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"}) sendmsg$802154_dgram(r2, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, @none={0x0, 0x4}}, 0x14, &(0x7f0000000180)={&(0x7f0000001540)="d3098c4b89e2cd29160b15079ea17ca2b33fbf9cc4ba36a0c4da1b57f12c7773d766b46fd7e9dfc2a77edf283df94d885dfa6152663a41c9e33c98151d03fa186853a1b67a71a55dc5a74f0f8eae4c4ec7fb3217c98c40c1be5ff5a09ddddf2a01f3d50159a2b23f993faedcc0a6b3752ec0d88a05bfca8c35083199c03436f47b55681b74008658dd68c70208fe97f1326fab4571889141f28c7d15de58ed6206a68c51e32fa0c371ae2c78f82ad459caa3d0d2d80f1f56802859df7210609cc92e67c614da7199de71c2bdc44f238f4b9e4bac6b33d62b985fac4bcbce67f04352441bb72ae3b9d64a973aee5b88f5a3b164c3adbb130a0839e307bb57fb12152d0855f0b925209288519ea5a74af97c03de29877f14856213779c9cf40f15d9e52eec1bfc43b772754de8e71f695953be4b13dfe04c0ef571bb6bf3867330af9e9db8432bde4caaaf8e4b3f82865e762de11c3cc71ff2f69961c6e4579b71fa5e9335f5a39f6e37a623504a90bf018ef894f144b50c8382ae30713a7d87107cca46a51e5fcf482b219941e5bac08aff31995b9fb084917e22332680b6bd9b29df0b1c20e1247aa3af84febefb5cf0a3874b135f3441ee91fcff0bd3471dcbd3a1673fb54b2fd3bde7dda2b0f31ae430327dbcb170651440b3826f2e07bec10b4eb39e32effb5fe0e5e6794c5ebd2e830306d63c2be6ccc7ecbd180329c5a81544a9beb80085783bfaf26c58b4345eec5e630ce7a12886bfcf1c190dc003aabf9f0c8f3181582f396a7f047d68ae01144113599ef70c9879b5dc5d2071cf3a900864a5eb952b9776cd16474b6a2b6e971c343e8be022dcf25b49c651a1e0596702786bff0af136fe0ca1006860fa4fb0b9fb58ef2c43644953fd147cc203966742676bdb2477b30162d66d6a8806e40add1dacdf6029b384c436b745dfd329dea1e814cd440d4a38ce32c1d4cc0584965bf7d4a961a2e2da984f22db9d255de47889a5b51174da2e40d8c0b187bc4b8bab2c6dfe7fd865dbee819ed7e6e7953a994df2bd37c8437c08b68b6dc5f9f031b7942526c430eeec5efac5d139c0c3d41055e906dcef577bf465b642d882904ce51682ced85706a095d9657cb851fe8c532578e7593a06f8828de169314f4f490b4b78c308acf18ee5b64bd2e458f154595dcb8381b0e2e310efcab8a86672ebf5cc1260ff9f33d159d5d29f467d419c9f7124f7b101b46444f9ee6e9b9b5d5d462b00ea138f534975a83df47776d334dfa6165533e3b6d9963be534e61b5754b355474b27336d25bccdcaf4deb9b582a89560d7bdadd363120f7539cb3d4956bfbe25dcec3703e39a951619703dffe32a91ed7848cfda89fde99ab39a9fb356796ace5ac194f6895eb1123d38973915d1514bcccec70386743066589770e7c6d3f4eda242c84765b02f36412a6122d03dd3b4064a3fd49d715cb9c02d2a644b2023b41e47cb81547bff38fd5fa35531b425cbcdfdab14ed7d378958969d82300a0fd7e84d6d7bba7af1bbe827f35a9dfca97e68bf678dd6755e02a99013dcf55a3099f66a4e78cfa129f3f37e517cb694b38513e577da2dc4c52d87d3a569a0ffac58c51f37c084815e07ae71465bfd6ad65d824243c8bec97a26a6a2798a154838440d61cb5d6bb6f45b570320ac5fb85840dc76bfa93a3b041934204c50d1b6e62141fa9a9f2eacd961171a25a54bcf2abd2fcd22350f859afd7713bfeeb8de838019bcad192d8711665cb63007f6bee445f2d275965960cc1c9b431ca216327e31abf6824cc8bd2b76452bc04f89afe7c132af8c01169871030346aff87ec7117c16a92d196ced943856e58b0fddd4c5d9c69222f9c22c3bb0bfbaab2e015e21244aa66287036e1b0e70402cd71b7efccd0eb191ea8470055f81e21825113121cf4299ad54ebd13a303c6a53e7ec4a443676e6c2c96c34576ccb750e9d61cd16815d6aeb176f062942e6d8d131bdc57894b1002630421162c739fec0906648e399652f33d1ad75144c0bff94cde47213bcc6bd43af6d5b80ad04be760ba12ccbb93f7ca990020f0ea35fb162e8f043daddd242afffe4289b47fdb37782eb77d015d1bf216cabb8c38e75ede7f4cd5ff4d8b3fc7287af686c464c770d84ba4c05306c253f9b53262ac1fa54f99e4bac9356ee58cae55fd73265418375170e48d4c3ae69b36f9babae8b74414592220fb58ac5e583b616568747d2f599e18848a3209b5b88ab58733f79e857f3c10052a9edf312aae9fc33d574a6e128f3ab106b9e0fd7f9f79ab3a7478ae205e862e5e6281a816d4bc6488afa5e66cf9f0710fe627e416816446b6d54cc6ecb40518798e47f097ed995a79082d8835a023ccd9d60e21f7be0ab34cc4bee2d585e8c0fc64b58cdbc09470c78bedc1edb8927140c0a2714361350974e742b553a2ca054b1de9eb756d754c73d9577041b02e89d9ca0fd0a02338042304ab9430e75edc2d553571487df3525df6931ee78fc3c06a3023a7f59de3da3c4c4496c246d3d138ce2a72bce7ad7573f5fe146a5cb5531cdd55089f8f89138384a7f6729c1e739060490d19fc2f535a9259e342ffe71a690ce4672feb03e27bce4fe02fd8f9f6d8d95f210f1e10b248fdabd05fa09f47e8355e4755e72a628a91ba06730b1a292d29d4e9bd80f8f0bb6aa8d39da83b07461fcd1479bda385a80e1e0e975ac74cde9c5f4a03b2a42801c2d0e779dcd9f72abe38ae2908248b1b601c2055b7680399aab127309ff50b1934e2d07526a8faede09e40621a8db813cb4283006c7d46c4b83f0e9dea247a70319ea3af39cfab6d60e488acec6de7e09236d4936d9c860314ea0243a4545e2096a4879d474bdd05c3a828be635554a72eb68c5bc5c6f4fc36ac07e2ec739be51c882bf78c59908cccc5e51bcd18ae5fb9f11432f950e2f0fa017ff88dc212c8035fdf7ea1438b84ed7c3b13d4a7bb8c41f128628fd5d657e43cbb8f9ae19ab6d095c0b87b7dba59dfabb32ab440836e58a2fb6a345b687d472adae5abe49d98deb9e157f3ff976568007010b73bb3d962bebd3ccfd9365fe26e154feb130c0a153d779cbfef417ee84207d4c939e82f9058401389d2049609ef634cc8cb51d255de2ebf80687ebd8a9830b6aa3b3f8f81d3033efb44f75d6f98b5251e7f0657c9a1bf8cf0ed7d3cec9c559ff230eb5fcd088b67a4523939b5618c764636e6e00e2a7c84c72a665c1146d1c04e67a122df897a0d86083841bb4083e952d42cd084e09434fe4717c59eb7ff6917f5f88327c1ebdec181a4be76b83b5281098c77b73a32c461832abd00daa1a33091e527739790b6cd7d70d0ba6ec4b9173705a22f50d8a8264040168b9c325963652dd6fb7758079c5cb688845268aad839c4895c7d0d482f876845c25fca6a7ecf782230c52c7d66678007ae651a6c400a96463355f1bd23da423344499e0053cd9eda59f56d4096b6b82ade195115f57b82e5db70a7f0b2c1ca39e441455a672b45f38c5c4139d9a99598926455c1af9af6aa286570bb6a028b171a740262c894271465c8491a444dcc098c36a008342a32be20a47258319b7cf762539a849ac142470c3e7033fccab4011d487771c55970d605bffe90b670f628e00ba2ae670ae7e82317e100b2350bcff4ad45d99d92663a11db61259e7cff15a2ff6527c068ea2ebe8bdda050e7864f97031e56078ec28bcbfb34e7f2aa733488d31d281e6bde2468abbcae7f2b4c86b2837f2edd0f4a3a6f277ee4613ce9835e696e25b386898e7a60b006a9128862474258582c81977b820043ddc0f1fc6d73e988ff140b96d8375bb871830a32367fffd928f1fe747f601abde8ce510087c68144156678d9eb88c6eaec4c1b4f1164cf26e13f04c424bd7db43529711efda902850cfd63746958e5a2309490626d753fb3fd85c4ae3c51ed54f8f995bca45b840b69422c49d30660c80c3a362186e6c5a0535ffca3a8152aedf09c6b884ea94dff11bcf4e8f2b918eef9e5bdde55b1a520b12d7d62a199e294e1ee2f61f86c5a3d481a88e22332ad331577d7a6a4772f75ab6ea758e8493b1094dac743a78678d36cbda8a1a2054608baf03afc2e750ccc700c3b4c5314fce0aae586e0db3ea1ec8714c582720c5b06406605eb504b99cbff3f300e30c8bd351189c3cf893cf8e588ea11b90b0322c7014b31d2a6dc4892a02619adb6291003eec1d310bdc2a2594c9e2fd57fe6c8225a3574e994ea3f3c1c4f3b022658961f0a63b45111612f29a5a0a736f4f9e9fb1aacb978cd62c36ec51793a9a7bf4aa2c61ad6c3b6b7134017cb14aef831bf2dfbbfa1b09abdaca9f0e4c5021543be617addf47015d82c20178ea5e03ff46664b7aa31f41aa2ff1faebca39f116839c4590c70c4e8c9c407e9554491d879e2fce92faa38fe2f0c5271724d3702d7a4f574b0f4df08f801b4007ca0ee5526c96f1d6f9ed850fffdea98c62e8ea75203d6bf3be663dc3a27bb237af4137f7af60da2eff146e588748b8a197affa45d7d7094bd552b9e5fa0c18c58195ebccc966d96091013569c5b4efd17bcad84f6380ab9bbbe766b79e970a10bf44e1661d5be730a1e59d33131d1264be85a349765ac93872ef837fe4864ef92d8b98c97189cb81cfc26a853b98756273822b9053db7bc1c9926fca6ebb282c0ae6bd0f377cc35c04d1d33a6803c32063f840f02ef97ec4cc039871bf1b21079beb08aec2e9aad961d15e4d50f0d5f2c42caadbdb89b8e38b92fad2d280c0d02210cf7f70a7a68f96eee3a288dc18dbdf370e3b5deebf67edc5e84723a75a49dcc204d739fb13fbae27bb5dea865040d2049038004ca0b78e7dd71aeef1f979daf2147b040fdcc6d0a3c25815ae8d8a0ed95bd520fd7ebc241f9b33fb5cca602fbae32419082e87c53f9a2bdd55c2023b101a7e7ed3b385d4cc799df6fc80c95b95eb2cafef2faf4a7ecfb6836597cdc585753035280a3f9faf988852db8e5ebde6a669f9db602a9728f43d1ba37941f91098249cc2a268bdc85539149427177e04325ebcc4ef2fdef3ff335398be8ac7e6484f107669e08e10adfe5ffccda51dbaf7ac73539dd51265513b6481df14b7be51910fb390e61f73e77140ea4be065337c487a8d34837a17682609bfd1390bbc8cc42a9c0854fcd15954d68a58ca25ceba292d3ca9ba82f670c312c3b5a799fd173fbd51a8f342af853e1febfe3b9ed604d69e4cc643d7d027070be9ddc4b3cb089718499fa3d21f305f989444e1d42b61f905ef8f7960b4018bf92274ee349fe75d7470533ed5b6cf1a461d5d8c11206387156fa9ac725adb797ba088e3b1460a0b6a1be2ed1688417132369d460ffc7d25900f560a540d0720d00b7d260eb72b7d410326367c510eef493469fbd7e5dd618a7523336af3311bee0365a2e1565396de675fab1644ab9ecb5ea97ecea84c66abf7a60bc52b44c01b71608c2bc1046e063c8c0fc596e536c1b37b0da05088c21bdb345fa88af92309b54dbf6291c3cf23f64efd15e9e1d7e231ebdb20c9ccc441edf90d25d00cc15899aabbc266bfe923ac0175be1a6830de33ca5192a1acda29682b0ac4a1fdd52ff5ddc26749b1df60573051d5d1a3fa87ccbaffd4824b783ebfd93691b6c1b93bb1702319e266bee7c4567d3e49fb2533536c50b138772159886c01659114b9a1975d3091a25964d3b52738294a75ca6b751a63d6c5c10e1b46e2b291d8e05720bfc1ab206ad29e230fcc7b29ef40037d9a6bace1f1dc4485708bec75", 0x1000}}, 0x20004804) 03:33:23 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffb, 0xfffffffffffffff9, 0x0) 03:33:23 executing program 6: prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6}]}) 03:33:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:33:23 executing program 1: prlimit64(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x4, 0x7077}, &(0x7f0000000040)) r0 = fork() prlimit64(r0, 0x5, &(0x7f0000000080)={0x4, 0xff}, 0x0) getrlimit(0xc, &(0x7f00000000c0)) r1 = fork() sched_setscheduler(r1, 0x3, &(0x7f0000000100)=0x40) prlimit64(r0, 0x0, &(0x7f0000000140)={0x9, 0x400}, &(0x7f0000000180)) 03:33:23 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) (fail_nth: 1) [ 1045.874961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1045.932325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:23 executing program 4: r0 = getpid() pidfd_open(0x0, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0xfe4a, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x7ff}, r0, 0x1, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x4, 0x2, 0x8, 0x7f, 0x0, 0x3ff, 0x800, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000240)}, 0x1a02, 0x8, 0x0, 0x1, 0x1, 0x3, 0x2, 0x0, 0x5, 0x0, 0x8}, 0x0, 0xe, r1, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x3, 0x2, &(0x7f0000000200)=[{&(0x7f0000000180)="5f056f96f872fe55e6efe81ba8d1ac35ff50f6e4d3783ec7ed8b6c6f43a60bf61e9ce89604be592835ec817d0fea9a70e4440901782a899da489d1", 0x3b, 0x9}, {&(0x7f00000001c0)="4c109c84c6d0525f84174cf7d9205ce343b2730dc8", 0x15, 0x3}], 0x1, &(0x7f0000000400)={[{@nouid32}, {@min_batch_time={'min_batch_time', 0x3d, 0x80000001}}, {@data_err_abort}], [{@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '$!'}}]}) perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x7b, 0x9c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup(r2) 03:33:23 executing program 7: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) shmat(r0, &(0x7f0000ff6000/0x4000)=nil, 0x7000) 03:33:23 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f0000002440)={{0x2, 0x0, @remote}, {0x304, @random="d88fa6ddbb12"}, 0x0, {0x2, 0x0, @empty}}) 03:33:23 executing program 5: prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0) epoll_create1(0x0) 03:33:24 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f0000002440)={{0x2, 0x0, @remote}, {0x304, @random="d88fa6ddbb12"}, 0x0, {0x2, 0x0, @empty}}) 03:33:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1046.119004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1046.151114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:24 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f0000002440)={{0x2, 0x0, @remote}, {0x304, @random="d88fa6ddbb12"}, 0x0, {0x2, 0x0, @empty}}) 03:33:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x14, 0x3, 0x6, 0x301}, 0x14}}, 0x0) [ 1046.195960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1046.210283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:24 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0), 0x0, 0x0) 03:33:24 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f0000002440)={{0x2, 0x0, @remote}, {0x304, @random="d88fa6ddbb12"}, 0x0, {0x2, 0x0, @empty}}) [ 1046.263105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:24 executing program 4: r0 = getpid() pidfd_open(0x0, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0xfe4a, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x7ff}, r0, 0x1, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x4, 0x2, 0x8, 0x7f, 0x0, 0x3ff, 0x800, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000240)}, 0x1a02, 0x8, 0x0, 0x1, 0x1, 0x3, 0x2, 0x0, 0x5, 0x0, 0x8}, 0x0, 0xe, r1, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x3, 0x2, &(0x7f0000000200)=[{&(0x7f0000000180)="5f056f96f872fe55e6efe81ba8d1ac35ff50f6e4d3783ec7ed8b6c6f43a60bf61e9ce89604be592835ec817d0fea9a70e4440901782a899da489d1", 0x3b, 0x9}, {&(0x7f00000001c0)="4c109c84c6d0525f84174cf7d9205ce343b2730dc8", 0x15, 0x3}], 0x1, &(0x7f0000000400)={[{@nouid32}, {@min_batch_time={'min_batch_time', 0x3d, 0x80000001}}, {@data_err_abort}], [{@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '$!'}}]}) perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x7b, 0x9c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup(r2) 03:33:24 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:33:24 executing program 7: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) shmat(r0, &(0x7f0000ff6000/0x4000)=nil, 0x7000) [ 1046.428662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1046.484219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:24 executing program 1: syz_io_uring_setup(0x6d0f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_sset_info={0x2}}) 03:33:24 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2202}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) setpriority(0x2, r1, 0x1f) 03:33:24 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 03:33:24 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0), 0x0, 0x0) 03:33:24 executing program 7: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) shmat(r0, &(0x7f0000ff6000/0x4000)=nil, 0x7000) 03:33:24 executing program 4: r0 = getpid() pidfd_open(0x0, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0xfe4a, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x7ff}, r0, 0x1, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x4, 0x2, 0x8, 0x7f, 0x0, 0x3ff, 0x800, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000240)}, 0x1a02, 0x8, 0x0, 0x1, 0x1, 0x3, 0x2, 0x0, 0x5, 0x0, 0x8}, 0x0, 0xe, r1, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x3, 0x2, &(0x7f0000000200)=[{&(0x7f0000000180)="5f056f96f872fe55e6efe81ba8d1ac35ff50f6e4d3783ec7ed8b6c6f43a60bf61e9ce89604be592835ec817d0fea9a70e4440901782a899da489d1", 0x3b, 0x9}, {&(0x7f00000001c0)="4c109c84c6d0525f84174cf7d9205ce343b2730dc8", 0x15, 0x3}], 0x1, &(0x7f0000000400)={[{@nouid32}, {@min_batch_time={'min_batch_time', 0x3d, 0x80000001}}, {@data_err_abort}], [{@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '$!'}}]}) perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x7b, 0x9c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup(r2) 03:33:24 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000008000000000400000000640001000006020202020202010882848b960c121824cbaec169605e4e813f787f0a78413dcd9343ef70a13d938801067ffffed9cfa19ea88190a954ddd5865f21729543ba2a"], 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=@ctrl_frame=@ack={{}, {0x5}}, 0xa) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000600)={0x1, 0x3, 0x14}) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000540)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_a, @initial, @device_a, {0x1, 0x89b}}, {0x7, 0x0, 0x1, 0x0, 0x9}}, {@type01={{0x0, 0x2, 0xf, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x8}, @device_a, @from_mac, @random="86ff7ba3854f", {0x9, 0x100}}, {0xd, 0x1, 0x0, 0x1, 0x4}}}, @ver_80211n={0x0, 0x3f, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @a_msdu=[{@broadcast, @device_b, 0x4c, "8260ceb4b8fed83c0d27c99ff464c585db770163671a33cbccb4f55ee664ed8b484d0b77608cd2cb28b55707820dad7bc1480d8f4c316791ab51536f0d6b5126132adf5a179da5cbc8b3701c"}, {@broadcast, @broadcast, 0x14, "0c24643e19816add66e19255a8e57f32dd04b47c"}]}, 0xb8) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:33:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:33:24 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000080)="01", 0x292e9) [ 1046.781147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1046.794865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1046.841663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1046.856023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1046.858394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:24 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0), 0x0, 0x0) [ 1046.896904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1046.911192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:24 executing program 7: r0 = syz_io_uring_setup(0xfa7, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x10010, r0, 0x30bca000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x101) mmap$binder(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgid(0x0) process_vm_readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/168, 0xa8}], 0x1e5, &(0x7f0000000240)=[{&(0x7f0000000100)=""/177, 0xa7}, {&(0x7f00000001c0)=""/102, 0xffffff1f}], 0x2, 0x0) 03:33:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x8, 0x0, 0x0) 03:33:24 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000080)="01", 0x292e9) 03:33:24 executing program 4: syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000001280)=ANY=[@ANYBLOB="010001000000000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002f2f66696c6530003c87c4db0397cb9288"]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20) write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r5, &(0x7f0000000080)="01", 0x292e9) 03:33:25 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0), 0x0, 0x0) 03:33:25 executing program 4: syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000001280)=ANY=[@ANYBLOB="010001000000000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002f2f66696c6530003c87c4db0397cb9288"]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20) write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r5, &(0x7f0000000080)="01", 0x292e9) 03:33:25 executing program 1: syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000001280)=ANY=[@ANYBLOB="010001000000000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002f2f66696c6530003c87c4db0397cb9288"]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20) write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r5, &(0x7f0000000080)="01", 0x292e9) 03:33:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:33:25 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2202}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) setpriority(0x2, r1, 0x1f) 03:33:25 executing program 7: r0 = syz_io_uring_setup(0xfa7, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x10010, r0, 0x30bca000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x101) mmap$binder(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgid(0x0) process_vm_readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/168, 0xa8}], 0x1e5, &(0x7f0000000240)=[{&(0x7f0000000100)=""/177, 0xa7}, {&(0x7f00000001c0)=""/102, 0xffffff1f}], 0x2, 0x0) 03:33:25 executing program 3: semctl$SETALL(0xffffffffffffffff, 0x0, 0x11, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)=[0x3, 0x40, 0x2]) r0 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r0) setgroups(0xfcdf, 0x0) 03:33:25 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000080)="01", 0x292e9) 03:33:25 executing program 4: syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000001280)=ANY=[@ANYBLOB="010001000000000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002f2f66696c6530003c87c4db0397cb9288"]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20) write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r5, &(0x7f0000000080)="01", 0x292e9) 03:33:25 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001480)={0x1168, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x80}, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xffff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x100}, @NL80211_ATTR_VENDOR_DATA={0xda, 0xc5, "f65a6f9a2c293bd46564343f14fc05b4e4d0a21eee711464474cd1d5a60dc384db293f764e869c32bb9314940f216efc0563f92180562ca948b8ca4f2568341e2ba0a92e6e44509057c6d399734dda62a0ad1c8369f35db550def2bb72c4cb267c29070f6b420a50731592182cb97fba05f72b5ec88b5a8df7c4a534ef0a4790d9f3ce4bcd477e061dd131ca3cd1cdbf1057b8ddd1bd95ca9c6d3721ffa767ad224161625c416811b0f740892e842877063b542e2d3fc52bae61a4102909ebb49e27db52fb2165b1b03f5a858698b18813bcf2808c99"}, @NL80211_ATTR_VENDOR_DATA={0x4}, @NL80211_ATTR_VENDOR_DATA={0x38, 0xc5, "e8107b60042269e135ee21f700861496e3c7f53fef6c5fc4862cd7c10bc25ec8601e3d094e13fc3a59ccd289810a589888e7421b"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xffff}, @NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "72a05a5aafab442ebc7f64ce64072744349753f61d053eb0effb606eb33c1c882bfa86a5be09332a311d8cf8289431f60e674a25fba61f5fb48fc75dfac97660e4a060bd9a9c695fc8800e59a9f132e016885a5760c628d8aa7e9e77805fef66dafe70450a4c48324e488bfe5e7656eaeb3f6dc2c3e13ea4de01ecea98fd023e3b433d96c23a222bf42f0be8d969bc3e216d57729a9ba9b19cdfd6afe27f6ef91478ed80c28d3bcb18905006cb0e9e92c9e858c474cfddeeb63552d021d3ee4f7563c402f6af24d40c1bb9b29a4f7537cd2882bff69d0d4999710c066b8d7609927f19416bd02c305acdc3185e8aa540a583129721aeea3e76c3289171890ded79338191eb50a570af5040fa9bc61072e5c37e4c1522700f5538a86cddd04a3294a7ade60f49bebe6af5f38ccc7bc8771622be2cdaae147aba0b105a44f5dcaffc2c387cef3877ec1ec4e6803acc870c2a810d97df9944d10ceac270bc05339bf1c77f9be18f4a514fb1b9f2a6ae9fb59189601556345633e6ec7067505997bb9c9b7ec848497af02df2bede6a2597d68378acd613e56a37b7dd068835bac93311a4a835edf8912b504a9e921070a48eed32742db0665d93a06b83ab96a2a4f5e8e9fd55208f274a5114faf1e93d7087dbc4f605b65b53e8ecbf2ce9032fd56c7211f82e971c5cc84a69cdd428e52332a03d403f18f3a39989364d9c6602e6b920a12847d37d8e2936d74ad055852a0a4d47e91db8bba8dd58bfcba1ffbd2ff2a7d3e4764c9c3606f21d2ee75b4a2f0eb8c17f6ef1d2a7871f8932fddae07802d0e3f448aee406ac02a14e2b23e1deb76bba7e15d485852780fcdc429d4ffcf9ac84dbbd4323c8005071b92677e449673345be9ca01f3f394db01f6c2fc237caaf172e1e1f895e885072e598fc8250a623e7c17a6e67a82e7ff54fb9a8e1857c76e43646727d4532b7c536af79689be0bb6bfb08fc15d13caaefc11ff2ffd67e8d5e787f7af898abdb2b69e121ec8d903556acc0365f33054c3eff92eeeb7baccb195ab83fd8864817f8a70652bf6ef7d9ca8493ca41cdf9a82119af5496df38aa8dbd02cc53bfbb29d93d18aa0494afa179659c16b16b445e88a86ca444d4a06d1249dfcddc90b5f9127266f075f4fd1a2a93da145ae6d078ff239a75d253c28ed202eb3f1e030255e3a190877f211d86e37a16f698237c702b33bfb530ce57ebec4c6a657af53477c1f77709aec1e1bd2bd0f1dfb3331e39f9dd97f6c216de0fe02bcee65fdea92f403dece8f73a4ded6e4409cd3304189361cd298dd8324dd25c63b1b3e654c7f265758a862fedaffe847b15e0b74f521d7935f3b5ac038ca73b07dc98476620ed63e267ce91b56708ed74cfb3d12c7f984b92ba3bb9a8292bb41ef409b05061f70b1c69b886c2ff2577ef6e9eaa103e251e80dcc01cf37f9b8100718c5b6c1e4347b3291ff825cd6a1fbb6e6929e65f26ad85d3bb4ffa7d999ece862c3efcbd59587a91a915cbb0646417ff3b20c57d7425fb7595c6e1670f13592af77023303945d34b809804f4ffce111bdee2b78c38a27f08936d3941bfae2a4e9484c15954bafc8944e03a1b9fd40a04260e584ef34362f63538a069b5a1a21c8d15b9253b67e139e126d0ce9f8f4f1da08de7fd32613e17cd60fa0a30e2b6f2eed3e007bae18df00a6c909d0851713836380dd4c4cfa813da82299933d942be39a9b7a0c3d69fadd7ff1437d166d7a8fcd781b3d10dd0112a055c647f370c945812597df17de38f3d8b60cb11ed2e8d5cb2dfcf5647c4c44a3d0339e35bbe62ebe3dcc7045ccefa445cfcafeb978afc865d98170d0566a629f577b22be29e356702d5c28b908ea7bf49df2fd3455f05e6604448fb58eb697d25c196c9bf1d57d8c268dd751c2b4d3503bebb3193a7236cc569cb5252f427e25fd0af81bdd1de6e9d9ee16576bb290c281ddbba244b41ffffc920e2fc27a1cd1880a82de8b4d7e1b6c3516166a9536b2936bb93497cb67773e631245f02560b35e85ea1a27a8f3ba38f3ce0d4f2c597ef7e80eeabf8ad8a114f5033eea04220d9c47b8a54bcd7b22c6d8495bb46b1c29b64e6c504cb21726cc7f099a16d966feddd2417fd34be07da81b0f40efab909645349d3c340d9c85d2becdebfa771676fd93327749ee273b179d235ccd24af438ec01bd5f719f193a36fa413a4f83a648e8a4eaf2742343ed7e857aef6d3537de5d7f9f9fb1520693816d0d1e4bc96068720be3f13a68b536c13c5318c2a3ef3f24e60eb92dbb01e8008efbf5f8ec6a28825a3d3204347ed8e3ad12067c1320072c3bce3c2c3b0855fdc48eeb49767906a5b67a89aa777ffbbd22795c8ed1b698c8e50d45e8eff8a63338775cdc3e1a4d9145ceec7373279aa41f77f8ab82ef0f29e82db2bd5871f32fc8de5fdd8533d1303d2f18fa8c324c6ba40b2f77e5235bf463509458e2e50a7b60c7f8b27bea62051a87672159372b9203587ada4fbc40bc7db3671bd54beed8b4113226c81a046f842b89b52eaca864e6cd6bafb2ddf70de18499acd51a81853da1dddfaccd1dd120dbff1daa48d1daf9d0e0e72682bb7fba0ac29a70fbc4a14f934b01973b9442ddb6ac340a655f1073ebf1ad8855c13383f8127e971b9505188318dc0de1f2780742cd1c189fdeaf05eacaf03d4866d86df1c82e8b9116f0f0b379aca50997b9581e6d72933ddd1888541d9209bf593678fcd98e90d7c344b97a65c50cf6782f92a42a9cc0b26183a954a2aa1141d908c3d97610df389165f7726b1f8de1c0bfaba6ff912cf60fd5953e9989eaad51aceb627b5af98cfb6c4ea032d144fda304224c046c3a99a95cdcc7714c1da5201d9963041d98cd1d5db6625bd0e684a49f5d202df65778db2ab98904f8beb798855d3024374040fcf897d46eaed08ba172973541715f0187061bf9e88fa14831049725a6218f1710c2739b3e76571360df97b83f80a24b7c75965e8d050bfc8fdd15a1f785fc68904cee32926214f82ff45bf897f4f24894673ae45662d045cdf43666b36c3653d5d8f03f394d9785310bc25f65eb7279109c6be020aee483671759f8d0bf7826bf4a26a69fe7f3713264196a374144c799ff98d13c09b54b1a5e3e4cd1e59da8b2ef7f9f4c8f143ac43346f5deaa8fb81b3f77fdef7f40950efb8de7d23a9982f3d46380881003f1520726740cf2d9f54a1de6aa2f0387dcc688116734f464e0cde1d339a3af676b3766ec86d7774533713dd4af0eddc0f5ae8ccd10dd86674aa8a4091866892b8fe7d6b4762ab1698daca003c74b53d12b8004c22c8e24576a7ce8ce14ab6379044d4b8cfe460058bba9141bee758d3398cfde93fed314cc90243187c884551f0f6c13099f572632a4cc77195ae2453f0b051079f4a56c0e73ced20818c4022fee17eecf36845eb5082dcfa9d1275fd05205ec1685fad6e6371b602fb6e2b8e978c644ce062cdb25d83733351753283cb4a5b65d2be9ce5dd9ccb183b0ad4aeaa8c422a00b69ea847b58b7da498f89d87b1232240e24693ca5a90cf2f1a99489d84f671afb596577769a7c29811392cf5c27ca04ff029dca9d3a03984b703bf9ff0c592d3b04f5a6c563763576e3b4f14073fa406396b7b0d69868b040ce9bbf80b55932cca10a7d771f3ee3a2a250367d3cd33830d0243e64f9fa4136988f507530a350c798c8bd00c659af3f60c9099a22e6ae901cdfcd7518607776bf5b12d7372dfec1f52a8da7bbddba8bc1420cb795ca432ed697662f9c644c8708b2d0e17e9d46ba65046d9679e9ccf0a8654a61f2ae1375571476c6caa16ae7487f7331329ca455059c2263acb1bebdbbedb57856dce6c58b2843b6242665c87a68206ca800aff41fdb16f2400795d9137e8fb89cfa895478a03d5a5449f71397260f0986d5928af997e34c4214ed139f8e18f0efa95feabbd28c37c1c022c968060402c040353b414764639dd2d4d5542587145e4ba6fe21a19d59b5e3158206f8efb673baf01e0d2570cb1510669fbf0e31ce7c434105063a8c714b83bf6bb3a541898562484422aa1a8882e0a571391f6c17fe410b85bcfca98be29a9252eec83441010f6d860761123eb3ed0f85537f51c064043ddb485d75354cc5f62114edd2f48d4a406edf402412d0a02b97dbdade51e541c9d4dfbd6eea7f47fd7754226a98ad7eac5a75afd01fdbe690df757c17430fc59b786ad12d4695337a4212dbfd218c607b3decbecc102d3e81470dba73267c22f554602e4fe4c5482059dc436ca6a66b310eb32ea86a29fd1b1e73687814f69c5a8c61e0ceffac71cacfcc8907de35beaf8cc6e0abc46af7d876f1a5baa9b91e6c1e0a9e2031152082821f3ece4b36ff560fe8a61df6118f2ca50cde7302e898c814884acb19d80801103448e68035963e9b6a7eb127ed7404d2fe8202685489624be2ed47548b1a2b15ac331f79702b7d0f7a62c20d0217107507e008a83c4172033db838aba7632dde2113ff061a97d0dfe6c5d494742f6898714b6a0ec7c57a11921da41e0d11d6c3272c500ef43609619d9dbd35432e865e415ebc8c7f5c0fc9394325e880525c4f3b87534e710d8791a3f779e8234fbe3c851f9292ebd08e52d552ed697479c68afade9bf2c3c2dd5b59cec5c9ce9138c8bf27a45f54bae1882229f5730c93e5649de799abb19bf25f2883447bb16b2e86bd81025dba1b843ab40996d0ead0bf53de121163a968128cfa20916039aafa9500aef76a46bf53cfb02600723f08a3c3cb1ce8fad77b23c2ac6c960d2dc51ca19e4d39d6299581f96ef7b672e80f3d6cd80285c3a989c5a4924751e42660f0803b34477dc4172a9fb117bc77f0189a176ef6967c622c608029ad834ebb0e03eced52e17c495b9cd71a72372018339b1b3eb3d4ef710f0a9dbcaca627ffb28310e394434e50ffbbc55e46289fcfd5817526759fbe9bece2172a4c82d9d68fd8b0ce8d48b753aee9cfee192dc5ad1970d329581420dd2c3e6d92fa65bd0aa011a164d82f81348c97bc18c7b84411cb098dea2abf51de01155738f248d1599c735ae0b42aa9714d135c3156cad9ae2bae4161bba38ebe365970f8811ac40f6b17cc0d52388d869ebc73bb490556a95904d6d86d559ed577ce06fe5890296f5b27172b4430de97310885a37a6b437ff795e82aa52b6f95d82147da1abb2069c0852f1293ab3ee116a7cf43b2796605a9e20fbf097f7e7c1b261345ce0ecd071cbda6f5e2f87f152a41e8caf4c65c56bd1e3835d4d2171288f60755cb9924951c05999d401c2878d35aed8a040032422ac72f43030db47acd0f352720542ab7e04b89552f1edb000ef01fcf62f7293c036df9c3ce94624f238ecf95c3aea1f515b2e21e9366dbe6573ed08b361972cfe06439ceb5e624b73dee3559d5fdfb73982a4aeba7b63eaeedca4e9a5edbc824b6ebaee133039cb6f8dfb753ab3eed296d673461f44e8f5e4c882ec3e6eb8f3ed6f512aaa944fb5063fa15418013d3e7e122c4fd7dccaa58b7fff02ff4cc9dbc54bfc4fec4efe27989913108e7f51caeae7e526a2c03e68a1913d65170eaa6f02813644123f755a7f4a2a1f0d413b211ff3fe3beb674c53ed0ebd63946404dd6aae088c2dedcd0fa39eded546102f322725ebd856faafbac938165fe0b3d8134d389de9c2304c5b13e78ed35dce8279232aa03648b81d2cba46dc04de498444351f7b980ecac8008608e19cc53b0b33840ef5b4ba54adebeebfba842cce4c6d59031f195f283d8ebf1f5"}]}, 