081225f78af96585c7f03869d191330835f69581d181b365ffc1cbfe939a53f142e09f7546ee6286f877828e69a24c08c8d8f3b915c4dd34753f358e7283057047e52d930d4e3a40230daa9e47d66086a2d22d29e84d4237bba531e0ee90dadb80b245bc5c4059216616172e462f51d6775025f0f90ee51fcfa26ddbe4dd38cd8feb1bed1925e2f5e02958352ebb1305dc73b51d6c10acdea852ee6eb73e5b0c462fa3767992e5a6c65a742d60a75df9d77767e0ad609c9431530875f9c1a0fb5f43f8c3451a927cd8dad51aff7600a7fa04524b0a2b14d0c818ead49de6019d8a767e2d50c9934077ad437de691910213f846fb27bd1b855e3004035183500a271fae242c8dedd05530f98d9871999ae72c86b007ca1bfe0dfa96c2618aae8be099139574fc51cfcb5584fe956598e0d8ddc6d4f54b79f5ddd78be4153a58c96c20587c9021024940ac29e63b36bff65c2ce7cd78ec538b69b531f2ac3d04f91d1be8aab72c8abaa8a3e5449cd2a4b7d850c623952db3538094410f60c5c2d1f9e68c69d92684d1ea163494ce329c0423f18b15fd7e14e9b6f0c73d46231f2512e36dd15941eee58ffb17e75380259706332409dd35f707f75a42e0aa623492855688204e33fc09f1a28b0fdbb3fd3a6b29a8dd6a202aea102e8675a6084f23719f5641a7f69f4d0b163edc98f9c55731a5bc84d512cf2033eed5122b2fff56a6906186f4c318aa2e7fb7aa98c046ef42383a8647083211cf61cd3140a41259eb417f7f0f5301b4c0a1fe0331b2f19d71ac2692e4fa99ba5fc2803bc524df07f5da3c5d188bdc519bfb1ec419fec31ded4b3b0625840553f548cec8762a090000822371c7dd721b7ba21e0284df453af0b29cb92b6b928a7c73a291dff0c4e69777c50d11f7b4acca0322abb2adce8ba9ed9fa12db65bfa1120a5a618d4a3e3ea5185996337bf37f7618e0e13a6aac2f8400c551f9b79a98ac0dc06782d5ba5494bf0814a37565d1e0f88890ffb38abe2aa47822f3452cbab5e7e70ed13818c268616c1024d150a146963b531ba0e2b9727bdc25253d5489ff985f51bf4060c86d51c3517bbb9957ba81b36b98928d7ce0e710ee7915849fd36f5b16b38bba6333afc80a0da850aeba47bcca8414c0d5e3d8d89ab2424caccab759bea324f7b14f0d9765b773b1167a34067cc5727f3003bd5631b34103b819fff70476908ea3d9b6f679313555a84efd6673a101e51f48f322b3ce2dc80151264808d326a25d4034811b67d3a5ddf007137f777d09dc45e4cbb588bed918356e738e60a763bab026a30c330009ba63b06e0ddd8ca000fd11efe85b6c229ec28533b4b18a0c7dde0eac482a955214d890578d81ce433f6106f85affd8ad7f2601ee84fd2cc32926f1420a8b3063de2e0f24ca28917a57eb19b13401637ccfadca6a9d951df200e04f9160440386544b6e1d875408c0d40aadff96a0fc2b0efbd88c698ee1cae2d562ebf41e39a49ec8946d064697227cfdc1767a0cac59539721a22d5f765bdadb47f34804b7130e00b880e95b0898121d075af882b986fff3db66c96cbaece8461c2ca2734df3fbb394997308e594a237721b76fc52524bb5221170b4c6a0993740f427f3d979d21141696327ed0dcd2fa962c0c50389a20603b365cd77fc57701bc654734dc888da21a0036a9286487e6088fb5c884f6e374037d6447a0d2823342e5dcf7d13dcb0b2bd81a9153907a7a9a162f1433d194ef1be5689d027babbc1d817d63a955da150bd1961d5d761f311142d703ae175d87860b20466c01f6044aff4bff4e2e2d89ebba508413d8611b5a18b17de9c32620bd5905d1e6d559302c2930c16de1bf774697c1d199fe5975d95df394af45a76af933e3e6f699ade69d1ab4b6d5dafe9d284bdce322fce56a77d1885693112a6500a3039bbc0f573d068d6a42c113171b7370f5bfa27cdcf56fa95b7f7edd75b0eab5cfec348d841f"}) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeb71, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) fcntl$setstatus(r0, 0x4, 0x2800) 03:54:50 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_gfeatures={0xe}}) [ 1596.572542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1596.591669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:54:50 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fec000/0x14000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000fed000/0x2000)=nil, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000140)="3b1d1af3d84edfd66daaa0996325cf10d2aa1fe826f3e0098290", 0x1a}, 0x68) poll(&(0x7f00000000c0)=[{}], 0x20000000000000b4, 0x0) [ 1596.627618] audit: type=1400 audit(2000001290.647:22): avc: denied { associate } for pid=114670 comm="syz-executor.7" name="slab" dev="sysfs" ino=10702 scontext=system_u:object_r:dhcp_state_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=filesystem permissive=1 [ 1596.640074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1596.663883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:54:50 executing program 0: io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) syz_io_uring_setup(0x958, &(0x7f0000000140)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480), 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0x210, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r1, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000340), &(0x7f00000005c0)) fallocate(r2, 0x0, 0x0, 0x87ffffc) ftruncate(0xffffffffffffffff, 0xfffffffffffffff7) syz_io_uring_setup(0x6f33, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) syz_io_uring_setup(0x0, &(0x7f0000000680)={0x0, 0x4d14, 0x20, 0x2, 0x3b7}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000780)) 03:54:50 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/slab', 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000100)='system_u:object_r:dhcp_state_t:s0\x00', 0x22, 0x2) 03:54:50 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x5}, {0x6, 0x0, 0x0, 0x7fffffff}]}) pipe2(&(0x7f0000000000), 0x0) 03:54:50 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000002380), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000000)=""/162) 03:54:50 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="94031c855deb"}, 0x14) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000140)={@multicast1, @dev, @private}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) [ 1596.848701] device lo entered promiscuous mode [ 1596.857501] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 03:54:50 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/9, 0x9}], 0x1) 03:54:50 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/slab', 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000100)='system_u:object_r:dhcp_state_t:s0\x00', 0x22, 0x2) [ 1596.876306] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1596.876865] blk_print_req_error: 75 callbacks suppressed [ 1596.876877] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1596.878200] buffer_io_error: 78 callbacks suppressed [ 1596.878212] Buffer I/O error on dev sr0, logical block 0, async page read [ 1596.881380] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1596.882191] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1596.883367] Buffer I/O error on dev sr0, logical block 1, async page read [ 1596.890800] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1596.891640] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1596.892850] Buffer I/O error on dev sr0, logical block 2, async page read [ 1596.895192] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1596.896008] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1596.897150] Buffer I/O error on dev sr0, logical block 3, async page read [ 1596.901071] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1596.901906] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1596.903051] Buffer I/O error on dev sr0, logical block 4, async page read [ 1596.916939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1596.924309] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1596.925033] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1596.925796] Buffer I/O error on dev sr0, logical block 5, async page read [ 1596.932034] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1596.932586] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1596.933312] Buffer I/O error on dev sr0, logical block 6, async page read [ 1596.939265] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1596.940073] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1596.940799] Buffer I/O error on dev sr0, logical block 7, async page read [ 1596.942165] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1596.943062] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1596.943800] Buffer I/O error on dev sr0, logical block 0, async page read [ 1596.948888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1596.963423] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1596.964344] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1596.965577] Buffer I/O error on dev sr0, logical block 1, async page read [ 1596.986569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1596.988362] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1596.993062] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1596.998418] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1597.008039] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1597.015154] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1597.023253] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 03:54:51 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) 03:54:51 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000002380), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000000)=""/162) 03:54:51 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="94031c855deb"}, 0x14) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000140)={@multicast1, @dev, @private}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) 03:54:51 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/slab', 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000100)='system_u:object_r:dhcp_state_t:s0\x00', 0x22, 0x2) 03:54:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r3, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="886cb82fece1"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 03:54:51 executing program 4: r0 = socket(0x1f, 0x80000, 0x3a057da) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='vcan0\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000000700000008000300613f50363de5a65cb6533ffb70bd6e0727aa5a0f8334ec434556481d7122169d25c66992c451f61bfa47c9fd526fb9721dcb8782def61c376cdc9d2881f179b5a3be516e4751ec21aa17bfc413c743f45215da1ddaf2afc357915b42f6121dde9e68d9470e7dddd320d68c6725e70d012c3249cec0f5486f5eb297268502974174aac4c923e87cfa7b95e9ea6d96374300e21f53928abb5fe590b6380c47402ee4ac6fb6542271a6239924668818140d7000cfff01b2854840e42e836ced2b76bc47dd188d9928767023f2e1137c78a7c608771d9058478c492d0f3c96", @ANYRES32=r3, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) r4 = open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x103) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r2, 0x2, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1, 0x44}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040040}, 0x11) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 03:54:51 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000004280)={0x0, 0x0, "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", "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"}) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeb71, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) fcntl$setstatus(r0, 0x4, 0x2800) 03:54:51 executing program 0: r0 = syz_open_dev$loop(0x0, 0x40000000000002, 0x38d40) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00') write$binfmt_aout(r2, &(0x7f0000000500)={{0x10b, 0x3, 0x5, 0xc6, 0x3b, 0x5, 0x15f, 0x1ea44656}, "8f50ba5b8d22b679908b5f67d23a437bceeff6412c8a120c7222669424424991a77225898b55ca6befbff3fd276bd7d165410f4b51bf5436816f782662ab3db5d5e6062bc14262802b8f1e16e79b32a69b1e8f3fbd63ce3d6d3e3b66fad7", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x97e) setxattr$trusted_overlay_origin(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000380)={r0, 0x0, 0x1, 0x400}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f0000000140)) gettid() perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000000040)) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r4, &(0x7f0000000080)="01", 0x292e9) [ 1597.511755] device lo left promiscuous mode [ 1597.521930] device lo entered promiscuous mode [ 1597.535225] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1597.539428] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1597.549364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1597.562439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1597.573644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1597.589268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:54:51 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000002380), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000000)=""/162) 03:54:51 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="94031c855deb"}, 0x14) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000140)={@multicast1, @dev, @private}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) 03:54:51 executing program 7: sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x20000000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x20, 0x0, 0x0, 0x6e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r0, 0x0) close(r0) syz_io_uring_setup(0x7668, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000480)) accept4(0xffffffffffffffff, &(0x7f0000000140)=@sco={0x1f, @none}, &(0x7f0000000200)=0x80, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) 03:54:51 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ifreq(r0, 0x8948, &(0x7f0000002800)={'caif0\x00', @ifru_ivalue}) [ 1597.750594] device lo left promiscuous mode [ 1597.755372] device lo entered promiscuous mode [ 1597.774017] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 03:54:51 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000002380), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000000)=""/162) 03:54:51 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="94031c855deb"}, 0x14) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000140)={@multicast1, @dev, @private}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) [ 1597.908166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1597.992614] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1597.996377] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1598.002051] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1598.004405] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1598.009837] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1598.011426] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1598.016451] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1598.021001] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1598.044318] device lo left promiscuous mode [ 1598.078880] device lo entered promiscuous mode 03:54:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, @in_args={0x1}}, './file0\x00'}) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="b00000008518f567611f1a43aaf959dbddac0fe964af1cb0b90d5e191d77289795d89e15aa64198e69a1c36fd190d5820dfeca6d0ff181aa3e661defcb4da7156de6c8051199b0243ce072c496d6aa280e39a4fe49334c9ea54d4f95eda8e0607de88b3339460a785b072b30be7c8a1af8d1c7cb6ec47ef8c54fd2309cde58d3745b990d4aa59a6c2bfc0400fce68d1612f402798e6b9814ad1fae0802000002ca8a4abd4c1581038e", @ANYRES16=0x0, @ANYBLOB="20002abd7000fddbdf2504000000380002801400010000000000000000000000ffff0a01010106000e004e24000006000b000a000000080004000000000008000500ff030000080005000400000008000500b300000008000600000400002000018008000b007369700006000200730000000a0006006c626c63720000002c0001800800050004000000060002000c0000000800060077727200060002002c0000000800080005000000"], 0xb0}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 03:54:52 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000202030000000000000000000200000024000280140001"], 0x38}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000000400000008000300", @ANYRES32, @ANYBLOB="e7ff040002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 1598.096841] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1598.102269] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1598.103954] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1598.105058] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1598.133413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1598.149532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1598.231019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1598.248908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1598.461724] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1598.463174] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1598.464575] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1598.469270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1598.474579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1598.560912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:54:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB='\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="0800050002000008"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x74, r1, 0x5, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x46, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x5, 0x1, 0x8}}, @ht={0x2d, 0x1a, {0x20, 0x1, 0x3, 0x0, {0x7, 0x40, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x800, 0xc5, 0xff}}, @ssid={0x0, 0x6, @default_ap_ssid}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8082}, 0x88f4) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000600)=ANY=[@ANYBLOB="8000000008021100000108021100004008021100000000000000000000000000010882a48b960c121a24000000000000000000000000a0223bc4fd90c058b493cd25738871f09a1e381eae467930ef9de8f4a49d791bad0f"], 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_io_uring_setup(0x4b68, &(0x7f0000000780)={0x0, 0xab08, 0x0, 0x2, 0x259}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000740)=0x0, &(0x7f0000000180)) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000004, 0xe3799b690af10377, 0xffffffffffffffff, 0x10000000) socketpair(0x15, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x181200, 0x23456, {0x0, r7}}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000005c0)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, r5, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@ethernet={0x7, @random="802e853b669c"}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000380)="9b82ebe05d61bf59a877a955b9bd6c637cf3249b873f4ecec0e5677e049e82781630ca3762551deebb02bd07d85e71409287391b8c5aa7fda583a452f33a5d249a336a1cb533482f93a31e32e3c9b125197a205dedcd226de30b77bb361f9e7b9f844fa2661bb23cbf0e177bd3bb13d5c08af53e4273e2689998e4b130d97e41f93330fdde963aec7862551a07fe47cebbc5a026726a0c7ae6d7df01eddd3ba12878af8c63bfd506c326c713a072422a9bf54c0add7695f65cc4bd452e0f146def731ae3a1e030", 0xc7}, {&(0x7f0000000480)='`', 0x1}, {&(0x7f00000004c0)="d682c8a6cc9a5a06ba8edcb0e62239fdca681500bbbc1873e5028cd6df5d772012ca75ceefd3c0d82b3f98cfa1264241fa224ed4a9b38dca8ea8eaef22a10a5b4ffad8ca1c734291e0ac77eff0b82d5e87b6e128f02ae20726ebc6d3a8b510", 0x5f}], 0x3}, 0x0, 0x24004001, 0x0, {0x0, r7}}, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) read(r8, 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) 03:54:52 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000004280)={0x0, 0x0, "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", "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"}) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeb71, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) fcntl$setstatus(r0, 0x4, 0x2800) 03:54:52 executing program 7: sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x20000000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x20, 0x0, 0x0, 0x6e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r0, 0x0) close(r0) syz_io_uring_setup(0x7668, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000480)) accept4(0xffffffffffffffff, &(0x7f0000000140)=@sco={0x1f, @none}, &(0x7f0000000200)=0x80, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) 03:54:52 executing program 0: r0 = syz_open_dev$loop(0x0, 0x40000000000002, 0x38d40) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00') write$binfmt_aout(r2, &(0x7f0000000500)={{0x10b, 0x3, 0x5, 0xc6, 0x3b, 0x5, 0x15f, 0x1ea44656}, "8f50ba5b8d22b679908b5f67d23a437bceeff6412c8a120c7222669424424991a77225898b55ca6befbff3fd276bd7d165410f4b51bf5436816f782662ab3db5d5e6062bc14262802b8f1e16e79b32a69b1e8f3fbd63ce3d6d3e3b66fad7", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x97e) setxattr$trusted_overlay_origin(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000380)={r0, 0x0, 0x1, 0x400}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f0000000140)) gettid() perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000000040)) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r4, &(0x7f0000000080)="01", 0x292e9) 03:54:52 executing program 1: syz_mount_image$ext4(&(0x7f0000000200)='ext3\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={[{@data_err_abort, 0x22}]}) 03:54:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r5, {r0}}, './file2\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r6, 0x5, 0x70bd27, 0x0, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0xc005}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="10002bbd7000fddbdf251400000008000300", @ANYRES32=r7, @ANYBLOB="0600ed001f06000018001180040003e3040007000400040004000300040002000500190001000000"], 0x44}, 0x1, 0x0, 0x0, 0x8410}, 0x4000000) 03:54:52 executing program 3: sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x20000000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x20, 0x0, 0x0, 0x6e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r0, 0x0) close(r0) syz_io_uring_setup(0x7668, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000480)) accept4(0xffffffffffffffff, &(0x7f0000000140)=@sco={0x1f, @none}, &(0x7f0000000200)=0x80, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) 03:54:52 executing program 2: ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000240)=0x5) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x44, 0x0, "704f5992d666aa2888e479ca552ee155f638582a91ca97213cf4774a2e4c350cdc3f9f62a4c21970bd149a52fa311b916bf00b51b808c412ed6b9fcbb5be4a2fb7dd8fd0dfa22b4100"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0), 0x4) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(r1, 0x402, 0x2) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={r0, 0x0, 0x100000001, 0x2}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) ioctl$AUTOFS_IOC_FAIL(r2, 0x9361, 0x1) [ 1598.665663] ext3: Bad value for 'data_err' [ 1598.667439] ext3: Bad value for 'data_err' [ 1598.693862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1598.725306] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1598.740526] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1598.754413] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1598.764560] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1598.770257] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1598.777972] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 03:54:52 executing program 1: keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/247, 0xf7) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000300)=""/105, 0x69) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000380)=""/4096, 0x1000) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000014c0)=""/92, 0x5c) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000001600)=""/127, 0x7f) [ 1598.779520] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1598.782022] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1598.860803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:54:52 executing program 7: sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x20000000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x20, 0x0, 0x0, 0x6e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r0, 0x0) close(r0) syz_io_uring_setup(0x7668, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000480)) accept4(0xffffffffffffffff, &(0x7f0000000140)=@sco={0x1f, @none}, &(0x7f0000000200)=0x80, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) [ 1599.196264] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1599.200063] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1599.204102] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1599.213418] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1599.217465] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1599.242876] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1599.275834] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1599.280647] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 03:54:53 executing program 0: r0 = syz_open_dev$loop(0x0, 0x40000000000002, 0x38d40) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00') write$binfmt_aout(r2, &(0x7f0000000500)={{0x10b, 0x3, 0x5, 0xc6, 0x3b, 0x5, 0x15f, 0x1ea44656}, "8f50ba5b8d22b679908b5f67d23a437bceeff6412c8a120c7222669424424991a77225898b55ca6befbff3fd276bd7d165410f4b51bf5436816f782662ab3db5d5e6062bc14262802b8f1e16e79b32a69b1e8f3fbd63ce3d6d3e3b66fad7", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x97e) setxattr$trusted_overlay_origin(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000380)={r0, 0x0, 0x1, 0x400}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f0000000140)) gettid() perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000000040)) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r4, &(0x7f0000000080)="01", 0x292e9) 03:54:53 executing program 1: ioctl$sock_ifreq(0xffffffffffffffff, 0x891f, &(0x7f0000000000)={'veth1_to_batadv\x00', @ifru_addrs=@phonet}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="1e20000000fe52107de7c80d080000002e2f66696c653000"]) shutdown(r2, 0x0) mq_timedsend(r1, 0x0, 0x2000, 0x0, 0x0) mq_timedsend(r1, &(0x7f0000000100)="17d45a8db7312efc9c2421817888a44adbbe9f37021b5ee795cf7ff471e3ef3a57d267373617c1110a2559fe9d9c46ecf5f3a53a80c57f62faeb212565de35edc99fd6c84a94c553ce89bc7ffd3f3aff97eba92c", 0x54, 0x9, &(0x7f0000000180)={0x0, 0x989680}) 03:54:53 executing program 3: sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x20000000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x20, 0x0, 0x0, 0x6e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r0, 0x0) close(r0) syz_io_uring_setup(0x7668, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000480)) accept4(0xffffffffffffffff, &(0x7f0000000140)=@sco={0x1f, @none}, &(0x7f0000000200)=0x80, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) 03:54:53 executing program 7: sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x20000000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x20, 0x0, 0x0, 0x6e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r0, 0x0) close(r0) syz_io_uring_setup(0x7668, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000480)) accept4(0xffffffffffffffff, &(0x7f0000000140)=@sco={0x1f, @none}, &(0x7f0000000200)=0x80, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) [ 1599.479266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:54:53 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001540)={0x14, 0x1, 0x4, 0x0, 0x900}, 0x14}}, 0x0) dup2(r0, r1) 03:54:53 executing program 1: ioctl$sock_ifreq(0xffffffffffffffff, 0x891f, &(0x7f0000000000)={'veth1_to_batadv\x00', @ifru_addrs=@phonet}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="1e20000000fe52107de7c80d080000002e2f66696c653000"]) shutdown(r2, 0x0) mq_timedsend(r1, 0x0, 0x2000, 0x0, 0x0) mq_timedsend(r1, &(0x7f0000000100)="17d45a8db7312efc9c2421817888a44adbbe9f37021b5ee795cf7ff471e3ef3a57d267373617c1110a2559fe9d9c46ecf5f3a53a80c57f62faeb212565de35edc99fd6c84a94c553ce89bc7ffd3f3aff97eba92c", 0x54, 0x9, &(0x7f0000000180)={0x0, 0x989680}) 03:54:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x3) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x44, r1, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x20, 0x2d}}}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x4}, @NL80211_ATTR_STA_FLAGS={0x14, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_MFP={0x4}]}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x160}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000811}, 0x48014) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162636465666768696a00000000000000000a0000000202020202020002"], 0x40}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)={0x10e8, r7, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0x44}}, @NL80211_ATTR_SCAN_SSIDS={0x6c, 0x2d, 0x0, 0x1, [{0x24, 0x0, @random="95b81bea8229b1220ed20349e4864a5a34cad3e4c8ea92ad55dfa8567d10d91b"}, {0xa, 0x0, @default_ibss_ssid}, {0xc, 0x0, @random="73da10006c1215fd"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x14, 0x0, @random="e8e3ec2392ce91a74f3e48ef946dd79f"}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x1}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x1054, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4a, 0x0, "7a13731b0ecc779593f385becb525db78b37dca254f62f6f1ae7c9b317ce5a8ccdb2d5683df7ed98123c9e01237bf07044e1f43156df193fa3abd799e0e042968bc579cd9653"}, @NL80211_BAND_6GHZ={0x1004, 0x3, "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"}]}]}, 0x10e8}, 0x1, 0x0, 0x0, 0x80}, 0x40000) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @val={0x4, 0x6, {0x0, 0x2, 0x2, 0x92}}, @void, @void, @void, @void}, 0x3e) 03:54:53 executing program 1: ioctl$sock_ifreq(0xffffffffffffffff, 0x891f, &(0x7f0000000000)={'veth1_to_batadv\x00', @ifru_addrs=@phonet}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="1e20000000fe52107de7c80d080000002e2f66696c653000"]) shutdown(r2, 0x0) mq_timedsend(r1, 0x0, 0x2000, 0x0, 0x0) mq_timedsend(r1, &(0x7f0000000100)="17d45a8db7312efc9c2421817888a44adbbe9f37021b5ee795cf7ff471e3ef3a57d267373617c1110a2559fe9d9c46ecf5f3a53a80c57f62faeb212565de35edc99fd6c84a94c553ce89bc7ffd3f3aff97eba92c", 0x54, 0x9, &(0x7f0000000180)={0x0, 0x989680}) [ 1599.692655] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 1599.693998] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1599.694994] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1599.695930] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 1599.707126] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1599.708129] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1599.709458] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 03:54:53 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001540)={0x14, 0x1, 0x4, 0x0, 0x900}, 0x14}}, 0x0) dup2(r0, r1) [ 1599.722656] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 03:54:53 executing program 1: ioctl$sock_ifreq(0xffffffffffffffff, 0x891f, &(0x7f0000000000)={'veth1_to_batadv\x00', @ifru_addrs=@phonet}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="1e20000000fe52107de7c80d080000002e2f66696c653000"]) shutdown(r2, 0x0) mq_timedsend(r1, 0x0, 0x2000, 0x0, 0x0) mq_timedsend(r1, &(0x7f0000000100)="17d45a8db7312efc9c2421817888a44adbbe9f37021b5ee795cf7ff471e3ef3a57d267373617c1110a2559fe9d9c46ecf5f3a53a80c57f62faeb212565de35edc99fd6c84a94c553ce89bc7ffd3f3aff97eba92c", 0x54, 0x9, &(0x7f0000000180)={0x0, 0x989680}) [ 1599.770776] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1599.782536] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1599.791691] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1599.795721] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1599.811049] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1599.839582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1599.860146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:54:53 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001540)={0x14, 0x1, 0x4, 0x0, 0x900}, 0x14}}, 0x0) dup2(r0, r1) [ 1600.166842] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1600.173355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1602.222336] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1602.233338] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1602.238026] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1602.241999] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1602.245956] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1602.247319] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1604.264603] Bluetooth: hci3: command 0x0409 tx timeout [ 1606.312590] Bluetooth: hci3: command 0x041b tx timeout [ 1608.360570] Bluetooth: hci3: command 0x040f tx timeout [ 1610.408589] Bluetooth: hci3: command 0x0419 tx timeout [ 1625.263419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1625.265060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1625.307293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1625.324844] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1625.326019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1625.329372] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1625.783737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1625.794130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1626.142890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1628.655992] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1628.664866] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1628.668846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1628.672916] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1628.678254] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1628.680916] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1630.696681] Bluetooth: hci3: command 0x0409 tx timeout [ 1632.744651] Bluetooth: hci3: command 0x041b tx timeout [ 1634.792667] Bluetooth: hci3: command 0x040f tx timeout [ 1636.840584] Bluetooth: hci3: command 0x0419 tx timeout [ 1652.738129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1652.739596] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1652.743613] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1652.829731] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1652.830967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1652.833868] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1653.308761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1653.317440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1653.638581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1653.644297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:55:47 executing program 3: sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x20000000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x20, 0x0, 0x0, 0x6e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r0, 0x0) close(r0) syz_io_uring_setup(0x7668, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000480)) accept4(0xffffffffffffffff, &(0x7f0000000140)=@sco={0x1f, @none}, &(0x7f0000000200)=0x80, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) 03:55:47 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x3) 03:55:47 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000002c0)={@dev, 0x0, 0x0, 0xff, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000002c0)={@dev, 0x80000, 0x0, 0xff}, 0x20) 03:55:47 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001540)={0x14, 0x1, 0x4, 0x0, 0x900}, 0x14}}, 0x0) dup2(r0, r1) 03:55:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r2, 0x0, 0x40, &(0x7f0000000080)={@rand_addr, @remote}, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000a9c5537b31c1d653c0ce14334563ef40b239e6919610172b325cbbfa17f0d13274cc151c0a362bccdfa4a4619d1221e74a814bd57b325c2def399026a6f25fba45323913176cfa7a6852a8d495924444261e2fc53dc67cc9bede5bafb5de21251900e31c6eeeb84818f693697e2ce03f471b6b52729a4fb8f9f10159d40983fbd7134f6c14bbf2a66e893b4cbe673f75c546826c5cc8dc832e499fb6c496571b5949c6fa24ba76f37f9a8111c9657f63b9e11419870e81c9e5618a57", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="11002a00dd0b6162636465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 03:55:47 executing program 6: ioctl$sock_ifreq(0xffffffffffffffff, 0x891f, &(0x7f0000000000)={'veth1_to_batadv\x00', @ifru_addrs=@phonet}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="1e20000000fe52107de7c80d080000002e2f66696c653000"]) shutdown(r2, 0x0) mq_timedsend(r1, 0x0, 0x2000, 0x0, 0x0) mq_timedsend(r1, &(0x7f0000000100)="17d45a8db7312efc9c2421817888a44adbbe9f37021b5ee795cf7ff471e3ef3a57d267373617c1110a2559fe9d9c46ecf5f3a53a80c57f62faeb212565de35edc99fd6c84a94c553ce89bc7ffd3f3aff97eba92c", 0x54, 0x9, &(0x7f0000000180)={0x0, 0x989680}) 03:55:47 executing program 0: r0 = syz_open_dev$loop(0x0, 0x40000000000002, 0x38d40) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00') write$binfmt_aout(r2, &(0x7f0000000500)={{0x10b, 0x3, 0x5, 0xc6, 0x3b, 0x5, 0x15f, 0x1ea44656}, "8f50ba5b8d22b679908b5f67d23a437bceeff6412c8a120c7222669424424991a77225898b55ca6befbff3fd276bd7d165410f4b51bf5436816f782662ab3db5d5e6062bc14262802b8f1e16e79b32a69b1e8f3fbd63ce3d6d3e3b66fad7", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x97e) setxattr$trusted_overlay_origin(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000380)={r0, 0x0, 0x1, 0x400}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f0000000140)) gettid() perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000000040)) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r4, &(0x7f0000000080)="01", 0x292e9) 03:55:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x108, r3, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5, 0x32}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}, @NL80211_ATTR_VENDOR_DATA={0x40, 0xc5, "5dd82dfebb2403b40e8ccfacdece8c424e2676faeac12855dcb61f66e565230d5d7dc6e22553ff687a73097420d1ca6f8fe154fb98f12d90771a4ae4"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x9}, @NL80211_ATTR_VENDOR_DATA={0x6d, 0xc5, "77a007a0b15f4526a44e2ceef84c8e8ad625d29d464607252be29173575ace09299747b71daaca2ee058d3aa5562a496fa26543b358426bcd7d08fe95729a5a89b871e96ada3b5e3f14146437110c01df6e094f21c105a0db820ae76fe88138b33a4f29c4cba88869c"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xfffffff9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xeda00000}]}, 0x108}, 0x1, 0x0, 0x0, 0x40000}, 0x2404c040) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 1653.795775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1653.818214] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:55:47 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000fc0)=@newsa={0x188, 0x10, 0x3c7c02c9b47383d1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'morus640\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'cryptd(blake2s-256)\x00'}}}]}, 0x188}}, 0x0) [ 1653.833096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:55:47 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mkdir(&(0x7f0000000b80)='./file2\x00', 0x0) rmdir(&(0x7f0000000000)='./file2\x00') creat(&(0x7f00000000c0)='./file2\x00', 0x0) 03:55:47 executing program 6: ioctl$sock_ifreq(0xffffffffffffffff, 0x891f, &(0x7f0000000000)={'veth1_to_batadv\x00', @ifru_addrs=@phonet}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="1e20000000fe52107de7c80d080000002e2f66696c653000"]) shutdown(r2, 0x0) mq_timedsend(r1, 0x0, 0x2000, 0x0, 0x0) mq_timedsend(r1, &(0x7f0000000100)="17d45a8db7312efc9c2421817888a44adbbe9f37021b5ee795cf7ff471e3ef3a57d267373617c1110a2559fe9d9c46ecf5f3a53a80c57f62faeb212565de35edc99fd6c84a94c553ce89bc7ffd3f3aff97eba92c", 0x54, 0x9, &(0x7f0000000180)={0x0, 0x989680}) [ 1653.853635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:55:47 executing program 1: syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) mount$9p_unix(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0xa8420, 0x0) 03:55:48 executing program 6: ioctl$sock_ifreq(0xffffffffffffffff, 0x891f, &(0x7f0000000000)={'veth1_to_batadv\x00', @ifru_addrs=@phonet}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="1e20000000fe52107de7c80d080000002e2f66696c653000"]) shutdown(r2, 0x0) mq_timedsend(r1, 0x0, 0x2000, 0x0, 0x0) mq_timedsend(r1, &(0x7f0000000100)="17d45a8db7312efc9c2421817888a44adbbe9f37021b5ee795cf7ff471e3ef3a57d267373617c1110a2559fe9d9c46ecf5f3a53a80c57f62faeb212565de35edc99fd6c84a94c553ce89bc7ffd3f3aff97eba92c", 0x54, 0x9, &(0x7f0000000180)={0x0, 0x989680}) 03:55:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r0) syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x77359400}}, 0x1) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940), 0xc, &(0x7f0000000a00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="00022bbd7000fddbdf25150000000c009900020000007e0000000a001a0008021100000100000a001a000802110000010000"], 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x20008000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = openat(0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', 0x26e1, 0x62) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00ile0\x00']) readv(0xffffffffffffffff, &(0x7f00000003c0), 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000300)='./file0\x00', &(0x7f0000000500), &(0x7f0000000540), 0x2, 0x6) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file1\x00'}) syncfs(r4) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001280)=ANY=[@ANYBLOB="010001000000000018000d00", @ANYRES32, @ANYBLOB]) 03:55:48 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 03:55:48 executing program 1: syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) mount$9p_unix(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0xa8420, 0x0) [ 1654.137128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1654.150531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1654.177875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:55:48 executing program 1: syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) mount$9p_unix(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0xa8420, 0x0) 03:55:48 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x45534}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) r3 = accept4$inet6(r1, 0x0, &(0x7f0000000380), 0x80400) connect$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e21, 0x3, @remote, 0x81}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="047aaa7b8edc7c225166ab148bfe9b97028709f17c3490d35b4a636b3c61bd0fa309a6e04a3a12b0c58d2fff35f31d8f5e69170ff4363a0af4243597605794e18714af", 0x43}], 0x1, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open_by_handle_at(r4, &(0x7f0000000140)=@ceph_nfs_confh={0x10, 0x2, {0x28}}, 0x600) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x165c02, 0x0) preadv(r5, &(0x7f0000001540)=[{&(0x7f0000000400)=""/57, 0x39}, {&(0x7f0000000440)=""/137, 0x89}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/37, 0x25}], 0x4, 0x0, 0x4) 03:55:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="800000ae983eea00000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c121824"], 0x36) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r1, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xec6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x517}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x83f}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xc17}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5b3}]}, 0x64}, 0x1, 0x0, 0x0, 0x11}, 0x800) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4, {r5}}, './file2\x00'}) dup(r8) sendmsg$TIPC_NL_BEARER_GET(r9, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xe8, 0x0, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff23df}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x56}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4c3}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "ef77223f8209252eabef2add786248931062311c1506c7598b03e19c4d46bf75"}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x8000}, 0x90) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 03:55:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000380)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x6, 0x1, 0x8c, 0x1}}, @void, @void, @void, @void}, 0x3c) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) syz_80211_inject_frame(&(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="84000800ffffffbf1915e3ffff08070000000000"], 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r6, 0x0, 0x40, &(0x7f0000000080)={@rand_addr, @remote}, 0xc) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r7, 0x0, 0x40, &(0x7f0000000080)={@rand_addr, @remote}, 0xc) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRES64, @ANYRES32=r6, @ANYRES32=r7, @ANYRES64, @ANYRES16=r3, @ANYRES32, @ANYRES16], 0x100}, 0x1, 0x0, 0x0, 0x40}, 0x200c0010) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 03:55:48 executing program 7: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_STAT(0x0, 0x2, 0x0) shmget$private(0x0, 0x1000, 0x400, &(0x7f0000ff5000/0x1000)=nil) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x1b}, 0x18) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) shmctl$IPC_RMID(0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7}}, './file1\x00'}) fcntl$getownex(r2, 0x10, &(0x7f0000000000)={0x0, 0x0}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000480)=""/85) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x5, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x5, 0x9, 