0x1168}, 0x1, 0x0, 0x0, 0x4004880}, 0x4000) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000700)={0x6, 0xa00, 0x49, 0xfffffffb, 0xfffffbec}, 0x14) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x100000001) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x158, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf9c2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x81}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff7}]}, @TIPC_NLA_SOCK={0x8c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4db9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x41}, 0x40004) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:33:25 executing program 1: syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000001280)=ANY=[@ANYBLOB="010001000000000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002f2f66696c6530003c87c4db0397cb9288"]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20) write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r5, &(0x7f0000000080)="01", 0x292e9) [ 1047.822398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1047.833180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1047.886013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:25 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2202}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) setpriority(0x2, r1, 0x1f) 03:33:25 executing program 3: syz_open_dev$usbmon(&(0x7f0000000440), 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x3) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000040)={0x80000000, 0x28, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0xac) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 03:33:25 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000080)="01", 0x292e9) 03:33:25 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = perf_event_open(&(0x7f0000001840)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r3, &(0x7f0000001640)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000540)=ANY=[@ANYBLOB="9dcb17acd2e171cf83a1a3b0000096aae700080211000011080211ba41727a8ddfdc615128e61319b3"], 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000700)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {0xc42}, @device_b, @broadcast, @initial, {0x0, 0x2}}, 0x1, 0x0, @default, @void, @val={0x2d, 0x1a, {0x800, 0x3, 0x4, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x8, 0x2, 0x81}}, [{0xdd, 0xff, "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"}]}, 0x13b) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@ctrl_frame=@bar={{}, {0x158}, @broadcast, @device_b, @compressed={{}, {0x2}}}, 0x14) 03:33:26 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2202}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) setpriority(0x2, r1, 0x1f) 03:33:26 executing program 1: syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000001280)=ANY=[@ANYBLOB="010001000000000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002f2f66696c6530003c87c4db0397cb9288"]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20) write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r5, &(0x7f0000000080)="01", 0x292e9) [ 1048.123797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1048.519103] audit: type=1107 audit(2000000006.464:80): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='avc: denied { stop } for auid=n/a uid=0 gid=0 path="/lib/systemd/system/rsyslog.service" cmdline="" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=service permissive=1 [ 1048.519103] exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' 03:33:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x4, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:33:26 executing program 4: syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000001280)=ANY=[@ANYBLOB="010001000000000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002f2f66696c6530003c87c4db0397cb9288"]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20) write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r5, &(0x7f0000000080)="01", 0x292e9) 03:33:26 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="b00000000802110000010802110001000802110000001000000002000000"], 0x1e) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_request={@wo_ht={{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x4}, @broadcast, @broadcast, @random="49ce09adc3ea", {0x9, 0x5}}, @void, @void, @val={0x3, 0x1, 0xd}, @void, @val={0x72, 0x6}, [{0xdd, 0x68, "f458562d4320b2043ca42c386d2b36e3e35a4b8d41ab5d3a4fc4c9e70b695e2326ad57f35d81e9ffa87570481739be3d717c1f771655d056231d77de13623f5d7d5cc9707a8971d9d60912d5e71000a39be716232c5e897ffe8289f0db388bf190a2c963211e8a9e"}, {0xdd, 0x92, "da54c16f1bdf713dcb4c2c47e8316c3df60f6e63f3693aaf7fc127d7b39b15a25a53b3a6e10e30fc110329fbeb100c929904afeee8468c54001dc93d8571d75a728b454cc3e1a80ccbbe1b39547a3c4ea385a1a12b73e70ddf250965071cf993c114d85635cbd6630999e388e6f59f2a2bd1e2dc027d601858a2c7740060df27dff28ebea33e5d58652f5c0b7f2db6c01e04"}, {0xdd, 0x61, "6b9377872034cd09143bdabfe939c531779ae34beeb01e33c28ffcca88a9ab711dcebec741555bb98e019263047b5ebbb0f7cf28b8a7f87b2c408d5518834dd992b06f820f3dc8095f55da3a8918db3fef350194a10f62ee0e3ce351af5c2f3323"}, {0xdd, 0x8c, "608620bad73f4b5b37440d29963fd18be245c5e0cfc4ff076d661abcc2bc49ffbb0d81eeed2adc4348d1e804c012265d9582c3b83cdfd50b32b90eba4634713c7001add210857ad7016c4fa9ffc9c285d607bb46a923c57d48beeb25bd6aaaf23c271cb884b9f47a04ae7fd69e641c4e27902a9512ebbc75690abaace4f53056e8004f4d27e677bccfdb343b"}, {0xdd, 0x4d, "43382802ac5fd515e26425acc216066030312291633b7b8a878d8940740f498d885908817a80a2ea9e2e9bc4262315e54298f4d68eb83257d63c1f0fcb0b67cdbed366e2a8035d0a4027ee322b"}, {0xdd, 0xa2, "d33dcdaec189f472963cb573f4d5f3d0c1fb43d42ae45bf6d9f7e8d2d098466244b554139f923a75517ce640138d6fbf7d09bec06f7ea12756c4956733d6ee332e0ccc456d55400d16402ba38c38e1345f558b64a40b6409f0a6872f65618a82a0e7065c9ac14eb5bc1c335da9a15c579e9af981ac549a7556108d5de04cc92de4a460a5ec760cfe193eb7d9ca96fb36f61f83104e24c2af03e867a2e8104ee4de75"}, {0xdd, 0xb6, "abb54610290fecc9dce0063380e3ec605aba807b6bbdc47bc86060d60d75ad7383ba47a028b1e88e6a22d11e4c6a770ca08a1f10282eb4b45b1c28b292be109e731463fe7684d090fd871e7e2620dacb2ee35e28b919218c2c24c07086486642872b3dfdcee5917188103c412f484ddc784a12763e73f7de884c7bf1f5c94ce865be1be013bc19496a7c9151f4d388d62e8e04fefa28575de14c3601d265784f7111052bd12351182ba616ebd5054871aee29525998e"}]}, 0x3bd) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="100000000902110000010802110000000814110000002000010000200100010882848b960c121824"], 0x28) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000540)=@ctrl_frame=@ba={{}, {0x1}, @device_b, @broadcast, @multi={{0x1, 0x1, 0x1, 0x0, 0x5}, [{0x0, 0x2, {0x4, 0x1f}, "d8c2efc054a604f9"}, {0x0, 0x7, {0x8, 0xff}, "69d7655b13642541"}, {0x0, 0x9, {0xa, 0x2}, "eaf10923b2ed22d5"}, {0x0, 0x0, {0x5, 0x6}, "3473f13541486b21"}, {0x0, 0x8, {0x8, 0x3f}, "41f1d792a40a525e"}], {0x0, 0x7, {0xa, 0x1}, "02d7cbf33557bb4e"}}}, 0x5a) 03:33:26 executing program 3: syz_open_dev$usbmon(&(0x7f0000000440), 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x3) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000040)={0x80000000, 0x28, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0xac) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 03:33:26 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x1) pwritev(r0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000000)="dbf225f5a4568675d4b9d93506777ce8e7e1", 0x12}, {&(0x7f0000000240)}], 0x3, 0x8001, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) syz_io_uring_setup(0x15971, &(0x7f0000000680)={0x0, 0x4494, 0x0, 0x0, 0xe2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) openat(r2, &(0x7f0000000380)='./file1\x00', 0x44400, 0x4) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x203}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x3800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x100000) 03:33:26 executing program 7: r0 = syz_io_uring_setup(0xfa7, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x10010, r0, 0x30bca000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x101) mmap$binder(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgid(0x0) process_vm_readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/168, 0xa8}], 0x1e5, &(0x7f0000000240)=[{&(0x7f0000000100)=""/177, 0xa7}, {&(0x7f00000001c0)=""/102, 0xffffff1f}], 0x2, 0x0) 03:33:26 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) 03:33:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3d, &(0x7f0000000000), 0x4) [ 1048.569324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1048.571359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:26 executing program 0: r0 = syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x19, &(0x7f00000002c0), 0x0) [ 1048.624300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:26 executing program 3: syz_open_dev$usbmon(&(0x7f0000000440), 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x3) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000040)={0x80000000, 0x28, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0xac) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 03:33:26 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000580)={0xa, 0x0, 0x0, @empty}, 0x1c) bind$inet6(r0, &(0x7f00000044c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 1048.678678] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:27 executing program 7: r0 = syz_io_uring_setup(0xfa7, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x10010, r0, 0x30bca000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x101) mmap$binder(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgid(0x0) process_vm_readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/168, 0xa8}], 0x1e5, &(0x7f0000000240)=[{&(0x7f0000000100)=""/177, 0xa7}, {&(0x7f00000001c0)=""/102, 0xffffff1f}], 0x2, 0x0) 03:33:27 executing program 3: syz_open_dev$usbmon(&(0x7f0000000440), 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x3) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000040)={0x80000000, 0x28, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0xac) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 03:33:27 executing program 1: r0 = syz_io_uring_setup(0xfa7, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_io_uring_setup(0x2175, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10010, r4, 0x8000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz1\x00', 0x200002, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000540), &(0x7f0000000580)=0x4) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000640)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000480)=0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x3, &(0x7f0000000840)="48896913cf013d4841ef6bd14bad7a1ef5fa89345ea411569e4eaf84b8a00d198b2076417c28fbe24620551513f8def24459fabab7ccebc57e475330793cc850fde8f6291d79a28b11ebc15c87f626cd0236120652566bf3c5fdedf7015636e78bee2846e55020cdb943d3759ae4bcf110eb601878d4323e7d363100b0408ab930c87cec5602c395c1c80ef0f70e9b859631", 0x0, 0x0, 0x1, {0x2, r5}}, 0x101) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r3, 0x80, &(0x7f0000000280)=@l2tp={0x2, 0x0, @loopback}}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 03:33:27 executing program 4: syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x0, 0xc8, "c7b87faa37ce0fdd"}}}, 0xe) 03:33:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x5, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:33:27 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x1) pwritev(r0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000000)="dbf225f5a4568675d4b9d93506777ce8e7e1", 0x12}, {&(0x7f0000000240)}], 0x3, 0x8001, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) syz_io_uring_setup(0x15971, &(0x7f0000000680)={0x0, 0x4494, 0x0, 0x0, 0xe2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) openat(r2, &(0x7f0000000380)='./file1\x00', 0x44400, 0x4) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x203}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x3800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x100000) 03:33:27 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = eventfd2(0x0, 0x0) fremovexattr(r0, 0x0) 03:33:27 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8) accept$inet6(r3, &(0x7f0000000940)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000980)=0x1c) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x8413, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000540)=@data_frame={@qos_no_ht={{@type10={{0x0, 0x2, 0xd, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x40}, @initial, @device_b, @device_a, {0xb, 0x8}}, {0x5, 0x0, 0x2, 0x0, 0x8}}, {@type11={{0x0, 0x2, 0xd}, {0xff}, @device_a, @broadcast, @initial, {0x9}, @device_b}, {0x3, 0x0, 0x2, 0x1, 0x80}}}, @random="8a505c497bd8e33d5f50bf2a46cb6240098565411d09f463c5af0a0967b50d7bac7b512c19044f09f03d7954b884c7d1662179d1db0d83db2a0d685f877148781ff1bf977ada526065fda7d479c3e987a44cf61c4b595ff4ef9b5ac576e52b32fa12f6ba4202528de2524b61dc6fd696b6be8c539724e5ab7ebb3f507c68467c6283f1ad800435cded7dd89380bcd379ce5c3eddab26e26b8f55ecb870b6d90a965b2ba20f459bb38d726f8a9683b533629563764638dd6da12e0b349156b747bf7698ed8a609015a1fd56e04f878300d8d040b3ddf5fa0d968c615eeb6bd5c8bc32210bebc8681c8d4cbb756e46fb787f5f3d37530b0811cb49078dd7dcce4c127713f9ceb434442451c867930a14b7e1ee4ed3ce4b69e0c47ecee54b2097912467ae1e5b3e962188851f9051cef895a7e9792011ab76d71a2c7ea99c05603f1b7898b845d3ec0b27a5fe5e29d35aad373ad1d3549424bddcf74e9ba8019a1716a94af145a3b74040269c2d2aee359c44ff3ec8de941b7d33f93d216725e184794ce426e29d5b2153e2fedd6e112c40620215f92f4723d0300ca288dd7526aa1f6ec1582a12a7bd484a0d1174240ec5aa8d07c6c1c539bbd1e28299f3d7f967a97601e4cfb9d4644c9d1f10d502543149c66e6dbef7c38a4d4d77b61a06072a819a4809eba727f85cb303968ca168bb9d4eb409c7528cada77382993e2a9d92c1b7ee9c4a29b20126e0574ef6fad995e0179ad1a1d3084dbc8fa20b24e72d9ee86bbb5804ff01ef0da3854d5ab9234936c494b20baf6c8206f07db81846931032b58b9b9bb854edc15b9ae36b488eb843ec1898382dda1421fc7af9d46da1e4fd94844cab37d1840d9b2194660a42a39d7beb67fa3a077cf04b3004e2386ae118952c58cd2d9d0bbaac4df6a52ef647a6f31dc0336578852fbc41854eb6894b32229a90d481a888cdd7e01b4cc7fdcbf6158b0db289069759a30f84f69f5709d7a0484ac913521c0e1d445f09ca6eb02536ca9809b465531f8ced9c781c7fb6b43a73ee71f4c5b00825e1f772ed80d686bf78f430cd12b74d486c744c66acff16c9f0c34e6306191f17fe191df45d0028252d35d42896542f3215e8a4ad41980b7805253131e9aa4b126ff193a7e8066e281e994dff0d977b6e0270b93082df7c58d07f7a74ccfacec266ebfe14be136f70eddfa7a4ca1f36c8e872bf3995a12f56e6e74d6c71fe66e9630e03e92582d34c67529815189602db806cb5fd9c660a4b9946a6905b8f020fdb82d2dace12cb91b63d034305b8383956eafc066e12c03eab63932070a02b2d1a6a59a864c18603f5"}, 0x3ed) [ 1049.363712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:27 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}], 0x1, 0x7, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000140)={{0x2, 0x4e23, @local}, {0x306, @remote}, 0x42, {0x2, 0x4e21, @multicast1}, 'macvtap0\x00'}) syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devpts\x00', 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) faccessat2(r1, &(0x7f0000000080)='./file0\x00', 0x10, 0x300) r2 = inotify_init() lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)) inotify_add_watch(r2, &(0x7f0000000100)='./file0\x00', 0x500) umount2(&(0x7f0000000000)='./file0\x00', 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/ldiscs\x00', 0x0, 0x0) close(r2) [ 1049.424295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1049.445847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:27 executing program 4: syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x0, 0xc8, "c7b87faa37ce0fdd"}}}, 0xe) [ 1049.476905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1049.505414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:27 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat6\x00') pread64(r0, &(0x7f00000000c0)=""/98, 0x62, 0x0) [ 1049.562976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1049.567349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:27 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x1) pwritev(r0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000000)="dbf225f5a4568675d4b9d93506777ce8e7e1", 0x12}, {&(0x7f0000000240)}], 0x3, 0x8001, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) syz_io_uring_setup(0x15971, &(0x7f0000000680)={0x0, 0x4494, 0x0, 0x0, 0xe2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) openat(r2, &(0x7f0000000380)='./file1\x00', 0x44400, 0x4) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x203}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x3800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x100000) 03:33:27 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}], 0x1, 0x7, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000140)={{0x2, 0x4e23, @local}, {0x306, @remote}, 0x42, {0x2, 0x4e21, @multicast1}, 'macvtap0\x00'}) syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devpts\x00', 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) faccessat2(r1, &(0x7f0000000080)='./file0\x00', 0x10, 0x300) r2 = inotify_init() lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)) inotify_add_watch(r2, &(0x7f0000000100)='./file0\x00', 0x500) umount2(&(0x7f0000000000)='./file0\x00', 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/ldiscs\x00', 0x0, 0x0) close(r2) 03:33:27 executing program 4: syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x0, 0xc8, "c7b87faa37ce0fdd"}}}, 0xe) 03:33:27 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) truncate(&(0x7f0000000000)='./file1\x00', 0x6) 03:33:27 executing program 1: r0 = syz_io_uring_setup(0xfa7, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_io_uring_setup(0x2175, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10010, r4, 0x8000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz1\x00', 0x200002, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000540), &(0x7f0000000580)=0x4) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000640)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000480)=0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x3, &(0x7f0000000840)="48896913cf013d4841ef6bd14bad7a1ef5fa89345ea411569e4eaf84b8a00d198b2076417c28fbe24620551513f8def24459fabab7ccebc57e475330793cc850fde8f6291d79a28b11ebc15c87f626cd0236120652566bf3c5fdedf7015636e78bee2846e55020cdb943d3759ae4bcf110eb601878d4323e7d363100b0408ab930c87cec5602c395c1c80ef0f70e9b859631", 0x0, 0x0, 0x1, {0x2, r5}}, 0x101) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r3, 0x80, &(0x7f0000000280)=@l2tp={0x2, 0x0, @loopback}}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 03:33:28 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) truncate(&(0x7f0000000000)='./file1\x00', 0x6) 03:33:28 executing program 4: syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x0, 0xc8, "c7b87faa37ce0fdd"}}}, 0xe) 03:33:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x6, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:33:28 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}], 0x1, 0x7, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000140)={{0x2, 0x4e23, @local}, {0x306, @remote}, 0x42, {0x2, 0x4e21, @multicast1}, 'macvtap0\x00'}) syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devpts\x00', 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) faccessat2(r1, &(0x7f0000000080)='./file0\x00', 0x10, 0x300) r2 = inotify_init() lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)) inotify_add_watch(r2, &(0x7f0000000100)='./file0\x00', 0x500) umount2(&(0x7f0000000000)='./file0\x00', 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/ldiscs\x00', 0x0, 0x0) close(r2) 03:33:28 executing program 1: r0 = syz_io_uring_setup(0xfa7, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_io_uring_setup(0x2175, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10010, r4, 0x8000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz1\x00', 0x200002, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000540), &(0x7f0000000580)=0x4) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000640)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000480)=0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x3, &(0x7f0000000840)="48896913cf013d4841ef6bd14bad7a1ef5fa89345ea411569e4eaf84b8a00d198b2076417c28fbe24620551513f8def24459fabab7ccebc57e475330793cc850fde8f6291d79a28b11ebc15c87f626cd0236120652566bf3c5fdedf7015636e78bee2846e55020cdb943d3759ae4bcf110eb601878d4323e7d363100b0408ab930c87cec5602c395c1c80ef0f70e9b859631", 0x0, 0x0, 0x1, {0x2, r5}}, 0x101) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r3, 0x80, &(0x7f0000000280)=@l2tp={0x2, 0x0, @loopback}}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) [ 1050.240724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:28 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x1) pwritev(r0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000000)="dbf225f5a4568675d4b9d93506777ce8e7e1", 0x12}, {&(0x7f0000000240)}], 0x3, 0x8001, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) syz_io_uring_setup(0x15971, &(0x7f0000000680)={0x0, 0x4494, 0x0, 0x0, 0xe2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) openat(r2, &(0x7f0000000380)='./file1\x00', 0x44400, 0x4) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x203}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x3800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x100000) 03:33:28 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x40, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@obj_type={'obj_type', 0x3d, '[+\x04\xd2%l,:$'}}, {@fsuuid={'fsuuid', 0x3d, {[], 0x2d, [0x4ca2767b55e81ab5, 0x61, 0x62], 0x2d, [0x0, 0x0, 0x0, 0x30], 0x2d, [0x0, 0x0, 0x31], 0x2d, [0x30, 0x35, 0x37, 0x0, 0x0, 0x0, 0x64]}}}]}}) 03:33:28 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = fcntl$dupfd(r0, 0x406, r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='y'}, @NL80211_ATTR_IE={0x4}]}, 0x28}}, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000005c0)=0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000040)={0x2c, r1, 0xd00, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x4e}, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r6}]}, 0x2c}}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1050.296651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:28 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) truncate(&(0x7f0000000000)='./file1\x00', 0x6) [ 1050.320654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) chroot(0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) setxattr$security_capability(0x0, &(0x7f0000000340), 0x0, 0x0, 0x2) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 03:33:28 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}], 0x1, 0x7, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000140)={{0x2, 0x4e23, @local}, {0x306, @remote}, 0x42, {0x2, 0x4e21, @multicast1}, 'macvtap0\x00'}) syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devpts\x00', 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) faccessat2(r1, &(0x7f0000000080)='./file0\x00', 0x10, 0x300) r2 = inotify_init() lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)) inotify_add_watch(r2, &(0x7f0000000100)='./file0\x00', 0x500) umount2(&(0x7f0000000000)='./file0\x00', 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/ldiscs\x00', 0x0, 0x0) close(r2) [ 1050.382464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:28 executing program 1: r0 = syz_io_uring_setup(0xfa7, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_io_uring_setup(0x2175, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10010, r4, 0x8000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz1\x00', 0x200002, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000540), &(0x7f0000000580)=0x4) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000640)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000480)=0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x3, &(0x7f0000000840)="48896913cf013d4841ef6bd14bad7a1ef5fa89345ea411569e4eaf84b8a00d198b2076417c28fbe24620551513f8def24459fabab7ccebc57e475330793cc850fde8f6291d79a28b11ebc15c87f626cd0236120652566bf3c5fdedf7015636e78bee2846e55020cdb943d3759ae4bcf110eb601878d4323e7d363100b0408ab930c87cec5602c395c1c80ef0f70e9b859631", 0x0, 0x0, 0x1, {0x2, r5}}, 0x101) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r3, 0x80, &(0x7f0000000280)=@l2tp={0x2, 0x0, @loopback}}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) [ 1050.435840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x7, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:33:28 executing program 7: futimesat(0xffffffffffffffff, 0x0, 0x0) 03:33:28 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) truncate(&(0x7f0000000000)='./file1\x00', 0x6) [ 1050.607997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:28 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000880)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000580)=""/222, 0xde}], 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000400)='./file0\x00', 0x40000020) socket$nl_audit(0x10, 0x3, 0x9) [ 1050.678670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:28 executing program 5: perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x7b, 0x9c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:33:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc) close(r0) 03:33:28 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) fadvise64(r0, 0x0, 0x41, 0x5) 03:33:28 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getresuid(&(0x7f0000002240), &(0x7f0000002280), &(0x7f00000022c0)) 03:33:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x8, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1050.952210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1051.005617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:29 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000000a8c0)) getresuid(&(0x7f000000a9c0), &(0x7f000000aa00), &(0x7f000000aa40)) 03:33:29 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) 03:33:29 executing program 3: r0 = syz_io_uring_setup(0x137, &(0x7f00000001c0), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000016c0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r3, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 03:33:29 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r0, 0x0, 0x17, 0x0, 0x0) 03:33:29 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 03:33:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x9, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:33:29 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) chroot(0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) setxattr$security_capability(0x0, &(0x7f0000000340), 0x0, 0x0, 0x2) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1051.507220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000004fc0)={0x0, 0x0, &(0x7f0000004f80)={&(0x7f0000004b40)={0x24, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x24}}, 0x0) 03:33:29 executing program 0: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000003a40)='ns/user\x00') 03:33:29 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x74, r1, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x55}}}}, [@NL80211_ATTR_IE={0x4a, 0x2a, [@prep={0x83, 0x25, @ext={{}, 0x0, 0x7a, @broadcast, 0x3, @broadcast, 0x6, 0x1, @device_a, 0x82}}, @rann={0x7e, 0x15, {{0x1, 0x19}, 0x80, 0x9, @device_b, 0x4, 0x1}}, @gcr_ga={0xbd, 0x6, @broadcast}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000080}, 0x20008880) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @random="6411fc96bac4"}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x39}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10000}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1200}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}]]}, 0x54}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='y'}, @NL80211_ATTR_IE={0x4}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000840)={0x700, r4, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x40, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x11}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x510}]}]}, @NL80211_ATTR_TID_CONFIG={0x658, 0x11d, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xaab}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x65}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdb}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x20}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x98}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7f}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x71}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe9}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x68}]}, {0x524, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x88, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3f, 0x2, 0x1, 0x5132, 0xfffc, 0x40, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0xfff, 0x5, 0x3f, 0x8, 0x5, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x2, 0x24, 0x36, 0x1, 0x3b, 0x6b, 0x24, 0x2, 0x12, 0x9, 0x2, 0xc, 0x18, 0x9, 0xb]}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x0, 0x6}, {0x1, 0x2}, {}, {0x2, 0x7}, {0x5, 0x1}, {0x4, 0x6}, {0x4, 0x1}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x17]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x6, 0xa}, {0x0, 0xa}, {0x0, 0x5}, {0x1, 0x8}, {0x4, 0x2}, {0x2, 0x2}, {0x6, 0xa}, {0x0, 0x6}, {0x5, 0x4}, {0x5, 0x7}, {0x3, 0x8}, {0x5, 0x3}, {0x4, 0x2}, {0x3, 0xa}]}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x5}, {0x7}, {0x5, 0x9}, {0x4, 0x7}, {0x0, 0x6}, {0x5, 0x3}, {0x0, 0x8}]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa3}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1f8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x6, 0x33, 0x101, 0x401, 0x2, 0x4, 0x1]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x4, 0x5}, {0x3, 0x3}, {0x0, 0x4}, {}, {0x0, 0x6}, {0x3}, {0x2, 0x2}, {0x6, 0x4}, {0x2, 0x5}, {0x2, 0x3}, {0x1, 0x4}, {0x2}, {0x2, 0x3}, {0x2, 0x3}, {0x0, 0x1}, {0x1}, {0x6, 0x4}, {0x2, 0x9}, {0x0, 0x7}, {0x3, 0x7}, {0x3, 0x6}, {0x3, 0x4}, {0x1, 0x8}, {0x4, 0xa}, {0x0, 0x9}, {0x0, 0x4}, {0x4, 0x1}, {0x3, 0xa}, {0x4}, {0x4, 0x6}, {0x1, 0x6}, {0x1, 0x5}, {0x6, 0x7}, {0x5, 0x1}, {0x4, 0x8}, {0x7, 0xa}, {0x7, 0x1}, {0x7, 0x6}, {0x1, 0x5}, {0x4, 0x7}, {0x4}, {0x4, 0x6}, {0x5, 0x3}, {0x6, 0x9}, {0x1, 0x3}, {0x7, 0x3}, {0x6, 0x8}, {0x3, 0x6}, {0x0, 0x4}, {0x4, 0x8}, {0x0, 0x4}, {0x1, 0x7}, {0x5, 0x1}, {0x1, 0x4}, {0x5, 0x2}, {0x6, 0x9}, {0x1}, {0x0, 0x2}, {0x4, 0x4}, {0x2, 0x9}, {0x3, 0x5}, {0x7, 0x1}, {0x4, 0x9}, {0x3}, {0x6}, {0x7}, {0x7, 0x7}, {0x7, 0x2}, {0x6, 0x5}, {0x7, 0x4}, {0x1, 0x4}, {0x4, 0x9}, {0x1, 0x3}, {0x0, 0x3}, {0x3, 0x6}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x30, 0x5, 0x6c, 0x60, 0x1, 0x24, 0x36, 0x18, 0x1, 0xc, 0x16, 0x9, 0x30, 0x2, 0x1b, 0x36, 0x6, 0xc, 0x3a, 0x12]}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x12, 0x0, 0x24, 0xb, 0x0, 0x48, 0x48, 0xb, 0x24, 0x16]}]}, @NL80211_BAND_2GHZ={0x104, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x5, 0x36, 0x1b, 0x3, 0x1b, 0x12, 0x3, 0x6c, 0x48, 0x2, 0x4, 0x16, 0x2, 0x6, 0x9, 0x1b, 0x30, 0x18, 0x5, 0x0]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x4, 0x60, 0x16, 0x1, 0x1, 0x16, 0x1, 0x18, 0x4, 0xc, 0x18, 0x3, 0x1b, 0x60, 0xc, 0x48, 0x4, 0x4c, 0x1e, 0xb, 0x48, 0x9, 0x1b, 0x6c, 0x5, 0x60, 0x6, 0xb, 0xb, 0x7b, 0x12, 0x1]}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x0, 0x5}, {0x3, 0x7}, {0x7, 0x5}, {0x1, 0x9}, {0x2, 0x2}, {0x4, 0x6}, {0x1, 0x2}, {0x7, 0x2}, {0x5, 0x8}, {0x6, 0x6}, {0x3, 0x2}, {0x6, 0x2}, {0x0, 0x4}, {0x1, 0x8}, {0x3, 0x1}, {0x5, 0x3}, {0x6, 0x1}, {0x5, 0x7}, {0x1, 0x2}, {0x5, 0x1}, {0x3, 0x3}, {0x0, 0x4}, {0x5, 0x7}, {0x3, 0x9}, {0x2, 0x8}, {0x0, 0x6}, {0x4}, {0x2, 0x6}, {0x0, 0x6}, {0x0, 0x1}, {0x3, 0x7}, {0x2, 0x9}, {0x0, 0x3}, {0x1, 0x8}, {0x3, 0x7}, {0x4, 0x5}, {0x5, 0x8}, {0x7, 0x6}, {0x1, 0x8}, {0x4, 0x6}, {0x7, 0xa}, {0x2, 0x4}, {0x7, 0x5}, {0x0, 0x9}, {0x7, 0x7}, {0x0, 0x3}, {0x3}, {0x6, 0x3}, {0x3, 0x9}, {0x1, 0x7}, {0x1, 0x2}, {0x3, 0x5}, {0x0, 0x4}, {0x7, 0x2}, {0x5, 0x7}, {0x0, 0x8}, {0x0, 0x7}, {0x1, 0xa}, {0x3, 0x6}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x1}, {0x1, 0x7}, {0x0, 0x4}, {0x5, 0x7}, {0x0, 0x9}, {0x5, 0x1}]}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x0, 0x6}, {0x3, 0x8}, {0x0, 0x3}, {0x1, 0x4}, {0x5}, {0x1, 0x7}, {0x0, 0xa}, {0x1, 0x4}, {0x0, 0xa}, {0x1, 0x7}, {0x7, 0x3}, {0x4, 0x8}, {0x5, 0x5}, {0x4}, {0x0, 0x5}, {0x6, 0x4}, {0x1, 0x5}, {0x1, 0xa}, {0x2, 0x3}, {0x3, 0x7}, {}, {0x0, 0x9}, {0x1, 0x5}, {0x2, 0x8}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x1}, {0x4, 0x8}, {0x0, 0x2}, {0x6, 0x3}, {0x0, 0x5}, {0x6, 0xa}, {0x0, 0x1}, {0x1, 0x9}, {0x1}, {0x3, 0x6}, {0x5}, {0x4, 0x8}, {0x6, 0x6}, {0x3}, {0x2, 0x6}, {0x1, 0x3}, {0x4, 0x2}, {0x3, 0x9}, {0x1, 0x2}, {0x1, 0x4}, {0x0, 0x1}, {0x6, 0x4}, {0x1, 0x6}, {0x7}, {0x1, 0x2}, {0x5, 0x7}, {0x0, 0x8}, {0x3, 0xa}, {0x1, 0x6}, {0x3, 0x6}, {0x1, 0x4}, {0x7}, {0x6, 0x4}, {0x2, 0x2}, {0x3, 0x8}, {0x0, 0x8}, {0x5, 0xa}, {0x0, 0x1}, {0x0, 0x8}, {0x7, 0x5}, {0x5, 0x6}, {0x6, 0x2}, {0x3, 0x5}, {0x2, 0xa}]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x16, 0x42, 0x1, 0x6, 0x5, 0x24, 0x6, 0xc, 0x6, 0x60, 0x12, 0x1, 0x24, 0x4c, 0x16, 0x24, 0x16, 0x6, 0x18, 0x1, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2, 0x1000, 0x8e, 0xffff, 0x3, 0x5]}}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x48, 0x18, 0x48, 0x6, 0x4, 0xcd, 0x36, 0x16, 0x4, 0x30, 0x2, 0xc, 0x0, 0x2, 0x3, 0x3, 0x1b, 0x3, 0x18, 0x6, 0x6c, 0x16]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x8, 0x8c0, 0x7f, 0x2, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x59}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x278, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x36, 0x1, 0x1b, 0x4, 0x1b, 0x24, 0x48, 0x2, 0x5, 0x24, 0x36, 0x36, 0x30, 0x9, 0x6, 0x2, 0x48, 0x9, 0x4, 0xc67bfe113db97fff, 0x36, 0x6, 0x12, 0x1b, 0x4, 0x3, 0x6, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x1f, 0x1, 0x4, 0x81, 0x1, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x7a, 0x1, 0x5, 0x2, 0x0, 0x200, 0x3d]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x48, 0x48, 0x16, 0x1b, 0x2, 0x15, 0x3, 0x1, 0x1, 0xb, 0x5, 0x1, 0x6, 0x18, 0x16, 0x6, 0x3, 0x16, 0x60, 0x12, 0x5, 0x16, 0x30, 0x18]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe4ab, 0xffff, 0x4, 0x2, 0x3ff, 0x0, 0x4, 0x1]}}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x1, 0x7}, {0x4, 0x7}, {0x5, 0x9}, {0x4, 0x6}, {0x5, 0x1}, {0x1, 0x2}, {0x3, 0x9}, {0x6, 0x8}, {0x6, 0x5}, {0x5, 0x4}, {0x6, 0x9}, {0x0, 0x9}, {0x4, 0x7}, {0x2, 0x6}, {0x1, 0x9}, {0x7, 0x2}, {0x2, 0x7}, {0x3, 0x7}, {0x6, 0xa}, {0x3, 0xa}, {0x3}, {0x0, 0x9}, {0x1, 0x9}, {0x6, 0x3}, {0x5, 0x1}, {0x1, 0x7}, {0x3, 0xa}, {0x6, 0xa}, {0x1, 0x9}, {0x0, 0x3}, {0x2}, {0x4, 0x4}, {0x2, 0x1}, {0x2, 0x7}, {0x0, 0x8}, {0x6, 0x3}, {0x5, 0x2}, {0x6, 0x2}, {0x1}, {0x0, 0x8}, {0x5, 0x2}, {0x3}, {0x6, 0x4}, {0x5, 0x8}, {0x6, 0x2}, {0x4, 0x3}, {0x1, 0x3}, {0x0, 0x4}, {0x6, 0x9}, {0x0, 0xa}, {0x4}, {0x2, 0x9}, {0x5, 0x5}, {0x5, 0x7}, {0x3, 0x3}]}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x40, 0x7201, 0x4, 0xc00, 0x3, 0x200, 0x7]}}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x7, 0x8}, {0x1, 0x8}, {0x0, 0xa}, {0x6, 0x9}, {0x3, 0x5}, {0x0, 0x6}, {0x0, 0x5}, {0x3, 0x7}, {0x7, 0xa}, {0x4, 0x1}, {0x3, 0x9}, {0x6, 0x2}, {0x5, 0x7}, {0x2, 0x1}, {0x7, 0x2}, {0x7, 0x2}, {0x0, 0xa}, {0x3, 0x2}, {0x7, 0x9}, {0x6, 0x2}, {0x4, 0x5}, {0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xdf, 0x7ff, 0xfc7b, 0x3, 0x0, 0x7fff, 0xfff8, 0x9]}}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x5, 0x3, 0x800, 0x400, 0x6, 0x9, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x4}, {0x0, 0x9}, {0x2, 0x6}, {0x5, 0x3}, {0x3}, {}, {0x5, 0x4}, {0x6, 0x5}, {0x1, 0x4}, {0x6}, {0x2, 0x8}, {0x7, 0x4}, {0x4, 0x5}, {0x5}, {0x3, 0x9}, {0x6, 0x7}, {0x4, 0x4}, {0x6, 0x4}, {0x5, 0x3}, {0x5, 0x7}, {0x1, 0x7}, {0x5, 0x3}, {0x1, 0xa}]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x60, 0x30, 0x6c]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x3, 0x30, 0x2, 0x5, 0x36, 0x3]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x6, 0x6, 0x1b, 0x16, 0xc, 0x4, 0x24, 0xc, 0x9, 0x6c, 0x2, 0x9, 0x4, 0x3e, 0x9, 0x3, 0x16, 0x6, 0x9, 0x6c, 0x9, 0x5, 0x12, 0x4, 0x0, 0x12, 0x0, 0x6c, 0x12, 0x30, 0x2, 0x24]}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x3e, 0x2, 0x24, 0x48, 0x30, 0x60, 0x3, 0x12, 0x5, 0x2, 0x24, 0x4, 0x1b, 0x6c, 0x0, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x75, 0x200, 0x6, 0x9, 0xff7f, 0xe00, 0xffff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x25, 0x2, [{0x4, 0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x0, 0xa}, {0x4, 0x5}, {0x4, 0x7}, {0x1, 0x5}, {}, {0x2, 0xa}, {0x4}, {0x5, 0x1}, {0x3, 0x5}, {0x3, 0x4}, {0x3}, {0x0, 0x7}, {}, {0x0, 0x6}, {0x0, 0x3}, {0x1, 0x7}, {0x4, 0x6}, {0x3, 0x1}, {0x0, 0x8}, {0x4, 0x5}, {0x0, 0x8}, {0x3, 0xa}, {0x6, 0x9}, {0x7, 0x4}, {0x7, 0x5}, {0x4, 0xa}, {0x3, 0x4}, {0x5, 0xa}, {0x0, 0x1}, {0x7, 0x4}]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x70, 0x1b, 0x30, 0x16, 0x2c, 0x18, 0x18]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x24, 0x4, 0x6, 0x4, 0x4, 0x0, 0x2, 0x3, 0x4, 0x5, 0x16, 0x18, 0x6, 0x60, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x4, 0xa}, {0x2, 0x7}, {0x3, 0x5}, {}, {0x7, 0x1}, {0x1, 0x2}, {0x3, 0x3}, {0x4, 0x1}, {0x0, 0x5}, {0x0, 0x1}, {0x4, 0x6}, {0x4, 0x6}, {0x4, 0x5}, {0x2, 0x7}, {0x1, 0xa}, {0x1, 0x1}, {0x5, 0x9}, {0x4}, {0x1, 0x5}, {0x3, 0x6}, {0x4}, {0x4, 0x9}, {0x7, 0x5}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}]}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x6, 0x7}, {0x2, 0x7}, {0x6, 0x8}, {0x7}, {0x4, 0x6}, {0x0, 0xa}, {0x4, 0x3}, {0x6, 0x2}, {0x0, 0x8}, {}, {0x0, 0x5}, {0x4, 0x5}, {0x3, 0x4}, {0x6, 0x3}, {0x4, 0x9}, {0x5}, {0x1, 0x5}, {0x5, 0x5}, {0x2, 0x2}, {0x0, 0x3}, {0x5, 0x1}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0x6, 0x7, 0x8, 0x9, 0x1, 0x8]}}]}]}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x37}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x26}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x72}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc6}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf2}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}]}, @NL80211_ATTR_TID_CONFIG={0x54, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8f}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x15}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb0}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}]}, 0x700}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f00000007c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008025efb110000000000000000000000000064df00000006020202020202010882848b960c121824"], 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f0000000740), &(0x7f0000000780)=@ctrl_frame=@cf_end, 0x10) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) clock_gettime(0x0, &(0x7f0000000680)={0x0, 0x0}) nanosleep(&(0x7f00000006c0)={r6, r7+10000000}, &(0x7f0000000700)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:33:29 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) r0 = semget(0x2, 0x4, 0x222) semctl$IPC_RMID(r0, 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000380)=@random={'os2.', '\x00'}, &(0x7f00000003c0)=')[$\x00', 0x4, 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000001c0)=[0xffff]) semctl$GETNCNT(0xffffffffffffffff, 0x3, 0xe, &(0x7f0000000100)=""/168) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='/dev/sr0\x00') signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) eventfd2(0x5, 0x80000) 03:33:29 executing program 7: open_tree(0xffffffffffffffff, 0x0, 0x89801) 03:33:29 executing program 7: semctl$SETVAL(0x0, 0x0, 0x10, &(0x7f0000000000)) [ 1051.766718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:30 executing program 3: r0 = syz_io_uring_setup(0x137, &(0x7f00000001c0), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000016c0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r3, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 03:33:30 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fremovexattr(r0, &(0x7f0000000040)=@known='trusted.overlay.redirect\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) 03:33:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xc, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:33:30 executing program 7: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0, 0x13061}, 0x0) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 03:33:30 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000540)=ANY=[@ANYBLOB="500000000802110000010802110000000802110000043c9bec39d8bdd98d6463518eaa00000000000000000000640001000006020202020202010882848b960c121824"], 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) nanosleep(&(0x7f0000000000)={0x0, 0x3938700}, &(0x7f0000000040)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:33:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x0, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}]}, 0x1c}}, 0x0) clock_gettime(0x0, &(0x7f0000002440)) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000002500), r0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002740)={'wpan1\x00'}) syz_genetlink_get_family_id$nl802154(&(0x7f0000002900), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 03:33:30 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) chroot(0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) setxattr$security_capability(0x0, &(0x7f0000000340), 0x0, 0x0, 0x2) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 03:33:30 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) r0 = semget(0x2, 0x4, 0x222) semctl$IPC_RMID(r0, 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000380)=@random={'os2.', '\x00'}, &(0x7f00000003c0)=')[$\x00', 0x4, 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000001c0)=[0xffff]) semctl$GETNCNT(0xffffffffffffffff, 0x3, 0xe, &(0x7f0000000100)=""/168) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='/dev/sr0\x00') signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) eventfd2(0x5, 0x80000) [ 1052.511346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1052.515766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:30 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) r0 = semget(0x2, 0x4, 0x222) semctl$IPC_RMID(r0, 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000380)=@random={'os2.', '\x00'}, &(0x7f00000003c0)=')[$\x00', 0x4, 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000001c0)=[0xffff]) semctl$GETNCNT(0xffffffffffffffff, 0x3, 0xe, &(0x7f0000000100)=""/168) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='/dev/sr0\x00') signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) eventfd2(0x5, 0x80000) 03:33:30 executing program 3: r0 = syz_io_uring_setup(0x137, &(0x7f00000001c0), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000016c0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r3, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 03:33:30 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fremovexattr(r0, &(0x7f0000000040)=@known='trusted.overlay.redirect\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) 03:33:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xd, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1053.021443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:31 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) r0 = semget(0x2, 0x4, 0x222) semctl$IPC_RMID(r0, 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000380)=@random={'os2.', '\x00'}, &(0x7f00000003c0)=')[$\x00', 0x4, 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000001c0)=[0xffff]) semctl$GETNCNT(0xffffffffffffffff, 0x3, 0xe, &(0x7f0000000100)=""/168) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='/dev/sr0\x00') signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) eventfd2(0x5, 0x80000) 03:33:31 executing program 7: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0, 0x13061}, 0x0) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 03:33:31 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = fsmount(0xffffffffffffffff, 0x0, 0x2) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000140)={0x20000009}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x50, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x1d}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x50}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = fsmount(0xffffffffffffffff, 0x0, 0x2) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000140)={0x20000009}) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x2, 0x7}, 0x6) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:33:31 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) r0 = semget(0x2, 0x4, 0x222) semctl$IPC_RMID(r0, 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000380)=@random={'os2.', '\x00'}, &(0x7f00000003c0)=')[$\x00', 0x4, 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000001c0)=[0xffff]) semctl$GETNCNT(0xffffffffffffffff, 0x3, 0xe, &(0x7f0000000100)=""/168) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='/dev/sr0\x00') signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) eventfd2(0x5, 0x80000) 03:33:31 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fremovexattr(r0, &(0x7f0000000040)=@known='trusted.overlay.redirect\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) 03:33:31 executing program 3: r0 = syz_io_uring_setup(0x137, &(0x7f00000001c0), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000016c0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r3, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 03:33:31 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) chroot(0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) setxattr$security_capability(0x0, &(0x7f0000000340), 0x0, 0x0, 0x2) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 03:33:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xf, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1053.499667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:31 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fremovexattr(r0, &(0x7f0000000040)=@known='trusted.overlay.redirect\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) [ 1053.560854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:31 executing program 3: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x81}, 0x2008, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) shmat(r2, &(0x7f0000ffe000/0x2000)=nil, 0x2000) shmat(r2, &(0x7f0000ff0000/0x2000)=nil, 0x0) r3 = shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffd000/0x2000)=nil) shmat(r3, &(0x7f0000ff5000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000700)=""/4096) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x2, 0x3f, 0x5, 0x3, 0x0, 0x89d9, 0x1000, 0xc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x8040, 0x1, 0x400, 0x6, 0xa2, 0x0, 0x7, 0x0, 0x4, 0x0, 0x239b}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="69555786b3d6eec22ad48a65cff8d300cb0d52c3afc9fe9a42328c3dfa76d1b6e8e95ad7ba4af3568be76b6973650100fcd217c4a4040dbd74a489e2106b789d1048f6498be730a2136030b66ec90fb3bfa3101fd1914da9439a1d6f7a12b3b58ce1"]) 03:33:31 executing program 7: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0, 0x13061}, 0x0) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 03:33:31 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) r0 = semget(0x2, 0x4, 0x222) semctl$IPC_RMID(r0, 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000380)=@random={'os2.', '\x00'}, &(0x7f00000003c0)=')[$\x00', 0x4, 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000001c0)=[0xffff]) semctl$GETNCNT(0xffffffffffffffff, 0x3, 0xe, &(0x7f0000000100)=""/168) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='/dev/sr0\x00') signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) eventfd2(0x5, 0x80000) 03:33:31 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x3c, r1, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x800, 0x0, 0x3, 0x0, {0x0, 0x8, 0x0, 0x7f, 0x0, 0x1}, 0x300, 0x80000000, 0x5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2400c801}, 0x4000800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = dup(r0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, r1, 0x0, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="40cd56217051"}]}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x5) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001480)={0x1168, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x80}, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xffff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x100}, @NL80211_ATTR_VENDOR_DATA={0xda, 0xc5, "f65a6f9a2c293bd46564343f14fc05b4e4d0a21eee711464474cd1d5a60dc384db293f764e869c32bb9314940f216efc0563f92180562ca948b8ca4f2568341e2ba0a92e6e44509057c6d399734dda62a0ad1c8369f35db550def2bb72c4cb267c29070f6b420a50731592182cb97fba05f72b5ec88b5a8df7c4a534ef0a4790d9f3ce4bcd477e061dd131ca3cd1cdbf1057b8ddd1bd95ca9c6d3721ffa767ad224161625c416811b0f740892e842877063b542e2d3fc52bae61a4102909ebb49e27db52fb2165b1b03f5a858698b18813bcf2808c99"}, @NL80211_ATTR_VENDOR_DATA={0x4}, @NL80211_ATTR_VENDOR_DATA={0x38, 0xc5, "e8107b60042269e135ee21f700861496e3c7f53fef6c5fc4862cd7c10bc25ec8601e3d094e13fc3a59ccd289810a589888e7421b"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xffff}, @NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "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"}]}, 0x1168}, 0x1, 0x0, 0x0, 0x4004880}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x70, r1, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x4084) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:33:31 executing program 7: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0, 0x13061}, 0x0) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 03:33:31 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x6) sync() 03:33:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x60, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1053.785706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:31 executing program 0: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x34010000, 0x0, 0x0) 03:33:31 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) r0 = semget(0x2, 0x4, 0x222) semctl$IPC_RMID(r0, 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000380)=@random={'os2.', '\x00'}, &(0x7f00000003c0)=')[$\x00', 0x4, 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000001c0)=[0xffff]) semctl$GETNCNT(0xffffffffffffffff, 0x3, 0xe, &(0x7f0000000100)=""/168) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='/dev/sr0\x00') signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) eventfd2(0x5, 0x80000) 03:33:31 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$link(0x8, r0, r0) [ 1053.920913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:32 executing program 3: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x81}, 0x2008, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) shmat(r2, &(0x7f0000ffe000/0x2000)=nil, 0x2000) shmat(r2, &(0x7f0000ff0000/0x2000)=nil, 0x0) r3 = shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffd000/0x2000)=nil) shmat(r3, &(0x7f0000ff5000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000700)=""/4096) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x2, 0x3f, 0x5, 0x3, 0x0, 0x89d9, 0x1000, 0xc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x8040, 0x1, 0x400, 0x6, 0xa2, 0x0, 0x7, 0x0, 0x4, 0x0, 0x239b}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="69555786b3d6eec22ad48a65cff8d300cb0d52c3afc9fe9a42328c3dfa76d1b6e8e95ad7ba4af3568be76b6973650100fcd217c4a4040dbd74a489e2106b789d1048f6498be730a2136030b66ec90fb3bfa3101fd1914da9439a1d6f7a12b3b58ce1"]) 03:33:32 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lgetxattr(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)=@known='security.selinux\x00', 0x0, 0x0) 03:33:32 executing program 7: clone3(&(0x7f00000001c0)={0x1a3363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000000)='p', 0x1) 03:33:32 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in=@private, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x3c}}}, 0xe8) sendmmsg$inet6(r0, &(0x7f00000015c0)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x0) 03:33:32 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)={0x8, "8c6a80"}, 0x6) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="d2b000000008021100000108021100000008021100000010000000020000"], 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:33:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x88, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:33:32 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x6) sync() [ 1054.624732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1054.681808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1054.689558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1054.745189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:32 executing program 0: socket$netlink(0x10, 0x3, 0x0) r0 = memfd_create(&(0x7f0000000040)='/dev/vcsa\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x3dc4800}) memfd_secret(0x0) 03:33:32 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000000040)) 03:33:32 executing program 3: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x81}, 0x2008, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) shmat(r2, &(0x7f0000ffe000/0x2000)=nil, 0x2000) shmat(r2, &(0x7f0000ff0000/0x2000)=nil, 0x0) r3 = shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffd000/0x2000)=nil) shmat(r3, &(0x7f0000ff5000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000700)=""/4096) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x2, 0x3f, 0x5, 0x3, 0x0, 0x89d9, 0x1000, 0xc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x8040, 0x1, 0x400, 0x6, 0xa2, 0x0, 0x7, 0x0, 0x4, 0x0, 0x239b}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="69555786b3d6eec22ad48a65cff8d300cb0d52c3afc9fe9a42328c3dfa76d1b6e8e95ad7ba4af3568be76b6973650100fcd217c4a4040dbd74a489e2106b789d1048f6498be730a2136030b66ec90fb3bfa3101fd1914da9439a1d6f7a12b3b58ce1"]) 03:33:32 executing program 7: r0 = syz_io_uring_setup(0x178f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3}, 0x0) io_uring_enter(r0, 0x64d0, 0x0, 0x0, 0x0, 0x0) 03:33:32 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:33:32 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) r0 = syz_io_uring_setup(0x4cdd, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x3, 0x20f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000300)) syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x0, 0x2, 0x2, 0x213}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680), &(0x7f0000000800)) syz_io_uring_setup(0x3740, &(0x7f0000000700)={0x0, 0x573c, 0x4, 0x3, 0x309, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) r1 = getpid() syz_io_uring_setup(0x49e8, &(0x7f0000000940)={0x0, 0x23d5, 0x8, 0x3, 0x316, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x2811, r2, 0x0) ftruncate(r0, 0xfffffffffffffff7) openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x100000, 