0x0, 0x8e, 0x0, 0x200, 0x66204, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_config_ext={0xfffffffffffffffc, 0x3}, 0x40, 0x6, 0x4, 0x7, 0x10000, 0x401, 0x7, 0x0, 0x8, 0x0, 0x2}, r3, 0x2, r4, 0x9) ioctl$SNAPSHOT_FREE(r1, 0x3305) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) [ 1654.502275] random: crng reseeded on system resumption [ 1654.504273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1654.532387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1654.562956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1654.580341] Restarting kernel threads ... [ 1654.580934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1654.586066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1654.601181] done. [ 1654.657086] random: crng reseeded on system resumption [ 1654.676749] Restarting kernel threads ... done. [ 1654.899848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1654.912788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1654.921314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:55:48 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='clear_refs\x00') fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x1}) 03:55:48 executing program 1: syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) mount$9p_unix(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0xa8420, 0x0) 03:55:49 executing program 7: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_STAT(0x0, 0x2, 0x0) shmget$private(0x0, 0x1000, 0x400, &(0x7f0000ff5000/0x1000)=nil) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x1b}, 0x18) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) shmctl$IPC_RMID(0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7}}, './file1\x00'}) fcntl$getownex(r2, 0x10, &(0x7f0000000000)={0x0, 0x0}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000480)=""/85) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x5, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x5, 0x9, 0x0, 0x8e, 0x0, 0x200, 0x66204, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_config_ext={0xfffffffffffffffc, 0x3}, 0x40, 0x6, 0x4, 0x7, 0x10000, 0x401, 0x7, 0x0, 0x8, 0x0, 0x2}, r3, 0x2, r4, 0x9) ioctl$SNAPSHOT_FREE(r1, 0x3305) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) 03:55:49 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x45534}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) r3 = accept4$inet6(r1, 0x0, &(0x7f0000000380), 0x80400) connect$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e21, 0x3, @remote, 0x81}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="047aaa7b8edc7c225166ab148bfe9b97028709f17c3490d35b4a636b3c61bd0fa309a6e04a3a12b0c58d2fff35f31d8f5e69170ff4363a0af4243597605794e18714af", 0x43}], 0x1, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open_by_handle_at(r4, &(0x7f0000000140)=@ceph_nfs_confh={0x10, 0x2, {0x28}}, 0x600) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x165c02, 0x0) preadv(r5, &(0x7f0000001540)=[{&(0x7f0000000400)=""/57, 0x39}, {&(0x7f0000000440)=""/137, 0x89}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/37, 0x25}], 0x4, 0x0, 0x4) 03:55:49 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_inject_frame(&(0x7f0000000340)=@device_b, &(0x7f0000000380)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @broadcast, @device_a, @random="aa5a91c489f4", {0x8}}, @ver_80211n={0x0, 0xdb, 0x3, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}}, @smps={0x7, 0x1, {0x0, 0x1}}}, 0x1f) r0 = dup(0xffffffffffffffff) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 03:55:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="8000000008021100000108021100000008021100000000000000000000000000640001000006020202020202810882848b960c121824"], 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 03:55:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x108) sendfile(r3, r4, 0x0, 0x3) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="9cb765895bce64e150b46fe67f78fcb1765a231f7f5e2a4ef492fcc61fd404286f2db7", @ANYRES16=r6, @ANYBLOB="010000000000000000000c000000"], 0x14}}, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000003c0)={0x0, @initdev, @broadcast}, &(0x7f0000000400)=0xc) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000e80)=ANY=[@ANYBLOB="1c001ad208c579046ceb0080", @ANYRES16=r1, @ANYBLOB="020028bd7000fbdbdf25670000000800c30003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, r6, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x7f}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x1}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x200}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004081}, 0x4000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000820}, 0xc, &(0x7f0000000280)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="940000004d51d7eb2c852e438b48db94f49fa029a8c39f3ac4f7996d2316eb58e1ffffff7f00702a", @ANYRES16=r8, @ANYBLOB="200027bd7000fcdbdf252e0000001e001f0000030c00000100000000000400810006000000000402000000e000000400010106009800ff07000004001e0108004a000aac0f0008004c000eac0f000400cc0004001e0110004c000000000002ac0f001dd6070008004a0001ac0f00060066000500000010009d000000000001000700000240000400cc0004009300"], 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x80) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_genetlink_get_family_id$team(&(0x7f00000006c0), 0xffffffffffffffff) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000740)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x8}, @device_a, @device_a, @broadcast, {0x4, 0xf00}}, @random="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"}, 0x718) [ 1655.078125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1655.085283] random: crng reseeded on system resumption [ 1655.156441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1655.163435] Restarting kernel threads ... done. [ 1655.201587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:55:49 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x45534}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) r3 = accept4$inet6(r1, 0x0, &(0x7f0000000380), 0x80400) connect$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e21, 0x3, @remote, 0x81}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="047aaa7b8edc7c225166ab148bfe9b97028709f17c3490d35b4a636b3c61bd0fa309a6e04a3a12b0c58d2fff35f31d8f5e69170ff4363a0af4243597605794e18714af", 0x43}], 0x1, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open_by_handle_at(r4, &(0x7f0000000140)=@ceph_nfs_confh={0x10, 0x2, {0x28}}, 0x600) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x165c02, 0x0) preadv(r5, &(0x7f0000001540)=[{&(0x7f0000000400)=""/57, 0x39}, {&(0x7f0000000440)=""/137, 0x89}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/37, 0x25}], 0x4, 0x0, 0x4) [ 1655.264264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:55:49 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x45534}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) r3 = accept4$inet6(r1, 0x0, &(0x7f0000000380), 0x80400) connect$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e21, 0x3, @remote, 0x81}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="047aaa7b8edc7c225166ab148bfe9b97028709f17c3490d35b4a636b3c61bd0fa309a6e04a3a12b0c58d2fff35f31d8f5e69170ff4363a0af4243597605794e18714af", 0x43}], 0x1, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open_by_handle_at(r4, &(0x7f0000000140)=@ceph_nfs_confh={0x10, 0x2, {0x28}}, 0x600) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x165c02, 0x0) preadv(r5, &(0x7f0000001540)=[{&(0x7f0000000400)=""/57, 0x39}, {&(0x7f0000000440)=""/137, 0x89}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/37, 0x25}], 0x4, 0x0, 0x4) 03:55:49 executing program 7: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_STAT(0x0, 0x2, 0x0) shmget$private(0x0, 0x1000, 0x400, &(0x7f0000ff5000/0x1000)=nil) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x1b}, 0x18) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) shmctl$IPC_RMID(0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7}}, './file1\x00'}) fcntl$getownex(r2, 0x10, &(0x7f0000000000)={0x0, 0x0}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000480)=""/85) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x5, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x5, 0x9, 0x0, 0x8e, 0x0, 0x200, 0x66204, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_config_ext={0xfffffffffffffffc, 0x3}, 0x40, 0x6, 0x4, 0x7, 0x10000, 0x401, 0x7, 0x0, 0x8, 0x0, 0x2}, r3, 0x2, r4, 0x9) ioctl$SNAPSHOT_FREE(r1, 0x3305) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) [ 1655.472156] random: crng reseeded on system resumption [ 1655.504899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:55:49 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x45534}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) r3 = accept4$inet6(r1, 0x0, &(0x7f0000000380), 0x80400) connect$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e21, 0x3, @remote, 0x81}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="047aaa7b8edc7c225166ab148bfe9b97028709f17c3490d35b4a636b3c61bd0fa309a6e04a3a12b0c58d2fff35f31d8f5e69170ff4363a0af4243597605794e18714af", 0x43}], 0x1, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open_by_handle_at(r4, &(0x7f0000000140)=@ceph_nfs_confh={0x10, 0x2, {0x28}}, 0x600) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x165c02, 0x0) preadv(r5, &(0x7f0000001540)=[{&(0x7f0000000400)=""/57, 0x39}, {&(0x7f0000000440)=""/137, 0x89}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/37, 0x25}], 0x4, 0x0, 0x4) [ 1655.519320] Restarting kernel threads ... done. 03:55:49 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x45534}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) r3 = accept4$inet6(r1, 0x0, &(0x7f0000000380), 0x80400) connect$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e21, 0x3, @remote, 0x81}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="047aaa7b8edc7c225166ab148bfe9b97028709f17c3490d35b4a636b3c61bd0fa309a6e04a3a12b0c58d2fff35f31d8f5e69170ff4363a0af4243597605794e18714af", 0x43}], 0x1, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open_by_handle_at(r4, &(0x7f0000000140)=@ceph_nfs_confh={0x10, 0x2, {0x28}}, 0x600) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x165c02, 0x0) preadv(r5, &(0x7f0000001540)=[{&(0x7f0000000400)=""/57, 0x39}, {&(0x7f0000000440)=""/137, 0x89}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/37, 0x25}], 0x4, 0x0, 0x4) 03:55:49 executing program 7: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_STAT(0x0, 0x2, 0x0) shmget$private(0x0, 0x1000, 0x400, &(0x7f0000ff5000/0x1000)=nil) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x1b}, 0x18) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) shmctl$IPC_RMID(0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7}}, './file1\x00'}) fcntl$getownex(r2, 0x10, &(0x7f0000000000)={0x0, 0x0}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000480)=""/85) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x5, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x5, 0x9, 0x0, 0x8e, 0x0, 0x200, 0x66204, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_config_ext={0xfffffffffffffffc, 0x3}, 0x40, 0x6, 0x4, 0x7, 0x10000, 0x401, 0x7, 0x0, 0x8, 0x0, 0x2}, r3, 0x2, r4, 0x9) ioctl$SNAPSHOT_FREE(r1, 0x3305) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) 03:55:49 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x45534}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) r3 = accept4$inet6(r1, 0x0, &(0x7f0000000380), 0x80400) connect$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e21, 0x3, @remote, 0x81}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="047aaa7b8edc7c225166ab148bfe9b97028709f17c3490d35b4a636b3c61bd0fa309a6e04a3a12b0c58d2fff35f31d8f5e69170ff4363a0af4243597605794e18714af", 0x43}], 0x1, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open_by_handle_at(r4, &(0x7f0000000140)=@ceph_nfs_confh={0x10, 0x2, {0x28}}, 0x600) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x165c02, 0x0) preadv(r5, &(0x7f0000001540)=[{&(0x7f0000000400)=""/57, 0x39}, {&(0x7f0000000440)=""/137, 0x89}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/37, 0x25}], 0x4, 0x0, 0x4) 03:55:49 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x45534}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) r3 = accept4$inet6(r1, 0x0, &(0x7f0000000380), 0x80400) connect$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e21, 0x3, @remote, 0x81}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="047aaa7b8edc7c225166ab148bfe9b97028709f17c3490d35b4a636b3c61bd0fa309a6e04a3a12b0c58d2fff35f31d8f5e69170ff4363a0af4243597605794e18714af", 0x43}], 0x1, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open_by_handle_at(r4, &(0x7f0000000140)=@ceph_nfs_confh={0x10, 0x2, {0x28}}, 0x600) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x165c02, 0x0) preadv(r5, &(0x7f0000001540)=[{&(0x7f0000000400)=""/57, 0x39}, {&(0x7f0000000440)=""/137, 0x89}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/37, 0x25}], 0x4, 0x0, 0x4) 03:55:49 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x45534}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) r3 = accept4$inet6(r1, 0x0, &(0x7f0000000380), 0x80400) connect$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e21, 0x3, @remote, 0x81}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="047aaa7b8edc7c225166ab148bfe9b97028709f17c3490d35b4a636b3c61bd0fa309a6e04a3a12b0c58d2fff35f31d8f5e69170ff4363a0af4243597605794e18714af", 0x43}], 0x1, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open_by_handle_at(r4, &(0x7f0000000140)=@ceph_nfs_confh={0x10, 0x2, {0x28}}, 0x600) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x165c02, 0x0) preadv(r5, &(0x7f0000001540)=[{&(0x7f0000000400)=""/57, 0x39}, {&(0x7f0000000440)=""/137, 0x89}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/37, 0x25}], 0x4, 0x0, 0x4) [ 1655.791219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1655.792150] random: crng reseeded on system resumption [ 1655.825537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1655.895342] Restarting kernel threads ... done. 03:55:49 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x45534}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) r3 = accept4$inet6(r1, 0x0, &(0x7f0000000380), 0x80400) connect$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e21, 0x3, @remote, 0x81}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="047aaa7b8edc7c225166ab148bfe9b97028709f17c3490d35b4a636b3c61bd0fa309a6e04a3a12b0c58d2fff35f31d8f5e69170ff4363a0af4243597605794e18714af", 0x43}], 0x1, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open_by_handle_at(r4, &(0x7f0000000140)=@ceph_nfs_confh={0x10, 0x2, {0x28}}, 0x600) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x165c02, 0x0) preadv(r5, &(0x7f0000001540)=[{&(0x7f0000000400)=""/57, 0x39}, {&(0x7f0000000440)=""/137, 0x89}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/37, 0x25}], 0x4, 0x0, 0x4) 03:55:50 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x45534}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) r3 = accept4$inet6(r1, 0x0, &(0x7f0000000380), 0x80400) connect$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e21, 0x3, @remote, 0x81}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="047aaa7b8edc7c225166ab148bfe9b97028709f17c3490d35b4a636b3c61bd0fa309a6e04a3a12b0c58d2fff35f31d8f5e69170ff4363a0af4243597605794e18714af", 0x43}], 0x1, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open_by_handle_at(r4, &(0x7f0000000140)=@ceph_nfs_confh={0x10, 0x2, {0x28}}, 0x600) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x165c02, 0x0) preadv(r5, &(0x7f0000001540)=[{&(0x7f0000000400)=""/57, 0x39}, {&(0x7f0000000440)=""/137, 0x89}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/37, 0x25}], 0x4, 0x0, 0x4) [ 1658.865120] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1658.868838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1658.870250] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1658.873953] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1658.876412] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1658.878791] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1660.648593] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 1660.904662] Bluetooth: hci3: command 0x0409 tx timeout [ 1662.952621] Bluetooth: hci3: command 0x041b tx timeout [ 1665.000668] Bluetooth: hci3: command 0x040f tx timeout [ 1665.064584] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 1667.048619] Bluetooth: hci3: command 0x0419 tx timeout [ 1667.517092] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1667.522792] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1667.527136] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1667.533453] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1667.535740] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1667.538221] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1669.608586] Bluetooth: hci0: command 0x0409 tx timeout [ 1670.568672] Bluetooth: hci1: command 0x0406 tx timeout [ 1671.656577] Bluetooth: hci0: command 0x041b tx timeout [ 1673.704530] Bluetooth: hci0: command 0x040f tx timeout [ 1675.752593] Bluetooth: hci0: command 0x0419 tx timeout [ 1680.496757] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1680.497619] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1680.499566] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1680.536108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1680.536858] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1680.538609] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1680.902237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1681.212078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1681.888043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1681.888873] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1681.890808] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1681.945522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1681.946238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1681.947850] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1682.409736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1682.420167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1682.730671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:56:16 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x45534}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) r3 = accept4$inet6(r1, 0x0, &(0x7f0000000380), 0x80400) connect$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e21, 0x3, @remote, 0x81}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="047aaa7b8edc7c225166ab148bfe9b97028709f17c3490d35b4a636b3c61bd0fa309a6e04a3a12b0c58d2fff35f31d8f5e69170ff4363a0af4243597605794e18714af", 0x43}], 0x1, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open_by_handle_at(r4, &(0x7f0000000140)=@ceph_nfs_confh={0x10, 0x2, {0x28}}, 0x600) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x165c02, 0x0) preadv(r5, &(0x7f0000001540)=[{&(0x7f0000000400)=""/57, 0x39}, {&(0x7f0000000440)=""/137, 0x89}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/37, 0x25}], 0x4, 0x0, 0x4) 03:56:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r4, 0x0, 0x40, &(0x7f0000000080)={@rand_addr, @remote}, 0xc) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000280)=@get={0x1, &(0x7f0000000100)=""/215, 0xffff}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500e6b57b0e00d4caa12c00000008002300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162636465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="28c80000", @ANYRES16=r3, @ANYBLOB="200626bd7000fddbdf256600000008000300", @ANYRES32=r6, @ANYBLOB="08000019010c00000008009f000100000008009f0003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40008801}, 0x20040004) syz_80211_inject_frame(&(0x7f0000000300)=@broadcast, &(0x7f0000000640)=ANY=[@ANYBLOB="b400f800ff2872b981439462611605a41198411c7313ba903fda4d2d96b228926d695176c946c6f950bf8edb85f39ae193b9637bf5982b5d5d34977b531ffe9498912c4e842cdb0f5d666bda3f4295085fdf2d766801"], 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r7, 0x0, 0x40, &(0x7f0000000080)={@rand_addr, @remote}, 0xc) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'wg0\x00'}) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000380)={{0x2, 0x4e22, @private=0xa010105}, {0x300, @multicast}, 0x10, {0x2, 0x4e20, @private=0xa010102}, 'geneve1\x00'}) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="50a0c824ac95ffff3fff0802110000015050505050501c7a2c00c58100000000000000640101000006020700000002010882848b960c12182400"], 0x3a) 03:56:16 executing program 7: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_STAT(0x0, 0x2, 0x0) shmget$private(0x0, 0x1000, 0x400, &(0x7f0000ff5000/0x1000)=nil) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x1b}, 0x18) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) shmctl$IPC_RMID(0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7}}, './file1\x00'}) fcntl$getownex(r2, 0x10, &(0x7f0000000000)={0x0, 0x0}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000480)=""/85) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x5, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x5, 0x9, 0x0, 0x8e, 0x0, 0x200, 0x66204, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_config_ext={0xfffffffffffffffc, 0x3}, 0x40, 0x6, 0x4, 0x7, 0x10000, 0x401, 0x7, 0x0, 0x8, 0x0, 0x2}, r3, 0x2, r4, 0x9) ioctl$SNAPSHOT_FREE(r1, 0x3305) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) 03:56:16 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x45534}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) r3 = accept4$inet6(r1, 0x0, &(0x7f0000000380), 0x80400) connect$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e21, 0x3, @remote, 0x81}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="047aaa7b8edc7c225166ab148bfe9b97028709f17c3490d35b4a636b3c61bd0fa309a6e04a3a12b0c58d2fff35f31d8f5e69170ff4363a0af4243597605794e18714af", 0x43}], 0x1, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open_by_handle_at(r4, &(0x7f0000000140)=@ceph_nfs_confh={0x10, 0x2, {0x28}}, 0x600) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x165c02, 0x0) preadv(r5, &(0x7f0000001540)=[{&(0x7f0000000400)=""/57, 0x39}, {&(0x7f0000000440)=""/137, 0x89}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/37, 0x25}], 0x4, 0x0, 0x4) 03:56:16 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x45534}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) r3 = accept4$inet6(r1, 0x0, &(0x7f0000000380), 0x80400) connect$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e21, 0x3, @remote, 0x81}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="047aaa7b8edc7c225166ab148bfe9b97028709f17c3490d35b4a636b3c61bd0fa309a6e04a3a12b0c58d2fff35f31d8f5e69170ff4363a0af4243597605794e18714af", 0x43}], 0x1, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open_by_handle_at(r4, &(0x7f0000000140)=@ceph_nfs_confh={0x10, 0x2, {0x28}}, 0x600) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x165c02, 0x0) preadv(r5, &(0x7f0000001540)=[{&(0x7f0000000400)=""/57, 0x39}, {&(0x7f0000000440)=""/137, 0x89}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/37, 0x25}], 0x4, 0x0, 0x4) 03:56:16 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) io_setup(0x9, &(0x7f0000000140)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r1, 0x0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) 03:56:16 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_inject_frame(&(0x7f0000000340)=@device_b, &(0x7f0000000380)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @broadcast, @device_a, @random="aa5a91c489f4", {0x8}}, @ver_80211n={0x0, 0xdb, 0x3, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}}, @smps={0x7, 0x1, {0x0, 0x1}}}, 0x1f) r0 = dup(0xffffffffffffffff) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 03:56:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x90, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x20}, {0x6, 0x16, 0xc2}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2000000}, {0x6, 0x16, 0x9}, {0x5}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000380)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x48adddbfd7cef0bc, 0x3, 0x3, 0x0, {0x6, 0x5, 0x0, 0xf4, 0x0, 0x0, 0x0, 0x1}, 0x800, 0x8, 0xf6}}, @void, @void, @void}, 0x52) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000740)=@data_frame={@qos_no_ht={{@type01={{0x0, 0x2, 0xf}, {0x6}, @broadcast, @from_mac=@device_b, @broadcast}, {0x9, 0x1, 0x1, 0x0, 0x9}}, {@type10={{0x0, 0x2, 0xe}, {0x47}, @from_mac, @device_a, @random="71b3bb24e3c8", {0x4, 0x1}}, {0x5, 0x0, 0x1, 0x1, 0x3}}}, @random="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"}, 0x535) [ 1682.840411] random: crng reseeded on system resumption [ 1682.885440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1682.938046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1682.938075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1682.957340] Restarting kernel threads ... done. [ 1683.014432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1683.027572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1683.715615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1683.773761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1685.744626] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1685.753540] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1685.756389] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1685.760403] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1685.763761] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1685.765697] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1687.784727] Bluetooth: hci0: command 0x0409 tx timeout [ 1689.832629] Bluetooth: hci0: command 0x041b tx timeout [ 1691.880589] Bluetooth: hci0: command 0x040f tx timeout [ 1693.928605] Bluetooth: hci0: command 0x0419 tx timeout [ 1710.035038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1710.036308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1710.039864] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1710.161425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1710.163297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1710.166872] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1710.640096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1710.651364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1710.961983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1710.967242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:56:45 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x45534}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) r3 = accept4$inet6(r1, 0x0, &(0x7f0000000380), 0x80400) connect$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e21, 0x3, @remote, 0x81}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="047aaa7b8edc7c225166ab148bfe9b97028709f17c3490d35b4a636b3c61bd0fa309a6e04a3a12b0c58d2fff35f31d8f5e69170ff4363a0af4243597605794e18714af", 0x43}], 0x1, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open_by_handle_at(r4, &(0x7f0000000140)=@ceph_nfs_confh={0x10, 0x2, {0x28}}, 0x600) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x165c02, 0x0) preadv(r5, &(0x7f0000001540)=[{&(0x7f0000000400)=""/57, 0x39}, {&(0x7f0000000440)=""/137, 0x89}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/37, 0x25}], 0x4, 0x0, 0x4) 03:56:45 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x45534}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) r3 = accept4$inet6(r1, 0x0, &(0x7f0000000380), 0x80400) connect$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e21, 0x3, @remote, 0x81}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="047aaa7b8edc7c225166ab148bfe9b97028709f17c3490d35b4a636b3c61bd0fa309a6e04a3a12b0c58d2fff35f31d8f5e69170ff4363a0af4243597605794e18714af", 0x43}], 0x1, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open_by_handle_at(r4, &(0x7f0000000140)=@ceph_nfs_confh={0x10, 0x2, {0x28}}, 0x600) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x165c02, 0x0) preadv(r5, &(0x7f0000001540)=[{&(0x7f0000000400)=""/57, 0x39}, {&(0x7f0000000440)=""/137, 0x89}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/37, 0x25}], 0x4, 0x0, 0x4) 03:56:45 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_inject_frame(&(0x7f0000000340)=@device_b, &(0x7f0000000380)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @broadcast, @device_a, @random="aa5a91c489f4", {0x8}}, @ver_80211n={0x0, 0xdb, 0x3, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}}, @smps={0x7, 0x1, {0x0, 0x1}}}, 0x1f) r0 = dup(0xffffffffffffffff) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 03:56:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @val={0x4, 0x6, {0x3, 0x1f, 0x400, 0xe6b9}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x3e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r4, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "b68bf0f990d023e5430fe2d226769045"}, @NL80211_ATTR_PMK={0x14, 0xfe, "b2ccece34af6ed073ff3b4136bac47d0"}]}, 0x44}, 0x1, 0x0, 0x0, 0x8890}, 0x20000001) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x3) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) sendmsg$TIPC_NL_SOCK_GET(r6, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x128, r8, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7703}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb7e4}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xde601800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xad6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x60000000}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x17e}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'syzkaller1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400000}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xcd7e}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x1}, 0x8000) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=ANY=[@ANYBLOB="50000000080211000000000802110000b087f4b02f4164f2c00000000000000000000000640001000006020202020202010882848b96"], 0x36) 03:56:45 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_inject_frame(&(0x7f0000000340)=@device_b, &(0x7f0000000380)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @broadcast, @device_a, @random="aa5a91c489f4", {0x8}}, @ver_80211n={0x0, 0xdb, 0x3, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}}, @smps={0x7, 0x1, {0x0, 0x1}}}, 0x1f) r0 = dup(0xffffffffffffffff) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 03:56:45 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) io_setup(0x9, &(0x7f0000000140)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r1, 0x0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) 03:56:45 executing program 7: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_STAT(0x0, 0x2, 0x0) shmget$private(0x0, 0x1000, 0x400, &(0x7f0000ff5000/0x1000)=nil) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x1b}, 0x18) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) shmctl$IPC_RMID(0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7}}, './file1\x00'}) fcntl$getownex(r2, 0x10, &(0x7f0000000000)={0x0, 0x0}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000480)=""/85) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x5, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x5, 0x9, 0x0, 0x8e, 0x0, 0x200, 0x66204, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_config_ext={0xfffffffffffffffc, 0x3}, 0x40, 0x6, 0x4, 0x7, 0x10000, 0x401, 0x7, 0x0, 0x8, 0x0, 0x2}, r3, 0x2, r4, 0x9) ioctl$SNAPSHOT_FREE(r1, 0x3305) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) [ 1711.119198] random: crng reseeded on system resumption [ 1711.126846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1711.135177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1711.144393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1711.233936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:56:45 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000500)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x800000, 0x0}, 0x0, 0x0, 0x0, 0x20007, 0x0, 0x0}) 03:56:45 executing program 7: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_STAT(0x0, 0x2, 0x0) shmget$private(0x0, 0x1000, 0x400, &(0x7f0000ff5000/0x1000)=nil) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x1b}, 0x18) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) shmctl$IPC_RMID(0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7}}, './file1\x00'}) fcntl$getownex(r2, 0x10, &(0x7f0000000000)={0x0, 0x0}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000480)=""/85) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x5, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x5, 0x9, 0x0, 0x8e, 0x0, 0x200, 0x66204, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_config_ext={0xfffffffffffffffc, 0x3}, 0x40, 0x6, 0x4, 0x7, 0x10000, 0x401, 0x7, 0x0, 0x8, 0x0, 0x2}, r3, 0x2, r4, 0x9) ioctl$SNAPSHOT_FREE(r1, 0x3305) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) 03:56:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001a00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x0, r0, 0x0}]) io_getevents(r1, 0x1, 0x1, &(0x7f0000000000)=[{}], 0x0) 03:56:45 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a940)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="280000002800010000000000000000004c0000000100000011000a04728d20"], 0x28}], 0x1}, 0x0) [ 1711.411618] random: crng reseeded on system resumption [ 1711.476372] Restarting kernel threads ... done. [ 1711.510788] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 03:56:45 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_inject_frame(&(0x7f0000000340)=@device_b, &(0x7f0000000380)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @broadcast, @device_a, @random="aa5a91c489f4", {0x8}}, @ver_80211n={0x0, 0xdb, 0x3, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}}, @smps={0x7, 0x1, {0x0, 0x1}}}, 0x1f) r0 = dup(0xffffffffffffffff) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 03:56:45 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) fgetxattr(r1, &(0x7f0000000000)=@known='com.apple.FinderInfo\x00', 0x0, 0x0) r2 = dup2(r1, r1) flock(r2, 0x8) inotify_init() ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000080)={{r1}, 0x4, &(0x7f0000000040)=[0x40d, 0x1000, 0x7fffffff, 0xa65], 0x2, 0x2, [0x6, 0x9, 0x1000, 0xe4]}) 03:56:45 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_inject_frame(&(0x7f0000000340)=@device_b, &(0x7f0000000380)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @broadcast, @device_a, @random="aa5a91c489f4", {0x8}}, @ver_80211n={0x0, 0xdb, 0x3, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}}, @smps={0x7, 0x1, {0x0, 0x1}}}, 0x1f) r0 = dup(0xffffffffffffffff) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 03:56:45 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x5460, &(0x7f0000000140)) [ 1711.603380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1711.710442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1711.936932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1714.607765] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1714.617750] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1714.619090] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1714.624064] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1714.631204] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1714.633918] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1716.649668] Bluetooth: hci2: command 0x0409 tx timeout [ 1718.696593] Bluetooth: hci2: command 0x041b tx timeout [ 1720.744671] Bluetooth: hci2: command 0x040f tx timeout [ 1722.792569] Bluetooth: hci2: command 0x0419 tx timeout [ 1739.192377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1739.193659] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1739.196921] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1739.290707] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1739.291940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1739.294936] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1739.772554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:57:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="08fc040002000200"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r0) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x40) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 03:57:14 executing program 1: r0 = shmget$private(0x0, 0xd000, 0x0, &(0x7f0000ff3000/0xd000)=nil) shmat(r0, &(0x7f0000ff6000/0xa000)=nil, 0x5000) msync(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x6) 03:57:14 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) io_setup(0x9, &(0x7f0000000140)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r1, 0x0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) 03:57:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3, 0x46}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x400) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 03:57:14 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x4156, 0x4) sendmmsg$inet(r0, &(0x7f0000002a00)=[{{&(0x7f0000000000)={0x2, 0x4e21}, 0x10, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012000, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 03:57:14 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_inject_frame(&(0x7f0000000340)=@device_b, &(0x7f0000000380)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @broadcast, @device_a, @random="aa5a91c489f4", {0x8}}, @ver_80211n={0x0, 0xdb, 0x3, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}}, @smps={0x7, 0x1, {0x0, 0x1}}}, 0x1f) r0 = dup(0xffffffffffffffff) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 03:57:14 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0) [ 1740.168335] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:57:14 executing program 7: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) [ 1740.209270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1740.216454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1740.265815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1740.272279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:57:14 executing program 7: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) 03:57:14 executing program 2: sysinfo(0xfffffffffffffffc) 03:57:14 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f0000001c80)=[{&(0x7f0000000600)='\v', 0x1}], 0x1, 0x208001, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) sendfile(r1, r1, 0x0, 0x100000) [ 1740.389244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:57:14 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0}], 0x4, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x78000, 0x0) readahead(r0, 0x10000, 0xa3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x11) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x10000027f) clone3(&(0x7f00000005c0)={0x20000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x2e}, &(0x7f0000000440)=""/68, 0x44, &(0x7f0000000780)=""/102400, 0xfffffffffffffffc, 0x0, {r3}}, 0x58) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x11000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x404000, 0x0) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$LOOP_CTL_REMOVE(r6, 0x4c80, 0x0) fcntl$getownex(r6, 0x10, &(0x7f00000000c0)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r6, 0x40047211, &(0x7f0000000140)=0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) 03:57:14 executing program 7: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) [ 1740.602350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1740.774296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1740.838644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:57:14 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:57:14 executing program 6: keyctl$search(0xa, 0x0, &(0x7f00000004c0)='id_legacy\x00', &(0x7f0000000500)={'syz', 0x3}, 0x0) 03:57:14 executing program 7: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) 03:57:14 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000040), 0x4) 03:57:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd2d800a00000002020202020200000000000000000000000000000000000015"], 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 03:57:14 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x1c5800, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000240)=0x80) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x5323, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000000)) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, &(0x7f0000001ac0)) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, 0x0, &(0x7f0000000200)=0x7) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000340)=0x3) sendfile(r3, r3, 0x0, 0x100000) finit_module(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) syz_open_dev$hiddev(&(0x7f00000000c0), 0x3, 0x200) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000000380)={{}, "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"}) 03:57:14 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) io_setup(0x9, &(0x7f0000000140)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r1, 0x0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) 03:57:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r3) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940), 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x38, r6, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x7e}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x20008000) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r6, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xffffffff}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x7}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x3}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000014}, 0x80) [ 1740.990940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1741.005645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:57:15 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clock_adjtime(0x0, &(0x7f0000000000)) [ 1741.023359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:57:15 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 1741.038503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:57:15 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:57:15 executing program 7: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:57:15 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='clear_refs\x00') pwritev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)='-', 0x1}], 0x1, 0x0, 0x0) 03:57:15 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:57:15 executing program 7: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:57:15 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x2a, &(0x7f00000017c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaa7aabb0800450002"], 0x0) [ 1741.350967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1741.372687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:57:15 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 03:57:15 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:57:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r3) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940), 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x38, r6, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x7e}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x20008000) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x5c, r6, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_RULES={0x10, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8001}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x50}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x72}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x36}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r7, @ANYBLOB="080005000200000026b1d73522cf110d1f87a0b624e20a21fead893d96ebb6c308898f216ff966932fd141038103523a0ab4b1cf71f5cc5c7d20d2cf54605a9ac3d9887bf2049df1e1a5d848d4303c27256fa5185f56a315ce9191574f6673a96f82"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 03:57:15 executing program 5: sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x12c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffe0}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xbed8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xcbdf}]}]}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x87}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffd}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x800}, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 