0x95) close(r2) syz_io_uring_setup(0xaaf, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) statx(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x0, 0x7ff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, 0x0, r3) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)=0x0) pidfd_open(r4, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x3, 0x0, 0xee01, 0x0, r3, 0x139, 0x8}, 0x0, 0x0, 0x3, 0x6, 0x400, 0x5, 0x0, 0xfff, 0x2, 0x9, r4, r1}) 03:33:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x300, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1055.353213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1055.436608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1055.491757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:33 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x6) sync() 03:33:33 executing program 4: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001480)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000014c0)=@IORING_OP_NOP={0x0, 0x3}, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x4a880) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r0}}, 0xff) syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000500)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r3, 0x80, &(0x7f0000000280)=@l2tp={0x2, 0x0, @loopback}}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0xa, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r0}}, 0x1) 03:33:33 executing program 3: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x81}, 0x2008, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) shmat(r2, &(0x7f0000ffe000/0x2000)=nil, 0x2000) shmat(r2, &(0x7f0000ff0000/0x2000)=nil, 0x0) r3 = shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffd000/0x2000)=nil) shmat(r3, &(0x7f0000ff5000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000700)=""/4096) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x2, 0x3f, 0x5, 0x3, 0x0, 0x89d9, 0x1000, 0xc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x8040, 0x1, 0x400, 0x6, 0xa2, 0x0, 0x7, 0x0, 0x4, 0x0, 0x239b}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="69555786b3d6eec22ad48a65cff8d300cb0d52c3afc9fe9a42328c3dfa76d1b6e8e95ad7ba4af3568be76b6973650100fcd217c4a4040dbd74a489e2106b789d1048f6498be730a2136030b66ec90fb3bfa3101fd1914da9439a1d6f7a12b3b58ce1"]) 03:33:33 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:33:33 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='y'}, @NL80211_ATTR_IE={0x4}]}, 0x28}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='y'}, @NL80211_ATTR_IE={0x4}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r6, 0x5, 0x0, 0x2, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x10001, 0x66}}}}}, 0x28}, 0x1, 0x0, 0x0, 0xc08d1}, 0x4048811) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:33:33 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) waitid$P_PIDFD(0x3, r0, 0x0, 0xa, 0x0) 03:33:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x3e7, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:33:33 executing program 7: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() sendmmsg$unix(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}}], 0x2, 0x0) [ 1056.009671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:33 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000180)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x18, 0x3, 0x1, 0x201, 0x0, 0x0, {}, [@nested={0x4, 0x19}]}, 0x18}}, 0x0) 03:33:34 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1056.124108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:34 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) futex(&(0x7f00000015c0), 0x1, 0x0, 0x0, 0x0, 0x0) 03:33:34 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000005c0)={&(0x7f0000000040), 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, r1, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x23}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x20000000) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) 03:33:34 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:33:34 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x6) sync() 03:33:34 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x49, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) [ 1056.475031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) execve(&(0x7f0000000340)='./file1\x00', &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[&(0x7f0000000600)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x500, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:33:34 executing program 4: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001480)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000014c0)=@IORING_OP_NOP={0x0, 0x3}, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x4a880) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r0}}, 0xff) syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000500)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r3, 0x80, &(0x7f0000000280)=@l2tp={0x2, 0x0, @loopback}}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0xa, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r0}}, 0x1) 03:33:34 executing program 7: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001480)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000014c0)=@IORING_OP_NOP={0x0, 0x3}, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x4a880) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r0}}, 0xff) syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000500)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r3, 0x80, &(0x7f0000000280)=@l2tp={0x2, 0x0, @loopback}}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0xa, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r0}}, 0x1) [ 1056.697852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1056.771239] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:34 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000180)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x18, 0x3, 0x1, 0x201, 0x0, 0x0, {}, [@nested={0x4, 0x19}]}, 0x18}}, 0x0) 03:33:34 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000003dc0)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000640)={0x374c, 0x0, 0x709, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0xc8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\x02\x02\x02\x02\x02\x02'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '*,}\'$$%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}]}]}, @ETHTOOL_A_BITSET_VALUE={0x4d, 0x4, "09083389e37f37f19567a59958bc57966a63c567d01326a69e0b883db3c5eae8c8a875413e01e8652177e246311fc1f278954d81ac9c786c62217e96167670bc3719d15094f97ae211"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfff}, @ETHTOOL_A_BITSET_MASK={0x3d, 0x5, "38b7736de656ed4b97ad35da6d2b92c9819b5d5a86c1f900391000c451412dd03fea9cd42eeec1ba439462285a03042ba324a9249d99292ec4"}]}, @ETHTOOL_A_EEE_MODES_OURS={0x1274, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x9c, 0x4, "e5b1e024825eb8e8e087157efe88c31e847fdceff6b4a85a44d34f080c6590a06231fe349d561b5726fe836655470c99d9c878fe78ab7dd3e440e6c6affb9fdcc32d2451779add67783f17942a64720bacaf4c5b201b3c75e799927af48c16caf2f87cff77cb1a038f7a4412bf2e754f7af58065c269c157afa94c96dd27b0ea223c8c94f4510e7efa0a7179ab1e16abec47356c0d4c3628"}, @ETHTOOL_A_BITSET_VALUE={0x6f, 0x4, "9f770e40a807dbe344e724e050a634f7eddc7cf9e8db946cf56be18775930f067ee793c86f7316300433857212fb5a90ac8a750f9bc62cd27f5f0abd5db1ac51f2004247e6fec37b83bf36ae66e4e8b2164281d294987854dbf9a3c38fca428219762f4c4392a7a0315c1f"}, @ETHTOOL_A_BITSET_BITS={0xc8, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xda8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x22, 0x2, ':^-%\\)#\\(\\().#}\xed.}*-//}&%-[.\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\x02\x02\x02\x02\x02\x02'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "c1a84ee9aec20264bd829ff08fa6b02f60e3ae6bd98094e95bcc752bf95be9778932c1c87563eb14679f47c058e65d01e8db1e4be6ffbc33b053d1f379f537b92b59484c7cc8c140ce3aedba33bd1dd77532e3b96da9ab4ba62e57e219cd141b985499c6d0600128eaadc43727d7f9a7ec7b97df23d0d8119a9e02cb795b010fd75b5bbf70e34445e0e674c1824546caef494162de64f36fea6a250295ab9f24a8e3bd23639887c72bc55bd075fe1eef6af904e9938277cabf272347fcfb22cba5bc3c9b432fb9aacae5907396b22e563ade41346a91516a3c9b5f912c4c008849457f515b45869c199e1a5f34ca5ce819e4cfd01fc0049235d2b348ab818737d8e699b16d3087f644f94fea4f06fc52296dfa40eaf109e86280fe22b0c55417144996c5ae5b522981d42150249c1e7942ccb4db3fa4b02fa60e40791c77382e4f5829b04f7681a1f06b74a3bd5eed5f6cb8ad848de8850acebe054229354dc19b4437355f954a342c6eff59c88c2ba3b8b8a55f18bc99dc141ccef1bcce2c237701c9b2e9765ca884d42f167a1c085dcf60ba9f01d4c2897ff2bfed0b09b26c48181688dd2bd68471b12ccc182ddd9e75621b445c1383bce1e4194d893624ea8caa40119380cb9e32ad390609f33e54c1f221732f3cb57f0350f2ee1fce27830c86f2b22e5e7d44c4232d7bb60be22517f7599de3a30a888e28bc6ad4d69e78c5528d2f0c5dea37646d4fb45f05ac97565d7edc23e28f5f3a80685f6b9776da28be607d51ab25c963afc52642e769659e77c85e5261995cd7eb9d09259822f3419404e01761666cb1ea863c8e4154c337533be428aaf44e1e5b5b71e3b2d6ae07bba25b468f4c438d6daf95e8da65ada54ab010b6f37ea601a199f9b4b204b4d579811ac304d0017c5cdc26d81ad014ff964cafb2a6a90cfb56c8a90cb2d634b618ad3768c21490c36cacf3aa28e0279f2cd1833289767cb2c994469a2d4876f20f29eca45d3c6d69a51c412483de1065248a63e26c91653c3478b2620b0316af1cb192577482956678117434659816cd4ee9d01621ce67aeea26c227552f8b09d51abc356b6a354de9f93169f3c50972ca3b20b18428a95e87b44baf82d0515493f8c20cdc8d5a45cbf3fe119aeeb1b969f2cb0fa3166164c340f1724370b2ab1ec824a3d9feb3faf24bd1d481813cd7116523a01bf39c3e643332be15792ca9d004a915b0a038486d45ab77df04001c02fb8c4c4f77afc48b905f5b3cf179f73b0f5f6c091c007b22f2be96d32b46808a55c0bf7333770fbcd5f99e10481f6d28469c263448997870fa8508f91143ec649c3a1feecde34ec9aed528f7ea7c6cd66130187cbea2eab2225cd3c5d0002e986e41a83d3a508a3897d90f50a756112ed674da3f15163a6c4bf3cf6a68d3776abcb36619fd018826651d7ee6d1e02ee4d6c6fbeda53f19dbb63fef04f3a5ee241977cfb9284b1a673682688dde51b3b3dccea07c225a57978ebe3feed69243760728fec15c91aa38ba12cd381efa37ab1b202a8ce7db85923ff6fd556888aa04bcacc7ae628cdcb75c1fa873fa478e644071818b5258098d1993376aadd08a28ad288ca50fdbb8b0cdb043eeba2dbe7d7f4d377218db5e89b1d347c4a290f1c09a62c10565f3eb182c1856b9c76ddb856a6c2225dfe46296f9633bf2d47f72a90d6f461a8366f4d3e1dd38dea819fe8ebfe3ca6b325b51fe5e96b08ea590c61de718249723bf4484abd70ed87aa67ab0b23245793fb7ad675e6ff3df65a6ec5ede891a834b106c021557a5a59f1feb24a125767baac16e341a10465e0d700c0067084f72695809ae21506d387ae6b41710bed40b2691f137a85a06469e43763e17bf3b32e15f8fcf49f0c9430586aff5085e9c8157c309bcadee77654fec48207c3241f8f496c5ac55664b2ce0715dc5c1f21832e4b075d5e8c6136e7c6c11c985f1f5aa35b0e0bed9c91508bc016382eab90519ff55a6abafdf4b319f7396b0498ff04ed47d9f9f7b2416b7774eaebae53e3cbfb960e536ea019ad7f59e7e40a90b8716c21e4995c8b779b51f7e507752231fe752cbd43a7f59bc3ddfc41bf91a0c33421bf6e6e25eb9d3a1089ccbd67c532140989ee1364241ab3a1ffa30cf7071a678f04e738260fc803bfed2cf33fb04bd621cc48166881e51b7e88b83885fc014435ef98a1d0a430730da7a476e3180850d15540a2c0af5163d39a97e2359b9fc0f5cb0ca8910b8abae9cb0724cb3f1fe50481bccdbc2185b31167df06ca86e789983dfea6fd92bd449467ed01fe7781fe7380e717cec456a3fd2ce96773c90ab407dfe17ab585154f1c03020ed98256e18058c476e7c18b7ec9a00786aaae97a61abaa8d61be7d17692bd71fb1d1731bd8295a10de9678797e3f21536b66acec9e4b951842569274941e8303beb12a97da6ecbac622800222685a9a6fd9fdec82fc20a7ca2ebc248776a9d429b47527e4c1d7a7f98b5a57e7631f95c66393e59873484b70e4f99fa72a7fa809b3b9297865d53e56de69cef54bb717cdca2421e40c911986343c0fdf9d0e719436c2a2c469fb0f7e9b4bad1adc0a1972e875517a8cd59d8b50419cd90e4b35a30559e323bc6091728f804981154890f51d6cd744a61b41ee23268befa5002a292911eea225af114047f1f8ae2ba537e372737ea883f42bc93cd597de52586e6a636119bd1d26f35c0065f97f234366e37acd3585078945b915f455bbd724af580c9476bd225b4673a4f36e3675574f89ce4126c106eef066544e1a55af09de6145d7edfd04fc16a01086900f001304c88b0a7d5cd8b4f8a852b3e08de28e82c91b6a4f8c88469b62c8136f4e8ea004e8b2a37a053cabc19fbbdcb5df5c5e0b441a476fd12e81abaa10fe970f011253a29a6c3a959a4a7e8ae245f510fd20be8ce00c129710c9e4c17bd00fddcbeece0344f9f6c483c869255a3875bd94a8c781482a896b046af901bf7af54ed8b1483caa2fc17238a3a8b7825783f96e323bc0a559430910ee21ba700841fa785d48a0153a662481be50e1e478750655c01c2afb8ad4400dd496ec789e397b68fa3aa3f5f3220f8829cf84678b10d34a3a7822128aa23a06c446f1eaabb77723a63b69eef42e0eeb110244065247f2ae52593e01403f9a51ee06bf3aaaf217829861522a408bf5dcf666cc2525d5ac020211de5ae1fc0da59d3bd069ee32aa3dea053d67a3106a37312ca74aa999f20c00ab120fe4610caadda9ab074364a9d16184c1bee901549a7005d1134837d8f7315e4ec533e9e1725500911af4785d6b8780888adc9f1ec7c894137da0577677a00872786ceeb89c2bc1e47fb21fe8dd3a6f3b152db2fca34fdbddfb4f221fbe70bafbf5d3a8275766fa7721515ccfb0860005e4d74d4faa3a6465f67fd7def8e9f17f62b7fec01f813cfc2d819351106f3304905d0551259b5ff72e156747b6ae9d400de916de7019ac5f14a10c261bdb2f859ef9df584558b26a28668b5c874dcf548bdd9653bdfc515a460ef063a7d635dbb17ff8c39e7db73394c279546ff0f2c4b3340da91cc05277322e94f8ff68f58cab80770396fb5641d4cfaa09ceed4201c1ee5032c58da4c19aa8d00f594b8a695336b577fb9b43fdf9219903a3bfd2ca99ace61640a1201667b35737ec0c09e9594280b2966afd6354fb825adbfe409bf2da692755532b6c26dceed6267c98bb25f2721b546dcb7db135817c36e88e897284fed17e5ef9fccc825e23321223456830694261c5f1eccd166249f07f12f002076e5e198efbe036065d93cdb6fd4669698c729878b68724a34f37f9d7e07b3f19b809cc1ead0f6213544ff8feeb476fcf6b4f8218d13ea698aa7a6847abd4eed1f2e036770322726a5103b9cfede48ee20228021eee45c2cb154633c3f1315685cff698256a2fc1de3de24eaa94f8c7e54385c2ec44c9f242f1ef33779b08175dca7dc7dded30fd8c46cdb00a473105efed3b53c7c1bb23e2ab7e51b2899ba992d10765f25a7ea8eb391b9c0501fd1b1592b31cb77d553c3d6f594a0dea54cb4550365fc24b67419795c044e12bb84f1334a05871fa7605c0deead6c19e98af970f1cf8fe18c2c125df62edbbaa3d7283d9995184200d35046b55648060f8894211eb9772670cd13573ddc171079dcc91162626ad9269808d8cc533c63975a3581218ae5a6d2639449c2c62690305a8e2166b4997eca84e943302c0b3ead12b17e6b2b68c9ff28003685af0684d80ac2c219d2aaaed09a24a4959fdbb3f50ac8db221b93f0b1bc7661c25b576c8918e5be6e591f81c98453915e490ebea92d1eec3b3af7f3b596afe790dca52fd3a01e6a61fc67a4815a778e8ce0b7f5ed31e9c33ab37a51207ca24564344978e4b0ba2566f851d35ef41223fa90c9ed9c53128ceaf737f2eaf73d1365ec23f8a85e53248e721a6142036fb9164ad96e2ed96af45fa2dfd43952ed5d03836612af1cf550efaa84cfc01e45a298312b08643da58aa1a3a719a87c08c4c57516e69ba4b1a04b85694d5cc0863905fcc121cfa6835b87b794209c9467f63a341cc716f781573768669d82e6bcac0c314e0e2858aa7c394ca3394b93a9cb76524e3f94311945a5888a8695d18f24d58da03685f980a8a3b2c168b130fffee0700faf1a8ba28f04aaa6fc62fbf169e060da5e1f7ab4665a2f44ef78ebb99891ed37c234a623d3e45dc70ade1f20578e1556627ec0bf4c6ec96d9acba8ff88c928df963edc510c445ba15eae4c2df6a8a0745d8e4c0cba8fe84ef4d07bd7f048e43a187a1aa84be918bc83910f265c069c66d4791e3afb010c51ee701ac8db9516ee4c7f8dd83ea99c1ffb86777ca4421eabffcd484906c64fcf2cb94fd2d75c58824bda1596d1bb6d1a7d6d6c52fe586553bc334ff9b40547a920c2753ae23e530e7da6c0dacd610ed73c81f9a256a3a74e06520f677227c749f3c99443b2dae8ebf2e650964312518fa30c9bda5e21bf585ec8295237fe1daefa54a928cc01ed9d1a134f0ae30b0e8ce801ba08cc521cd4a6094f0dc41aea517960f744b42f06f10bb9ae9c1b1af4ad0f74612eeac49c2ce5d5e5248ffe4c26c733de56a606959a2f6d4182d91f18773d34f04d9527a5dcd5a006b77327d84c531b24aef052ff0dfd76740b7a14ae691778240c353956a2e3469806e385e00c721a41f6b738abcc397498889bf869b1d248e8a954bc4c0cdc7e685113f124ee407728bce1d98c9690b0886eaffe18222d20cc73cc6826461e9feda281c8f35f0574ab7fb7ea7c5efb1a877488261fa9eb23312f512c17c13d5710b53a7041e3108e6e56a5d90abafd224860571dab9609120f37dbe406f14f2f8cda37e7b96b381f145f9fd338a5f30279c99dbd686b0abbdae32dc9c20f6dc196ab919b9f2f297d68b043016ee4ea9e8ba7442c8188d35f1da351e57e151a63632bd567bd2df8a21e2da53c13dbc116ee2bca1788d3bc98c2022c33a7cb1f28eeea258ce080296e34ee2d053654f7614296bc1ecdd5af4e0d8d8e512c5e2d782ada66aa589ee20331bc9d237119d78a696bea414debea913b9885cc8f0e4af934e5f66466037d7b4870737d9be24bb8cf74966f93839d8da51f65824ee924ddbc42fe974d0cf3a9f7bcbbb0a23fc03947388b9a8577f1149a0785545150d81a54837595770d1906eb0dc4671b6440cb2f4e5fd7903c69880b1399c3850988456b4e26a6ecd85058e4e794346651cc65c65d96a50237d9a47113b80527f4d9"}, @ETHTOOL_A_BITSET_VALUE={0x6a, 0x4, "882d7ff5bc2180d840b52d9b640ca072dcb02220be54eb4f7437f906fece0b75745168a3d07d39d171fc6afaa63d27f6613a947c7c4f649571a3ea68262ae7c5832766c08f0319d1c2de6e33d1f53418c981e37600404adadd5e466e06b1a66f4736a693c2bd"}, @ETHTOOL_A_BITSET_VALUE={0x19, 0x4, "45f45b57671244311c80394f56eebdaef96a376714"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ff}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x83}]}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0x248, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x50, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'R!:\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x229f}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xe7, 0x5, "d6d54d83836a1e78c5985ea54c977f595d1b7aa27f8761a07fb4842b21a08845318df7932e814ff31c50870a88741db406e39253d03e0249ee58c6293e83751ac56d95634246ea94ba01af2fc47ceaeeb332322e43a6534ae4a83cab5d9b7a07ebacb288500a3071d7589315106cdde87910f20a23ace1cb141547e686e76a75a299e48f05126c5cf6e3cf6d51d2c5e82c616a446a35ad4fcae79ec2bdc58a734ee1af4ae368b7d35450672b2910efc42b6c0b579189cccc901ece406b84f9569955e1e1c3c69f7323be65f3bfafb21eb3b2d307635d58b1aa6e3b0f7ff27653b2b29b"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xf6, 0x4, "93e2ac01f61b468ba87d4f853c3d64e32c1accfca959986c72ae049e83e1c61442ad6589ed0b753112891d682e9202ce80040753f2d86b4835b31bd6f78766e6dcd7902e6cd2f362ab21787ce3cb714b82ec4a1b814f33bf6b6f3006df6c1fd92665e071136466a8e9a5512466be82e8bcbea8a780ab4924c81e79aea7c895214412a313c3e487adc03ced05b9fad5041261d676328a6d71cf2de709c4f41b3b6ad6b2ae11e8896c9c40bdaccb9840cc99d2d1b17a11c86f0d5f2ad6da9adacf67a939175d279ad3548e9fbe1ae6bfe82e62d41f755a71ae6bab848dbcf600065aa9318519318e7d0b3b18d6761120f6ba22"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}]}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0x218c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4e, 0x4, "addf545f0a611752ab09d9368322fb812dfe0a54c673353c7f50621e37e433223e471d1bbfce224c0fa41c98f02ea1c7b18fae0d67dc97d9f0f51c60e0859b8b4483f6a0707b9cc7e0fe"}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x6, 0x5, '#t'}, @ETHTOOL_A_BITSET_VALUE={0x77, 0x4, "8e64e814ea1e75bb95328f9abcc11636418ef353441f6e4c24f9ffa7dd8cd9497820178963d6906cbf20dc3684dfe329242e0bf362205ca1878ed75bf4ffca4173a8b22c2d81105bea77e99bdfecab427974757ad7adbe90fc943e9aaea786f29f15ef583361465f9cddeba3a59de17ad42be8"}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "bc7606fb5a9fed215d6dffcf04806d73ec6c8dcb17c1f5483b9284cd05e826f50d9219d324a816ad1ff4c39b9f9faf4c82814a4a1577992b49c2aa5cefa014b055333cff3c8a3c59be70263c3e2a8e39529ab1ac94479a464da5d5efaf5b7ec46893e97d553b3bbcdd4f106fec30bbe1ac14d2f9da19d1496496a6db5f6f34ac801a427029135e29f7106be7dd22c26c796acaa6f31fd2eeaf62b7df3c68f503f6ca1e230193e7212cc86f36e28082a4306b9ff041a93625ce6df9803657640a564861dd09bfc16527f37c952f7bebc0398c9d9c49cd5a67953167f5840538f3be702251fe62381405df26b7cbfd27e327754478b7f46bdae59714dd50359c86b81b4dee66e6debf2e1daaa2d77ee7ccbce65cfa219be3c43aea59a2b53227a461d32220abbe7213cc866f667a3fedce986317aa964ffc07b57422ee8a4bef0a3bb35ec00d89145172992bcd04a0d22411af030a8a5a75ac73f86b45e155c3dafd4f18288e2a16716d50927dcce1e476c9203048ea7db84c3d17514a3a40e199928a2d72ee009977e4ede65ef6b97b6e27d546070b624c0aab6f998de252cb519d45c8a42fa117a3058ef1ae5595a227620e3336e689ded17e1949c77dd7018b19d982eea8d62178556c05fceb5a5b68d0b28b1c9412042d3c55415fbd329f6088588c3f37bd5bbe50a91b856a409a6b82582de46834a3c60759244626172221e3ce53d151006c8cf26ffaeb6dbdf5bd63efa02cd28f0a0ccb2180cbfe780576a418da5cc5630e8c776718dbb2111c9f8dfdb30ecbee37e689475d1d250b3c820d3212be3189ef11f60da78334e9e8cdf5de59fca2875d403a4c4f74bb502a8e9a17aa5ea9777bd21a73c870c54fc8af468a1a2fea83735104f21e9766f2d7f108e3f455f0002ad84001b2f1eaea8d641bdcd442ea882ce3398e4ad6ff0a69d1a163d4839247bb0a7bd2abd8b7708c1dec4ef25debc9e86549db7ea009d3590bbb4b8b89712245bb208e8835f839b9ada0ebd25c087a1f860efc47656c2007dc831223b42ff23cfb3da83d1e82809f18ca52fe7f5e0aab0b21088858ee60439136a07c2f774f56d08f779006c6a9bc528c82bf947b88263bf9ebef3042d1c84c06c5cca9ec94f5310047b7b046ea383f0242b524291fcba3bdde5c9ce0eb04db10b04eb17104033dc6afff281a4dee63f852aac9b39d64d4a90beaf8b9d170a1e942cdbfe280468c5de5ee26f2a21de774f711ccf98c3bb6bd74167da3edf32a8368abc6ee5d9740d7735999d653c07055208e8ba4ed07df4c62ef3c3ddaf4c8177a9de1ccfed99e7c655c4e76d12e7a80a56d5ede07f42f03e7178c2d7a4b896c04778087013b55b5db594a82ed49232cec947506296e83d371d9c376d9d34c38cd5dc15da2f10474f55a3d1ee88e2eb1c91a2e167bfce86ad7351f714dd23c5e93f62d2076adb19a12b6dded9088a69f69d663b95520d5e9d83e0ddec835d52c0e71686b9d017ba7ffe8db8b9e3998fe91e161bcf0c1328741a675e3e64ac1978f81ece185de1c4dd964c7dc7b5686333d94b7e615cb0a97eaf626403c6ed1324b23fcca1f295643a3f657b6ae8fd390896f9f4fed8c12aedeb0ed9ef719c2ff4f54d62f0819b21ed550c98fc08d8127367776b52644208734907ea412d6cda267debf1594fffeedf3e6242625a7eaa671763f692a3f13ebccd9179fa160c9912a0317d55ada0ea2cb57dddcf62a911487336104fa523f47d473bf3c5adf5207204185763002ae848663c4ae033eee290d10474989852b93becc5a4787b93091854dac75d18678ba16b0ed90fd6abe8a50f0e2f709dbf78c18b3c0b1479c43f12bf34785fe114064720e36469876d5c1ff6b7ae28a240f77ef6554fc937abcab21461053f8ebffdbc46028f683fe1514960ee0f68d90ff24d6325227200c8c26af6d0c063de55a8127f1bccffc8ffb54f1e09f84f05b234233d438287efa95995d325b33451f8c59658ff7d7d7371b05b4737ef6faacd7917a7231b4939b9d3176e8e87bb8630ad0865cabcb9376cf1f4d30915c7968a809d7ec9ff696c6902c743058c0b0b69cf9d9f2ccb9bd88d5c0a3f7fda411109783b849fbcbcf20aefabf4d22bf9b3a29b2a06d4a13fdca347295ace5727d104e1174c3a09ea2cb5568c6eedc4623280291ef0c432c760139d5ffe32bb469018a5fd2a3de67db87d7c202d078e4325e91d2e66335aefb6bc92f86a1f971f482e5b23d35841019e4aea21ec0c81cd38e9805d22d833d8bc12b86c5505c8c50e056d610e3d176c8bf5da80bc42f56a43e2a12dbb320e3b0c6acf6fc1326622712cf33c035d08504d2bc0ac6594b3d856b03232a0e60d76216f9277abeee4bf477a6ce00db73dd2299ceaa86a15503d416f9b0f6424fac0a1acfdbc62dcffe46c2fbf5c6ac9ce73a64a81b434afab186d0ac4bff2fa24d856a571a9c1380454cc2657ba9c691c4d37f8824157a2605bdc32e6dd381d8bb585048e47136024803bcc25d431f115ceacb6d9b5154c179717bfd42f798e9c5468c72c7df065806853713ce6a06ace48c3f9364d917b9858e78a355b7b07fd4926d9b5ef663d5723671a66546a59f908d4d72ea700b172a73a3066b1501e4884e080dbbb3660a52a2ff2156d22d750bf6bb53b0d472c52e13c89b6c87fe74cfe1874aad99edbb38319bcb43c59c656880f3b8d7e94498257468764241f67c68fbda93bb75403cd66195e3f2887f0bf3511fc11b6d8b11e737f4526b2e29d1f6dc38ad64b96698e294d43bcfe3496970b997407f48d2340ce4a04423e6837c997735b99afbe3cfea0ca912df20385720481b03b44cf747c564d91bcb0ba09e68fbef843d98937021b19454a9df04366c57f682bfcd5ab1bbac0e8c48baeeeaa4d3b9ebbbcce3b03ae21a85d52e978e808cd7b9e6f737c608bd2230edc037c0696d6200365cd6bcca9626fc5c9eb27c4ef540675aac192370ad602447d290b99d5bc2c00796567e953ac1b47a2eb6a08654a471d4aa8fad2d7aa59010631559eb0d30915394ff272f2f9d286e1065664f56b84a4c7e11d1ee97c36eb1a6fb4a60d349233e79e2b58ca7591ab478c607964ca97db27c3e5d1064f99bb61f0cbc96b57ca6876bca1762c88eca634e009f9ab639e0b928e9bc3d21bee71683042d1936658d3d926f355c1fb3d30458b708816c333f7ff4472055560fcd3dee800fba3741437e723b433c3d0ba81ba67f7ec002ca9a0bdfed974538aa454aeb2fb1418626d148ec9c58f77da70453f557d625097bd42f05c695360b8e668504d0e514eae3f155fa777d13ca229ed9b452fb93e9f68716b083db7a8ec593d0de776ed59f3d25d990ae61272c6fbe6766e4eca368c85e125c57d0f0113803ac13187be613c76b50db029633648e73fb1610f9e62ba0956b6b4e85b5a8d3f2df1f8f39f8bcf21741b05384085f3d29b457468cd8ae46349449900d292faec430b65c4f559f5a6430198691000f86506de39417b352092d7afa31f92a2b64fb5261c3d0802201e67aa7e422eed9ec02adb2e86cad0def3d77812a95a9c495f615fad51f035b00efb5c0301d81eb3a0255bcf97461d9f95cb10984227b309076d64478755af9b02e537277d02b1a737a2993559f6ad8c6a61a1b21a93c97c1caebd671f14e5ac315d012d4b1a1e01d6d86bd5cf12d2fed973e4c423ce2ede6edaa7a52baf6826e331fa921a48d0ee26e73d514e3c6cb22fcf234416a0d35b9b878565189c05d54832bf50c91b30a960e3243a19808bdcdad6388a20a5455947b3432d77967482cd6f14127191bdca43091929bde2e39244cc35ad4c331698484fc4410e3e79a6e4dcaebc72547ebe429f3e656e3a3f9102f0ec0c6b30ba59f97b3833c7f24e3e45cc279216029c853d20bb7c71227396c4e648b79d2b9b2489ea8a8fd4940f7312db65a37b73d02df4a6edc016b6cadd8b26bf41e40827b86f02161798f2add7f80c87b21e6ea09fbf3c5d7e4122c93da69573d2fb5f1ea018afd2dc06fd5d066043889507dc8f06bc623a2dff35d819a430a18322908b1ad5b5c07cd17286f726b0979907e7aee95019429f913bdc01c7a130d4066dc38542d5aa2865569ec9d6ae98e8c39e7b43a0cadd02c76933b318389f18b439d41701b130228b582ebaf22a8da05b6d477f46e2f862d6a635dcf4287741da1a7e06f750f0900717e6b5efddd72bcfbf0a027eceae031b44caff981aa21bcb73680ee903c0b623df76a65600a1156f9189a189aaec37c23abc5794fc811ffd709fdbb32f29bf0c0cf1950aeffb70f8132f7dbfcf5ee35d5f7862bc677476761e7ebc70f00cb2b570ac71209ccf1861e5008cbf4d3b6782ce1330bfa7af9754b114e054d5588a764352e7a54103c5f1d8edeecae3de6996e7dc50ddd86631ff9425ee780c1f8c2e34e5e7150043a35b41442b40318557c2ef021cc23758d9b0baf0a646c460c9f530c6def70ec8add6c8050b27dc1af41f12e3092b7860a38c9d0a97f25e31fc17bd0565102955da32d24bbaff6d96ff356e57082ed6fea17e8a3ba649ee9824123edd291efeba819abb08a4fe34a23ecc63ca06850311fdcc930a959a0423b6af211a0332477b7b36fc2cd8f20d3dea36afbc418c8e8ac1baa4fac154dcd853de46bd79c6b91ef2a1ab3ae2d4dc48d791ff9f3661308d37b41ebb67cd74106d21c7066d4f6b13f6caf4ccb15baf657aecf511bf621c992a592c3f0a07f7710369d10c590cd739c5a9e14642110041d9bce9da17cdfe08a0e19d0d67c95573a30da66aff2c437bd1b5cfb21a8555dc2642f902710dc45227bb8309b32d56491e4a60c70a2949f96748614aafd29432b1fcbe7e6d746ad1b3fcf5682dab0ab821f17c19435cb41d68800ba3c6fa3c7c3131ffc6b995b1ac887abded1160bfea6861cc558dc8c67006991d639bcf9c7e295fee4094ca4fc2c0ff6e305b7a985d07956b3da0b51dfbe58c37e6ab507706fb2fd2d4323bc1602fa50b132e8a223fc942656aae7c1a3ee63f022441b45d4faefa1413b1923e0ae91d1fb23233c56c5fff78b58f14485c4ce6ce212a267b873ba1ecb69e87e176df6a32f3b5c51c55994a539b67b01321f8cbd2cdc8a4e43f434e162891558df7373639bcf9713abf5de6ae8ee4f7b97ef0c4110abd372838d0f27609175690b9e1f0247c231a920881a6ff6a331ddcecb41cbc1fc90068bddbdc6da176a1d8d14e285d519f853b2eb8f54f9623ae8830c39cead4331179745f09cdccf71bb2e60cfca5fa1bc309b8aa6617d6ebc9d96507d9cee92d42e617ad4773d917c511a020b189b3ba503056636a26cd379382fda988f4695837858c7c1a8874691915c1788296dfe90982632ea82537f45b81ab92f1f0b6029c11117527997d99857abbbd706aa86e204c7161ddc73d22a05ccf95a415b4a066d60438b3b97f3a82263618eff153bb2e4a32265cbbeff8d5f35cbddb971be5c303069c38f69527f64ae4dcadc6a412a57d380d89fb8fef4a648098d2611c91c5ba12514d85e4e01584f1231f7f78c82157855a97f8e358727a8784d6bce5c7d2700cf576b8aedc4fa70735d05bc617b0817c17bcd8c6ae5deb9e7b3f6e9f72afd714dba2df676411a72912609a42ad88951c71f564bcf94a97949bccbec07f71af300b937898e4a01bf1208ad38216839bf4521e0e8e0251be78e8920c39964e92e25321e88431a27546ea9ee1221462efa78df833cbc11d367e5184265dda1575b3952e7eeeddb60"}, @ETHTOOL_A_BITSET_MASK={0x26, 0x5, "6c2768983317d27365ff57144cae406780aae75c1501e6bf762731dbf03d4713f38b"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xb2}, @ETHTOOL_A_BITSET_BITS={0x78, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '#P\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x19e}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '!/@\'\'&-.