03:57:15 executing program 7: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:57:15 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x0, r1, 0x2}) 03:57:15 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x1c5800, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000240)=0x80) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x5323, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000000)) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, &(0x7f0000001ac0)) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, 0x0, &(0x7f0000000200)=0x7) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000340)=0x3) sendfile(r3, r3, 0x0, 0x100000) finit_module(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) syz_open_dev$hiddev(&(0x7f00000000c0), 0x3, 0x200) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000000380)={{}, "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"}) 03:57:15 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000500)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x20007, 0x0, 0x0}) 03:57:15 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001b00)) [ 1741.787202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1741.809703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1741.820508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1741.835910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:57:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@typed={0x4, 0x0, 0x0, 0x0, @binary}, @typed={0x8, 0x18, 0x0, 0x0, @uid}]}, 0x1c}], 0x1}, 0x0) 03:57:15 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) mount$9p_unix(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)='./file1\x00', 0x0, 0x91010, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0) 03:57:15 executing program 7: prlimit64(0x0, 0x7, &(0x7f0000000080)={0x4, 0xff22}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 03:57:15 executing program 3: r0 = syz_io_uring_setup(0x1, &(0x7f0000000000), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000200)) io_uring_enter(r0, 0x0, 0x0, 0xf, 0x0, 0x18) 03:57:16 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000024c0)=0x1d, 0x4) 03:57:16 executing program 7: io_uring_setup(0x24ba, &(0x7f0000000080)={0x0, 0x0, 0x10}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 03:57:16 executing program 1: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@random="dda978731a96", @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @broadcast}, @source_quench={0x8, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) [ 1742.146820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1742.153327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1742.169648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:57:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f00000001c0)=0x400, 0x4) 03:57:16 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) syz_emit_ethernet(0x17, &(0x7f00000000c0)=ANY=[], 0x0) 03:57:16 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_audit(0x10, 0x3, 0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100)}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @broadcast}}}], 0x20}, 0x0) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2001, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0xff, 0x6b, 0x35, 0x7, 0x0, 0x801, 0x1008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffff801, 0x2, @perf_config_ext={0x9, 0x8}, 0x6020, 0x9a9a, 0x0, 0x4, 0x4, 0x8, 0x5, 0x0, 0x4, 0x0, 0xc9}, 0xffffffffffffffff, 0xe, r3, 0x1) 03:57:16 executing program 1: clock_adjtime(0x0, &(0x7f0000000500)={0xfff, 0x0, 0xfffffffffffffff9}) clock_adjtime(0x0, &(0x7f0000000a80)={0x7}) 03:57:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="a975c90aa6483031e957e060102ef25511", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c6eacad737f3cfd69967e6b21a5329a01318506b495d91fb4231ee8500fdc7c42fbe1a7a4e2365ae4a55026c2b68fc3cbfdeae74495789e98be3d61f653af72f6cc23b6cbe56e", @ANYRES16=r4, @ANYBLOB="000426bd7000fbdbdf252e00000008000300", @ANYRES32=r2, @ANYBLOB="0c009900050000004b00000010009d00120400c0030006006501ff070800c900781400000800350005000000"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r6) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940), 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x38, r9, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x7e}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x20008000) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x228, r9, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x214, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xa0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x36, 0x2, [{0x4, 0x2}, {0x3, 0x8}, {0x7, 0x1}, {0x2, 0x5}, {0x7, 0x4}, {0x2, 0x1}, {0x5, 0x5}, {0x2, 0x1}, {0x1, 0x8}, {0x3, 0x9}, {0x2, 0x7}, {0x2, 0x1}, {0x7, 0x7}, {0x1, 0x7}, {0x0, 0x7}, {0x0, 0x1}, {0x0, 0x5}, {0x6, 0x2}, {0x4, 0x9}, {0x0, 0x6}, {0x3, 0x4}, {0x5, 0x3}, {0x6, 0x2}, {0x3, 0x7}, {0x0, 0x9}, {0x4, 0x7}, {0x1}, {0x2, 0x1}, {0x6, 0x4}, {0x2, 0x6}, {0x1, 0x3}, {0x0, 0x6}, {0x0, 0x8}, {0x3, 0x4}, {0x5, 0x5}, {0x3, 0xa}, {0x6, 0xa}, {0x3, 0xa}, {0x7, 0x5}, {0x1, 0x5}, {0x7, 0x7}, {0x3, 0xa}, {0x1, 0x7}, {0x6, 0x9}, {0x5, 0x9}, {0x5, 0x8}, {0x7, 0x2}, {0x5, 0x7}, {0x4, 0x6}, {0x0, 0x2}]}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x0, 0x7}, {0x1, 0x3}, {0x5, 0x5}, {0x0, 0x4}, {0x1}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0xadb, 0x7, 0x3f, 0x6, 0x6, 0x1, 0x9]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x9, 0x30, 0x18, 0x16, 0x5, 0x60, 0x1, 0x16, 0x6c, 0x1, 0x4, 0x2, 0x1b, 0x18, 0x18, 0x48, 0x0, 0x60, 0x6c, 0x36, 0xc, 0x3, 0xb, 0x12, 0x6]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x30, 0x12, 0x60, 0x5, 0x60, 0x9, 0x1, 0x16, 0x4, 0xb, 0x9, 0x2, 0xb, 0x5]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x3, 0x8}, {0x6, 0x3}, {0x1}, {0x0, 0x5}, {0x0, 0xa}, {0x7, 0x7}, {0x6, 0x4}, {0x6, 0x1}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x2}, {0x5, 0x2}, {0x2, 0x5}, {0x4}, {0x2, 0x7}, {0x6, 0x2}, {0x0, 0x9}, {0x1, 0x6}, {0x1, 0x6}, {0x2, 0x1}, {0x6, 0x2}, {0x1, 0x1}, {0x0, 0x4}, {0x0, 0x4}, {0x5, 0x4}, {0x6, 0x5}, {0x1, 0x9}, {0x4, 0x9}, {0x7}]}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb5c9, 0x4, 0xf001, 0x3e65, 0x8, 0xfff9, 0x20, 0x40]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x4, 0x6, 0x1b, 0x16, 0xc, 0x16, 0x6c, 0x4, 0x12, 0x5b63ca57a5f145c7, 0x4, 0x60, 0x5, 0x9]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x1b, 0x6c, 0x2, 0xb, 0x3, 0x1, 0x6c, 0x1, 0x6c, 0x3, 0x24, 0x15, 0x6c, 0x12, 0x48, 0x5]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x5, 0x6, 0x30, 0x36, 0x36, 0x12, 0x1b, 0x1b, 0x60, 0x16, 0x30, 0x26, 0x18, 0xc, 0x4, 0x60, 0x48]}]}, @NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x614, 0xfffa, 0xaff6, 0x9, 0x5, 0x7, 0x5]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x24, 0x36, 0x6c, 0x18, 0x16, 0x48, 0x25, 0x18, 0x24, 0x62, 0x6, 0x48, 0x56]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x5, 0x7, 0xfff, 0x4, 0x6, 0x7f]}}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x6, 0x6}, {0x6, 0xa}, {0x1}, {0x0, 0x3}, {0x4, 0xa}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x3}, {0x6, 0x5}, {0x5}, {0x0, 0x4}, {0x0, 0x7}]}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x1, 0x4}, {0x5, 0x4}, {0x1, 0x8}, {0x2, 0x3}, {0x3, 0x8}, {0x3, 0x9}, {0x3, 0xa}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x7, 0x6}, {0x3, 0x9}, {0x5, 0xa}, {0x1, 0x4}, {0x7, 0x1}, {0x6, 0x2}, {0x1, 0x1}, {0x7, 0x3}, {0x5, 0x9}, {0x1, 0x2}, {0x3, 0x6}, {0x4, 0x6}, {0x0, 0x7}, {0x6}, {0x2, 0x7}, {0x0, 0x5}, {0x4, 0x4}, {0x3, 0x8}, {0x7, 0x8}, {0x1, 0xa}, {0x6, 0x3}, {0x4, 0x7}, {0x3, 0x4}, {0x6}, {0x3, 0xa}, {0x1}, {0x1, 0x6}, {0x0, 0x7}, {0x4, 0x7}, {0x0, 0x4}, {0x2, 0x3}, {0x0, 0x5}, {0x4, 0x2}, {0x5, 0x4}, {0x3, 0x9}, {0x3, 0x1}]}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4b, 0x2, [{0x1, 0x1}, {0x2, 0x9}, {0x3, 0x1}, {0x4, 0x2}, {0x3, 0x2}, {0x5}, {0x7, 0x8}, {0x7, 0x1}, {0x4, 0x1}, {0x2, 0xa}, {0x1, 0x4}, {0x7, 0x1}, {0x7, 0x4}, {0x6}, {0x0, 0x7}, {0x2, 0x8}, {0x1, 0x1}, {0x1, 0x4}, {0x4, 0x7}, {0x0, 0x2}, {0x2, 0x3}, {0x1, 0x6}, {0x4, 0x1}, {0x7, 0x5}, {0x1, 0x4}, {0x5, 0xa}, {0x7, 0x3}, {}, {0x1, 0x1}, {0x4, 0x4}, {0x1, 0x8}, {0x1, 0x6}, {0x0, 0x3}, {0x7, 0x1}, {0x2, 0x7}, {0x0, 0x5}, {0x3}, {0x6, 0x3}, {0x3, 0xa}, {0x5, 0x4}, {0x0, 0x5}, {0x1, 0x4}, {0x5, 0x7}, {0x7, 0x4}, {0x6, 0xa}, {0x3}, {0x0, 0x5}, {0x2, 0xa}, {0x7, 0x5}, {0x7}, {0x0, 0xa}, {0x1, 0x1}, {0x7, 0x8}, {0x5, 0xa}, {0x1, 0x7}, {0x1, 0x9}, {0x0, 0x9}, {0x5, 0x6}, {0x7, 0x6}, {0x7, 0x1}, {0x7, 0x5}, {0x0, 0x6}, {0x4, 0x8}, {0x3, 0x8}, {0x7, 0xa}, {0x4, 0x7}, {0x4, 0x6}, {0x6, 0x8}, {0x2, 0x7}, {0x7, 0x1}, {0x6, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x3, 0x3, 0x7fff, 0xfff8, 0x0, 0x3, 0x18]}}]}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x8000080}, 0x20000000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 03:57:16 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x1c5800, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000240)=0x80) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x5323, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000000)) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, &(0x7f0000001ac0)) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, 0x0, &(0x7f0000000200)=0x7) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000340)=0x3) sendfile(r3, r3, 0x0, 0x100000) finit_module(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) syz_open_dev$hiddev(&(0x7f00000000c0), 0x3, 0x200) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000000380)={{}, "089d93ff74b9e7eb782e44e0ec0194acffbb4fc743e091d64b840ef888b882babe4396c5dee597106b1944054993fb48f56065759563b732b9b3781070c18bec2c5478b5bfd5ff2b25a6530ddff6e86d79bf3aadaa12d7783225c65ef7ad3254a9423ecff485eaba1a0582e41515acbc9cb0f0f6fc423c80bcf41371ce8e8eae8a842ab0aff48580a2290d97a8c19324bc40510e21ab7cfa593a2351613e181cdc45e27902663d031faca2c6d40c898c64ebd326a123f75bc9db20cf7bd76286953a533541260c6180e68b312162ba70971c5cd51f95246ecdf11ad4393495f20f5780becbd4f31764fe3694627497e0660632fc2df3bcd1c37167f99b27926f9d12ee1e29786ee25c052769670478b792be09155bb866aeb9961c84bdfb756002b239867c4f11616a14a1b3cf21c863ab93bd9ed613889615d194115676d5c9f262cea8fe51de130f9d7c51da4d478621985a71581f7b3908da748e5f54941acaef8363c490ade676dbdb694de6ad230dea0beccd7cbe70495bda7babdd114b47ebe68d1d634c1fa7e041800ef7c1fe55be30719584a567f3426dec21587cbe0e6312968d21ae70c5387d5e01c0ced37604ba863b0f8132a480f9f4292118769afc5229a66399fb294738d4c8ce597eab813ae33801f832d825e2dee0607463488f7efe6e1c01b0667efd6c8af099b6c75ae9bcef7ce9fd61bc89de8d9a682469b5059b9757f0cc24c73d47b038a485a7074beacb0c6d3745294e7501dc434b8fcdfd1c20628b7e1fb7bf5455b2dc36240faf4fbef01a32283ada8da6688c0231706290f90892f847c5f9a2f59f999ae3ff10207d9daa05620aaa5023b498cf2a3f0bf4674cbb6190f40094d519b7c6435567f86b84d36322cfa06c66a3b0e9d1648c2a8a8d61230fa72506acac607cf1d59506d320f0b1419ad3ee53ce74ef4794b0cb0e474f4de209c5f57e4910bda96599e1968b96740c33147716b5d3af0b26c99b3726640f0ad5deb4278bf31f6be3e455f03cb80763567de302d631ead7bd829b5ce5bc8aa0748431a3999e9faaeb165bea89cf5eaaa30c75dbaad3ec232d7f08aa03823aea1726cc0f3df3a7be8eb3b9a84497b91f13be39bffb3c8d11d86dee1dd15b6fd8bc4ddb67eca31db244d0586f398cf889eaa4eb8da5ce7b24c25a1d4ef4847da6c01b4094d965baf5ee41250260022d20d93597b4e4bdc31352e26d25a4071109dbc23c0e2dcaf38791eec48b84d1785c055403470ea0341655b6d10c0c37a285ea334cff244186fd5afaa1fb1e9fb79ae47117697b555ecdcfe8a4a34f71caff8920f487ad3fcc0fc3cdb8a583d5afa2772390e501acd44d564b0fbc71f5e35bba56216221a1a02bc99713f712a210ec1b21259f0e1810b2b8028c3631a8c7ee2455d3a13248c66e7d2575ddcad1dee31c329394b6302bc0595bdb9367e8d11f7876837a96300ffba4602389a3f8ac7f028dc1c96166990b5789dc00e0195f88789169bafade748f0a0b4513ffb03cd04d1f956be5ea1239b3f437d66da616e822816b457661bef70dc0bbdad7d212170ee4850d9975fc12e5ba65ed40a8b365c45fdd9e00ce89cf80892796731a08ee4d26520a0c49ea56130f0d7b4ad8262b383c7812f75e6f76d0a474c2273f60dd6078dab48c2673f65feaf3aa8e17e67d948667b70216395edef065424e55d3d5a9d944a91f7c690c1ab8350560e465a3a30bf9a99cc7ef2ab44eb7948fd517b3fc26bdc5120b7204b8f421a05836b1b71222ced2008a09e547bed6ac27e2fe61c113a8a116218f5a1e4834bd2c17b4e7a912b0dca573d9915a3af2672adcf50534f08c384d453b36c540974aedb203825db7b54cbcb1d27cefad0eea3841186b729e9340ebe4b63211a5672ad08a50b0547ec22f098594fd4f0fdfc1a6cc51b9f5985c16196284ec77166abf5c35bc293edbf4c20041338ac59f63aa84f9c8c624fe1fd8db8de0623c6ea6f8f2e3f2c43b288e3eae29fb2f2737392597436111cf24c91de1728232d1edf36946a4e520f8a10cb419471c613785ed54acbb37c0b22b3b4b75c5298b404b150a49605eae98e6e871741304fafadf43b9d6d9416bf8a653074ad0de44e1865bc3cc325b02e74826e2069909ccff5af03f4010d095292a8b4a275f58d9ceec62251df1e18782b69a55e0e2305328d6edb792dcba2b0b39f7b18879c02fdc6af6635c0e37af5b5653aedaee7105cdd837aaedfd9f1ea38257c365cd638a7f7be4abd681d6a10bd8fec688b1523458878232fcae6d6de2e71378603446ee592ba346aa77ebc9307913f246285e294c9b9f0eb809b4bfb700a5563f994c8b14a1a044c3e48141578eb819b7501cea6d8281a6a92eb33fe4d1937428c162af235e42eced1e2b84923b6a3f7fa0698ff28cc7ca3c59bcf4057daea62a1659011c9d732dfd6021fc1f8fca3b1afe94a91568e28924524eacd5eaf1f4bb5f69170a085b8e92fd047aa770b94a66ba47aee9554882032c10bb7ac2fdb3087a8f69b7f2047e56268d651c90e28d6061bd36c9342eb07af1c78b61c65fb9d24aef4b0b5ddb4e9cf8805d3704e3947978a4757e93fe863874c133d6191b66ba4df329f9ee7990e09eb5b2407255584e6f270b8dd5e297b5b47a14e7180c707c8c44af49b096178093c3b8ec39c5a0284b92cd239f7c1fbabdb26138815e2369e4e68cc1bb8b12776c4c6107fa163b398ebb5a2c409a879debcea4fd6e822e8fd4ac5131fade07bea6019cf9bdbeb1bf021fe9b83ed8211def5183a2048ce0a55d4c2400f982fad0f940aee75da01ea180471128c62645fa3f68a5c8fb60d117bb61d46c161789d46429a01db68e9083894f62d1f40ed49e708e9abde8ec189cdcbf8f26e84d095c867616fa5289ecfe82df3e7810d9a060714938d3ccd645e92a4f17b228dd6478038a0c2d6558bd85fcda57cbb99376a97cfcfb21ffc319f283e92eb9a0b134dfddcbbd7cb7a7498197ab7b45fc6e5d644d4f0a5bf7186b34476a44d78b03dba15078444c32ad69a20a1fafefdb5b4fd8750e6b8c4fa9872bfca18ed38a60d902e2a5609cb1565650a2dbb61106a8009e67c1efd11f61d13fab18dc6249ca61a308089a30e297ab012ed97b456b042db5b93afa754f694833e9b5c042c40adca8087ed3b3581ff5e4e5cd5399620a031f56fb5a68d852617f66b2eec6763d81fd78a10f08b00e3b2778dfa564a7fbe9e3dc53870a2ca02c5426f86462d245115b8a06d05b92f755e7330167646862ca5e85754b633df33335ee4ff285dda9b02d570be9bcd572e7ac06a6db455c5af8c94ff06b79af049c8f2cd1e5876885e02e165070bf591dde75dd12b5c55cf636c4f9bf2bad09dca5e663779223b9e0d00b6113a6330cbec4d623e83609a5e8639d8f25f2907425d942d2801a75316f7140131aa1e9277e21e115ceebdf28c768be9a9759dab0986e62c11f67fbc1505996b5e854b38a0c9b97e0d4646f306d6adec3c3c54c911a19092497bd61d22cbfb8c730a647d757635e6f23447c9cf14b7630a669a157568d781374a2ffeb9304e12715a25b04d20f203125b40eaf2e7b5a1e9690618b5313c7071d3cf189a8f56cddad4dc7b814fecd72c878ab5af90c38a0854538005bf2b6b84bbdc839d579e1e85ada74035aa9c1c672d942e8af9dbe01f67c7757935bd4c5a2839ad4834345d3ab77e290a92977561b762d39a213c76ea7a84c16aca7ca7360f2f33d6ccfd6246b086381d5b3eacf8ec6a9d6e1be3484649eb3617116815c1fc28ed45f7cd9470b22eeb274e9f335566a482ed121a51ff1e65e66de256a62ad7a67252535c523e8e76335a7b1da970889abd34c54353806609800bcb9053aebf3135e0cc8b9b738d131d9e1c3a03520384c345c8d99e85cffd6fa06c1e8f427417e0f77f42d1c90421af8aea63054c986a9a8eb326ca216e6c1bdd512bb390e88fed910d28463b9c672f9365441a18363a7f6b65eaea6d8229c300047e883330a3db636a234b674389e58f640d8840be520d23cf4d0dc42c2b2c665da1073b5384f7f6aac166011ff2d8692bad3b36a072b96bd6620995ab4a383bcfd5070ba7d49724afd9ecd3f023b446c93dbccdac55b5608cb554c6fcf4656b40ba13ac213a453860e16406d207425491e1c2837641fe9cc28cbcab384d1f24e0315c41addd3ce0e0038f68fb0407c4453037d1873d65d5bea2f844e95f040db8d1451292c428ca358b548df3a6c56c493dced70f499fcc1aa58dfa9c94657b324962150966abca69da1b4894626551ce7d7b7e0066a4577368ec5766bf2b36710674fbbc548fa0282e854f6ca71ce586df28f9d7db96b43ee95472906588d124079d95fe535d4b66f25de4c20f9f4945fb70cc8afa62e01add2ba201690f4e66f534c270bd0b3d61e1ce57e9ec685d6850b3628c3e77dfac4cbacf1728a81995ac2f1f05c90d38b2944cde6226db7828a7018e866d8427e829e231377039636224b268aa2fe30d0eab3af26e4d2a10076d1141304fc53f145100cbde57807801de3bfacd239a22d12fc764195147b1bc659313b471775e1d66fdf9edcc7ec240fc763700bb1432d320f9b8db117c5f3c65da217d302244ad8dc1ae6929bde6c46effbb0ffc9f8789bf16301977cba40a659ec8c98c43cdd4bbc929be8ad047b864a8531472c907b3d5977acd9a09a6441a870d96798954f37baeeb48fca2e875da7dd82b1dbc534fca5ce185ae03950b3769a11ab1a9261505782dd231affb67d54df4d46be1e222ec963fc3a0e3e9b16c31dd3d0b4bce543c032cc405b9c9791bf1abe279cf8507e278473636bc1d5dbfb46549853473139d01df083526eff6b0ea422261c0ee59239125cb2cffad60ea7570baa753b25a0c6f671d9aa387b10ea864c638366ff07a5210beb6b0ac254d04ec6d768f6094dac562be519d1796b3614af84ba617280a3aee2d920337fff5ca128cb62b90e827f7f6ad308cbd195001fb6bb2688336118493b5ab8e4fc896e2760cfe896204365a5e8d389cbbe556b73ca5f66d33c15414c42db65f2577e0462f807a5877aabc2a70d9c1a7c287992d19c1cf33bed047f992821e58fc1644b18d21bad9c708cdc4f985eb1935de6d5c6307c67c02f0305e1c8047936e78d3435e5b78b3654b1f43fceefee754f03657fe21bcab63ece97b7fd3d0eb30a8a205c977792e0e6e5c6508bccf07e024fb45a2b896c09b657181d3de977e7ceb777d654c9541dbbb84d5929eca7b56a295bce62dc5e4c5a41854594385e80be8746124a33e07e2acab49694966c05648445c1ab57abf4204e1b9278999d9c5cea841f7a87c739e410a4b725e56f5756cb26674427fc32a3c23200000000000000031424b20f17cd436ed52fb3623901e0491bf9997216a91db9a73bfd4ea5911887a6bbe1d448a9abf4e02809c789021ee2746ea94ad2ba89464f5924610d42851caaa59e403e13ca1f662bc40052d5b160fb179c13263762f0dde61419f139b6d3615ff5b8440cec95a0ca7609f4bd3112667c12470773ae29a0196f8953b6f7733fe67bb019eef8bc4c46c76b9611b168a30e723dc6dc8cb4deaa6b05413179e9c606461cce590edaf64058e92d642296c41c12e8774c851b4994372b42cc2e472f9e1798448f1b745186f0d5f6127da1053ae72b31fc524f28fa005842e060ca9959fe9edd00"}) 03:57:16 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000000)) 03:57:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000740)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0x9, 0x0, 0x0, 0x1}, {0x8}, @device_b, @device_b, @from_mac, {0x6, 0xff}}, {0x6, 0x1, 0x0, 0x0, 0x3f}}, {@type01={{0x0, 0x2, 0xf, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x80}, @device_a, @random="4095d8b851a4", @initial, {0x0, 0x8}}, {0x3, 0x1, 0x3, 0x1, 0x2b}}}, @random="dde9dc4c8ce0bfec1ffb722e5196b2dc693008af0b474fa0ffd2acd31fbfdf865aa1066bb217a8b632ac7685a32e4751f036f2cec2fbd6359f7356a2b24574bf70d89d78e45359f10919c27f5930d6275a453e8f3a7f2dde3f75307818fdffa0b2a0b885be7a0646d14e163ba2301a32a182a7a93b328ca31fb5623cfc39cb59dd4b173db2068d9a7e25b79da4c138aa2a2c68d2db327c621fc60f526812b5759c66bffe909681eb8c73f75a78263b29144a21e710db9f0bc32eba1f7efc24f5296a5f6bad3d639363c0eb565551afc70c2f67280f5e34c295f8f014d3a91617b2d8cb5ab04c0535457097ac1544fabfb89679973b6dd0a9f88b41b8dcde61d446cf3245a9ff669a733df480fe569285719252b1da2ccdb2c815a113cd1f2262035d32f632c659c5a77e07a1a79a1aa6eecc61a181dee8a31704b84bf3995442eeaee9070eea1c9d4e6a18e5262974d8df1f719b134a785807e70e2eccb673ac6bb2a4e7f2a21d6f1ac1af20a7615776deef7144584204971261fabede184c7fb5a011943af99dc937250d54ca863b351f6b2b23ac872e1508195feb01078a2cc8029b447cffc94940915251385d7be76987dd96ce8acd18c588e0888da3169e528e93acb6d8f5e95041257df2a916e9aa4d8c668e6588f575f76e701ab22195b8fe6a40cfd503ed3d9261392322d3453a426af672b0ddd74709ca297b709517e7aacd085d3555d265b540886aa871d8a0eefc73fadb08498c15487340f8a61aa0258dbb1ac0e8cf590e2a2581ff1362f7dc15839a6b40ed7b057bed64492c9a132de44577790bfe80cc6177cefad332d6b8e61d4325773232b8f5907dd75752c2bb6cfd7bd33697537a1660c57e93dddc7362af2e41431c41c695cedf86e8b117e55b235c00f9374489e79dec25693db5a76fd48f112f3c3d8dc8bf993f45ab0dbce40f770678372fca98b91bd82fe5720692d5c3a9dd09bf710a6b4f38fd2e87210c9b10d4d09e67dbc483b9a8d6b720fa38cfde437c149eb27d21b6bd03f335c18b3e6d1cff061a2c941231535d4bc121d146734b3722b34ce5ca4cd99870abfa40fa8df49c694a3e64434fb79aaa620992dee3fd4018001fd4bf848f9d9a43005aaab15e6e6b0a776c9ec4efbfb24a084d9c194e837dc84a23fdcf9816c63bc337c6cfa0a1865d12b190315e08e4318dc51fb24823048ac2853e5630cf190108fd901da9c0ea702639f3e6105dc9e4146c462a4885ffacf58de37fe7e0973a0f6a95768806eb9a48683c69fa2dd77d7987dd0244a4103bfcd4db37406858ec9eaf7ebeabae7ea65573eee90e1724ca7e58f859ef5e801f3ef9646f8f849b9816ee8478e018f8cb6e91b1cda7aedc1ef86665dd146ce3ff619aa29c05278b58328e72c87b0cb33aab0748a7f2f3225f60e438c69b32081f7a17961abc7f264e5d654d463d9578b4069e1d27c7c001f788900f855a0d62f12bc7f2e76656ec39f5b548b6d8e6915a269dc6689a7947e8cf67e80f3953e46378e88750e68478b0b5491c721d3cc0102a83461fa3dd5108a5baa977ad77e88f273c2d01c776f08ffe952255081a89b9ca4aefe6c7086f08fe7cf86b26f34c00b89979ec8d2bfeee72cf86061218df0dd71a0fe3934ad87350920400b67582f01636cd869594410461beff560d4325dd9d74a3d60b733e10d2bcf2a335dee0369ce5f1c64060d9df377cd4cc9086b2fa369ebfe3036c610efac61dc6bcfd59be603d7138b558c5c2791cc365d64bb06ce7ff86c70643dd33c7071d84f7b84941036ba087ed9d00df446f5c3e3ed361d2b833336e4aa1f12de03328f7244655eabe71ee5625f647230424a1e355f8743eb6af809abd1e76e672c4938c33ed8543d74754846c8eae08730ed4050f3f6e11f78b1adaae32459981fbbc68aa40ef0df5f4cf1fb813894b49a0479d1416c227f36b8be59b72d8f922dc792096211ba98d89ce7f83614b7062a92d56da92fdc46c575e68ac3f75063b0ee9d58990e12931d4eaa7f959859caa1662a4a23cd295a2a7682b8f7ac5cec98171477a11cde762dccad3a52474470d62d99c63204e076f90cc01230a45ed4c7da71d528f33a788191ea6c49aa77079903da6cca798a2279ca66b668dd53f4a571e0709e787ad40c236c6305e2f7be246c5c932755e9fb5f254ae9e11687f373cc94b9dbff39fcc1da3c3f2e53a071c65ab090f1c11c37b703f95040115408a6901b54f38f8d6d8584b86c24976a974e58d0f99e728314a20ef46778eed0eedacd47037175fe8298ea5d659d481a3fecf42f9fd23f4f6ab131b97dfba0b12dc5825a1ab7608eeefe652f13b87acceae6a935106277b414653f269f8cb4a1bd74bb867aabef575acf3a745ec24f02b4f588106114aa00bad77f48d854b622b56548e0f1c8bccfad1d0a930a27f0ac464ecd67a6203cb983152c292dc142c73c405ceff8f"}, 0x70a) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0xa4, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x298}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1a3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ2={0x8}], @NL80211_ATTR_BSS_SELECT={0xc, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x101}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x800, 0x1, 0x7, 0x0, {0x9, 0x3, 0x0, 0x3, 0x0, 0x1, 0x1, 0x3}, 0x8, 0x31b, 0xfc}}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "d4bd29ac"}], @NL80211_ATTR_PBSS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x3, {0x2, 0xb3, 0xffd5, 0x9}}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8d1}, 0x24008001) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r5) sendmsg$TIPC_CMD_DISABLE_BEARER(r6, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r7, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", "", ""]}, 0x2c}}, 0x1011) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r7, 0x300, 0x70bd2c, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c0}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 1742.768254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1742.784549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1742.793583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:57:16 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:57:16 executing program 3: r0 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="ca", 0x1, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x9, r0, 0xfffffffffffffffd, 0xfffffffffffffffb, 0x0) [ 1742.832858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:57:16 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, 0x0, 0x0) 03:57:16 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0) ioctl$NS_GET_USERNS(r0, 0xc0189436, 0x0) 03:57:16 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000180)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x8, 0x3a, 0xff, @local, @local, {[], @ndisc_rs}}}}}, 0x0) 03:57:17 executing program 2: openat$snapshot(0xffffffffffffff9c, 0x0, 0x462003, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x10000027f) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000140)=ANY=[@ANYBLOB="010000bcb5d876ad3ca7814f", @ANYRES32=r1, @ANYBLOB="016669d10743"]) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) ioctl$LOOP_CTL_REMOVE(r5, 0x4c80, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000340)) openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$setflags(r5, 0x2, 0x1) [ 1743.119783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1743.354978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:57:17 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) 03:57:17 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:57:17 executing program 6: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futimesat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', &(0x7f0000000240)={{0x77359400}}) 03:57:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r4, 0x0, 0x40, &(0x7f0000000080)={@rand_addr, @remote}, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x3) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r6, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x31}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}}, 0x40) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000380)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x6, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x9ed}, @device_b, @device_a, @broadcast, {0x7, 0x4}, @broadcast}, @a_msdu=[{@device_b, @broadcast, 0xd8, "292349ffa168117fdc6f23e57f0f5df151fcfda7a7074b5e84ec91ff9d501f222cdfbabfe4b53603edbcc62083b9355aabec26413f4c090abd7019f720e569df340899bcc6fe42313f4477185ee391e1a9afd4bf384855da28f9a058c4d9e1935ef2a981eef6266ff2c2a538f085614918f536b42468f103dd6189cd9cef217be6aa14ae3a943c90d930c95eb67fb68edbfa557a57484f5013b55b6cd7a063b825972cc44df2543f9e6dbb5520c23e76be1d8ef023eb1740dbd330d111852ac067b3fe6d80f01b2c4da1fc91da139b6a56e6fa2addaf2e59"}, {@device_b, @broadcast, 0xf6, "ad6a673b2b9a27a95bc1f9cbb32237c98f22e437eb5eff9aa93395b431c9445e8104b55348048fa66781612b8c88b00c20deeb138db0541328317889f007c3886ab1b3bac18c37f3450306dd201c396866ef8c8d2b7be27a2b2a5591576108931bd7f1f52068576bab2e73eefa56776ea1caf2584eaf8f2bcff7caecb94ec31e72eace90c3ab288824bdbd4a45bd4b0d551b9bf1201fb2134ba9991e0ed2c63aa30350d15db42a2721c5cdd2b03b7d30b0579118e5b5cd9a7def586abb84472d5167ba8f42c2429c5f80ef1dde732f1667be8d638a170c9f118e70b03f292ee72405a8e6dbdbad781abee06c11d949a665b51de469ab"}, {@device_a, @device_b, 0xc5, "d1dfc7ecbc34f0429b77831814c1be9a58e679d663fde7590bbf26993a36d6eaf462cf4e546f9377f0c25e72614facdf194af8b2812417eeda0fe5795e829b98d32e023a561c85acca170b36b2965399fdad3e77289f30dc517b7553ec1c8ac114d7ea09c6bc726511015e11afe1cdac982905332d13740268329ff20889f1483af90df16762167af415a14d51f83c4fd4390f9ecdd27c643cca8d6a532fd38341a9db455a9b2c78487aacdf04674a4f9656e52e557f70fdae3df89ef376312c833eeba75b"}, {@device_a, @device_a, 0x8c, "99b1a17bcbddae2f9de1d4e22bbf3210696402fa8bf139a9e8be373809f7fa1d800c0b0503c5808132557719b4486e1e9e1c8fff16691e9c42f5de7638c8e19cc7f818e512e48e9e02a925a23ceb7f1d95cdfd705d110ead0d42e5ae0460a07fa2ebebe62d8a1688611d246f16ae09360d514e964d66edbaec7bc9c3074fd7558e0e52fa4f9dc8e5742b9414"}]}, 0x37a) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000740)=ANY=[@ANYBLOB="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"/863], 0x28c) 03:57:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x1c5800, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000240)=0x80) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x5323, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000000)) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, &(0x7f0000001ac0)) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, 0x0, &(0x7f0000000200)=0x7) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000340)=0x3) sendfile(r3, r3, 0x0, 0x100000) finit_module(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) syz_open_dev$hiddev(&(0x7f00000000c0), 0x3, 0x200) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000000380)={{}, "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"}) 03:57:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 03:57:17 executing program 2: openat$snapshot(0xffffffffffffff9c, 0x0, 0x462003, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x10000027f) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000140)=ANY=[@ANYBLOB="010000bcb5d876ad3ca7814f", @ANYRES32=r1, @ANYBLOB="016669d10743"]) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) ioctl$LOOP_CTL_REMOVE(r5, 0x4c80, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000340)) openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$setflags(r5, 0x2, 0x1) 03:57:17 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x0, 0x0) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x6, 0xc5}) openat(0xffffffffffffffff, 0x0, 0x242040, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xc2, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x190, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x2, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) r2 = inotify_init1(0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000540)={[0x9]}, 0x8, 0x0) dup2(r2, r1) acct(0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0x1000, 0x794b3144, 0x7, 0x9}) [ 1743.477691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1743.504612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1743.508696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:57:17 executing program 6: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="9c08c10a5e769fca815874eaf5ece38a1f8cc5a85857c94ad2624a8833900e2dc09b45daf46d8571", 0x28}], 0x1}}], 0x1, 0x4884) 03:57:17 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$setstatus(r0, 0xa, 0x42800) [ 1743.561544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1743.579369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:57:17 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x0, 0x0) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x6, 0xc5}) openat(0xffffffffffffffff, 0x0, 0x242040, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xc2, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x190, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x2, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) r2 = inotify_init1(0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000540)={[0x9]}, 0x8, 0x0) dup2(r2, r1) acct(0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0x1000, 0x794b3144, 0x7, 0x9}) 03:57:17 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1c1042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10004040) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) 03:57:17 executing program 6: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="9c08c10a5e769fca815874eaf5ece38a1f8cc5a85857c94ad2624a8833900e2dc09b45daf46d8571", 0x28}], 0x1}}], 0x1, 0x4884) [ 1743.707790] [ 1743.707966] ====================================================== [ 1743.708402] WARNING: possible circular locking dependency detected [ 1743.708838] 6.2.0-rc4-next-20230117 #1 Not tainted [ 1743.709156] ------------------------------------------------------ [ 1743.709549] syz-executor.3/120713 is trying to acquire lock: [ 1743.709912] ffff88800fe52170 (&journal->j_barrier){+.+.}-{3:3}, at: jbd2_journal_lock_updates+0x162/0x310 [ 1743.710552] [ 1743.710552] but task is already holding lock: [ 1743.710919] ffff88800fe50b90 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_change_inode_journal_flag+0x17f/0x550 [ 1743.711597] [ 1743.711597] which lock already depends on the new lock. [ 1743.711597] [ 1743.712097] [ 1743.712097] the existing dependency chain (in reverse order) is: [ 1743.712568] [ 1743.712568] -> #3 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 1743.713015] percpu_down_write+0x51/0x350 [ 1743.713325] ext4_ind_migrate+0x23b/0x840 [ 1743.713646] ext4_fileattr_set+0x1521/0x19f0 [ 1743.713967] vfs_fileattr_set+0x7a2/0xbd0 [ 1743.714277] do_vfs_ioctl+0xfa6/0x15d0 [ 1743.714567] __x64_sys_ioctl+0x110/0x210 [ 1743.714866] do_syscall_64+0x3f/0x90 [ 1743.715148] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1743.715512] [ 1743.715512] -> #2 (&sb->s_type->i_mutex_key#6){++++}-{3:3}: [ 1743.715977] down_read+0x9c/0x450 [ 1743.717377] ext4_bmap+0x52/0x470 [ 1743.719624] bmap+0xb0/0x130 [ 1743.719894] jbd2_journal_bmap+0xac/0x190 [ 1743.720244] jbd2_journal_flush+0x860/0xc10 [ 1743.720607] __ext4_ioctl+0x9e3/0x43e0 [ 1743.720941] __x64_sys_ioctl+0x19e/0x210 [ 1743.721279] do_syscall_64+0x3f/0x90 [ 1743.721607] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1743.722025] [ 1743.722025] -> #1 (&journal->j_checkpoint_mutex){+.+.}-{3:3}: [ 1743.722625] mutex_lock_io_nested+0x14c/0x1300 [ 1743.723120] jbd2_journal_flush+0x19e/0xc10 [ 1743.723594] __ext4_ioctl+0x9e3/0x43e0 [ 1743.724044] __x64_sys_ioctl+0x19e/0x210 [ 1743.724507] do_syscall_64+0x3f/0x90 [ 1743.724929] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1743.725492] [ 1743.725492] -> #0 (&journal->j_barrier){+.+.}-{3:3}: [ 1743.726127] __lock_acquire+0x2a52/0x5e90 [ 1743.726604] lock_acquire.part.0+0x120/0x340 [ 1743.727100] __mutex_lock+0x136/0x14c0 [ 1743.727536] jbd2_journal_lock_updates+0x162/0x310 [ 1743.728079] ext4_change_inode_journal_flag+0x187/0x550 [ 1743.728663] ext4_fileattr_set+0x14fa/0x19f0 [ 1743.729147] vfs_fileattr_set+0x7a2/0xbd0 [ 1743.729639] do_vfs_ioctl+0xfa6/0x15d0 [ 1743.730087] __x64_sys_ioctl+0x110/0x210 [ 1743.730540] do_syscall_64+0x3f/0x90 [ 1743.730853] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1743.731268] [ 1743.731268] other info that might help us debug this: [ 1743.731268] [ 1743.731791] Chain exists of: [ 1743.731791] &journal->j_barrier --> &sb->s_type->i_mutex_key#6 --> &sbi->s_writepages_rwsem [ 1743.731791] [ 1743.732685] Possible unsafe locking scenario: [ 1743.732685] [ 1743.733089] CPU0 CPU1 [ 1743.733404] ---- ---- [ 1743.733724] lock(&sbi->s_writepages_rwsem); [ 1743.734035] lock(&sb->s_type->i_mutex_key#6); [ 1743.734525] lock(&sbi->s_writepages_rwsem); [ 1743.734991] lock(&journal->j_barrier); [ 1743.735268] [ 1743.735268] *** DEADLOCK *** [ 1743.735268] [ 1743.735658] 4 locks held by syz-executor.3/120713: [ 1743.735973] #0: ffff88800fe46438 (sb_writers#3){.+.+}-{0:0}, at: do_vfs_ioctl+0xf6b/0x15d0 [ 1743.736537] #1: ffff888050e797e0 (&sb->s_type->i_mutex_key#6){++++}-{3:3}, at: vfs_fileattr_set+0x14c/0xbd0 [ 1743.737196] #2: ffff888050e79980 (mapping.invalidate_lock){++++}-{3:3}, at: ext4_change_inode_journal_flag+0x126/0x550 [ 1743.737903] #3: ffff88800fe50b90 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_change_inode_journal_flag+0x17f/0x550 [ 1743.738616] [ 1743.738616] stack backtrace: [ 1743.738913] CPU: 1 PID: 120713 Comm: syz-executor.3 Not tainted 6.2.0-rc4-next-20230117 #1 [ 1743.739471] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1743.740023] Call Trace: [ 1743.740206] [ 1743.740367] dump_stack_lvl+0x8f/0xb7 [ 1743.740645] check_noncircular+0x263/0x2e0 [ 1743.740948] ? __pfx_check_noncircular+0x10/0x10 [ 1743.741282] ? __pfx_mark_lock.part.0+0x10/0x10 [ 1743.741626] ? mark_lock.part.0+0xef/0x2f70 [ 1743.741938] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 1743.742259] __lock_acquire+0x2a52/0x5e90 [ 1743.742570] ? __pfx___lock_acquire+0x10/0x10 [ 1743.742906] lock_acquire.part.0+0x120/0x340 [ 1743.743222] ? jbd2_journal_lock_updates+0x162/0x310 [ 1743.743592] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1743.743943] ? rcu_read_lock_sched_held+0x42/0x80 [ 1743.744287] ? trace_lock_acquire+0x16c/0x1c0 [ 1743.744608] ? jbd2_journal_lock_updates+0x162/0x310 [ 1743.744970] ? lock_acquire+0x32/0xc0 [ 1743.745243] ? jbd2_journal_lock_updates+0x162/0x310 [ 1743.745614] __mutex_lock+0x136/0x14c0 [ 1743.745887] ? jbd2_journal_lock_updates+0x162/0x310 [ 1743.746250] ? lock_is_held_type+0xdb/0x130 [ 1743.746553] ? jbd2_journal_lock_updates+0x162/0x310 [ 1743.746913] ? __pfx___mutex_lock+0x10/0x10 [ 1743.747214] ? lock_release+0x3b6/0x760 [ 1743.747497] ? jbd2_journal_lock_updates+0x154/0x310 [ 1743.747859] ? __pfx_lock_release+0x10/0x10 [ 1743.748177] ? __pfx_do_raw_write_lock+0x10/0x10 [ 1743.748537] ? lock_acquire+0x32/0xc0 [ 1743.748826] ? jbd2_journal_lock_updates+0xc5/0x310 [ 1743.749191] jbd2_journal_lock_updates+0x162/0x310 [ 1743.749565] ? __pfx_jbd2_journal_lock_updates+0x10/0x10 [ 1743.749966] ? _find_next_bit+0x11b/0x150 [ 1743.750285] ? lock_is_held_type+0xdb/0x130 [ 1743.750616] ext4_change_inode_journal_flag+0x187/0x550 [ 1743.751007] ? __ext4_journal_stop+0x10b/0x1f0 [ 1743.751350] ext4_fileattr_set+0x14fa/0x19f0 [ 1743.751684] ? __pfx_ext4_fileattr_set+0x10/0x10 [ 1743.752036] ? lock_acquire+0x32/0xc0 [ 1743.752327] ? down_write+0x157/0x220 [ 1743.752614] ? __pfx_down_write+0x10/0x10 [ 1743.752924] ? fileattr_fill_flags+0x27f/0x320 [ 1743.753273] vfs_fileattr_set+0x7a2/0xbd0 [ 1743.753602] ? __pfx_vfs_fileattr_set+0x10/0x10 [ 1743.753958] do_vfs_ioctl+0xfa6/0x15d0 [ 1743.754250] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1743.754574] ? inode_has_perm+0x171/0x1d0 [ 1743.754886] ? __pfx_file_has_perm+0x10/0x10 [ 1743.755208] ? __pfx___fget_files+0x10/0x10 [ 1743.755536] ? lock_acquire+0x32/0xc0 [ 1743.755822] ? __pfx___fget_files+0x10/0x10 [ 1743.756147] ? selinux_file_ioctl+0xba/0x270 [ 1743.756484] __x64_sys_ioctl+0x110/0x210 [ 1743.756794] do_syscall_64+0x3f/0x90 [ 1743.757074] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1743.757445] RIP: 0033:0x7f56669d2b19 [ 1743.757710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1743.758999] RSP: 002b:00007f5663f48188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1743.759544] RAX: ffffffffffffffda RBX: 00007f5666ae5f60 RCX: 00007f56669d2b19 [ 1743.760052] RDX: 0000000020000040 RSI: 0000000040086602 RDI: 0000000000000003 [ 1743.760564] RBP: 00007f5666a2cf6d R08: 0000000000000000 R09: 0000000000000000 [ 1743.761068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1743.761580] R13: 00007fff2464fbff R14: 00007f5663f48300 R15: 0000000000022000 [ 1743.762098] 03:57:17 executing program 2: openat$snapshot(0xffffffffffffff9c, 0x0, 0x462003, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x10000027f) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000140)=ANY=[@ANYBLOB="010000bcb5d876ad3ca7814f", @ANYRES32=r1, @ANYBLOB="016669d10743"]) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) ioctl$LOOP_CTL_REMOVE(r5, 0x4c80, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000340)) openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$setflags(r5, 0x2, 0x1) 03:57:17 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:57:17 executing program 6: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="9c08c10a5e769fca815874eaf5ece38a1f8cc5a85857c94ad2624a8833900e2dc09b45daf46d8571", 0x28}], 0x1}}], 0x1, 0x4884) [ 1743.869118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:57:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, 0x0, 0x0) [ 1743.877952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1743.879130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1743.886443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:57:17 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x0, 0x0) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x6, 0xc5}) openat(0xffffffffffffffff, 0x0, 0x242040, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xc2, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x190, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x2, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) r2 = inotify_init1(0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000540)={[0x9]}, 0x8, 0x0) dup2(r2, r1) acct(0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0x1000, 0x794b3144, 0x7, 0x9}) 03:57:18 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:57:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x44}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x30004000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r4, 0x400, 0x70bd29, 0x7fffffff, {{}, {@val={0x8, 0x1, 0x27}, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x3ff, 0x18}}}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1000, 0x43}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20}, 0x24000000) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="80000000080211000001080211000000000001689a3032904afd4402010882848b960c121824000000000000"], 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 03:57:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x4, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x24}}, 0x4044901) 03:57:18 executing program 6: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="9c08c10a5e769fca815874eaf5ece38a1f8cc5a85857c94ad2624a8833900e2dc09b45daf46d8571", 0x28}], 0x1}}], 0x1, 0x4884) 03:57:18 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={0x0}}, 0x1) 03:57:18 executing program 0: r0 = socket(0x11, 0xa, 0x0) bind$bt_hci(r0, &(0x7f0000000380), 0x6) 03:57:18 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x0, 0x0) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x6, 0xc5}) openat(0xffffffffffffffff, 0x0, 0x242040, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xc2, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x190, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x2, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) r2 = inotify_init1(0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000540)={[0x9]}, 0x8, 0x0) dup2(r2, r1) acct(0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0x1000, 0x794b3144, 0x7, 0x9}) 03:57:18 executing program 2: openat$snapshot(0xffffffffffffff9c, 0x0, 0x462003, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x10000027f) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000140)=ANY=[@ANYBLOB="010000bcb5d876ad3ca7814f", @ANYRES32=r1, @ANYBLOB="016669d10743"]) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) ioctl$LOOP_CTL_REMOVE(r5, 0x4c80, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000340)) openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$setflags(r5, 0x2, 0x1) [ 1744.076356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1744.089403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:57:18 executing program 3: perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2884e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40020}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:57:18 executing program 0: ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x810) syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1744.109350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1744.133644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:57:18 executing program 7: syz_emit_ethernet(0x6a, &(0x7f0000000180)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd6023000800342c0000000000000000000000ffff00000000fe8000000000000000000000000000aa880300000000000007180000000004"], 0x0) 03:57:18 executing program 0: ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x810) syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:57:18 executing program 6: ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x810) syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:57:18 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x4, 0x0, 0x0) 03:57:18 executing program 7: syz_emit_ethernet(0x6a, &(0x7f0000000180)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd6023000800342c0000000000000000000000ffff00000000fe8000000000000000000000000000aa880300000000000007180000000004"], 0x0) [ 1744.399913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1744.405184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1744.448818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:57:18 executing program 6: ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x810) syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:57:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=ANY=[@ANYBLOB="500000000802110000010802110000000802110000aec15beb0b7abf59fb00000000401a4bbb559b2f40010882848b960c121824"], 0x36) 03:57:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_b, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 03:57:18 executing program 7: syz_emit_ethernet(0x6a, &(0x7f0000000180)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd6023000800342c0000000000000000000000ffff00000000fe8000000000000000000000000000aa880300000000000007180000000004"], 0x0) 03:57:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x16, &(0x7f0000000000), 0x4) 03:57:18 