@\xbe^:\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\x02\x02\x02\x02\x02\x02'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}]}, 0x374c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000540)=ANY=[@ANYBLOB="500000000802110000010802c1e663acd2bc42fbf6bff96d110000000000000000000000000064000100000602020108828489960c1218249e0023c51a3a4d5639d1d66f469a4da17bef6d715450151cb9608dcdcb2a15a548c00b50c97f5c52241a4d8dfab1fdcdf6f1eaa6c2e0a6f152622844fb32765579a0072945d9e03ad12a304f321fe2d056a2e7c02404c24272bf725c25b618722ca6aca3a6d6bd1147967b698bc517dff5cd0bafa96878dcd5cee998f8f3dd9b43ccf79c33dd969f7311fc169f9d0d54b27d4d38cab100d4a0c6a74bd074c7f8eb1587"], 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:33:34 executing program 4: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001480)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000014c0)=@IORING_OP_NOP={0x0, 0x3}, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x4a880) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r0}}, 0xff) syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000500)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r3, 0x80, &(0x7f0000000280)=@l2tp={0x2, 0x0, @loopback}}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0xa, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r0}}, 0x1) 03:33:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) execve(&(0x7f0000000340)='./file1\x00', &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[&(0x7f0000000600)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x600, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:33:34 executing program 7: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001480)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000014c0)=@IORING_OP_NOP={0x0, 0x3}, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x4a880) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r0}}, 0xff) syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000500)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r3, 0x80, &(0x7f0000000280)=@l2tp={0x2, 0x0, @loopback}}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0xa, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r0}}, 0x1) 03:33:34 executing program 5: r0 = syz_mount_image$msdos(0x0, 0x0, 0x3f, 0x3, &(0x7f0000000480)=[{&(0x7f0000000300)="f4ed7efa4f5d1dbf13871d905fbbd6e0759a31107dad1332f0cdbf269bf113ed3d", 0x21, 0x7}, {&(0x7f0000000340)}, {0x0, 0x0, 0x57c}], 0x808c0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x1b}, 0x18) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x100a, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000500)}, 0x4000, 0x4000, 0x3, 0x5, 0x2e77, 0xaf7d, 0x36d9, 0x0, 0xfffffffa, 0x0, 0x7}, 0x0, 0x1, r1, 0x2) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f00000006c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000640)={0x58, 0x0, 0x7, 0x801, 0x0, 0x0, {0x7}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}, @NFACCT_FLAGS={0x8}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5e}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004041}, 0x4000) r2 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f00000001c0)='./file0\x00') renameat(r3, &(0x7f0000000140)='./file0/file0\x00', r3, &(0x7f0000000180)='./file1\x00') [ 1057.003726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) execve(&(0x7f0000000340)='./file1\x00', &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[&(0x7f0000000600)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000500)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r3, 0x80, &(0x7f0000000280)=@l2tp={0x2, 0x0, @loopback}}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0xa, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r0}}, 0x1) [ 1057.119022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1057.130316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:35 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @local}}}}}}, 0x0) 03:33:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) execve(&(0x7f0000000340)='./file1\x00', &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[&(0x7f0000000600)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000500)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r3, 0x80, &(0x7f0000000280)=@l2tp={0x2, 0x0, @loopback}}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0xa, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r0}}, 0x1) 03:33:35 executing program 5: r0 = syz_mount_image$msdos(0x0, 0x0, 0x3f, 0x3, &(0x7f0000000480)=[{&(0x7f0000000300)="f4ed7efa4f5d1dbf13871d905fbbd6e0759a31107dad1332f0cdbf269bf113ed3d", 0x21, 0x7}, {&(0x7f0000000340)}, {0x0, 0x0, 0x57c}], 0x808c0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x1b}, 0x18) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x100a, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000500)}, 0x4000, 0x4000, 0x3, 0x5, 0x2e77, 0xaf7d, 0x36d9, 0x0, 0xfffffffa, 0x0, 0x7}, 0x0, 0x1, r1, 0x2) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f00000006c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000640)={0x58, 0x0, 0x7, 0x801, 0x0, 0x0, {0x7}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}, @NFACCT_FLAGS={0x8}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5e}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004041}, 0x4000) r2 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f00000001c0)='./file0\x00') renameat(r3, &(0x7f0000000140)='./file0/file0\x00', r3, &(0x7f0000000180)='./file1\x00') 03:33:35 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, r0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffffe, 0xc79}, 0x0, 0x8, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @local}, 0x1c) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xc, 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r5, 0x40309410, &(0x7f0000000000)={0x15d8, 0x7, 0x2, 0x59d, 0x3, [0x8, 0x401, 0x7, 0xff]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f0000000300)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000001300)={0x0, [], 0x84, "c03458f4817f56"}) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x0) symlinkat(&(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, 0x0) 03:33:35 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) nanosleep(&(0x7f0000000000), &(0x7f0000000040)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0), &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:33:35 executing program 3: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x800) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x9, &(0x7f0000000140)=0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r2, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f00000001c0)=')', 0x1}]) r4 = eventfd2(0x7, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x98040, 0x0) sendfile(r5, r4, &(0x7f0000000340)=0xfffffffffffffffc, 0x402) r6 = syz_open_dev$rtc(&(0x7f0000000440), 0x7f, 0x40040) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000480)=[r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6, r0]}, 0x6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r7, 0x4004662b, &(0x7f0000000340)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000001000000180010780744b3", @ANYRES32=r1, @ANYBLOB='\x00\x00\x000\x00'/16]) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r7, 0x7, &(0x7f0000000200)=r8, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='net/dev\x00') write(0xffffffffffffffff, &(0x7f0000000080)="01", 0x41030) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 03:33:35 executing program 7: openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x410880, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'veth0_macvtap\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x4420, 0x69d7, 0x3, &(0x7f0000000440)={[0x6b7]}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) ioctl$TUNSETTXFILTER(r2, 0x400454d1, 0x0) syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x8, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) ioctl$SG_EMULATED_HOST(r3, 0x80081270, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) 03:33:35 executing program 5: r0 = syz_mount_image$msdos(0x0, 0x0, 0x3f, 0x3, &(0x7f0000000480)=[{&(0x7f0000000300)="f4ed7efa4f5d1dbf13871d905fbbd6e0759a31107dad1332f0cdbf269bf113ed3d", 0x21, 0x7}, {&(0x7f0000000340)}, {0x0, 0x0, 0x57c}], 0x808c0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x1b}, 0x18) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x100a, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000500)}, 0x4000, 0x4000, 0x3, 0x5, 0x2e77, 0xaf7d, 0x36d9, 0x0, 0xfffffffa, 0x0, 0x7}, 0x0, 0x1, r1, 0x2) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f00000006c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000640)={0x58, 0x0, 0x7, 0x801, 0x0, 0x0, {0x7}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}, @NFACCT_FLAGS={0x8}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5e}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004041}, 0x4000) r2 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f00000001c0)='./file0\x00') renameat(r3, &(0x7f0000000140)='./file0/file0\x00', r3, &(0x7f0000000180)='./file1\x00') [ 1057.701999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1057.864032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1057.916867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x700, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:33:36 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000180)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x18, 0x3, 0x1, 0x201, 0x0, 0x0, {}, [@nested={0x4, 0x19}]}, 0x18}}, 0x0) 03:33:36 executing program 3: clock_gettime(0x8, &(0x7f0000000100)) 03:33:36 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x541d, 0x0) 03:33:36 executing program 5: r0 = syz_mount_image$msdos(0x0, 0x0, 0x3f, 0x3, &(0x7f0000000480)=[{&(0x7f0000000300)="f4ed7efa4f5d1dbf13871d905fbbd6e0759a31107dad1332f0cdbf269bf113ed3d", 0x21, 0x7}, {&(0x7f0000000340)}, {0x0, 0x0, 0x57c}], 0x808c0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x1b}, 0x18) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x100a, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000500)}, 0x4000, 0x4000, 0x3, 0x5, 0x2e77, 0xaf7d, 0x36d9, 0x0, 0xfffffffa, 0x0, 0x7}, 0x0, 0x1, r1, 0x2) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f00000006c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000640)={0x58, 0x0, 0x7, 0x801, 0x0, 0x0, {0x7}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}, @NFACCT_FLAGS={0x8}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5e}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004041}, 0x4000) r2 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f00000001c0)='./file0\x00') renameat(r3, &(0x7f0000000140)='./file0/file0\x00', r3, &(0x7f0000000180)='./file1\x00') 03:33:36 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r0) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000880)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f0000000540)={0x2f4, r3, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x20}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffff39b}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8f22}]}, @TIPC_NLA_NODE={0x1f4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "cf6aad0e8b83f0824ed099ab443c87c5ef874c14ab"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xb0, 0x3, "52bfa3a826c661eeb51b79c39e41495b3c840bca96109a58d2ffd42ad85850f3ae72aa2a728654632c08c9beec624ac8dbdf4050ecf257d86154b20eb8865f91e0d3ec7d820e14301a371a860044e69d8287a23c5e5f2ff7c4bead81d2fa21520bf14561f0c62eff209ce6a9699d911e55fe4d18a7576584a4bb5e6b4e7f64b77116482635caf469107d823412aa440f4ec5465b8b9b008a95cfd9bdb5e8e1d9e4cf8b5970a1392aa284e5e6"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xa0, 0x3, "e91c02914c591d66e4ec93132b20c4879f89d6f591b930f4de10ad4a15e0cab87a4b638257409dfd168d1fbe154c4f829b7722eabdab7064a5572470bd4bf18cbcda5102ebc291f76c72d9eed76d55d8afd23630906c7fe934c23f787b71eb61661ab8173f079a29dec01b3b405e60d8d4620113c23fbb79c090a9ab47e64c0a2dd234f5c02cd7152fdfc271719b8b7901bd97a2c480c3fb3612c4f1"}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "ef59020f1906e1645131d7b6a2e9c56a46ffaca12061e5f6ddcc05edee4c"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2629}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}]}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x4000040}, 0x24040) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="0000005a709f95ed05d7eeceaf1b37d44fa166b6acdcb493d872f6e8ab1c944ebc", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000"], 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x2c, r1, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x5}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40090}, 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001480)={0x1168, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x80}, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xffff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x100}, @NL80211_ATTR_VENDOR_DATA={0xda, 0xc5, "f65a6f9a2c293bd46564343f14fc05b4e4d0a21eee711464474cd1d5a60dc384db293f764e869c32bb9314940f216efc0563f92180562ca948b8ca4f2568341e2ba0a92e6e44509057c6d399734dda62a0ad1c8369f35db550def2bb72c4cb267c29070f6b420a50731592182cb97fba05f72b5ec88b5a8df7c4a534ef0a4790d9f3ce4bcd477e061dd131ca3cd1cdbf1057b8ddd1bd95ca9c6d3721ffa767ad224161625c416811b0f740892e842877063b542e2d3fc52bae61a4102909ebb49e27db52fb2165b1b03f5a858698b18813bcf2808c99"}, @NL80211_ATTR_VENDOR_DATA={0x4}, @NL80211_ATTR_VENDOR_DATA={0x38, 0xc5, "e8107b60042269e135ee21f700861496e3c7f53fef6c5fc4862cd7c10bc25ec8601e3d094e13fc3a59ccd289810a589888e7421b"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xffff}, @NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "72a05a5aafab442ebc7f64ce64072744349753f61d053eb0effb606eb33c1c882bfa86a5be09332a311d8cf8289431f60e674a25fba61f5fb48fc75dfac97660e4a060bd9a9c695fc8800e59a9f132e016885a5760c628d8aa7e9e77805fef66dafe70450a4c48324e488bfe5e7656eaeb3f6dc2c3e13ea4de01ecea98fd023e3b433d96c23a222bf42f0be8d969bc3e216d57729a9ba9b19cdfd6afe27f6ef91478ed80c28d3bcb18905006cb0e9e92c9e858c474cfddeeb63552d021d3ee4f7563c402f6af24d40c1bb9b29a4f7537cd2882bff69d0d4999710c066b8d7609927f19416bd02c305acdc3185e8aa540a583129721aeea3e76c3289171890ded79338191eb50a570af5040fa9bc61072e5c37e4c1522700f5538a86cddd04a3294a7ade60f49bebe6af5f38ccc7bc8771622be2cdaae147aba0b105a44f5dcaffc2c387cef3877ec1ec4e6803acc870c2a810d97df9944d10ceac270bc05339bf1c77f9be18f4a514fb1b9f2a6ae9fb59189601556345633e6ec7067505997bb9c9b7ec848497af02df2bede6a2597d68378acd613e56a37b7dd068835bac93311a4a835edf8912b504a9e921070a48eed32742db0665d93a06b83ab96a2a4f5e8e9fd55208f274a5114faf1e93d7087dbc4f605b65b53e8ecbf2ce9032fd56c7211f82e971c5cc84a69cdd428e52332a03d403f18f3a39989364d9c6602e6b920a12847d37d8e2936d74ad055852a0a4d47e91db8bba8dd58bfcba1ffbd2ff2a7d3e4764c9c3606f21d2ee75b4a2f0eb8c17f6ef1d2a7871f8932fddae07802d0e3f448aee406ac02a14e2b23e1deb76bba7e15d485852780fcdc429d4ffcf9ac84dbbd4323c8005071b92677e449673345be9ca01f3f394db01f6c2fc237caaf172e1e1f895e885072e598fc8250a623e7c17a6e67a82e7ff54fb9a8e1857c76e43646727d4532b7c536af79689be0bb6bfb08fc15d13caaefc11ff2ffd67e8d5e787f7af898abdb2b69e121ec8d903556acc0365f33054c3eff92eeeb7baccb195ab83fd8864817f8a70652bf6ef7d9ca8493ca41cdf9a82119af5496df38aa8dbd02cc53bfbb29d93d18aa0494afa179659c16b16b445e88a86ca444d4a06d1249dfcddc90b5f9127266f075f4fd1a2a93da145ae6d078ff239a75d253c28ed202eb3f1e030255e3a190877f211d86e37a16f698237c702b33bfb530ce57ebec4c6a657af53477c1f77709aec1e1bd2bd0f1dfb3331e39f9dd97f6c216de0fe02bcee65fdea92f403dece8f73a4ded6e4409cd3304189361cd298dd8324dd25c63b1b3e654c7f265758a862fedaffe847b15e0b74f521d7935f3b5ac038ca73b07dc98476620ed63e267ce91b56708ed74cfb3d12c7f984b92ba3bb9a8292bb41ef409b05061f70b1c69b886c2ff2577ef6e9eaa103e251e80dcc01cf37f9b8100718c5b6c1e4347b3291ff825cd6a1fbb6e6929e65f26ad85d3bb4ffa7d999ece862c3efcbd59587a91a915cbb0646417ff3b20c57d7425fb7595c6e1670f13592af77023303945d34b809804f4ffce111bdee2b78c38a27f08936d3941bfae2a4e9484c15954bafc8944e03a1b9fd40a04260e584ef34362f63538a069b5a1a21c8d15b9253b67e139e126d0ce9f8f4f1da08de7fd32613e17cd60fa0a30e2b6f2eed3e007bae18df00a6c909d0851713836380dd4c4cfa813da82299933d942be39a9b7a0c3d69fadd7ff1437d166d7a8fcd781b3d10dd0112a055c647f370c945812597df17de38f3d8b60cb11ed2e8d5cb2dfcf5647c4c44a3d0339e35bbe62ebe3dcc7045ccefa445cfcafeb978afc865d98170d0566a629f577b22be29e356702d5c28b908ea7bf49df2fd3455f05e6604448fb58eb697d25c196c9bf1d57d8c268dd751c2b4d3503bebb3193a7236cc569cb5252f427e25fd0af81bdd1de6e9d9ee16576bb290c281ddbba244b41ffffc920e2fc27a1cd1880a82de8b4d7e1b6c3516166a9536b2936bb93497cb67773e631245f02560b35e85ea1a27a8f3ba38f3ce0d4f2c597ef7e80eeabf8ad8a114f5033eea04220d9c47b8a54bcd7b22c6d8495bb46b1c29b64e6c504cb21726cc7f099a16d966feddd2417fd34be07da81b0f40efab909645349d3c340d9c85d2becdebfa771676fd93327749ee273b179d235ccd24af438ec01bd5f719f193a36fa413a4f83a648e8a4eaf2742343ed7e857aef6d3537de5d7f9f9fb1520693816d0d1e4bc96068720be3f13a68b536c13c5318c2a3ef3f24e60eb92dbb01e8008efbf5f8ec6a28825a3d3204347ed8e3ad12067c1320072c3bce3c2c3b0855fdc48eeb49767906a5b67a89aa777ffbbd22795c8ed1b698c8e50d45e8eff8a63338775cdc3e1a4d9145ceec7373279aa41f77f8ab82ef0f29e82db2bd5871f32fc8de5fdd8533d1303d2f18fa8c324c6ba40b2f77e5235bf463509458e2e50a7b60c7f8b27bea62051a87672159372b9203587ada4fbc40bc7db3671bd54beed8b4113226c81a046f842b89b52eaca864e6cd6bafb2ddf70de18499acd51a81853da1dddfaccd1dd120dbff1daa48d1daf9d0e0e72682bb7fba0ac29a70fbc4a14f934b01973b9442ddb6ac340a655f1073ebf1ad8855c13383f8127e971b9505188318dc0de1f2780742cd1c189fdeaf05eacaf03d4866d86df1c82e8b9116f0f0b379aca50997b9581e6d72933ddd1888541d9209bf593678fcd98e90d7c344b97a65c50cf6782f92a42a9cc0b26183a954a2aa1141d908c3d97610df389165f7726b1f8de1c0bfaba6ff912cf60fd5953e9989eaad51aceb627b5af98cfb6c4ea032d144fda304224c046c3a99a95cdcc7714c1da5201d9963041d98cd1d5db6625bd0e684a49f5d202df65778db2ab98904f8beb798855d3024374040fcf897d46eaed08ba172973541715f0187061bf9e88fa14831049725a6218f1710c2739b3e76571360df97b83f80a24b7c75965e8d050bfc8fdd15a1f785fc68904cee32926214f82ff45bf897f4f24894673ae45662d045cdf43666b36c3653d5d8f03f394d9785310bc25f65eb7279109c6be020aee483671759f8d0bf7826bf4a26a69fe7f3713264196a374144c799ff98d13c09b54b1a5e3e4cd1e59da8b2ef7f9f4c8f143ac43346f5deaa8fb81b3f77fdef7f40950efb8de7d23a9982f3d46380881003f1520726740cf2d9f54a1de6aa2f0387dcc688116734f464e0cde1d339a3af676b3766ec86d7774533713dd4af0eddc0f5ae8ccd10dd86674aa8a4091866892b8fe7d6b4762ab1698daca003c74b53d12b8004c22c8e24576a7ce8ce14ab6379044d4b8cfe460058bba9141bee758d3398cfde93fed314cc90243187c884551f0f6c13099f572632a4cc77195ae2453f0b051079f4a56c0e73ced20818c4022fee17eecf36845eb5082dcfa9d1275fd05205ec1685fad6e6371b602fb6e2b8e978c644ce062cdb25d83733351753283cb4a5b65d2be9ce5dd9ccb183b0ad4aeaa8c422a00b69ea847b58b7da498f89d87b1232240e24693ca5a90cf2f1a99489d84f671afb596577769a7c29811392cf5c27ca04ff029dca9d3a03984b703bf9ff0c592d3b04f5a6c563763576e3b4f14073fa406396b7b0d69868b040ce9bbf80b55932cca10a7d771f3ee3a2a250367d3cd33830d0243e64f9fa4136988f507530a350c798c8bd00c659af3f60c9099a22e6ae901cdfcd7518607776bf5b12d7372dfec1f52a8da7bbddba8bc1420cb795ca432ed697662f9c644c8708b2d0e17e9d46ba65046d9679e9ccf0a8654a61f2ae1375571476c6caa16ae7487f7331329ca455059c2263acb1bebdbbedb57856dce6c58b2843b6242665c87a68206ca800aff41fdb16f2400795d9137e8fb89cfa895478a03d5a5449f71397260f0986d5928af997e34c4214ed139f8e18f0efa95feabbd28c37c1c022c968060402c040353b414764639dd2d4d5542587145e4ba6fe21a19d59b5e3158206f8efb673baf01e0d2570cb1510669fbf0e31ce7c434105063a8c714b83bf6bb3a541898562484422aa1a8882e0a571391f6c17fe410b85bcfca98be29a9252eec83441010f6d860761123eb3ed0f85537f51c064043ddb485d75354cc5f62114edd2f48d4a406edf402412d0a02b97dbdade51e541c9d4dfbd6eea7f47fd7754226a98ad7eac5a75afd01fdbe690df757c17430fc59b786ad12d4695337a4212dbfd218c607b3decbecc102d3e81470dba73267c22f554602e4fe4c5482059dc436ca6a66b310eb32ea86a29fd1b1e73687814f69c5a8c61e0ceffac71cacfcc8907de35beaf8cc6e0abc46af7d876f1a5baa9b91e6c1e0a9e2031152082821f3ece4b36ff560fe8a61df6118f2ca50cde7302e898c814884acb19d80801103448e68035963e9b6a7eb127ed7404d2fe8202685489624be2ed47548b1a2b15ac331f79702b7d0f7a62c20d0217107507e008a83c4172033db838aba7632dde2113ff061a97d0dfe6c5d494742f6898714b6a0ec7c57a11921da41e0d11d6c3272c500ef43609619d9dbd35432e865e415ebc8c7f5c0fc9394325e880525c4f3b87534e710d8791a3f779e8234fbe3c851f9292ebd08e52d552ed697479c68afade9bf2c3c2dd5b59cec5c9ce9138c8bf27a45f54bae1882229f5730c93e5649de799abb19bf25f2883447bb16b2e86bd81025dba1b843ab40996d0ead0bf53de121163a968128cfa20916039aafa9500aef76a46bf53cfb02600723f08a3c3cb1ce8fad77b23c2ac6c960d2dc51ca19e4d39d6299581f96ef7b672e80f3d6cd80285c3a989c5a4924751e42660f0803b34477dc4172a9fb117bc77f0189a176ef6967c622c608029ad834ebb0e03eced52e17c495b9cd71a72372018339b1b3eb3d4ef710f0a9dbcaca627ffb28310e394434e50ffbbc55e46289fcfd5817526759fbe9bece2172a4c82d9d68fd8b0ce8d48b753aee9cfee192dc5ad1970d329581420dd2c3e6d92fa65bd0aa011a164d82f81348c97bc18c7b84411cb098dea2abf51de01155738f248d1599c735ae0b42aa9714d135c3156cad9ae2bae4161bba38ebe365970f8811ac40f6b17cc0d52388d869ebc73bb490556a95904d6d86d559ed577ce06fe5890296f5b27172b4430de97310885a37a6b437ff795e82aa52b6f95d82147da1abb2069c0852f1293ab3ee116a7cf43b2796605a9e20fbf097f7e7c1b261345ce0ecd071cbda6f5e2f87f152a41e8caf4c65c56bd1e3835d4d2171288f60755cb9924951c05999d401c2878d35aed8a040032422ac72f43030db47acd0f352720542ab7e04b89552f1edb000ef01fcf62f7293c036df9c3ce94624f238ecf95c3aea1f515b2e21e9366dbe6573ed08b361972cfe06439ceb5e624b73dee3559d5fdfb73982a4aeba7b63eaeedca4e9a5edbc824b6ebaee133039cb6f8dfb753ab3eed296d673461f44e8f5e4c882ec3e6eb8f3ed6f512aaa944fb5063fa15418013d3e7e122c4fd7dccaa58b7fff02ff4cc9dbc54bfc4fec4efe27989913108e7f51caeae7e526a2c03e68a1913d65170eaa6f02813644123f755a7f4a2a1f0d413b211ff3fe3beb674c53ed0ebd63946404dd6aae088c2dedcd0fa39eded546102f322725ebd856faafbac938165fe0b3d8134d389de9c2304c5b13e78ed35dce8279232aa03648b81d2cba46dc04de498444351f7b980ecac8008608e19cc53b0b33840ef5b4ba54adebeebfba842cce4c6d59031f195f283d8ebf1f5"}]}, 0x1168}, 0x1, 0x0, 0x0, 0x4004880}, 0x4000) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b40), r0) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x78, r5, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x52}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="b000000008021100000108021100003ea9f8600000001000000002000000"], 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) io_pgetevents(0x0, 0x6, 0x4, &(0x7f00000009c0)=[{}, {}, {}, {}], &(0x7f0000000a40), &(0x7f0000000ac0)={&(0x7f0000000a80)={[0xfffffffffffffffb]}, 0x8}) 03:33:36 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000001a00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) 03:33:36 executing program 1: umount2(0x0, 0xae14c5c4a97f050) 03:33:36 executing program 3: sendmsg$unix(0xffffffffffffffff, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="140000000000000001"], 0x18}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000000)=""/9, 0x9}], 0x1) r0 = getpid() process_vm_readv(r0, &(0x7f00000000c0)=[{&(0x7f0000005580)=""/4078, 0xfee}, {&(0x7f0000006580)=""/136, 0x88}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240), 0xf7, 0x0) 03:33:36 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8936, 0x0) 03:33:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$SOCK_DESTROY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x18292}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 03:33:36 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000001a00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) [ 1058.604517] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 03:33:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x900, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:33:36 executing program 3: sendmsg$unix(0xffffffffffffffff, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="140000000000000001"], 0x18}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000000)=""/9, 0x9}], 0x1) r0 = getpid() process_vm_readv(r0, &(0x7f00000000c0)=[{&(0x7f0000005580)=""/4078, 0xfee}, {&(0x7f0000006580)=""/136, 0x88}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240), 0xf7, 0x0) 03:33:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$SOCK_DESTROY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x18292}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 03:33:36 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_a, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18, 0x1}, {0x24}]}, @void}, 0x28) 03:33:36 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000001a00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) 03:33:36 executing program 1: prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x0) 03:33:36 executing program 5: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_audit(0x10, 0x3, 0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @broadcast}}}], 0x20}, 0x0) 03:33:36 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000), 0x4) [ 1058.806027] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1058.822221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1058.832023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:36 executing program 3: sendmsg$unix(0xffffffffffffffff, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="140000000000000001"], 0x18}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000000)=""/9, 0x9}], 0x1) r0 = getpid() process_vm_readv(r0, &(0x7f00000000c0)=[{&(0x7f0000005580)=""/4078, 0xfee}, {&(0x7f0000006580)=""/136, 0x88}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240), 0xf7, 0x0) 03:33:36 executing program 0: mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) syz_io_uring_setup(0xe16, &(0x7f00000008c0), &(0x7f0000c13000/0x1000)=nil, &(0x7f0000a0e000/0x4000)=nil, &(0x7f0000000940), &(0x7f0000000980)) 03:33:36 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000100), 0x0) mq_open(&(0x7f0000000000)='wlan0\x00', 0x0, 0x0, 0x0) 03:33:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$SOCK_DESTROY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x18292}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 1058.886408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1058.893388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1058.942874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1058.946892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1058.956575] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 03:33:37 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000001a00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) 03:33:37 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200050000000e"], 0x125) close_range(r1, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000400)=""/85, 0x55}, {&(0x7f0000000480)=""/250, 0xfa}, {&(0x7f0000000580)=""/127, 0x7f}], 0x3) r2 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/69, 0x45}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/69, 0x45}], 0x1) close_range(r2, 0xffffffffffffffff, 0x2) 03:33:37 executing program 3: sendmsg$unix(0xffffffffffffffff, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="140000000000000001"], 0x18}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000000)=""/9, 0x9}], 0x1) r0 = getpid() process_vm_readv(r0, &(0x7f00000000c0)=[{&(0x7f0000005580)=""/4078, 0xfee}, {&(0x7f0000006580)=""/136, 0x88}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240), 0xf7, 0x0) 03:33:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$SOCK_DESTROY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x18292}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 03:33:37 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r0, &(0x7f0000000200)=""/87, 0xfffffe0f, 0x2a7) 03:33:37 executing program 0: keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 03:33:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xc00, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1059.384980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1059.394633] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 03:33:37 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x2, @remote}, 0x1c, &(0x7f0000001280)=[{&(0x7f0000000000)="d7061e52", 