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58040000190001000000000000000000000000000000000000000000000000007f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffc06b6e000000000000000000e4000600e0000002000000000000000000000000000000000000000000000000000000004e2000004e2401000a00a00004000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000001000004d33c000000ff020000000000000000000000000001000000000000000006000000000000000400000000000000b09ce05f000000000100000000000000d777000000000000030000000000000000000000004000200800000000000000060000000000000000000080000000000500000000000000feffffff01040000010400002abd700001350000020004be62000000000000000c001c00", @ANYRES32, @ANYBLOB="030000007d0008"], 0x458}}, 0x0) 03:57:18 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x8000000) 03:57:18 executing program 0: ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x810) syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1744.505619] netlink: 564 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1744.517023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1744.523654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:57:18 executing program 0: ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x810) syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:57:18 executing program 7: syz_emit_ethernet(0x6a, &(0x7f0000000180)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd6023000800342c0000000000000000000000ffff00000000fe8000000000000000000000000000aa880300000000000007180000000004"], 0x0) 03:57:18 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) read(r0, 0x0, 0x5) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [ 1744.576540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:57:18 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x0) unlink(&(0x7f0000000000)='./file1\x00') pwrite64(r0, &(0x7f00000006c0)='y', 0x1, 0x0) close(r0) [ 1744.591798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:57:18 executing program 6: ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x810) syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:57:18 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x8000000) 03:57:18 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x0) unlink(&(0x7f0000000000)='./file1\x00') pwrite64(r0, &(0x7f00000006c0)='y', 0x1, 0x0) close(r0) 03:57:18 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x0) unlink(&(0x7f0000000000)='./file1\x00') pwrite64(r0, &(0x7f00000006c0)='y', 0x1, 0x0) close(r0) [ 1744.830250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1744.897768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:57:18 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x8000000) 03:57:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r1, 0x0, 0x40, &(0x7f0000000080)={@rand_addr, @remote}, 0xc) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0x0, 0x5b, 0x2, 0x7, 0xd98d}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="f5ff040002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="11002a00dd0b6162636465666768696a6b0000001000c5f710dc71aa2d800a00000002020202020200009957e97447bf30595ad47f5b5eeb60f4f128de4233dd57ebbef4a1b3cf94cca39a33ebabe25ec4e162f91513c177fecced06d5a10e8b2854abf2387717097e7403c6254e9f73b8191c47cdeb4d1b71983d292a59ecf0c900da665f3a45ad237c89878fc6a19507d7c370f5140426045fceb45c1d330e314ce8d4b74baae6b1213080dd1dadccd24515243a64f6363a6c8ed45fb5fc84592b8141ea5eddb274ca2f8abbfd8248e17a66d91d624d28e9c52cc9f706162ce2068c"], 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 03:57:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000a80)=@mgmt_frame=@probe_request={@wo_ht={{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5971}, @broadcast, @broadcast, @random="ebb865686e07", {0x5, 0xc00}}, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0x68}, @val={0x2d, 0x1a, {0x300, 0x3, 0x3, 0x0, {0x2a18, 0x6, 0x0, 0x20, 0x0, 0x1, 0x0, 0x1}, 0x6, 0x7, 0x3}}, @void, [{0xdd, 0xbc, "af06597a716e04d4ed808179b671eb9652aaf36b317a2a0d571727e86533d462b81548628dd2813d4d8fee745392483f97e2bc655397fbce88ed904d21fcb264b941f5f15c523cfde4835aa55c5eec97a6a2b04982025b7e381876c61d371c36bc8da86267e8a5b0299121109f54e378e33053157683ebcd06ac1ae5f29306b7191582264059fa0ec32d30b66aa1e55e747e3ec977bc79c2f20cb56dcefd5eb30e93460c306ce12c54a4349fd8702e617f7d219ce8f2384e69514889"}, {0xdd, 0xe3, "92caa9f1446ef66353ecb7dc0d9fd7878fcc2f1392be2a0825d1b992e02b7142a1fdea53c62c4f8aa9e502282cddcf7c896ebe5082f38430d3adeebf9152ec0e416139d87e35b0ad49146ffa1862468e14b402fd8f908b914ea7210d862b9db361b0b7797d52d46fc58a02de07144aa238fabc3e0f2b7d74c7719279933b2e314f8a0bdb9848299ec3f51bf949f03e35ce7a0b755171fa18eec941fe0079bec8c6cd80921e3be88d7bed8ebdfd20e3f26a42d065f182bf40585b3b52f7c3041cd9f4f2f99363ce59f72412f9e1856aa9b0fe55637fc36c1cf1310c04cf98ea1a12f42e"}, {0xdd, 0xce, "54aadb78755797d5d16a61b20d0fa62d6b421c45ae93551155afb39ba17c245d242b879638b500cdf1f90ce3441e18d52addda5b93e4be95e709ae0239c237d0e0bc640f885210908f214470fec94556a53a420f4d712f2d45c84994fcf9d9650dbb061184509c7372289a2236be6ff4669f9e6c1ce832b3df828dcc9baf6d244cdb8fc8068eea4180f2eb28b2a22ab9642321b0981d7ac3df9ef22f00ec9922d0f2819a745d5b64cc029649ab813abe83dce8cb509d78d5db33e4d5d485e7c076ce056e4abbb47165541a71c0eb"}, {0xdd, 0xd8, "f5e49214772331f446ab808b32f2c403fd8de84aafa68a0c43b3bbb1574c2b5e9ce1e5b5601add37cf62f1f447bfd1ff6a01758bb2612d8482c1b5a4789df468d3e2f4ef3c75cff20727ee5a70768ed31b6bae67be33a9f5cd93e3eeb6f3a749f23233b01da894d4a91321666a5f72cf38a1078b494f607a457d2d41033af34aa3ae70c5f6210eee432fd8b70bf9b138d18fe743ec499f5ba647c7b599e1cc9e5c25575a0d59ae2905f244147a2d6658ba8c564929880a3a6e4ebde02d6e982d72ad495ae7ba5c8422f0d67b79ce79440e0923d8c4fb4a3f"}, {0xdd, 0x5e, "8082e01e53a49f6f5a06b048730e64d0222ab6eb6cccf157c668ffbf64f0e7e7d264167252c575277cd1e65225c704d2ea3e3d99082b7fe6711c8c6dd32d4067be9a5d6f38cb6e2062ddebd4bb5ccdbe96499f76c92192fddeff51591306"}]}, 0x3ec) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000380)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0x8, 0x1, 0x0, 0x1}, {0x81}, @from_mac=@broadcast, @device_a, @broadcast, {0x8, 0xff9}}, {0x9, 0x1}}, {@type01={{0x0, 0x2, 0xd, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x9}, @broadcast, @initial, @from_mac=@broadcast, {0x3, 0x247}}, {0x2, 0x0, 0x0, 0x1, 0x1}}}, @ver_80211n={0x0, 0x1, 0x2, 0x2, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1}}, @a_msdu=[{@device_b, @device_b, 0x3d, "134fda87536e3324f1d32c3fd32c5e50be1ff4d9496aa2d9a2de7fc61685280b5e63c17e2747ea781c0ee66288a6f105887561974a35d6ba4cdfd3d625"}, {@device_a, @device_b, 0xf7, "bd24966e6415a3f86831bea6c3fd2b3406b34e979fc94b00b6c46ac5418a350f430eb5ed87527530ea71484c18f032696a1ff38bc6287c6876847e809ad3c93071d6d1025cd0f660c24562e7d28050d6c5370eead9ac2219b0970c347824b57e1c6b02028d8533fa97e0b0344607822051352cebc22cf90d5496d4bcebfb7d391dd6a6dc1b6d2aed7993ce5fe788dc5653672729ca416a59bd18e9bfeb0b8f95971c3e47b5a4cc8fb3b22c5e1f709256ac21ccab3c7b6e6db85cca69f02a91660ec27df20208e4e6d44ad2efbb9304b3034d20a87224d1c3614954a78135ebcd64b2e580655c5bb0cb909125860e4a54e68d73e21979a2"}, {@broadcast, @broadcast, 0xbd, "e24e5c9f593eff9ee6c5b7d62791f0ea86d3e662a8982d658967eaa57a24ae0fa528ed98263b69c0e96d3054985b007302e541890267b135ad808aaf7193fc68ef664838d475a59a16a06731a8f58fad1f364002686037fbc3029e6f8df96da2c7ade135e9cc53da5928927701fd64bf79a62c308b813c54c0751d4682542f4368d798dcf3b11c6b7e82d1a89389c84c80591881ab4319f2b42615867d1c8201654c9f4955c1a3ca99df38edde24c3f81325457fdb5ed0e12739a6d6b0"}, {@device_a, @device_a, 0x61, "d15b0e751b35ce85ba4014c349e1e8f48744d3a73bbe3bddbdba9b6dea95ec8c515ee521a98bc60d98f6cf51b37560be001310e7920ceb87beea3cb586e3b287f0532fe2e9dd0bf2eddb10c59b0dbe4e95aa775ee57cfecc5561e961d5ddd0279a"}]}, 0x2c8) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 03:57:18 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x0) unlink(&(0x7f0000000000)='./file1\x00') pwrite64(r0, &(0x7f00000006c0)='y', 0x1, 0x0) close(r0) 03:57:18 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x0) unlink(&(0x7f0000000000)='./file1\x00') pwrite64(r0, &(0x7f00000006c0)='y', 0x1, 0x0) close(r0) 03:57:18 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x0) unlink(&(0x7f0000000000)='./file1\x00') pwrite64(r0, &(0x7f00000006c0)='y', 0x1, 0x0) close(r0) 03:57:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x16, &(0x7f0000000000), 0x4) 03:57:18 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x16, &(0x7f0000000000), 0x4) [ 1744.989353] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1744.990680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:57:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x16, &(0x7f0000000000), 0x4) 03:57:19 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x0) unlink(&(0x7f0000000000)='./file1\x00') pwrite64(r0, &(0x7f00000006c0)='y', 0x1, 0x0) close(r0) 03:57:19 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x0) unlink(&(0x7f0000000000)='./file1\x00') pwrite64(r0, &(0x7f00000006c0)='y', 0x1, 0x0) close(r0) [ 1745.001527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1745.005781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1745.007060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:57:19 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x8000000) 03:57:19 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x16, &(0x7f0000000000), 0x4) [ 1745.018511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:57:19 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x0) unlink(&(0x7f0000000000)='./file1\x00') pwrite64(r0, &(0x7f00000006c0)='y', 0x1, 0x0) close(r0) 03:57:19 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x0) unlink(&(0x7f0000000000)='./file1\x00') pwrite64(r0, &(0x7f00000006c0)='y', 0x1, 0x0) close(r0) [ 1745.323061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1745.324108] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1745.326876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1745.329319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1745.329951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1745.333221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:57:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x1}, @NL80211_ATTR_SCAN_SSIDS={0xc, 0x2d, 0x0, 0x1, [{0x7, 0x0, @random="88f738"}]}]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r0) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x68, r4, 0x811, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x4, @media='eth\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) vmsplice(r3, &(0x7f0000000180)=[{&(0x7f0000000100)="48c2b38681e3c171b2ec5d58c25d4af7534bf336ce2b77a6015e8137c5cec185dc8219c1014017442c91a3133d84a76885e62dcb8ec16aad0c5ae13a7a8d39ac48", 0x41}, {&(0x7f0000000380)="9d261b24c85dcbf2794ff53de75d3864f354173d7a98fe9f4f0e41e843daf606f825f25d0d5bdb4ba836e836622c4f574432151f3b07bf6f13e970887f17fe4e559282369b6b77497dc893ef9fc0cf73b3871e579408f1401289fd0aaa5ae8eeda59b623c0f67a22700d309a8e911e1d8b0a380e40f81cde42f2bd83964088624ee18d7cb56613674511efb67415", 0x8e}, {&(0x7f0000000440)="2adb1804ecdf6b0cc65c415458bd2e62b965e37ebd42b7d752a57840d1072253b2ede29a57d42d8cf7db1ef34e062f88ef5c7efd28fd917410bc102c0c5c1a7b6676d5e8d51d519f6dddd529460ff7335c14c156a7e88e7a788972dd29ad775ee225cda5466fdae2a0769cb044b72d368f36f55f6e8865bc3b42de24e6287862801a0a603e2dbdf9a03e4fae5deb0c805f027efbad42f36ce2f1309f368240f82a58a27bb5efaff4bb584fa1c19e1f90e53aa1698a6739b49116b28bba", 0xbd}, {&(0x7f0000000500)="0303472cbc79668cada14afa99720745436e6143dea84de65950b2a38c26874affb110311aa5a32762524415bbf876d817608137c803574d91af9db104d8b6d5fc2ae7636fc2978935e76b30438f3cb1c64db4dc00361ed41976dcc4347710d30129c0ea2e05b6c63c22c8a2f7bd73ee440ab34b9a16391e74dfae8209c059f4fd17d850e47a235879e3a74e6aa56545fb4de7f17543f17ee0d59c6f87b548c2a27c769e417ca4ea483720bb7c9f7799f0e004ccf69f82e12b0ddde269fea11a6ad2aa818c8e7db00c7d8aa1d86caa5c23f2cdf7bd97ef1b4498919ba294ba38f70604dd7de507c22e68ceb3b8f8838010", 0xf1}, {&(0x7f0000000000)="1ec82d349c24dd35ce8d2de0fa9346fb4ac5e2c6ee3d5fe59b48a86f0d27cca5f8aff3b582ea88a733fd665c5d80e8f9427ef85b", 0x34}], 0x5, 0x2) 03:57:19 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x8000000) 03:57:19 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x16, &(0x7f0000000000), 0x4) 03:57:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x16, &(0x7f0000000000), 0x4) 03:57:19 executing program 2: open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000180)=0x401, 0x20, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_audit(0x10, 0x3, 0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @broadcast}}}], 0x20}, 0x0) 03:57:19 executing program 3: r0 = getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000040)={0x2, r0}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xd}, 0x0, 0x52, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = pkey_alloc(0x0, 0x3) pkey_free(r1) r2 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001ac0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = io_uring_setup(0x1bf2, &(0x7f0000002f80)) sendmmsg$unix(r3, &(0x7f00000083c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000005ec0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB], 0x18}}], 0x1, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) preadv(r5, &(0x7f0000000680)=[{&(0x7f0000000140)=""/99, 0x63}, {&(0x7f00000001c0)=""/78, 0x4e}], 0x2, 0x8, 0x0) 03:57:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x3}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x202732b987e85317}, 0x44800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="50000000080211000001080211000070077aa858c3e803d6600008021100000000000000000000000000640001000006020202020202010882848b960c12182445551864c057e014b751508f9b8f00cb9db848d55ba8e4eac70ff5d0cf8326cc5fb5e0be6b0d6ed14f6c976237633990311537cbab653af7a00e2246cb6bf2379877cdb749986bafc927034a"], 0x36) 03:57:19 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x4, 0x0, 0x0) 03:57:19 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x8000000) 03:57:19 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x4, 0x0, 0x0) [ 1745.472392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:57:19 executing program 6: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) mq_getsetattr(r0, 0x0, &(0x7f00000001c0)) [ 1745.483083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:57:19 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x4, 0x0, 0x10) [ 1745.489410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1745.502249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:57:19 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x8000000) 03:57:19 executing program 2: open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000180)=0x401, 0x20, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_audit(0x10, 0x3, 0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @broadcast}}}], 0x20}, 0x0) 03:57:19 executing program 6: open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000180)=0x401, 0x20, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_audit(0x10, 0x3, 0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @broadcast}}}], 0x20}, 0x0) 03:57:19 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x4, 0x0, 0x0) [ 1745.933256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1745.938101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1745.942425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1745.947061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:57:20 executing program 6: open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000180)=0x401, 0x20, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_audit(0x10, 0x3, 0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @broadcast}}}], 0x20}, 0x0) 03:57:20 executing program 0: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000800)={0x6, 0x0, 0x20, 0x81, 0x6}) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f00000004c0)) r0 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000400)={0x30000004}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600), 0x745241, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000004b80)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYBLOB='\x00']) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x10000009}) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='hugetlbfs\x00', 0x300, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x10000000}) 03:57:20 executing program 2: open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000180)=0x401, 0x20, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_audit(0x10, 0x3, 0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @broadcast}}}], 0x20}, 0x0) 03:57:20 executing program 3: r0 = getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000040)={0x2, r0}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xd}, 0x0, 0x52, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = pkey_alloc(0x0, 0x3) pkey_free(r1) r2 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001ac0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = io_uring_setup(0x1bf2, &(0x7f0000002f80)) sendmmsg$unix(r3, &(0x7f00000083c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000005ec0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB], 0x18}}], 0x1, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) preadv(r5, &(0x7f0000000680)=[{&(0x7f0000000140)=""/99, 0x63}, {&(0x7f00000001c0)=""/78, 0x4e}], 0x2, 0x8, 0x0) 03:57:20 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'}) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x7, 0x3, 0x2, 0x0, 0x0, 0x5, 0x4000, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x2, 0x6}, 0x400, 0x5, 0x6, 0x6, 0xb1, 0x9, 0x0, 0x0, 0x3, 0x0, 0x2}, r2, 0xf, r1, 0x8) r3 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 03:57:20 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x4, 0x0, 0x0) 03:57:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="80000000089a10d5389b7a657dba72cfc2671c0211000001080211000000080211000000000002010000000000006400010000060202"], 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @broadcast, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 03:57:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x4e, &(0x7f0000000300)={&(0x7f0000000100)={0x38, r1, 0x2, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x1}]}, 0x38}}, 0x47) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="8000000000001100000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c121824"], 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=ANY=[@ANYBLOB="50000000080211000001080211000000080211000000000000000000000000006400010000060202020202020124f9ecc890133ccc24"], 0x36) 03:57:20 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='\x00', 0x14) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000003c0)={0x0, 0x6, 0x1, 0x1}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000e0f4655fe0f4655fe0f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000000040)="20000000b45b0e7ae4976cb482", 0xd, 0x2480}], 0x0, &(0x7f0000013e00)=ANY=[@ANYBLOB]) [ 1746.127088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1746.145434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1746.157940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1746.173527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:57:20 executing program 3: r0 = getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000040)={0x2, r0}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xd}, 0x0, 0x52, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = pkey_alloc(0x0, 0x3) pkey_free(r1) r2 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001ac0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = io_uring_setup(0x1bf2, &(0x7f0000002f80)) sendmmsg$unix(r3, &(0x7f00000083c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000005ec0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB], 0x18}}], 0x1, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) preadv(r5, &(0x7f0000000680)=[{&(0x7f0000000140)=""/99, 0x63}, {&(0x7f00000001c0)=""/78, 0x4e}], 0x2, 0x8, 0x0) [ 1746.233436] perf: interrupt took too long (6222 > 6188), lowering kernel.perf_event_max_sample_rate to 32000 03:57:20 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'}) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x7, 0x3, 0x2, 0x0, 0x0, 0x5, 0x4000, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x2, 0x6}, 0x400, 0x5, 0x6, 0x6, 0xb1, 0x9, 0x0, 0x0, 0x3, 0x0, 0x2}, r2, 0xf, r1, 0x8) r3 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 03:57:20 executing program 2: open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000180)=0x401, 0x20, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_audit(0x10, 0x3, 0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @broadcast}}}], 0x20}, 0x0) 03:57:20 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'}) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x7, 0x3, 0x2, 0x0, 0x0, 0x5, 0x4000, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x2, 0x6}, 0x400, 0x5, 0x6, 0x6, 0xb1, 0x9, 0x0, 0x0, 0x3, 0x0, 0x2}, r2, 0xf, r1, 0x8) r3 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 03:57:20 executing program 6: open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000180)=0x401, 0x20, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_audit(0x10, 0x3, 0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @broadcast}}}], 0x20}, 0x0) 03:57:20 executing program 3: r0 = getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000040)={0x2, r0}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xd}, 0x0, 0x52, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = pkey_alloc(0x0, 0x3) pkey_free(r1) r2 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001ac0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = io_uring_setup(0x1bf2, &(0x7f0000002f80)) sendmmsg$unix(r3, &(0x7f00000083c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000005ec0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB], 0x18}}], 0x1, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) preadv(r5, &(0x7f0000000680)=[{&(0x7f0000000140)=""/99, 0x63}, {&(0x7f00000001c0)=""/78, 0x4e}], 0x2, 0x8, 0x0) 03:57:20 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'}) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x7, 0x3, 0x2, 0x0, 0x0, 0x5, 0x4000, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x2, 0x6}, 0x400, 0x5, 0x6, 0x6, 0xb1, 0x9, 0x0, 0x0, 0x3, 0x0, 0x2}, r2, 0xf, r1, 0x8) r3 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 03:57:20 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'}) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x7, 0x3, 0x2, 0x0, 0x0, 0x5, 0x4000, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x2, 0x6}, 0x400, 0x5, 0x6, 0x6, 0xb1, 0x9, 0x0, 0x0, 0x3, 0x0, 0x2}, r2, 0xf, r1, 0x8) r3 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) [ 1746.455105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1746.487078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1746.496018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1746.548733] perf: interrupt took too long (7803 > 7777), lowering kernel.perf_event_max_sample_rate to 25000 03:57:20 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'}) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x7, 0x3, 0x2, 0x0, 0x0, 0x5, 0x4000, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x2, 0x6}, 0x400, 0x5, 0x6, 0x6, 0xb1, 0x9, 0x0, 0x0, 0x3, 0x0, 0x2}, r2, 0xf, r1, 0x8) r3 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 03:57:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r3) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940), 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x38, r6, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x7e}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x20008000) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000740)={0x1008, r6, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x96}, @NL80211_ATTR_CSA_IES={0xfd4, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x14, 0xba, [0x1, 0x7, 0x0, 0xfffd, 0x9, 0x5, 0x8, 0x1]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x4706, 0x0]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x16, 0xba, [0x1, 0x9, 0x2, 0xc32e, 0x8, 0x4, 0x8001, 0x200, 0x4]}, @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0xea, 0x80, [@peer_mgmt={0x75, 0x4, {0x1, 0x6, @void, @void, @void}}, @ibss={0x6, 0x2}, @dsss={0x3, 0x1, 0xa9}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x5, 0x24, 0x6}}, @sec_chan_ofs={0x3e, 0x1}, @mesh_id={0x72, 0x6}, @sec_chan_ofs={0x3e, 0x1}, @random_vendor={0xdd, 0xbd, "8e8a17156cb196cdd54fb6aa0b2ac66117fd05af17179f2f1da5e3817503d6a33b148bfe3900520d43949da90187c6a388267149669361bc09b2317685ea78134364db6c7a4bc282c5209bd91f7cc3b420c6837465e50047bb94d53bcfa6ca74bf23335f4b112b8a10e816f3022aa101fb965d0d06ecab9472b01d5d18773f0db8c62253022eb37f68101b19662619d32a0dd9e459e852db230ee4914562055007c77f89798499481f239943dcbfd6eeda3f5ad09c29c73d9d84acc237"}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x2, 0x95, 0x5}}]}, @NL80211_ATTR_PROBE_RESP={0x2f9, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x5d8, 0x91, "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"}, @NL80211_ATTR_FTM_RESPONDER={0xe4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xd8, 0x2, "bcca8c0b7144c3a9bb1b448581e13f2c8f10ae6e958b89f2ab514dacc45ac106bff25e6fb06264be7b23672ca6570be92aec31c9bac0a3e74cdd7aec8cd3e9430d579f7dba4b86f8b0cf75451b00dfdbf71bb12729a5645a3f3f89457527b444e8dc1e9f8d8dbac004d835d22e1f53e87c0f82c2cb097212fd7b439e9db0aa84872420bd5ab2612a092d574e2c3215b6abb5e890a2987a649d496b07fbe60db681cf762c96e7a35c00b845f855d45e38049ef98af69d60469045f68c6bba5c76cde00b4952d31bd8cb7ea9bde5ef98cf30626053"}]}, @NL80211_ATTR_IE_PROBE_RESP={0x96, 0x7f, [@channel_switch={0x25, 0x3, {0x1, 0x8, 0x3}}, @dsss={0x3, 0x1, 0x34}, @gcr_ga={0xbd, 0x6}, @preq={0x82, 0x41, @ext={{0x0, 0x0, 0x1}, 0x4, 0x64, 0x3, @broadcast, 0xfffffffb, @device_a, 0xfffffffa, 0x80, 0x3, [{{0x0, 0x0, 0x1}, @device_b, 0x9}, {{0x1}, @device_b, 0x2}, {{0x0, 0x0, 0x1}, @device_a, 0x4}]}}, @measure_req={0x26, 0x35, {0x3, 0x9, 0x8, "67154df7ec7891800daa11ec4aa0b69ffd9fa6962a66bcd5e0ea238354bb13e9f5e5b339d32efa156ee3e6c407adc66cbf26"}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_IE={0x72, 0x2a, [@supported_rates={0x1, 0x7, [{0x2, 0x1}, {0x60}, {0x24}, {0x3}, {0x6}, {0x1b, 0x1}, {0x6c, 0x1}]}, @challenge={0x10, 0x1, 0xc1}, @challenge={0x10, 0x1, 0x2a}, @gcr_ga={0xbd, 0x6, @device_b}, @prep={0x83, 0x1f, @not_ext={{}, 0x20, 0x50, @device_b, 0x7fffffff, "", 0x9, 0x4, @broadcast, 0x400}}, @link_id={0x65, 0x12, {@random="5b0c13035990", @broadcast, @broadcast}}, @link_id={0x65, 0x12, {@random="dbc31ed1319e", @device_b}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @gcr_ga={0xbd, 0x6, @broadcast}, @challenge={0x10, 0x1, 0x89}]}], @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x2b, 0x7f, [@gcr_ga={0xbd, 0x6, @broadcast}, @ht={0x2d, 0x1a, {0x20, 0x2, 0x1, 0x0, {0x1000, 0x3f, 0x0, 0x7f, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x1, 0x6, 0x5}}, @sec_chan_ofs={0x3e, 0x1, 0x3}]}, @NL80211_ATTR_IE={0x1fb, 0x2a, [@prep={0x83, 0x25, @ext={{}, 0x6, 0x0, @device_b, 0x200, @device_b, 0x8, 0xff, @device_a, 0x3}}, @ssid={0x0, 0x6, @default_ap_ssid}, @supported_rates={0x1, 0x4, [{0x4}, {0x1}, {0x1}, {0x12}]}, @ht={0x2d, 0x1a, {0x2880, 0x3, 0x0, 0x0, {0x0, 0x194, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x300, 0x7f, 0x81}}, @fast_bss_trans={0x37, 0xcf, {0x9, 0x4, "ea52f0c443cb8c173b6979cd3b5ad2fa", "4c26a264bcf56316b6f0565531cb10a420fd55fc1493d90b22592bd5d352261d", "ca0e4188678c6640f0be073d1c1621e45da885c3d2e564084cd32310273370be", [{0x3, 0x26, "caa53d1d54292c10fba63a60a1d7a613cf08c27c60cddd5d8b2e05e6f2f72be4a754edeefc75"}, {0x4, 0x1f, "b81ac324021280589c9d2d89b301aa0db7c5912060e4eef597b9cc60d47215"}, {0x2, 0x8, "7e64d4f8b9792963"}, {0x4, 0x28, "a47705c531e7a8e4e98e4f8132cacdb4c2d21312139534e8aa5a7e62289782f7155955b064f5553c"}]}}, @ibss={0x6, 0x2, 0x1f}, @chsw_timing={0x68, 0x4, {0x9, 0x8000}}, @random_vendor={0xdd, 0xc1, "c7285e10921d3e881ee4b92e4819f442c3e7b4ddc54053f11625a523eb67985c2001d73d752a03da92983838f8546f563577fd14ded930e0662977d9c5569bd7885f03d6431cb3ddd86ebaa47fdd9b668d11ab497a3c3211a16b0d7053047dcf99b7c446c24a042dd1243a8d0d98a02c925c63cb5fdbd650fcc581da1b756b14a3784953a4e2ff242ce07a43c9cc27bfa797ce4002db956272ad56882fff54a60b23b2575e99770ece13aba84a3b14e9b35ff7e18cb8345256cfe11e6b801c0e80"}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_BEACON_TAIL={0x1b, 0xf, [@rann={0x7e, 0x15, {{0x0, 0x16}, 0x7, 0x7, @broadcast, 0x8, 0x3, 0x5}}]}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@initial, @device_a, @device_b}}]}], @beacon_params=[@NL80211_ATTR_BEACON_TAIL={0x3e, 0xf, [@link_id={0x65, 0x12, {@initial, @device_b}}, @ibss={0x6, 0x2, 0x3}, @gcr_ga={0xbd, 0x6, @broadcast}, @gcr_ga={0xbd, 0x6, @device_b}, @mic={0x8c, 0x10, {0xf59, "c40a976fd96c", @short="44efe68cb16d642e"}}]}, @NL80211_ATTR_BEACON_TAIL={0x24, 0xf, [@ht={0x2d, 0x1a, {0x80, 0x1, 0x3, 0x0, {0xb3, 0x6, 0x0, 0x9}, 0xa, 0x1000, 0x8}}, @ibss={0x6, 0x2, 0x4}]}], @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x12b, 0x80, [@erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @perr={0x84, 0x11c, {0x8, 0x12, [@ext={{}, @device_b, 0x3ff, @device_a, 0x1e}, @not_ext={{}, @broadcast, 0x40, "", 0x8d01}, @ext={{}, @broadcast, 0x100, @broadcast, 0x2e}, @not_ext={{}, @broadcast, 0x0, "", 0x3b}, @ext={{}, @device_b, 0x28, @device_a, 0x31}, @ext={{}, @device_a, 0x5, @broadcast, 0x20}, @not_ext={{}, @broadcast, 0x0, "", 0x26}, @not_ext={{}, @device_b, 0xfff, "", 0x26}, @ext={{}, @broadcast, 0x3, @device_b, 0x3c}, @not_ext={{}, @device_b, 0x7, "", 0xd}, @ext={{}, @device_b, 0x20, @device_b, 0xe}, @not_ext={{}, @broadcast, 0x4, "", 0x20}, @ext={{}, @broadcast, 0x9, @device_a, 0x5}, @not_ext={{}, @broadcast, 0x3, "", 0x37}, @not_ext={{}, @device_b, 0x7f, "", 0x2e}, @not_ext={{}, @device_a, 0x2, "", 0xd}, @not_ext={{}, @broadcast, 0x400, "", 0x2c}, @ext={{}, @broadcast, 0x6, @device_a, 0x3a}]}}, @peer_mgmt={0x75, 0x4, {0x1, 0x8310, @void, @void, @void}}]}]]}]}, 0x1008}, 0x1, 0x0, 0x0, 0x44}, 0x2000c014) 03:57:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 03:57:20 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'}) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x7, 0x3, 0x2, 0x0, 0x0, 0x5, 0x4000, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x2, 0x6}, 0x400, 0x5, 0x6, 0x6, 0xb1, 0x9, 0x0, 0x0, 0x3, 0x0, 0x2}, r2, 0xf, r1, 0x8) r3 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 03:57:20 executing program 6: socket(0x0, 0x0, 0x26b) pipe(&(0x7f00000001c0)) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) 03:57:20 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r0, 0x0, 0x6, &(0x7f0000000080)="9f", 0x1) sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000300)="6fb9", 0x2}, {&(0x7f00000000c0)="ba7b2eaf62c1", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000007"], 0x18}, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 03:57:20 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) write(r0, 0x0, 0x0) 03:57:20 executing program 0: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000800)={0x6, 0x0, 0x20, 0x81, 0x6}) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f00000004c0)) r0 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000400)={0x30000004}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600), 0x745241, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000004b80)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYBLOB='\x00']) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x10000009}) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='hugetlbfs\x00', 0x300, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x10000000}) [ 1746.681348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1746.683625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1746.700364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1746.703912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:57:20 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r0, 0x0, 0x6, &(0x7f0000000080)="9f", 0x1) sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000300)="6fb9", 0x2}, {&(0x7f00000000c0)="ba7b2eaf62c1", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000007"], 0x18}, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 03:57:20 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000100)={0x0, 0xea60}, 0x10) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1746.813573] perf: interrupt took too long (9939 > 9753), lowering kernel.perf_event_max_sample_rate to 20000 03:57:20 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)='\"', 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r1, 0x0) syz_io_uring_submit(r2, 0x0, 0x0, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/33) 03:57:20 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETLED(r0, 0x4b32, 0x0) 03:57:20 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r0, 0x0, 0x6, &(0x7f0000000080)="9f", 0x1) sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000300)="6fb9", 0x2}, {&(0x7f00000000c0)="ba7b2eaf62c1", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000007"], 0x18}, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 03:57:21 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETLED(r0, 0x4b32, 0x0) [ 1747.014061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1747.025236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1747.032884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:57:21 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETLED(r0, 0x4b32, 0x0) 03:57:21 executing program 6: socket(0x0, 0x0, 0x26b) pipe(&(0x7f00000001c0)) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) 03:57:21 executing program 0: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000800)={0x6, 0x0, 0x20, 0x81, 0x6}) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f00000004c0)) r0 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000400)={0x30000004}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600), 0x745241, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000004b80)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYBLOB='\x00']) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x10000009}) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='hugetlbfs\x00', 0x300, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x10000000}) 03:57:21 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETLED(r0, 0x4b32, 0x0) 03:57:21 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r0, 0x0, 0x6, &(0x7f0000000080)="9f", 0x1) sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000300)="6fb9", 0x2}, {&(0x7f00000000c0)="ba7b2eaf62c1", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000007"], 0x18}, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 03:57:21 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETLED(r0, 0x4b32, 0x0) 03:57:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xc, 0xcd, [0x8, 0x81, 0x2, 0x7ff]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}]]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x4880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 03:57:21 executing program 6: socket(0x0, 0x0, 0x26b) pipe(&(0x7f00000001c0)) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) 03:57:21 executing program 0: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000800)={0x6, 0x0, 0x20, 0x81, 0x6}) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f00000004c0)) r0 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000400)={0x30000004}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600), 0x745241, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000004b80)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYBLOB='\x00']) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x10000009}) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='hugetlbfs\x00', 0x300, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x10000000}) 03:57:21 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)='\"', 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r1, 0x0) syz_io_uring_submit(r2, 0x0, 0x0, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/33) 03:57:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000100)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x20, @random="35eada4d58e1ca0fda8b4a05dfd9735bbc5a08315f3a761084a322e28ea027f0"}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x50) [ 1747.327013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:57:21 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETLED(r0, 0x4b32, 0x0) [ 1747.335652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1747.344225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1747.353247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:57:21 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETLED(r0, 0x4b32, 0x0) 03:57:21 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)='\"', 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r1, 0x0) syz_io_uring_submit(r2, 0x0, 0x0, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/33) 03:57:21 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)='\"', 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r1, 0x0) syz_io_uring_submit(r2, 0x0, 0x0, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/33) 03:57:21 executing program 3: utimes(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'}) pidfd_open(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41a51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0x1240, 0x8, 0x2, 0xc1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet(r0, &(0x7f00000004c0)=""/145, 0x91, 0x40, 0x0, 0x0) 03:57:21 executing program 6: socket(0x0, 0x0, 0x26b) pipe(&(0x7f00000001c0)) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) 03:57:21 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x6, 0x8, &(0x7f00000002c0)={@dev}, 0x22) 03:57:21 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)='\"', 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r1, 0x0) syz_io_uring_submit(r2, 0x0, 0x0, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/33) 03:57:21 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)='\"', 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r1, 0x0) syz_io_uring_submit(r2, 0x0, 0x0, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/33) 03:57:21 executing program 7: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x41, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000600)={0xb}, 0xfd3a) [ 1747.652602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1747.662821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:57:21 executing program 7: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x41, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000600)={0xb}, 0xfd3a) 03:57:21 executing program 3: clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='%{!,[,\x00', 0xffffffffffffffff) 03:57:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 03:57:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, r1, 0x5, 0x3, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x9}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000380)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@device_b}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, [{0xdd, 0xe9, "8ceca52c7ea15217bda5f3443f05441e698617208499fda0b4044ef7e3d99572a36d05cb0dd53ef99224e874062d8d13804f93867cdfc71edd01ef3136341e3a69cb571249b29c42be0eb1875aa0495ae5b8757a443b882d4454af1e7626e0af4acd0c41bb8b2e3d8ae418bcd51bab98b237df73640a55216de529a8a631dd9a3a220a45203f4bd825ed96131ebcaca1cc1948ad86c033ae6f4594ce516b150dcd9c603266b0d4e8952a55213cf3302d4b725b896051c7ff66a1225e5aee2d25318cd2dbe48da8b802fca3621dd924dc105db6e92d6535b3d72ec279d994b09f57b822b715ca8a253f"}, {0xdd, 0x8d, "92d2ee35007fc9e4099e57c0d6110dd64053edb9f01c5b1009ca4d51e9bf4b4ac744aa34cc460c19bc026a1cf4b00dab9b9b8765a543acf55e878ff8c66a8d0b4513f6eb6b604ebcd4c228bca18d2b11caca3d1797a1f8ee2fc5f8a5d0612c6eea7fd24a46dc152c610657f5f31605d9233b834f75c65e465c3a7ccd8b14c715f5bf4d70d8a38800b065ab7bfc"}]}, 0x1a8) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=ANY=[@ANYBLOB="5000000008021100000109420000000000640001000202020202010882848b960c12182400"/51], 0x36) 03:57:21 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) r1 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) symlinkat(&(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000040)='./file0\x00') linkat(r1, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000100)='./file1\x00', 0x0) 03:57:21 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)='\"', 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r1, 0x0) syz_io_uring_submit(r2, 0x0, 0x0, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/33) 03:57:21 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[]) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) futimesat(r0, 0x0, 0x0) 03:57:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) [ 1747.843220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1747.862303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1747.877300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:57:21 executing program 6: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0xffffffffffffffff) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r1, 0xffffffffffffffff) [ 1747.883765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:57:21 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0x100001) 03:57:22 executing program 7: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x41, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000600)={0xb}, 0xfd3a) 03:57:22 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 03:57:22 executing program 3: clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='%{!,[,\x00', 0xffffffffffffffff) [ 1748.175210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1748.178193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1748.189705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1748.192074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:57:23 executing program 7: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x41, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000600)={0xb}, 0xfd3a) 03:57:23 executing program 2: unlinkat(0xffffffffffffffff, 0x0, 0x98c3895171e2e332) 03:57:23 executing program 6: clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='%{!,[,\x00', 0xffffffffffffffff) 03:57:23 executing program 3: clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='%{!,[,\x00', 0xffffffffffffffff) 03:57:23 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 03:57:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@broadcast, &(0x7f0000000380)=@mgmt_frame=@reassoc_req={@with_ht={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}, {0x4}, @device_a, @broadcast, @initial, {0x7}}, @ver_80211n={0x0, 0x6, 0x1, 0x3, 0x0, VM DIAGNOSIS: 11:40:07 Registers: info registers vcpu 0 RAX=1ffff11008ca645f RBX=ffff88801018a400 RCX=1ffff11002031486 RDX=dffffc0000000000 RSI=ffff88803071ca00 RDI=ffff8880465322f8 RBP=ffff88803071c9c0 RSP=ffff888040ba75e0 R8 =0000000000000001 R9 =0000000000000246 R10=ffffed1008174eaa R11=0000000000000001 R12=ffff888041dc9d58 R13=0000000000000000 R14=ffff8880465322c8 R15=ffff888041dc9d10 RIP=ffffffff8180e211 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555556f56400 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe3997a9f000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe3997a9d000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f36b23313a4 CR3=00000000405da000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=8100000000000000 4007 FPR6=8740000000000000 4008 FPR7=8740000000000000 4008 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82485e85 RDI=ffffffff87de8ea0 RBP=ffffffff87de8e60 RSP=ffff888037747070 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000037 R11=0000000000000001 R12=0000000000000037 R13=ffffffff87de8e60 R14=0000000000000010 R15=ffffffff82485e70 RIP=ffffffff82485edd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f5663f48700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe3fb65c8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe3fb65c6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b30342000 CR3=0000000016de2000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=8100000000000000 4007 FPR6=8740000000000000 4008 FPR7=8740000000000000 4008 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000