0x4}, {&(0x7f0000000180)="54d29f773b61f18aab35d1fa20fe611701cfc6c296f1512ee06da2f187f33123d2c84e78285f9a3e90415373be7a3be6b1d9ca2d64d9f8900aca5c1fa5ef4422eaa4981886c501f5a4739c3c9f3a89e5e204115627d3bffe244b2ea36aecdbfedeaaa39708672f26a2a57de68cf36ea4549de92c93e5d54e03bf83aab2779b124f8889023701869da6e70df3e04aa9c37eadb58de788d854ec68e2f50fb903f9f2f9a77d80603f764cd218150e592ac1518acf8fafa521bc6e475618bf976a4f59b2861461cea8a41177813066a0b461b5f82bf7f2e46a70cf5c85d4f485206b89820ed1931b39934fe5f6be74d5923fa2084c15cd1fb37a159ba55f3c34b88fc956debc4a022ab71bc571aeb2cc26806ab83cd3e53683ed1a29a0829c23268e764e0a5fb54553d4a2cd5620db853f9d040076e1dc5a307e76dbb7ed68982a1ae12ae2730c7001e6b23d6505ba31ca718160f678f9870b84d988ed0ad6e04d4a80a886c82b2c094617fe17355ccf5eb73187fafe7761436d95e92d592e9f760a60dd960ee384b62cdb75bdafe200a9a70cd31025807f9c9ef5483391505c47229cff47d7632f50e8006f410615c1c784e211dcda1fb32907af6eea80a188f4d4c9286ef244631bc43a15af1064bfff6cc84ad0d6541d099c18ece60d9b75e98f6b35233db3538670d53a4311f3dead6bbf3965882f16ddf8dba5dbc12b99bb4e2aace05488691b54702a5f7bfda060cb99b50664f0a224bfbd34beccfc7075dbba6c301190933ea7419a6864406bd5d4c0a4f4899e6689d68a6d2e81353cf9b7cc6184e320123c115866e93e9085d1ae60243da5873c0047e678d48c973dad1f4420d732d9eb12b6b9aa830d0937f74e1a476a1db97d5be9b3b9f09f298ef331808000235e119fd3afe85decd3698528e32b0bfae8db14c0f63794639f2723944ba4eb96eb817440119284d2cbda412a26ae566faa222e75332f13abf2f1bfa62f86a8e5414edacbad2c5476740f2c4871b25401d81ab21f84bdbf628800d14ff5514c07d7dabaaf8426e0c7584538683d21c30ac68ba872d8b82f53caf6d7a06566b7e6e96e8d29caf4bbea1b565a0cd8fa3b90f9a9258a9bc7421e1367f0b97e20c96833984636373e64246db0d12ad4e56323f6fb040e03c76f5cea60d75e56cf7688a5d7f9d8bc812ba357c77b9cc019775202d38d51adfec5267248149a043fe187a8b2f31b0c58278759bebd18d780f4bd685cd92ce05a2d1f3130c66e9d24a71f630d51fdb709d9cc24682bf731f661dd7d8e8f16ae66d5c684fe846752c59e176ae9c1c6fe5b3d4f946998a4f5421ce51ef6054ec9fe9d5bb21925c2d2ad77819cb46845744b65707b50a8f02e2a851f4684bc6fb5db868315ea1a8d2507c137858e478d95416da26231a8dd220576cd877478b0f8b7b731239f67d56884f8263a1773a9e21abe4514927bbab14240d79912763d97b4745c730f2a243546ed80f3156e609f4bd7a7de12d3b8044ff61d853c355f221d4b009957403d60f72216777c6bda4847d8623b98cb9698bc57a59e82cfd57d9842573c1215a648a16dffbb1e27fe7c0c7ac3c6d214ae4f0ba3d12acc71b04fcb2523f7cf99788408928551a7041ac648bf6d8b0604861291ae4586ece4db6be58b0e081e20f858b6da82efbaa0e87c98a4664b55ace48c8f6b26546b31a83fd3e8d48d4189dcc5cd75f6d131acbff84c0ca693aa683f093dcb30fef79d1cfe65ea8efe6e8128702e4de331e6586b5713c759ed9b13fdb83102a9139a4f3dc52aa40cc985c6f3820e9c614efbb58a427d89830b65ca8e84bef3a349688ca7d8f6c5b136d438ab415a27822673de236aeb2be86ca0589cd68a48c59ba535f21d5fad5fa7af62c80a5156cef840ecb98603e4a345d2c07d5e2302e9a21fef4492789ba258123831fd4fa241142cab9ac939825dae961feea0843167a8e1a8c3c5bf2b8d2bb68c92ce1973d66a7002a8efb4ef93d4c9f96e5de82b888055b508e135a5a9cd62645b558819531d80c4a15c9688e3d683bae111", 0x5b1}], 0x2}}], 0x1, 0x0) 03:33:37 executing program 5: getgroups(0x2, &(0x7f0000000140)=[0x0, 0xee00]) setresgid(r0, 0x0, 0x0) r1 = getgid() r2 = getgid() setresgid(r1, r2, 0x0) setfsgid(0x0) 03:33:37 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000280)={'TPROXY\x00'}, &(0x7f00000002c0)=0x1e) 03:33:37 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600f28d000008000300", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='y'}, @NL80211_ATTR_IE={0x4}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r4, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1f, 0x49}}}}, [@NL80211_ATTR_DISABLE_VHT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x841}, 0x3367f62422dba49c) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='y'}, @NL80211_ATTR_IE={0x4}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f0000000780)={0xec, r4, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x83, 0x4068}}}}, [@NL80211_ATTR_IE={0x99, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0x64, 0xee}}, @chsw_timing={0x68, 0x4, {0x0, 0x4}}, @preq={0x82, 0x57, @ext={{0x1, 0x0, 0x1}, 0x3, 0x6, 0x100, @broadcast, 0xc000000, @broadcast, 0x8b, 0x0, 0x5, [{{0x1}, @device_a, 0x1}, {{}, @device_a, 0x7ff}, {{0x1, 0x0, 0x1}, @broadcast, 0x1}, {{}, @device_b, 0xffffff0e}, {{}, @device_b, 0x3}]}}, @tim={0x5, 0x2f, {0x80, 0x93, 0x0, "9c6d3bc3e306fed7ac216a2ffd73a2d80242cd5ce8adb6fb2d412e40e844ba9130918489bd884cae7cdffb97"}}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8001}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x8a}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x20}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x9}]}, 0xec}, 0x1, 0x0, 0x0, 0x26004104}, 0x5010) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="50000000082211000001080211000000080210ffea000000000000000000000064000100000682848b960c0600240000000000000000"], 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="10000000080211000001080211facabe28e33c0001000802110000ff010000001000000001088284"], 0x28) [ 1059.525658] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1059.560873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:37 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x2, @remote}, 0x1c, &(0x7f0000001280)=[{&(0x7f0000000000)="d7061e52", 0x4}, {&(0x7f0000000180)="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", 0x5b1}], 0x2}}], 0x1, 0x0) [ 1059.627809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1059.630317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:37 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) getsockopt$inet6_int(r1, 0x29, 0x1, 0x0, &(0x7f0000000100)) 03:33:37 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200050000000e"], 0x125) close_range(r1, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000400)=""/85, 0x55}, {&(0x7f0000000480)=""/250, 0xfa}, {&(0x7f0000000580)=""/127, 0x7f}], 0x3) r2 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/69, 0x45}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/69, 0x45}], 0x1) close_range(r2, 0xffffffffffffffff, 0x2) 03:33:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xd00, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:33:37 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF(r0, 0x5424, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, "b4d9c658d8798c11027fef73910f22bb242367"}) 03:33:37 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x2, @remote}, 0x1c, &(0x7f0000001280)=[{&(0x7f0000000000)="d7061e52", 0x4}, {&(0x7f0000000180)="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", 0x5b1}], 0x2}}], 0x1, 0x0) 03:33:37 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200050000000e"], 0x125) close_range(r1, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000400)=""/85, 0x55}, {&(0x7f0000000480)=""/250, 0xfa}, {&(0x7f0000000580)=""/127, 0x7f}], 0x3) r2 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/69, 0x45}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/69, 0x45}], 0x1) close_range(r2, 0xffffffffffffffff, 0x2) 03:33:37 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x38, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @val={0x3, 0x1, 0xb3}, @val={0x4, 0x6, {0x5, 0x3, 0x7ff, 0x7ff}}, @void, @void, @void, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x1}}}, 0x4a) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="1000000008021100000108021100000008021100000020000100000e0100010882848b960c121824"], 0x28) 03:33:37 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200050000000e"], 0x125) close_range(r1, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000400)=""/85, 0x55}, {&(0x7f0000000480)=""/250, 0xfa}, {&(0x7f0000000580)=""/127, 0x7f}], 0x3) r2 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/69, 0x45}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/69, 0x45}], 0x1) close_range(r2, 0xffffffffffffffff, 0x2) [ 1060.037419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:38 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)={0x0, 0x3, '\x00', [@calipso={0x7, 0x8}, @hao={0xc9, 0x10, @remote}]}, 0x28) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) [ 1060.083432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1060.091708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1060.144321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:38 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x2, @remote}, 0x1c, &(0x7f0000001280)=[{&(0x7f0000000000)="d7061e52", 0x4}, {&(0x7f0000000180)="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", 0x5b1}], 0x2}}], 0x1, 0x0) 03:33:38 executing program 5: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000005, 0x32, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x137, &(0x7f00000001c0), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) 03:33:38 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000040)={0x24, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c81c}, 0x4) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0xc7eae2ea45e3b9e4, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:33:38 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) 03:33:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x80108906, 0x0) [ 1060.357576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1060.416427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1060.471935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:38 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200050000000e"], 0x125) close_range(r1, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000400)=""/85, 0x55}, {&(0x7f0000000480)=""/250, 0xfa}, {&(0x7f0000000580)=""/127, 0x7f}], 0x3) r2 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/69, 0x45}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/69, 0x45}], 0x1) close_range(r2, 0xffffffffffffffff, 0x2) 03:33:38 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200050000000e"], 0x125) close_range(r1, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000400)=""/85, 0x55}, {&(0x7f0000000480)=""/250, 0xfa}, {&(0x7f0000000580)=""/127, 0x7f}], 0x3) r2 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/69, 0x45}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/69, 0x45}], 0x1) close_range(r2, 0xffffffffffffffff, 0x2) 03:33:38 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200050000000e"], 0x125) close_range(r1, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000400)=""/85, 0x55}, {&(0x7f0000000480)=""/250, 0xfa}, {&(0x7f0000000580)=""/127, 0x7f}], 0x3) r2 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/69, 0x45}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/69, 0x45}], 0x1) close_range(r2, 0xffffffffffffffff, 0x2) 03:33:38 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r2, 0x6, 0xa, &(0x7f0000004b80)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) sendfile(r1, r2, &(0x7f0000000000)=0x3, 0x1) pwritev(r1, &(0x7f00000007c0)=[{&(0x7f0000000380)="65e65479399ce903d93f61010ae7a327cd2bb2c044e15ee8d9aaeb37b674016e076b33a3e88ee0a9c9ed4c722acd07afaa9b81e969d3b8fe0249aa94a523ccdfa1254421c7e1cf091f2471dca98446a9ed11", 0x52}, {&(0x7f0000000400)="7b9dd686c490b146b596338991e2c8597797d8d8e038c49a8da9723f303cad01c5e857a192dd01bcd8b43f9148ace049c551cf1bebf4c76d7fb41c53d4d5014aab3e8b1f550c8819c6", 0x49}, {&(0x7f0000000480)="1ad2ecd523302c0f70fa4e6f9361a2c1b6c8012bf74b9556cd19c8689344cf6e2e41fba2407ebd0d315aabc5cfbd141c25eb6d64c8cb2202c16775c494a4924eea49db8d3d19900d18f618922a98c86d7877ab67ccffb97e79d62a84c6098940e5a1fc3711635aff3e3541abd41297ec3dab6a2527722396d80c3a69b6da324d9574480a1f5d20561f1d6a9e071e280c1b25cf0ee59dfcc85aded59007a3f7596b8be44bb08fc2481ad995c31fc5950152cd8feca7b80c9d4247595e89c6290196211a31e22ae0a2b72f06e405d1bb88fe14", 0xd2}, {&(0x7f0000000580)="4fd35d00d185549b8e53e67f76250c59e26a61316f712159c83d23e218e37b1662792e3e711612c278b9b2aaf37817339c9c1ae38e6f6534e4ce96435ded85234b4c97957d6491e400cbdb71999feaac060b47320f8dd382ff80bb74fe0f4c535ee4e6399849a2c99e1ae8c930a9906a69bfbd1674932db37d4fdcee2ae155b7b1", 0x81}, {&(0x7f0000000640)="f71034c9bc33e2ffd0b72058f781500c1d5f14d75e67c6207a93e9c8afef65d26d31341c381a2df35ebf6f15012b787a95715d9ec9ee0b9beec89fcba1eb7b4be1eafd7b6a956668461d914ccca6fea7a2640d8a7e1b5c1ed89337b5f93c0c2eb86b609f712b7b55cc062cd5aa924cff43514101b09455b45765fc8fcb048b8deee67ae674d827bca1fdb84f2a19c0a973fc535b4a38ee6768e0f9c558e5b40bc51595ed3969", 0xa6}, {&(0x7f0000000040)="e0c44b", 0x3}, {&(0x7f0000000700)="a01b1a9b586c66ca85953cf3b4092361ab94d525fb676d5f790cb6641cfc242dcf5a18f13a5640fb171e9b65d203a89e2434cb6588c191c9675448d49e2379cfda0006c856e5f1efbdcb7a55cff58915c99e8e5992624f6aafdbff0486e3c1f51df566a4956b7eeaab00fcae6bee4e4f6ad486f259a6cc96071c1dd36886bc21c07e3301f230553f1861c3883b3703eddff05906013118d854767c06b8", 0x9d}], 0x7, 0xfffffffd, 0xad63) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x800, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0xee01) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)=0x0) pidfd_open(r3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0xc1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x81}, 0x14382, 0x8, 0x0, 0x0, 0x0, 0x3fe, 0x0, 0x0, 0x3}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:33:38 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x50, 0x0, &(0x7f0000000240)) 03:33:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xf00, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:33:38 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) 03:33:38 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, r1, 0x100, 0x70bd2c, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x368d1c1c5f7c04e2) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="b00000000802110000010802110000000802110000001020000002000000c2de60"], 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000280)=@mgmt_frame=@deauth={@with_ht={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x81}, @device_a, @device_b, @random="c73e76ba4c76", {0x0, 0xfc0}}, @ver_80211n={0x0, 0x81, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}}, 0x3a, @void}, 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:33:38 executing program 0: openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/pids.max\x00', &(0x7f0000000040)={0x101040, 0x0, 0xb}, 0x18) 03:33:38 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) [ 1061.009487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1061.088682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:39 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000640)={0x0, 0x1, r0, 0x80}) 03:33:39 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200050000000e"], 0x125) close_range(r1, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000400)=""/85, 0x55}, {&(0x7f0000000480)=""/250, 0xfa}, {&(0x7f0000000580)=""/127, 0x7f}], 0x3) r2 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/69, 0x45}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/69, 0x45}], 0x1) close_range(r2, 0xffffffffffffffff, 0x2) 03:33:39 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200050000000e"], 0x125) close_range(r1, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000400)=""/85, 0x55}, {&(0x7f0000000480)=""/250, 0xfa}, {&(0x7f0000000580)=""/127, 0x7f}], 0x3) r2 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/69, 0x45}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/69, 0x45}], 0x1) close_range(r2, 0xffffffffffffffff, 0x2) 03:33:39 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000640)={0x0, 0x1, r0, 0x80}) 03:33:39 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) 03:33:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x6000, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:33:39 executing program 5: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @short={0x2, 0xffff}}, 0x14) [ 1061.591949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x8800, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:33:39 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) write$binfmt_aout(r0, 0x0, 0x964) 03:33:39 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000040)={0x0, 0x0, 0x4}, 0x8) 03:33:39 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200050000000e"], 0x125) close_range(r1, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000400)=""/85, 0x55}, {&(0x7f0000000480)=""/250, 0xfa}, {&(0x7f0000000580)=""/127, 0x7f}], 0x3) r2 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/69, 0x45}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/69, 0x45}], 0x1) close_range(r2, 0xffffffffffffffff, 0x2) 03:33:39 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}}}, 0x6) 03:33:39 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) [ 1061.944869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1061.955988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium sendmmsg$sock(r3, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000000)="9f6caabddf7d33e80fc5380d1222b909dc2e30ade8e07a57f2cf0b38bb08cc63ee6f427ae3b6e37add15c8673185f8b5a3da5b70c8a8fe37720f51da22889186c90d67b47a4677acf093ea0d8a331075470edfbb953ec0", 0x57}, {&(0x7f0000000540)="f98774184a47a779af02d6693bae2ef1c284070b4c119c812a50683a7fe97788650c43ec62588b15dece8940352768d675dec5b58eb5cb1d907e42641ceb54d7bad0303e22690da72e0f4b13342527f80fb3a11a71513772de96b41f9a6350036d7ca601e8a9c19b4667b1af9589387acc7a6e2f94094cb4fbebbc11ab214eda98f2f440c418df32ddb87167bd27fe34d779fa8e40d74dda261de8f1ab3885748aefc74754feeb7decdbb07fd7716c66c2d8050419d176d610353a2e7a03b5c3a64df3b111796d28cab9b72f7d8c56aa97c5cda492cfba20d33a78a09d0e042b37ca8c333f949fbc49f7d4711d653349122e33417fb16c", 0xf7}, {&(0x7f0000000640)="7a27f8a03d21bcb38dcd06d1240839346c026b0a40e437e9432fbde2b6d0c03ae42cfefcfdab10f68b2f0be4f146331b8cdc86196c5b3ccd1467a05e185b0677ac93306552e91a4f9423b5ea585185eb78cb7a1308199ba78dd2eef21efa3eacd1297398b25601514070892b68b4effa038f4862b4f2f2c8c82f3000d0c3f90d608c5d8ad3194177d3b167cc68e4b233e263fb58917b28055719e9b8cddcf3557e8a332f29e1fd9177d009c487c28c7888598f3850b3a1183f8e85cab938f32730870211a4c77228a5", 0xc9}, {&(0x7f0000000740)="ad2f80602db32fceab1ef3319b89c7454e486f0f967eee723845ec247d35077e3dad43b5f033f6a858a62b444420e037c659ff09cc8ca94ef4481965225d981f1e1718f747ad0f0766752ecfd646d6e3ff54b62214e65a5dd94b1cf2f20f92ab51f84ba4f0c7a7dc11c613417b83e4afbf4cb7fbc38b13f929bd365e55a6ee6a6b800f81be243f20f83cf7a483a598fdf9370c1b293852db0a02a10fc0d719966bcdfd14160cd7a28975db095d8c8226ad930458358378c0ea19ff35b52a87bc16af92824e95b3c56148f7062d626732e9f963f598ff4f4f304b4c58437a82f660fbeb3f69b3af5a2738949face9224037", 0xf1}, {&(0x7f0000000840)="9723bddf3bbd2f471927384666ffa0a4d7c5103a8b7142e1583a422da6a81a3c72d9d47ea84310e7715fa2a6782b01e07754a6eda610bee7b2be0d555864cb2ca6", 0x41}, {&(0x7f00000008c0)="1ce295f28b991fcbb4b335af89a4fe16b5b6201e6a3b2e0ff62f4c5325c1b1c5ca0dc32181e8c0440cca0e6d519272b0087111ea9685df4dcc2532c3458ed6ab074991a075bb17846b08448b6de0f147423bec6aa0d5585ac5834a89a8b6c47c42b5f084728976bc05336c791e944393c041ece53f7eb9cf662c08", 0x7b}, {&(0x7f0000000940)="09d54e9a6c66386971736de0ae9134bb9de51b27e6", 0x15}, {&(0x7f0000000980)="889f171d263e157efa05af7b988c2ae34dc0846fe4dbc113125869cbf2d92b316ca0f19ea8bc68dc4b62b1298ad51036148af4265f5cd0e08571d22d86f7774a28080a5f0d0031354fe454cde91592bf06aa1159dcfd", 0x56}], 0x8, &(0x7f0000000a80)=[@mark={{0x14, 0x1, 0x24, 0x80}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x80000001}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0xff}}], 0x90}}, {{&(0x7f0000000b40)=@l2tp6={0xa, 0x0, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x31}, 0x3f, 0x4}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000000bc0)="8c7bdaa5eb3f04abf6f5968f209e", 0xe}, {&(0x7f0000000c00)="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", 0x1000}, {&(0x7f0000001c00)="61a76175ded4fd63be6ff7d9634a8e96579505ee3641683922dd58799de69f706b0c58be76ff59618d7a586173b75e6f53f9c994891669b7e2dfa6aa85d54e330da479f0e612ad64ee26edf5a497c21cebd17d7e9db5d4c5db651f9de4be31750edc496dbc2149ae7ef94836a328d580458fbb663457834cc13e6e415c1adf045a4bd082f827be27b1253b33de5192fccab372d1210775c8ed92535fee61d927d2cb79fca6c217ab71", 0xa9}, {&(0x7f0000004d40)="30febdec799b760f7651887091c0920bafb2e703c140c62b6273da43d9f69b2b15350671b9356f403f10b01fd61ca79ee5fbef98a117ca8106c2f22b0216959fff3db77c4a91e2bba7827a7294badfc5c9acf5ceff1121a016709e9fb4b0178a3992f50361646a71b8318fa0090f46860be11a02e6e29b417062db6ee239433f84e8807593f9d6c76b2ea876e4276d3d692bc9489502831c531a825ceb2c17e67ffd766e95887f8e9c2db23e4ac78ebe36b5ba8666335cb9ef5924c38ce155f916694727c0b0689b69ac45f82be5205c961845650000000000000000", 0xdc}, {&(0x7f0000001d00)="4d8fd1b6ff8e722b852ff949bd39912a51de16594a06b36bcd8b6bfdac03ed2dc05cb5235e65e14147647d3ff4b8688c513b33546a92ffd01f742f2b5a516975742618d3367300386da8cf15ce0f54c3e7a8d4cc5d5062b2163d5983cd6ffa71a9d8aeb9cbfe2cd43bdaa400ea602fe1e04bf35fe3a9fea6a3cdec6e9902a63e8b955cdb44bddfa3787c276dd2388c23bb43f73669bfce2e", 0x98}, {&(0x7f0000001dc0)="f4bf0fbfdf42fe05c8708675dde6409f456c12cf6182a6baaf95992f9c56d19a4c3e9d74b023cb9d26a6f3f79c5d1ddb46eaf165ba1cd88014fe7ad6435232b6d13d68b00de38f4659aee60edbaf27b0082d5681176e5ac4a234f272b66e3cff54fd458be12694f737c3e4929c93860d48ddfc6cf5994b8c57c69bb64cda16d241fd26b0b58fb20d6133f10d926fc6334cf17334cf539bdd1734092c210b", 0x9e}, {&(0x7f0000001e80)="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", 0x1000}], 0x7}}, {{&(0x7f0000002f00)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x80, &(0x7f0000003480)=[{&(0x7f0000002f80)="699b8360766bdaa2b477489109f49c4d7cedc21bc0365870d0092835dc662b9a31b5e030d5d853deef354300bcbe115c3c35e1bddc14ae65d345b9605cc4140281c95d8932c80d6e0c136e9be4051302568cc40c264ea9f03952c3a430af538f1f557b34956e0431322605e1e8faf0b959054889fce4432244101ce3078a953e9417e016be8a570e851d7ad8188ab827a00dcb80bf0aa05320b24f4bfcedf6334e3c569a34aab939ab11433c3cc79b16", 0xb0}, {&(0x7f0000003040)="32b4b7f7d13d9e5489c3a225852f7e78b07c3293aee9d81376c1bf4e041d36e835216a60fa28ea626a42c11e9266998dbce225e019a3be8e1402662ee21b43c9fc8aa108137d13428a31007cd2afb59e7e3e37dd68e416008e32b816448034e735b2e8bca8e3e7e4f0f9a365ea69eed4f8cf79b395ac57091ea1b7e40a717efba87cc0b89add95", 0x87}, {&(0x7f0000003100)="8bc00b97ee0dc3779cca2b84c16eb18dbbb00e700575e86642aedb169b7310d52b32a28ecbe67c39ed703703f0f1e6e6f742294b0037c4a0d6a44292c178b0e46893c69f88ababd8e3ae48", 0x4b}, {&(0x7f0000003180)="f6b1e685c3a55e18fd47bbb0a1bb15e64a85f4adb85052fdae17af6aacd2b67f6ebf6f4322d591741fa90fc2ef11c0369c2e347088f6572bae7b834744a1f33cb06caf86e15ca895fbdd826485f1fc6eb15e4e8b795096e2f30eda3b91ebc4ba3baf48b2b24f5b521ed9cefd50dd5327bd90ed0ecc", 0x75}, {&(0x7f0000003200)="e71fe7ca514e617ed65c9c5ddee799df0a8d43d4fd989b33899d53c84a41379bac38113b2af6bcd3f87c27ef7bb4093dc0", 0x31}, {&(0x7f0000003240)="2f03c709878128cd7048237bd00a4cdcf0176bc9d77dab90da1dc5d097b059af986363878d39fb6b1aaaf466ec5340e462535e2d7d057278ae9051e7a6b3925d40412c26cd4d119274de2b300d9cf3b49477d5c2356ef5c5d0fc814687c08649828dc07cd1bbc6e9078c03e84bc55429bdb42ab0ca5098f60344145e24fcc19fa3fe965ab01d12ff627851c5098ead41f51516a21f961eedca8d3ee02892bfa68c55bdd6433a01ee1bf93dbe54853590eaa26cd4863b17762c871c17a1fdae2e5c433a10b629a57b01efa6f587c99208a962208f63842b03fcbd7de7e69e17b808", 0xe1}, {&(0x7f0000003340)="427882218d5d60495b3c21f1bed6ac11f448eb58e581296cbd17980b6414592616ba9ab9551542c51fe5c84785ed91dc0bedaf0be9b311200671135f590459f5fbd8fa7d3f90bc440fce8ec194af63f1ba46503fec4f912918d510e8c849384f26216b5de29d644ab720672709974a4ac885311c03f3d9d4adce558e9229aca10dc02e005dbf0945bd248ab2cd43fc71098d6bd4590c02eb4e8d732f4058283a86f6833b85cf2b9097126cf8a394f07d41a7603b4a62b01565e032efd4b78ec786882ae58d5339eab90c4108aca7cab4882ac0c5937a123a051036d74bff89b65a7be9d0c67f85ca2e51", 0xea}, {&(0x7f0000003440)="12", 0x1}], 0x8, &(0x7f0000003500)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}}, {{0x0, 0x0, &(0x7f0000003600)=[{&(0x7f0000003540)="1a6a98bcbe98f5b4f954e92b6369e65c59fc2c5456f1fe647e36f35b27dda1a6e3ba455d7043d464a87c631c7a97532af628cf95d65e6d4d09b067619feee31825d8144f6cf8fb7c019fe5f940ed3b64aebb8330529736d865d86fc6d152a38b5a2fe2ec8e0d0f9b8023ea3d612a103adf851d30cb4d10e611ebda2532e502962a", 0x81}], 0x1, &(0x7f0000003640)=[@timestamping={{0x14, 0x1, 0x25, 0x8}}, @mark={{0x14, 0x1, 0x24, 0xffffffff}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0xc1f}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x5}}], 0x90}}, {{0x0, 0x0, &(0x7f00000047c0)=[{&(0x7f0000003700)="8e72d6839f85a540f86e32ccd6b7d143296fad39cfbabdca5239d4197693bdb25994c667aa79c3367c4dfbe10e99c1aa3f55c3956c239c6f4e13c7529662", 0x3e}, {&(0x7f0000003740)="3af38b75b05306f271ed15dadda9c7eff00b59976d73c6e125cf41a3586c544cd88197310cb853dd85bf42373411be230f72b117d2708f58e01a5dbbf447e05d6d8b494f8fcc9988b901ebc593051a29c5af6d313985bf7cda6e", 0x5a}, {&(0x7f00000037c0)="ef2a31f68c7a466878d497fbf8397e87cc9857a6445551a5c5a8d4b9c336c522ca02f24461620640d6357a65f41caa8fa755fa35744f39ac33ea660766fb53b1fa0bfa2d8783bbadacbf7cfc3c557547751af159044afff3ee5c19379099da669f6f83d868d2792385d0fc44e5d40f778bc44f773b20bbeeacc6ab5550cf31206ef2ab507944841a8342fb6e3cc7f34a418b07e727f0134b8684657daabbeb5356e534f2230791de2d29da226dd45482b0eb74897a4bb4b03649892ef7bd406b75bb34e893a04914ae1a271d6f32f1b9be4d873bad3826f893407ec213127b22ee1eff2bbc1a7ccb5a9a4f1d739470f6fa571634b98bd206e94783597f80708fc1568383c6c230da09ab2c442c009f754586b6b311f613032610ca4cf44c22aaeb357eb4ff4081a6fbb7a73837f929214aa8a499271ba764b1190adf0e717fc60a3ea9242c9d1ece829258b3101763b450e8ee125260980b1aa5bbf8fddb3b6f8862565607bfce2f458692f29c6909a138f1120f3397b466b293df97c409bf4dd9b5d58a57c03decbaf9d791663caa565254f4417b4be556e674959dd364379c293a364e8d25e4976a40d56e9bcd4b8b496eb9570755d21b8a322360a1bb4644c03f5e4b0c19d15af02eb8bcfacd7412af9e2be122635a07df0153fb37e6c5af6b17e14da357b1e92f0f8d79a421ab3dcd2e74c3c1293e183aa8ad176f0af6cef754910ac02f3b260ddcb9706e5a5d1a56b1478edd5e30a3a1ebd1fb85cf590cc9915f384b4203cb560396898e2c8134680e45f1661613f2355398c196f2ee7102a8162fe277aa74fe39d30bcad30485e1330458915dd7a48dfe6dc6efbfbd52df82df7b8d98c811dfb2a1b4317c630707e0089bab596494d81a3f5628628bd4a42b3574723ad78b9b2cf9d4b36e9966a3d4eb4ad9906c71d620013e8dbaeea4614d817cc436f992166370d2f249acacb71b933a998c18d3f3837765087634eafbcd472129807858ec86760935b133d10910b6996bc8077d209c83098c2cede3055aefa526a67dde4ada7090c32a30073b73ff093eb6a3386d948c383490750222022098cb53076b4215cb1bebc48ca7ba6cde0c5575df7170960ab02dafc6d3d68b99db2e2673dfbdc808402d7788175950cd0c71713b960bd4c6a99c094f6f52673a010ce2e26d8c85710b5506e8e9c819ddcfbab57d93bb8192528b3b63c5db64b6ca1bc238e050b94399c78f3503d89636f072a09bef22a9fe960054264e3d859408db2dff604c7f53764f5283d57c48c45d8f1a9e89a5a50b07453335a3a44cf817e7f85eef032fd31155f06e3e8d505fd3dc5d411337d15b6ead2db8340f0e719bfa67bc5e59857513cf12176cdb0ddd7ab8dee62bebcc1d3b12f4fe0c87de9a0d5aa8b4c177f82dea4636824037f99b6af00bfd6452df7843f4fac65a4171c18c2e234d0e7943022805801bbe70dc5927ee9e6f919e65766dd632084de618b7eb2526cfd0a02953057da2c27571026cbc3e892d52e011c43f27f327f42e3b9e7064235b6aa5994e6bcb48461c9dc72bfc2b4afa1c163a9ce0154cd5e03d5a239dfef6dc8a7075f201ade956ba7723f393294c65d9cb21b4c969209bff9437ce8133766bf2f3b8338cc381888e5d8277fa1fee1f34b4e441ea693ec3867e9277a7d53a8e9dc278b0d6db4ab817d6a9a58a75bf9cebee70f5c3d113424ec06ccced6ca56e21c6d8858deb1135bf1417a91df45efb947998dc9e765ae6bb9811824fb490698257e4a1d1aaab5ba2e07229739dc71a8be27837bba434dbe48db97560a1ea9e13c7c2b16b8ca1a77e75d5ac5a1947f64091f0a90b9e396a178bb7fe83a867f65b18156fac1e0904115d9cb222b32da4f06c2432df316b85c7d061a79262bc67772d51a2876958fa63672e44dd26075bc8fe32d283fb404b691ebd60f64f32b63c32e25588a5a2f38f4c1c667913de674d217a2520b073bc2d4511fe22ba9c2b23a2d362e241f237f55061443ff36e0c77c7ba62d09612f1dbf6988483dd015cacba25f096f152278c9f5b62325d53ce4a1f55ca3c123f0f947c8d73c04dae9feca5310abd5207161ae4f65d3f8d089490cac46f86e1115f7245a820854bf4bf4713cd0f2bf0fa3062035c6f116953190e2863ece704e04f00eed98a106cfcb61dbab68a8cab13726835ed8c52bde3fed5e523315f9945d5b68de770a6c1d6a54fc60703781db5a646246832b7618f92e228355182a01d168bf0f7aa0ccb68ef1be89a0f7915b4acbdc06bcc989e6020ba57a594978230b23cd528bb73007415d50b015ad70317febc4678e54e95bec454a2a84f2cbaadefd9a703088ca0e2ae08767480a3c273e82e2fb1cd3cace8ef0c35661389d668e66630efd2a8624ed9b21115252d18dd2f8fa22294afced71e72e7570605e3c63265e7c3f9612839dd3ebf1256782569f987b770219d0db2886a0d5afa74ddee06ab52b27890b5f9fa8849fe5132086aa0bdf4bca33f746b29732c55b7796ab480aef57b04454cf8f0dc86d939c831bdf825a9936400d008e8a48eaf795ca0ee6133d501daf9f72c04c4ae6bb11c70ce04e9cd36046505bd6a1fe7a2a67ad303713e58a7b8e648ca11e9c6c907fc2efcbff7fe196b48d3e5f3d1931f55b3adf1983a7636cc6d833c74e87c0910213829af27128182d5baf7b4a7c5b50cf8116e2e8a7444fc8eb58b1adc6a12546d36bebf4c765a26bcb944d21a2ca954b20f483ab88fd74430f8145f1c5dd7ee7de1d0cb4d9575ccf8b0be17d7e4e399216e64464e4d0218e3e2841450543cdfaba8d6567e824d3c0c3f9087ffb9e53207ebe2963e98b692db3a38d62a3e703c3b6615e3560d96f26bfec271c142accee744fa45975579408041d018e3991ceca9cb9141200957ad62981a42103151154c07415175b31d54b1ae6ff58dd5996ccc63b608462a324168018bbdcf891df2922dd0404a92eebc5059c5057eecf7ce96740366749bc8b8213962d93a4db2b00cdc7dfcadd0882ad7458a03ad871eac00c72059ce2803888a518112590bad69aa660ddf3c0e832844ab60467bafc92d2aaeb7b453f3a6fc5e1d476d4312bb94f58b4c4aaf442167f224a85fbbb43b226966bb06fa245c70e39019ceb7c2f26e70ad930da07550e8cd6cc69322d93fbb9c396c208dc73251aea2a6d9b7f9a4699a5997b0fe828adadceeed98fd743a88f57ad410c5f065f33fc329450b9151f912a44d7c1345df3f55b9d77482d767d9e6c47489e8b9e9280e586043ff3a9f22cf70fef728e303b8d59c7659022288c93bb500c809e5d4ba616436d903e8d00d4aba6a625bf8a2c2f662fc1306cddb50fafcce8d3507362e30bc823831d3a470394bf4b25cef9f0d05192a3e5f13877be1c9d5a3a5413489fae02d2f925d017a4cee29542fcf03fd7fb65646c1c5bdcad9786bf7ad7313e82e01167f2e1e5543002e1ff60cfaab8d44292f31340c19b7c2f24a4448c9b0693bd81779f3db0aefcf5afff57d31f1caf31f04014bc0d313a69a5dbb1f22f825a3c4216e58d8e538cc0a68f794d2c3c1063abd8244c94e129f5918e42758a9469321c108c5a6c8ec973db48da09d3595eb532346a3e27fcedbe3709a118912d8ef14d0af59667189474b0bc2d6ead2cd0a936db0983c1a4bcaa6c67d7976200ff865237512e7548fb41d4b3f60bf78b0f49a3a611873240c74609ec06ff2eb0ec1b8d3bd56b29bc295f44265e3ae47b77001d466d24dbf4d3ccb8c15bcb49c02a51f5c3a70b029d382221b4a56c295e53769d5bb042bcacddd03f76f7e61116bfe0b7425cfdfb750f8aab8b5899c2f6342f306946c25edecb704959491d4b3ccc6a6026a7ee7bd26943feef814d1f487aec5dbc50011880ab7f0b4cd1d81ba7b1b75325e0df9297d7ab37999c9a24b3cd0030b9d1d220510e684bfbcea3bce22de4ea80095005d449deca3c82848bf9b6b3b807dbd01c932535344afb1fc0d18260521da099551f07c6ef010106172e044b6a7f38898210ec2b46b9989093c8070b16d24aa3ca5b4a46157c4ff0450fdfee6fe20ea4d70490a882e112fc6b2b7731edf46f26a6d37b0c1dcb2064e3141c8992d5695be8c8287097d2a1fcdd75610d044d3a0716f8fbd3ac2b5f8bf6c729e1b795f5cf879648983eb25302a7cf64a6e43d9a3d539158847655268212408cefa1f7af2ab2fb14cc637eebcc0ca601fc42c386810962638abb7f18331e2b8e6f1e5617d05629fef6ae29339495aee68dcf46e23028bd4f9e044e39d217e393271bbf323cac303f6e5aa270ddd8a793ee68339bb7365053e067accb695c8124b0e7fdc0dafb72036e830ec91d8b2fa7382b57458c7f1988d5349c1e1a3c701382a076d9bdda8f78bd92a1033088715a4662400cb6ed0ee192bab006b4dca42ba2d34b1eef94f440dbc457e1ca94ae31ebfeec4c7b33a0887bf15cfaf655b9e0a976482297239481b205cee3b19262155984986bd0747d4cd93cb5415f19be2ea7d81dd0fbabd393584b73c2b19cf65d8c1918c47b1882e82d4c24be5a8da719184d05c4cc8e1ae752608d445532fe6c1a1b8752d8e6dc4a68f2c1b9c04773a62f42bfe85285ed2f1c4c074a5203387d8432c5512a6d9e5c20bb43955cf2f92583e97f999edcf69d8f14fc245ae8c7c45a6978bd3db1abbadae9a34c33d41cd6c457bef5fa9601c0ad49a0ba16a628fb84d78fec4cad54c6024e045bd856061bf4f48b585e1d2a888422167429b1ee2766b891466c55b22ab0573f4b27e445819af034123d17fb772d8e7953c396fa990622dc9b14c3dec31b1856ec7db44b51f9f3dacc590e58d5ccb6fc7cbbc7d81a42c726e187a63b5b70b316c4fadf96bd7fd8cd11edf150a89392c555d51710b9357a22b1ab56f619b8c48b7407c16cd4bd6e27bd9b7fb93b7b0e6f211985f4e8f70cac3c6baff926f52d80f237694f780eef84e33ba10f5cd24b94be8745a870aa7c7cb6ff5b71c0db47ab9331292d1a251a2894e8c0a6268ad30e463d2c679019c173bced30357b13e44b7e469b75a7765218a36028c6782e59d57f48e9d6192987de4fff5cf98c8c1c51d3d832349819daff603266ac4b643b71a8e1874c83eb4bd6bb711b6cc88cd26be88c0d55154315eacdf29c85108562c80d13df8833e9ce9bfb588d7bdbdeda49e2b044bbab8103e3a78696c74d4619d17467ad6b838d4139574b62973e1a58c506a93beb6acab990d4bc072ee8fe11b6474d7c29ed1fbfe5840efcd2e35343997a228932c39c709902469fa7d1ee00b64608a60358d3a9aaa2e13c08352cd7f95576d376ae6f4f3f335ff021ab2cc4013284997ea90c974b5557b8ede889978ce3c835645058c84d7862d2feda0c4f0a5d303776a9334dde93ad6ba8d372af9168c3e4357fed1f86403b081787eba13890b135078fc30db4f18a4c633f6ae003a5b6cc8ff55bd96030c5dc8c15d89356a3e700afb8cadf3c19cdd0b2cd06b7c0de9beaacd07d6ae5759877a8ebdd78f6b6d153d1bf7ebbd3287fae57600a28bf0bd120a65c8ba8b486815a4e19158f945088d940408300e02054db6cd98b5a65b9da7dc9607808a9977465eb2b5020dcfeb8976342136c0ffd2a6e31df302d5cee3b92fdb4ed53d2129bfa740061cca75d012d1248e6690bbdd62552b2ea44ed340a5407fd4cae6603b14a11c4ec1944b52d5efdb9658630b6e98b5b926e33890c122b56ee71d9b93956a851717b4eed61fae8ee99ca7b79e8cf68eca7ae87c3022", 0x1000}], 0x3, &(0x7f0000004800)=[@timestamping={{0x14, 0x1, 0x25, 0xffffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x10000}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x4}}], 0x60}}, {{&(0x7f0000004880)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, 0x80, &(0x7f0000004b00)=[{&(0x7f0000004900)="79d575d742697dd041ad4d2f36414da73f73da014fe0dfaf37ab691e117d2b5cdf2ccd018e73d5246fb5801975f3341462675c9df9807e5b749cfd459e8a3e38ad6ca3577636c82cd615a2b72712296f126c1050d03573116f1a4ac5eb42aa2d12e67fdbc0958fc0daca6680e2a0299bf8eb741f83a60bdb3c6d783795f2a9017d652dabbaf57a1ccc8935cda1092449d62a8cccbb954e175e7853e8605b16648782c2db11ffde108b9c873066aecce087449b4248ad6784c0876ae576db836298bb4c50", 0xc4}, {&(0x7f0000004a00)="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", 0xfe}], 0x2, &(0x7f0000004b40)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0xf6b5}}], 0x78}}], 0x6, 0x44080) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:33:39 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000640)={0x0, 0x1, r0, 0x80}) 03:33:39 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000640)={0x0, 0x1, r0, 0x80}) 03:33:39 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x1000)=nil, 0x7000) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040)) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0xe000)=nil, 0x5000) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x84500, 0x0) mlock(&(0x7f0000ff5000/0x1000)=nil, 0x1000) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xe}, 0x0, 0x0, 0x8, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x293f, &(0x7f0000000180)={0x0, 0xbfe1, 0x2, 0x1, 0x15c, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000300)) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000100)=""/45) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], 0x1020) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x245bbd4ac7e3e1ed, 0x0) mbind(&(0x7f0000ff3000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000340)=0x8, 0x3, 0x3) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, 0xffffffffffffffff, 0xf871a000) 03:33:40 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000040), 0x1) 03:33:40 executing program 7: r0 = add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000500)={'fscrypt:', @desc4}, &(0x7f00000006c0)={0x0, "0201d3ac2e2b4947dfa75ef80072cf20c1c161cea53e9d5a6e3d5ffe2c2a788b4644d9bfd25cd04830882b3b72df194ddcdc639eb5c8a7e7d4dd8b94e714103b"}, 0x48, 0xffffffffffffffff) keyctl$get_security(0x11, r0, &(0x7f0000000180)=""/187, 0xbb) 03:33:40 executing program 3: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000b00)=ANY=[@ANYBLOB, @ANYBLOB]) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x4, 0x0, &(0x7f0000000000)) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x4, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0431"], 0xa) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}}}, 0x4) eventfd2(0xae, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x2, 0x70bd2b, 0x0, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040840}, 0x40091) fallocate(r2, 0x0, 0x0, 0x87ffffc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r4, &(0x7f0000000080)="01", 0x292e9) 03:33:40 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = fsmount(0xffffffffffffffff, 0x0, 0x2) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000140)={0x20000009}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x60, r1, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x4}}}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_WME={0x4}]}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xfffffff8, 0xed}}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x0, 0x1}}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@ctrl_frame=@cf_end_cf_ack={{}, {0x8}, @device_b}, 0x10) 03:33:40 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') unlinkat(r0, &(0x7f0000000200)='./file0\x00', 0x0) 03:33:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xe703, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:33:40 executing program 4: prctl$PR_GET_IO_FLUSHER(0x3a) [ 1062.447407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1062.520478] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1062.555643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1062.575531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1062.587852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1062.623467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:40 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x1000)=nil, 0x7000) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040)) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0xe000)=nil, 0x5000) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x84500, 0x0) mlock(&(0x7f0000ff5000/0x1000)=nil, 0x1000) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xe}, 0x0, 0x0, 0x8, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x293f, &(0x7f0000000180)={0x0, 0xbfe1, 0x2, 0x1, 0x15c, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000300)) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000100)=""/45) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], 0x1020) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x245bbd4ac7e3e1ed, 0x0) mbind(&(0x7f0000ff3000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000340)=0x8, 0x3, 0x3) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, 0xffffffffffffffff, 0xf871a000) 03:33:40 executing program 0: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) utime(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)) [ 1062.681014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:41 executing program 7: r0 = syz_io_uring_setup(0x4c8f, &(0x7f0000000080), &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r0, 0x16, &(0x7f0000000140)=[0xffffffffffffffff], 0x1) 03:33:41 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)=@keyring={'key_or_keyring:', r0}) 03:33:41 executing program 3: mlock2(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) mremap(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000feb000/0x3000)=nil) 03:33:41 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000140)={@rand_addr, @empty}, 0x8) 03:33:41 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) read(r1, &(0x7f0000000180)=""/136, 0x88) sendfile(r1, r1, 0x0, 0x100000) 03:33:41 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x1000)=nil, 0x7000) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040)) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0xe000)=nil, 0x5000) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x84500, 0x0) mlock(&(0x7f0000ff5000/0x1000)=nil, 0x1000) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xe}, 0x0, 0x0, 0x8, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x293f, &(0x7f0000000180)={0x0, 0xbfe1, 0x2, 0x1, 0x15c, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000300)) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000100)=""/45) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], 0x1020) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x245bbd4ac7e3e1ed, 0x0) mbind(&(0x7f0000ff3000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000340)=0x8, 0x3, 0x3) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, 0xffffffffffffffff, 0xf871a000) 03:33:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x30000, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:33:41 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000540)=ANY=[@ANYBLOB="500000000803110000010802110000000802110000000c000000000000000000640001000006029d6385ae94100202020202010882848b960c12182427ce585b978403491f20f4b0441cca19b64f5c992542d5d4809f73d8b60a9c4c9455879c08934e8b94ec62b3e808f597f0b8eea0a083d99a6c1c8b6d7a57bee11c9ccb83a4fece36c384c72384bc899ecfc682feeca631af011d1611d9dea6b2feb53572c72c7d537fba6700"], 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = fsmount(0xffffffffffffffff, 0x0, 0x2) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000140)={0x20000009}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x84000}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)={0x58, r5, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x4000840) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:33:41 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40000, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect(0xffffffffffffffff, &(0x7f00000000c0)=@phonet={0x23, 0x0, 0x0, 0x2}, 0x80) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000001880)={[0xe31a]}, 0x8, 0x80800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001780)={'veth0_to_bridge\x00'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="94031c855deb"}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) [ 1063.256325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1063.306922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:41 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setuid(0x0) 03:33:41 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)=@keyring={'key_or_keyring:', r0}) [ 1063.385911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1063.395790] device lo entered promiscuous mode 03:33:41 executing program 3: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x88440, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x896}, 0x20) 03:33:41 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF(r0, 0x4b48, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, "b4d9c658d8798c11027fef73910f22bb242367"}) 03:33:41 executing program 0: shmctl$IPC_RMID(0x0, 0xfeffffff) 03:33:41 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)=@keyring={'key_or_keyring:', r0}) 03:33:41 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, r2}, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write(r3, &(0x7f0000000080)="01", 0x41030) fallocate(r3, 0x2, 0x4f0, 0x87ffffe) 03:33:41 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0}], 0x4, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x462003, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) clone3(&(0x7f00000005c0)={0x20000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x2e}, &(0x7f0000000440)=""/68, 0x44, &(0x7f0000000240)=""/14, 0xfffffffffffffffc, 0x0, {r1}}, 0x58) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$LOOP_CTL_REMOVE(r5, 0x4c80, 0x0) fcntl$getownex(r5, 0x10, &(0x7f00000000c0)) openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000740)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r6, &(0x7f0000000080)="01", 0x41030) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r5, 0x40047211, &(0x7f0000000140)=0x4) 03:33:41 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) io_setup(0x6, &(0x7f0000000000)=0x0) io_pgetevents(r3, 0x6, 0x9, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000040), &(0x7f00000006c0)={&(0x7f0000000680)={[0x9]}, 0x8}) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:33:41 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x4d, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = dup(0xffffffffffffffff) bind$bt_hci(r0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x49, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/stat\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x3b}}, './file0\x00'}) 03:33:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x80000, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1063.754350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1063.811780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:41 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x1000)=nil, 0x7000) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040)) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0xe000)=nil, 0x5000) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x84500, 0x0) mlock(&(0x7f0000ff5000/0x1000)=nil, 0x1000) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xe}, 0x0, 0x0, 0x8, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x293f, &(0x7f0000000180)={0x0, 0xbfe1, 0x2, 0x1, 0x15c, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000300)) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000100)=""/45) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001700)=ANY=[@ANYBLOB="cc0053ff990300000600000084e4ef30300200000700000000000000000000003bdf26b33051575592e9167f7e48b6cda8d04a1534e40823322d3ad41350b064b59dab270263dadf6c0e17b20677dae4449f24708578b8812b71ace7769058c52c005c8c0695b983ae34346ec491d8d4107ac4684809125f60b5d5770f5c6ed7691655d09bed66c61054246409fce9ae8bdf8c999a4f59238a751be14d718027795194e3075bb1bd5490479c30975db4edfc7edad4629d490492e4d65fccb3d9aa4cab24b271bda7999852c5f34731f9e6628b9d3a6b6d009b974ce1f73ec3e8aca9076ea9cc66a8b477a4b30c1354f4f81b08f50192276ce978af98aec31f8a0162aba41bf3b6cda80c37dd5ca4eece0f6ded1bfc22a496998ea3cad4bffa2d5e8e08bc38b2fa533a3a19996eeffb0baa0e57b0b07b8e45bc3bcbbff52d840286f5ceee88c203fc8754ebffe498db541f6412057ca2d52d0b4362ac77048bacb8bb9183fa182efc4bc69a1ebe9b8dfef7a562d14cc5bfc70dc67e72afe5d13666ea1568f73333da9eb73ee9eafb8ed031387ac7fb8abfebe4489f9a1c0b32d444ca04c8d137dc4e653e74ffce85d175c08ebcdd6c5040ec73466ca4dff84a68c6ddbab3522f334153a69e99624b89628de92ff4349db80b3b66459c6e7220697333946a2b50e248f4b2570330002078eba0bcb0b748af8f44359f4ea4c24109b02d21b70243d4240c5cbbf266ace7ed8f508255d3ac4699e7a24c7882de6f939d13c569b16a431855d394c83d677513be842ac8222cdd114f42c8adc8e4749857e016a16ca6d87f40cba3d19e7b2d81515e6f89e0e03cfc0f58e584c283bd9eb47df6c4189fdb5b0155ae5708ccc139b617f223b591513cbcba64d3aa005132620b892610e2f3faa7347aaec4063b641f7d6a93b1ad01dcaae8cd72cef21ec0fe6c0c8d18abef74898f70a2fdf7eb9ee35b7d0a3fac1b21ee89aef9778606fde66d76326dc5156cedcfd2733a997cf89cfa4c7e442b0344bb180fe7a274aae91862603e51a37522219136e08ad43931be97979d6714fe6d27804bf2538a24aaee06820921377028e1d918a7aa55809599f8ca514f60f7c2208b36905403f5ec807427e2218785f1e692c6feea3f85082bf0d8b8b1e2632a7be170cf33aa6810aa0b652106e61589bb57b171792e8d290ffb9322b5c09bd09b49c0a563c5e716f901f71e4dff6b3d5fbafd0078795066abec5b5368066deac9ef71aa79ad625bc85ae2c7e2b0bfb0cac4779d86a4548b6c7ca5f8160cee9d09fee42a2a524bf79feb3d5fc135af87d179d75535d1efa615ea6c8930eed8fbb8ec3be7a789a3a35a74df78226da867e888a86d950484fea2493fc3f82c8c23336b4282580ccfe3e2b26343b17806a1fbf901f9e23045dc21922a5bc9108f596bc12b53ebbca97efcc26069d5436363ab9b7f1a7724ffe539aae4ee596224e36e4e7df8a0f4bd467353ab1d8083a14a68bf2499dbdd6683d5af685c7fda92c1572b2f34710aa8f83cbf5a0408932b58dcd3e4a1d0532353b166bb1c6ab5765abf5ba65534ba383e5630b3966589e5a72d563b27524bb377677b56cbca939852dfab337fdee70cee7970560cbeac1fc2be5db7af12efc120dff32205f3bfc20ef292713f82fa3dab6b831d119eee8c2e69adcf83a557d39d563889733a06e01b99ddf367150f751d40fd32bee0b7fd99d8f370a4230cae84280b4ad951664344b468c359bb4c97950a74a965224d5b526ee637e70a2c704fa6eb273357ad1a06889470ef614c4514f0b254b08ac86ccfec01f143482e204307b98518e9dc63284bd75a8cda7acc9f15f06551ec5a95f7a17e21e653afdd52b36ecf12b241c1b8911dec5a41bfd2f04883c75d6377a6c70e86c77ee636edbafff5fdb4528e0cb909aa3c6790d45dc118070052d928c5382bf5fe125a3470dd54dade5833d80250aab450d136208202f75d4b063364e6902a473733ec8e5e78524f847fe5a5aa1dbe63f038de522907ef22d69aa42e2deb597a006c2b451429eb09497d65a304eb6e10234da6ffa6d2d239bf27782a5233488d6ecc9e4d2dc21cac3b9279ddb7761229591c907e5f178a95f613c9c310bdf217c38bb49e137945c924742999eae2f7c271a463af24875c948930323cd74458d48c0fdb9eac074aa03a2629611ea1a1dba7072db4b75031dfb43d0525c40ab2ee7bb501baf2ef0dbe584dd995c72afc267cc4309273d57f4092027df4c31ac46000cf0da50384684f25c357647189f75362e8101092b6ca8f4f69767ee2f876b3293829f03e32057b6aaced59433d5c2bdb37bc3f22c93f79be4da6b1d0a24568fac425e23e038698a7b4c558fdc26e90cb0de255ebde52e510dcab15da1b28675c2df73956319b1a7ab36d88d0fd3f7dcdb2d3e7627fdf626309d80cf938a5a64f7a7e5a950b5bb7e1ec7eb351a57efc05d548f519f856b5ff1b3ead5c965d1f18d28ce68b1ec3aa58b570807222adb338a37ed6a3073908d817079bd96ddd356edd2881c0c375e8c3f2de01bf7d9b2c72e21f50bced047d5f1add27fbf7941280ca13dc38df5c7bb906a3496a787375483601994ffd63b7237b9a35e83611330d87f0a1e219c1a674eab097fb4cae3450611c52baf336bdffaf8bc3345d8ae996ab163153997050a73845d9a62dcfd03f03b2f69054236bcc57078350e4bb7e112ee79a91d6380f8b718e686961bf31c33c84f8d287864df60a2c6c1f0b49350fb144d00febd3509a636ab7cee3c564ceed0155fa6e389c6c53dc33c0fbf23e8f27e643c4b65abdba96e1db5ca4ecf678869b005c8c68a7bd145065447cedb530f264a66d6b48db35e4c1e8ca1bfa4e57f625b5ee7b409944fce49d6ccc9cad1f64e893008f1083853ebb0b87487d008215dcce5392fd34103b1d3135080b09f911304d13d99a400fd9f7959d0e20ed2e104973f3c375538e82c9b4065c8f3700fdd5151295c7872b4d158517e0f882d8713615283fad4bd7a62688dc53203a442b00c95a049471e42911aa65d63931f0c460ce818479248dad5e0ae4581c4a8641bda5e59e137cb8a6eccfae4c0a384342c15a701017ca11096651822dc2c001d0e2877c3bd6ac104d6f9df5165fac1e20c2d687da7a22b910e14caf4596ef9cf7de408700eaa3495aad1f701d26cd754c66090c0430180a6047b27da10ce7bb9e68d903e325105b836c4e27b30cb8c313474f85c05159b7e0f99b03f382567b4f2f7be78996ba4db285b49bac496a5ff24b4a12dff1738c5e4ab4432defcc7b006f72daaf4ade218eef6ed6b30511df41064945698e995b4d86542bfb2d38c0bbf7d491b66dce08ff033bd7b310c7da7fd4781d4c9da09f32e9eff3f415676000f2f7d99d28713eb6a8e606777f931d647bbcb65e82f48bc1500ca1fae8b9fc03a098adde00332a31f6c88258ce658188da0da2495536f753dcd405bf8018bf34e3a37332b78bb5c2a1619d316212221d239c7bb2f8d55b9c11a4fb7f00f55735511570f72a225bffea887a7f16d6f24fee6e94ab6bb7fa50defd032b9c38fc5de7f8df4513bc8998c9b1133dd3d0243f963a608a301c1b87ef8c5a70e91c6907e3573a5810ebbc2297c87ec95850447da42aea2026020e29e546b08dead99246360f016c9cab0a6d3aa758302368521700ccff435607f372f334eac369350343e874b58e45c37d1d35516f2549842fe670e64fd150b2cbec9c6f0774612f2bc212d4082dcf23de5a3e703770f5977c3cce4689d6d238ac5be7ddef128178a44db18e96519f91cd8356ee1ac1e817ca4676935c23318eb5f3e6fd25128fce62569deda36ad181840dd9f4b4fe425989f5490ce2217d8f32db4a7db5be6ba73d22e77da10f24dcff6d46767b35b1f0bab703d29aea1cb8cfba09cfe196c99c17b0f4d40ca727245ee61f8c4a0d63df7bbdb75708f71025c6f0ea4bdfd6fdd4a006c612763636415d8b25e4a3b91d073c2bde6b31b47bcafb9d6f470d15b8f54822bd2c2ad4c36f5dbb485663d75b5f26f94f43133285a70c511fb8486517de06bbf004af2454b28b60c01be7f77b2c484b936d3407e7fca477b83844f27cc5d45e615870e58c9e6551a1371b51dec022770d24b3f9a15b82290f829d273d7198ecafa9f5d4b4f4c79bcabd91f42360baab97f7f825eafbdf53d882e947faa8d2c21a074acaf23a8db92fbdb135da6a4d36cfba39410a70b46efccce9ca65a2597cec23aa0b92bb45dac250f53552880bb9df9edc2304b09e5079e87063efaef45b50b1b09b1d46e9c6838c27affb4a24f1be971d62de1f773abb244cca2522135f612b89c082c5e76751887d42e81ff2c4a241c56e0c92de7a302064a3af743c8d414f625cd6d6c9e626e9c624ebaa44379152d7968bbdbf3cb94b82000f57bc0df12f8827ee0f40d50333f51b353b1d9df6518fe0406f3a7aec1b8cd013e5342ba3cdc644f2a41f3b4037029c42c04378894b7996e89bc74b9751c5062a710759860e9150a5abc9bcd067b2c18f908899b8aeec4cdca866bad0b480fb2927a4a31f4d853de8671815a447a733cc298f43a86ad99b7dbd262a2836321265062d5f0ad7e80965e9cbf2df343ddf62e1df28c276f97d433f172cb8b16376aef6d6bd4775ef7cb5d133f53e94a9587bb9f46beeadd4e229d23acfc3a89eb77d5ea1c1df6101efe4632c512f70228e23af185d6b444c0750b4a132e50747e8e92642d9414350ea4b0b0025f1ab551694692c4060dc397f14a691d3b507808fc0035b380b9ef9ffbae9a4dec90359e6df8b147465fa26984cb4ff2a21e209f3f0d541e3b06c87c621aafb5f5f8fd4a9d850111297d582410eee428f834e4dba918be300a5b41f3c0546560fa1fa282065506a569c9a4016f7b2fde97419cdc9a0964c799d67d340ff670827d6b7acfc277173371153546d3a8ddfd14ee93923f9a088f09b19506539e20ec762448710d3887d3a84bed18965e712da747c5b7b50face8fd2b84aae710adbe1ea4aa586d769a16eb4409ad97794250b7728dca4014d7c0f733977c71cb78b698d74de7821cb94707c19a30c5f98d1291d183a88317d2b0580154fdfc2958f6382db3c9971f5df22781e66559ae95b790d620f44c488c47df1117756c6fd6c145fdcb67cdae4f519cf2901d81f32245f0315ce7f09f2ea769fefbba95e331c51b39e24f213e399e42576db945900252b7fc332841e15dd5361fa315918d8d4687949723865d5c275537c4aabfac582105b23fa3878225e5c8524c12f253788001d6a350205be3342ca2c4814b039e2f4436288bfe25c9d1605d89747115ac8200950857ce43c19113c14af3900002da519284ab282dae10349150f77352ea4e342273eeb0cd993863dbe052656d8c5ab956b45cfae7b0cc0bb3a7d834190a9ca531f5ca8ce9091257a4cd5f48443e2b4a0bf87447e4f2b9f48652208f52b8bb05e5bf79d6a11a6ee7b7992921ed9c24815e551ea8f48b22697679a1c26cddf9a0db7bb8afeb9f4b32ac6f3a12900cd2fbdfd9434da7ba6d47bd118e53b4c8353d025a3f22f215055baebf60b5eff650258fa870d1855bddb27766026a0592517d7d5d9c7ee4a553d2f9b7945ffa9ab8a6ff9d9323cc00ece134d7c05959fa34b14b509dac38d97c457acbd0ee42462a9e3275d25d847a2e4af52f369beab984184180b610ff46f34eb8719a63553e94b6e570a1708c83dbec65c51b57f5710cfa04149b003ed307d9e8a2c0729331819fc0ff0df82585231ee10fe048e5f009b6241686d4021b31e130fa7b7102162f8b38c4355"], 0x1020) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x245bbd4ac7e3e1ed, 0x0) mbind(&(0x7f0000ff3000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000340)=0x8, 0x3, 0x3) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, 0xffffffffffffffff, 0xf871a000) 03:33:41 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)=@keyring={'key_or_keyring:', r0}) [ 1063.892126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:41 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, r2}, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write(r3, &(0x7f0000000080)="01", 0x41030) fallocate(r3, 0x2, 0x4f0, 0x87ffffe) [ 1063.955326] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:42 executing program 3: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x88440, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x896}, 0x20) 03:33:42 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/class/rtc', 0x765240, 0x141) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xc8, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x7}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2f2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x6467932e}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff5d4f}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15f4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1644}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ef}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x10002000}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4881}, 0x5000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="ea8a6c008000", @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x20000009}) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x14, r2, 0x2, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20008041}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000540)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$nl_netfilter(r4, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0xec, 0x0, 0x7, 0x101, 0x70bd2d, 0x25dfdbfb, {0x7, 0x0, 0x6}, [@generic="3193f3cf54f434fabeff7cf75e57db80665175d30fcbfdaaad5de3bcb54b54423720e66f3aefe36907270552d8571bb75ac2e7d59fe48018798829c22311b4b614be23487b8a6e171e4ff1b54d0c2eef60066c96d13d257f342e85f152dfd53e1932a6afdfd5f7204e5e85b70788817b255c0ccc8e22c2a8843eef5e370b4f641a0048c0de0030db1e92418d0c8f7f456315909ff3866379352439eba7642b8bfcfb6b8101213b47477336779e9dc4480334eaa481c109e2", @typed={0x8, 0x6f, 0x0, 0x0, @u32=0xc6}, @nested={0x18, 0x5e, 0x0, 0x1, [@typed={0xc, 0x64, 0x0, 0x0, @u64=0x5}, @typed={0x8, 0x43, 0x0, 0x0, @fd=r1}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x80}, 0x20000001) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000780)=@mgmt_frame=@reassoc_resp={@wo_ht={{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3}, @device_a, @device_b, @random="02e0eb1b858b", {0x4, 0x2}}, 0x850, 0x44, @default, @void, @void, [{0xdd, 0xff, "012bda335aaf59be4fbc51736cdc6028327b8e2566e1cbfe708cea237df95de1ba7fd625873e3cd54e72fb33c71b5a7ddf8d8d580e1fba45274a4d9982ba538037243a999e7d27e1c6f6661e86c112e19ebff17bac5f451afd9322a970d44cdec4a0716ac271868cdb16d5e3018034d0593197792a6e58b1d47e4d2156fb219242e807a81bc0d9afde77f1912618dd6548bdb2e06aeadb3d0000139f066b5742e82507ef7db749a882b58f64006a2484ec560831ccd015e85d1ca78478e5d4541fad393c0643a914c94cd4d9904f24e1397d8700451ec9dd81fd98d377b059a100"/255}, {0xdd, 0xea, "c2428c1df6c3ace3cb4f0cdf28763c5244662746c8af7cf0febf0779ca653134c8b1c8004871cf36a7d7537aeb9c195c7110ed54cbeb20ed1b07e4ddd4b5087c88fe41d5ff790b6c338f9c4f34c520d6a22707886b57af5e7d3cb961822d6bad26de357eedbbbe8c31c32311c5e16318c6616c761428e60453d68769089cc25e0a6d2b279cf698a761ffdfc24553bed8b6106e78bb4f290ca409538e09bd1a6d91f6f2fac2cb33e7cd1bc36e76c3aef7f3329d85952d7885d2de88e5c69395360323e28b303773995aaf92323459d73ef725af85c2901bf40d5ad4cbc0511011a4d5c74c16e03e22a0b9"}, {0xdd, 0xe0, "a1fd85c0c37d4ad7903581199a340cdda9fdeb713f6249a508022904e2f054e6140ea7204929009b926acd0317ed2b14697c46bb78561e065b34ec6f566e1fdfdb10c63ff11aadc7b6197c9b43c0a71c7030d5e276968277c03a8713f78a180aae44e57835e1946fd38f72daf6766e43c53521027c5a6238c516ff1bcfb0253de2559d28b5049b5fb9b92e181be6a10b22c21d989d86f4b551fd2ac1d10b1fefa3c55f44e2080e760ff1cc6f7c595da2d2e116e7d6cbb39f059cc38e5e5cd3c52ef7b30b0f1ed4c0b932526d8e2ea500616fc2cd74933b4486a824e418f88578"}]}, 0x2ed) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000c40), 0xa300, 0x0) fcntl$dupfd(r0, 0x406, r5) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:33:42 executing program 4: clock_gettime(0x0, &(0x7f0000002440)) 03:33:42 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @empty}, 0x1c) 03:33:42 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'wlan0\x00', &(0x7f00000000c0)=@ethtool_gfeatures}) 03:33:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x1000000, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:33:42 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, r2}, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write(r3, &(0x7f0000000080)="01", 0x41030) fallocate(r3, 0x2, 0x4f0, 0x87ffffe) [ 1064.283182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1064.289929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:42 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000001900), 0x24, 0x0) fchmod(r0, 0x4) 03:33:42 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\x93\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x0) fallocate(r0, 0x0, 0x0, 0x9) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x2, 0x8) 03:33:42 executing program 3: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x88440, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x896}, 0x20) 03:33:42 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x1004, 0x1ff, 0xffff, 0x0, 0xc, "ddab93e1adcbd470"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) io_setup(0x3, &(0x7f0000000140)) openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4}) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) fcntl$getown(r1, 0x9) 03:33:42 executing program 1: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000800)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:33:42 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, r2}, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write(r3, &(0x7f0000000080)="01", 0x41030) fallocate(r3, 0x2, 0x4f0, 0x87ffffe) 03:33:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x2000000, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:33:42 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='y'}, @NL80211_ATTR_IE={0x4}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000040)={0x14, r4, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4001) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:33:42 executing program 3: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x88440, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x896}, 0x20) 03:33:42 executing program 5: r0 = syz_io_uring_setup(0x51dc, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x5000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x64d0, 0x0, 0x0, 0x0, 0x0) 03:33:42 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\x93\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x0) fallocate(r0, 0x0, 0x0, 0x9) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x2, 0x8) [ 1064.580199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1064.590495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1064.652165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:42 executing program 3: sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc2661, 0x4) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000002c0)={0x0, 0x700000000}) 03:33:42 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\x93\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x0) fallocate(r0, 0x0, 0x0, 0x9) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x2, 0x8) [ 1064.704590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:42 executing program 7: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) dup3(r1, r0, 0x0) 03:33:42 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000000)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18, 0x1}, {0x24}]}, @val={0x2d, 0x1a, {0x40, 0x1, 0x4, 0x0, {0x7f, 0x6, 0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, 0x162f8d07afdba20, 0x200, 0x20}}}, 0x44) 03:33:42 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x1004, 0x1ff, 0xffff, 0x0, 0xc, "ddab93e1adcbd470"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) io_setup(0x3, &(0x7f0000000140)) openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4}) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) fcntl$getown(r1, 0x9) 03:33:42 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\x93\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x0) fallocate(r0, 0x0, 0x0, 0x9) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x2, 0x8) 03:33:43 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@ipv4}, {@in=@remote}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}}}, 0xf8}}, 0x0) 03:33:43 executing program 3: sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc2661, 0x4) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000002c0)={0x0, 0x700000000}) 03:33:43 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0xdedd, 0x8a0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xc5c, 0x1, @perf_bp={&(0x7f0000000100), 0x8}, 0x80, 0x3, 0x5, 0x5, 0x2, 0x1d6, 0x0, 0x0, 0x1f, 0x0, 0xf}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x800, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @broadcast}}}], 0x20}, 0x0) 03:33:43 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x1004, 0x1ff, 0xffff, 0x0, 0xc, "ddab93e1adcbd470"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) io_setup(0x3, &(0x7f0000000140)) openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4}) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) fcntl$getown(r1, 0x9) 03:33:43 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, 0x0) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:33:43 executing program 1: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000800)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:33:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x3000000, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:33:43 executing program 5: r0 = syz_io_uring_setup(0x51dc, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x5000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x64d0, 0x0, 0x0, 0x0, 0x0) [ 1065.328746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1065.341838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:43 executing program 7: r0 = msgget$private(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgctl$IPC_RMID(r0, 0x0) [ 1065.387025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1065.402854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1065.439667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:43 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0xdedd, 0x8a0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xc5c, 0x1, @perf_bp={&(0x7f0000000100), 0x8}, 0x80, 0x3, 0x5, 0x5, 0x2, 0x1d6, 0x0, 0x0, 0x1f, 0x0, 0xf}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x800, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @broadcast}}}], 0x20}, 0x0) 03:33:43 executing program 1: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000800)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:33:43 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x1004, 0x1ff, 0xffff, 0x0, 0xc, "ddab93e1adcbd470"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) io_setup(0x3, &(0x7f0000000140)) openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4}) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) fcntl$getown(r1, 0x9) 03:33:43 executing program 5: r0 = syz_io_uring_setup(0x51dc, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x5000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x64d0, 0x0, 0x0, 0x0, 0x0) 03:33:43 executing program 3: sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc2661, 0x4) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000002c0)={0x0, 0x700000000}) 03:33:43 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="08000500f8d905eb85a9af056eb3c6338282000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x2e) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) close(r0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0xfc, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x81}, 0x0) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) clock_settime(0x1, &(0x7f0000000680)={0x0, 0x989680}) 03:33:43 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0xdedd, 0x8a0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xc5c, 0x1, @perf_bp={&(0x7f0000000100), 0x8}, 0x80, 0x3, 0x5, 0x5, 0x2, 0x1d6, 0x0, 0x0, 0x1f, 0x0, 0xf}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x800, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @broadcast}}}], 0x20}, 0x0) [ 1065.680187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:43 executing program 7: syz_emit_ethernet(0x7e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @remote}, @redirect={0x4, 0x0, 0x0, @multicast1, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast1, @local, {[@rr={0x7, 0x13, 0x0, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr, @multicast2]}, @rr={0x7, 0x2b, 0x0, [@dev, @rand_addr, @private, @loopback, @empty, @remote, @empty, @loopback, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}}}, 0x0) 03:33:43 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(r0, 0xffffffffffffffff, 0x0) [ 1065.739072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:43 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0xdedd, 0x8a0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xc5c, 0x1, @perf_bp={&(0x7f0000000100), 0x8}, 0x80, 0x3, 0x5, 0x5, 0x2, 0x1d6, 0x0, 0x0, 0x1f, 0x0, 0xf}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x800, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @broadcast}}}], 0x20}, 0x0) 03:33:43 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x24044001) 03:33:43 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(r0, 0xffffffffffffffff, 0x0) 03:33:43 executing program 1: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000800)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:33:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x4000000, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:33:43 executing program 6: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001480)={0x1168, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x80}, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xffff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x100}, @NL80211_ATTR_VENDOR_DATA={0xda, 0xc5, "f65a6f9a2c293bd46564343f14fc05b4e4d0a21eee711464474cd1d5a60dc384db293f764e869c32bb9314940f216efc0563f92180562ca948b8ca4f2568341e2ba0a92e6e44509057c6d399734dda62a0ad1c8369f35db550def2bb72c4cb267c29070f6b420a50731592182cb97fba05f72b5ec88b5a8df7c4a534ef0a4790d9f3ce4bcd477e061dd131ca3cd1cdbf1057b8ddd1bd95ca9c6d3721ffa767ad224161625c416811b0f740892e842877063b542e2d3fc52bae61a4102909ebb49e27db52fb2165b1b03f5a858698b18813bcf2808c99"}, @NL80211_ATTR_VENDOR_DATA={0x4}, @NL80211_ATTR_VENDOR_DATA={0x38, 0xc5, "e8107b60042269e135ee21f700861496e3c7f53fef6c5fc4862cd7c10bc25ec8601e3d094e13fc3a59ccd289810a589888e7421b"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xffff}, @NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "72a05a5aafab442ebc7f64ce64072744349753f61d053eb0effb606eb33c1c882bfa86a5be09332a311d8cf8289431f60e674a25fba61f5fb48fc75dfac97660e4a060bd9a9c695fc8800e59a9f132e016885a5760c628d8aa7e9e77805fef66dafe70450a4c48324e488bfe5e7656eaeb3f6dc2c3e13ea4de01ecea98fd023e3b433d96c23a222bf42f0be8d969bc3e216d57729a9ba9b19cdfd6afe27f6ef91478ed80c28d3bcb18905006cb0e9e92c9e858c474cfddeeb63552d021d3ee4f7563c402f6af24d40c1bb9b29a4f7537cd2882bff69d0d4999710c066b8d7609927f19416bd02c305acdc3185e8aa540a583129721aeea3e76c3289171890ded79338191eb50a570af5040fa9bc61072e5c37e4c1522700f5538a86cddd04a3294a7ade60f49bebe6af5f38ccc7bc8771622be2cdaae147aba0b105a44f5dcaffc2c387cef3877ec1ec4e6803acc870c2a810d97df9944d10ceac270bc05339bf1c77f9be18f4a514fb1b9f2a6ae9fb59189601556345633e6ec7067505997bb9c9b7ec848497af02df2bede6a2597d68378acd613e56a37b7dd068835bac93311a4a835edf8912b504a9e921070a48eed32742db0665d93a06b83ab96a2a4f5e8e9fd55208f274a5114faf1e93d7087dbc4f605b65b53e8ecbf2ce9032fd56c7211f82e971c5cc84a69cdd428e52332a03d403f18f3a39989364d9c6602e6b920a12847d37d8e2936d74ad055852a0a4d47e91db8bba8dd58bfcba1ffbd2ff2a7d3e4764c9c3606f21d2ee75b4a2f0eb8c17f6ef1d2a7871f8932fddae07802d0e3f448aee406ac02a14e2b23e1deb76bba7e15d485852780fcdc429d4ffcf9ac84dbbd4323c8005071b92677e449673345be9ca01f3f394db01f6c2fc237caaf172e1e1f895e885072e598fc8250a623e7c17a6e67a82e7ff54fb9a8e1857c76e43646727d4532b7c536af79689be0bb6bfb08fc15d13caaefc11ff2ffd67e8d5e787f7af898abdb2b69e121ec8d903556acc0365f33054c3eff92eeeb7baccb195ab83fd8864817f8a70652bf6ef7d9ca8493ca41cdf9a82119af5496df38aa8dbd02cc53bfbb29d93d18aa0494afa179659c16b16b445e88a86ca444d4a06d1249dfcddc90b5f9127266f075f4fd1a2a93da145ae6d078ff239a75d253c28ed202eb3f1e030255e3a190877f211d86e37a16f698237c702b33bfb530ce57ebec4c6a657af53477c1f77709aec1e1bd2bd0f1dfb3331e39f9dd97f6c216de0fe02bcee65fdea92f403dece8f73a4ded6e4409cd3304189361cd298dd8324dd25c63b1b3e654c7f265758a862fedaffe847b15e0b74f521d7935f3b5ac038ca73b07dc98476620ed63e267ce91b56708ed74cfb3d12c7f984b92ba3bb9a8292bb41ef409b05061f70b1c69b886c2ff2577ef6e9eaa103e251e80dcc01cf37f9b8100718c5b6c1e4347b3291ff825cd6a1fbb6e6929e65f26ad85d3bb4ffa7d999ece862c3efcbd59587a91a915cbb0646417ff3b20c57d7425fb7595c6e1670f13592af77023303945d34b809804f4ffce111bdee2b78c38a27f08936d3941bfae2a4e9484c15954bafc8944e03a1b9fd40a04260e584ef34362f63538a069b5a1a21c8d15b9253b67e139e126d0ce9f8f4f1da08de7fd32613e17cd60fa0a30e2b6f2eed3e007bae18df00a6c909d0851713836380dd4c4cfa813da82299933d942be39a9b7a0c3d69fadd7ff1437d166d7a8fcd781b3d10dd0112a055c647f370c945812597df17de38f3d8b60cb11ed2e8d5cb2dfcf5647c4c44a3d0339e35bbe62ebe3dcc7045ccefa445cfcafeb978afc865d98170d0566a629f577b22be29e356702d5c28b908ea7bf49df2fd3455f05e6604448fb58eb697d25c196c9bf1d57d8c268dd751c2b4d3503bebb3193a7236cc569cb5252f427e25fd0af81bdd1de6e9d9ee16576bb290c281ddbba244b41ffffc920e2fc27a1cd1880a82de8b4d7e1b6c3516166a9536b2936bb93497cb67773e631245f02560b35e85ea1a27a8f3ba38f3ce0d4f2c597ef7e80eeabf8ad8a114f5033eea04220d9c47b8a54bcd7b22c6d8495bb46b1c29b64e6c504cb21726cc7f099a16d966feddd2417fd34be07da81b0f40efab909645349d3c340d9c85d2becdebfa771676fd93327749ee273b179d235ccd24af438ec01bd5f719f193a36fa413a4f83a648e8a4eaf2742343ed7e857aef6d3537de5d7f9f9fb1520693816d0d1e4bc96068720be3f13a68b536c13c5318c2a3ef3f24e60eb92dbb01e8008efbf5f8ec6a28825a3d3204347ed8e3ad12067c1320072c3bce3c2c3b0855fdc48eeb49767906a5b67a89aa777ffbbd22795c8ed1b698c8e50d45e8eff8a63338775cdc3e1a4d9145ceec7373279aa41f77f8ab82ef0f29e82db2bd5871f32fc8de5fdd8533d1303d2f18fa8c324c6ba40b2f77e5235bf463509458e2e50a7b60c7f8b27bea62051a87672159372b9203587ada4fbc40bc7db3671bd54beed8b4113226c81a046f842b89b52eaca864e6cd6bafb2ddf70de18499acd51a81853da1dddfaccd1dd120dbff1daa48d1daf9d0e0e72682bb7fba0ac29a70fbc4a14f934b01973b9442ddb6ac340a655f1073ebf1ad8855c13383f8127e971b9505188318dc0de1f2780742cd1c189fdeaf05eacaf03d4866d86df1c82e8b9116f0f0b379aca50997b9581e6d72933ddd1888541d9209bf593678fcd98e90d7c344b97a65c50cf6782f92a42a9cc0b26183a954a2aa1141d908c3d97610df389165f7726b1f8de1c0bfaba6ff912cf60fd5953e9989eaad51aceb627b5af98cfb6c4ea032d144fda304224c046c3a99a95cdcc7714c1da5201d9963041d98cd1d5db6625bd0e684a49f5d202df65778db2ab98904f8beb798855d3024374040fcf897d46eaed08ba172973541715f0187061bf9e88fa14831049725a6218f1710c2739b3e76571360df97b83f80a24b7c75965e8d050bfc8fdd15a1f785fc68904cee32926214f82ff45bf897f4f24894673ae45662d045cdf43666b36c3653d5d8f03f394d9785310bc25f65eb7279109c6be020aee483671759f8d0bf7826bf4a26a69fe7f3713264196a374144c799ff98d13c09b54b1a5e3e4cd1e59da8b2ef7f9f4c8f143ac43346f5deaa8fb81b3f77fdef7f40950efb8de7d23a9982f3d46380881003f1520726740cf2d9f54a1de6aa2f0387dcc688116734f464e0cde1d339a3af676b3766ec86d7774533713dd4af0eddc0f5ae8ccd10dd86674aa8a4091866892b8fe7d6b4762ab1698daca003c74b53d12b8004c22c8e24576a7ce8ce14ab6379044d4b8cfe460058bba9141bee758d3398cfde93fed314cc90243187c884551f0f6c13099f572632a4cc77195ae2453f0b051079f4a56c0e73ced20818c4022fee17eecf36845eb5082dcfa9d1275fd05205ec1685fad6e6371b602fb6e2b8e978c644ce062cdb25d83733351753283cb4a5b65d2be9ce5dd9ccb183b0ad4aeaa8c422a00b69ea847b58b7da498f89d87b1232240e24693ca5a90cf2f1a99489d84f671afb596577769a7c29811392cf5c27ca04ff029dca9d3a03984b703bf9ff0c592d3b04f5a6c563763576e3b4f14073fa406396b7b0d69868b040ce9bbf80b55932cca10a7d771f3ee3a2a250367d3cd33830d0243e64f9fa4136988f507530a350c798c8bd00c659af3f60c9099a22e6ae901cdfcd7518607776bf5b12d7372dfec1f52a8da7bbddba8bc1420cb795ca432ed697662f9c644c8708b2d0e17e9d46ba65046d9679e9ccf0a8654a61f2ae1375571476c6caa16ae7487f7331329ca455059c2263acb1bebdbbedb57856dce6c58b2843b6242665c87a68206ca800aff41fdb16f2400795d9137e8fb89cfa895478a03d5a5449f71397260f0986d5928af997e34c4214ed139f8e18f0efa95feabbd28c37c1c022c968060402c040353b414764639dd2d4d5542587145e4ba6fe21a19d59b5e3158206f8efb673baf01e0d2570cb1510669fbf0e31ce7c434105063a8c714b83bf6bb3a541898562484422aa1a8882e0a571391f6c17fe410b85bcfca98be29a9252eec83441010f6d860761123eb3ed0f85537f51c064043ddb485d75354cc5f62114edd2f48d4a406edf402412d0a02b97dbdade51e541c9d4dfbd6eea7f47fd7754226a98ad7eac5a75afd01fdbe690df757c17430fc59b786ad12d4695337a4212dbfd218c607b3decbecc102d3e81470dba73267c22f554602e4fe4c5482059dc436ca6a66b310eb32ea86a29fd1b1e73687814f69c5a8c61e0ceffac71cacfcc8907de35beaf8cc6e0abc46af7d876f1a5baa9b91e6c1e0a9e2031152082821f3ece4b36ff560fe8a61df6118f2ca50cde7302e898c814884acb19d80801103448e68035963e9b6a7eb127ed7404d2fe8202685489624be2ed47548b1a2b15ac331f79702b7d0f7a62c20d0217107507e008a83c4172033db838aba7632dde2113ff061a97d0dfe6c5d494742f6898714b6a0ec7c57a11921da41e0d11d6c3272c500ef43609619d9dbd35432e865e415ebc8c7f5c0fc9394325e880525c4f3b87534e710d8791a3f779e8234fbe3c851f9292ebd08e52d552ed697479c68afade9bf2c3c2dd5b59cec5c9ce9138c8bf27a45f54bae1882229f5730c93e5649de799abb19bf25f2883447bb16b2e86bd81025dba1b843ab40996d0ead0bf53de121163a968128cfa20916039aafa9500aef76a46bf53cfb02600723f08a3c3cb1ce8fad77b23c2ac6c960d2dc51ca19e4d39d6299581f96ef7b672e80f3d6cd80285c3a989c5a4924751e42660f0803b34477dc4172a9fb117bc77f0189a176ef6967c622c608029ad834ebb0e03eced52e17c495b9cd71a72372018339b1b3eb3d4ef710f0a9dbcaca627ffb28310e394434e50ffbbc55e46289fcfd5817526759fbe9bece2172a4c82d9d68fd8b0ce8d48b753aee9cfee192dc5ad1970d329581420dd2c3e6d92fa65bd0aa011a164d82f81348c97bc18c7b84411cb098dea2abf51de01155738f248d1599c735ae0b42aa9714d135c3156cad9ae2bae4161bba38ebe365970f8811ac40f6b17cc0d52388d869ebc73bb490556a95904d6d86d559ed577ce06fe5890296f5b27172b4430de97310885a37a6b437ff795e82aa52b6f95d82147da1abb2069c0852f1293ab3ee116a7cf43b2796605a9e20fbf097f7e7c1b261345ce0ecd071cbda6f5e2f87f152a41e8caf4c65c56bd1e3835d4d2171288f60755cb9924951c05999d401c2878d35aed8a040032422ac72f43030db47acd0f352720542ab7e04b89552f1edb000ef01fcf62f7293c036df9c3ce94624f238ecf95c3aea1f515b2e21e9366dbe6573ed08b361972cfe06439ceb5e624b73dee3559d5fdfb73982a4aeba7b63eaeedca4e9a5edbc824b6ebaee133039cb6f8dfb753ab3eed296d673461f44e8f5e4c882ec3e6eb8f3ed6f512aaa944fb5063fa15418013d3e7e122c4fd7dccaa58b7fff02ff4cc9dbc54bfc4fec4efe27989913108e7f51caeae7e526a2c03e68a1913d65170eaa6f02813644123f755a7f4a2a1f0d413b211ff3fe3beb674c53ed0ebd63946404dd6aae088c2dedcd0fa39eded546102f322725ebd856faafbac938165fe0b3d8134d389de9c2304c5b13e78ed35dce8279232aa03648b81d2cba46dc04de498444351f7b980ecac8008608e19cc53b0b33840ef5b4ba54adebeebfba842cce4c6d59031f195f283d8ebf1f5"}]}, 0x1168}, 0x1, 0x0, 0x0, 0x4004880}, 0x4000) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0xc, 0x6, 0x0, 0x4, 0x0, 0x81, 0x90b25, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0xffffffff, 0x3}, 0x1c040, 0x401, 0x3, 0x0, 0x4, 0x80000000, 0x8, 0x0, 0x3, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f00000003c0)=@broadcast, &(0x7f0000000380)=@mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x4}, @device_a, @broadcast, @random="266abace5993", {0x4, 0x95c}}, 0x30, @val={0x8c, 0x18, {0x39e, "60c5d6f5013f", @long="8d5ffafda9efa3f001e3c9d673e30e42"}}}, 0x34) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:33:43 executing program 7: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 1065.973214] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1066.026022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:43 executing program 4: fsopen(0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2080, 0x0) r1 = syz_io_uring_setup(0x2c9e, &(0x7f0000000040), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) dup3(r1, r0, 0x0) 03:33:43 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(r0, 0xffffffffffffffff, 0x0) [ 1066.055729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1066.065994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1066.078891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:44 executing program 5: r0 = syz_io_uring_setup(0x51dc, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x5000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x64d0, 0x0, 0x0, 0x0, 0x0) 03:33:44 executing program 3: sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc2661, 0x4) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000002c0)={0x0, 0x700000000}) 03:33:44 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x22, 0x0, 0x0) 03:33:44 executing program 4: openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x1c, r1, 0x3ab, 0x0, 0x0, {{0x32}, {@void, @val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 03:33:44 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(r0, 0xffffffffffffffff, 0x0) 03:33:44 executing program 1: prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0xb) 03:33:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x5000000, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:33:44 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x58, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2000, 0x0, 0x1, 0x0, {0x4, 0x6, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x3}, 0x8, 0x5, 0x8}}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x58}, 0x1, 0x0, 0x0, 0x3ef8abd000275a22}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f00000001c0)=@ctrl_frame=@cts={{}, {0x1}, @broadcast}, 0xa) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="b00000000802110000010806110000000802110000001000000602000000"], 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1066.509532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:44 executing program 1: socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 1066.540019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1066.566353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1066.568746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1066.621416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:45 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid}]}}) 03:33:45 executing program 7: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:33:45 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1) fork() 03:33:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x6000000, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:33:45 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001480)={0x1168, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x80}, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xffff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x100}, @NL80211_ATTR_VENDOR_DATA={0xda, 0xc5, "f65a6f9a2c293bd46564343f14fc05b4e4d0a21eee711464474cd1d5a60dc384db293f764e869c32bb9314940f216efc0563f92180562ca948b8ca4f2568341e2ba0a92e6e44509057c6d399734dda62a0ad1c8369f35db550def2bb72c4cb267c29070f6b420a50731592182cb97fba05f72b5ec88b5a8df7c4a534ef0a4790d9f3ce4bcd477e061dd131ca3cd1cdbf1057b8ddd1bd95ca9c6d3721ffa767ad224161625c416811b0f740892e842877063b542e2d3fc52bae61a4102909ebb49e27db52fb2165b1b03f5a858698b18813bcf2808c99"}, @NL80211_ATTR_VENDOR_DATA={0x4}, @NL80211_ATTR_VENDOR_DATA={0x38, 0xc5, "e8107b60042269e135ee21f700861496e3c7f53fef6c5fc4862cd7c10bc25ec8601e3d094e13fc3a59ccd289810a589888e7421b"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xffff}, @NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "72a05a5aafab442ebc7f64ce64072744349753f61d053eb0effb606eb33c1c882bfa86a5be09332a311d8cf8289431f60e674a25fba61f5fb48fc75dfac97660e4a060bd9a9c695fc8800e59a9f132e016885a5760c628d8aa7e9e77805fef66dafe70450a4c48324e488bfe5e7656eaeb3f6dc2c3e13ea4de01ecea98fd023e3b433d96c23a222bf42f0be8d969bc3e216d57729a9ba9b19cdfd6afe27f6ef91478ed80c28d3bcb18905006cb0e9e92c9e858c474cfddeeb63552d021d3ee4f7563c402f6af24d40c1bb9b29a4f7537cd2882bff69d0d4999710c066b8d7609927f19416bd02c305acdc3185e8aa540a583129721aeea3e76c3289171890ded79338191eb50a570af5040fa9bc61072e5c37e4c1522700f5538a86cddd04a3294a7ade60f49bebe6af5f38ccc7bc8771622be2cdaae147aba0b105a44f5dcaffc2c387cef3877ec1ec4e6803acc870c2a810d97df9944d10ceac270bc05339bf1c77f9be18f4a514fb1b9f2a6ae9fb59189601556345633e6ec7067505997bb9c9b7ec848497af02df2bede6a2597d68378acd613e56a37b7dd068835bac93311a4a835edf8912b504a9e921070a48eed32742db0665d93a06b83ab96a2a4f5e8e9fd55208f274a5114faf1e93d7087dbc4f605b65b53e8ecbf2ce9032fd56c7211f82e971c5cc84a69cdd428e52332a03d403f18f3a39989364d9c6602e6b920a12847d37d8e2936d74ad055852a0a4d47e91db8bba8dd58bfcba1ffbd2ff2a7d3e4764c9c3606f21d2ee75b4a2f0eb8c17f6ef1d2a7871f8932fddae07802d0e3f448aee406ac02a14e2b23e1deb76bba7e15d485852780fcdc429d4ffcf9ac84dbbd4323c8005071b92677e449673345be9ca01f3f394db01f6c2fc237caaf172e1e1f895e885072e598fc8250a623e7c17a6e67a82e7ff54fb9a8e1857c76e43646727d4532b7c536af79689be0bb6bfb08fc15d13caaefc11ff2ffd67e8d5e787f7af898abdb2b69e121ec8d903556acc0365f33054c3eff92eeeb7baccb195ab83fd8864817f8a70652bf6ef7d9ca8493ca41cdf9a82119af5496df38aa8dbd02cc53bfbb29d93d18aa0494afa179659c16b16b445e88a86ca444d4a06d1249dfcddc90b5f9127266f075f4fd1a2a93da145ae6d078ff239a75d253c28ed202eb3f1e030255e3a190877f211d86e37a16f698237c702b33bfb530ce57ebec4c6a657af53477c1f77709aec1e1bd2bd0f1dfb3331e39f9dd97f6c216de0fe02bcee65fdea92f403dece8f73a4ded6e4409cd3304189361cd298dd8324dd25c63b1b3e654c7f265758a862fedaffe847b15e0b74f521d7935f3b5ac038ca73b07dc98476620ed63e267ce91b56708ed74cfb3d12c7f984b92ba3bb9a8292bb41ef409b05061f70b1c69b886c2ff2577ef6e9eaa103e251e80dcc01cf37f9b8100718c5b6c1e4347b3291ff825cd6a1fbb6e6929e65f26ad85d3bb4ffa7d999ece862c3efcbd59587a91a915cbb0646417ff3b20c57d7425fb7595c6e1670f13592af77023303945d34b809804f4ffce111bdee2b78c38a27f08936d3941bfae2a4e9484c15954bafc8944e03a1b9fd40a04260e584ef34362f63538a069b5a1a21c8d15b9253b67e139e126d0ce9f8f4f1da08de7fd32613e17cd60fa0a30e2b6f2eed3e007bae18df00a6c909d0851713836380dd4c4cfa813da82299933d942be39a9b7a0c3d69fadd7ff1437d166d7a8fcd781b3d10dd0112a055c647f370c945812597df17de38f3d8b60cb11ed2e8d5cb2dfcf5647c4c44a3d0339e35bbe62ebe3dcc7045ccefa445cfcafeb978afc865d98170d0566a629f577b22be29e356702d5c28b908ea7bf49df2fd3455f05e6604448fb58eb697d25c196c9bf1d57d8c268dd751c2b4d3503bebb3193a7236cc569cb5252f427e25fd0af81bdd1de6e9d9ee16576bb290c281ddbba244b41ffffc920e2fc27a1cd1880a82de8b4d7e1b6c3516166a9536b2936bb93497cb67773e631245f02560b35e85ea1a27a8f3ba38f3ce0d4f2c597ef7e80eeabf8ad8a114f5033eea04220d9c47b8a54bcd7b22c6d8495bb46b1c29b64e6c504cb21726cc7f099a16d966feddd2417fd34be07da81b0f40efab909645349d3c340d9c85d2becdebfa771676fd93327749ee273b179d235ccd24af438ec01bd5f719f193a36fa413a4f83a648e8a4eaf2742343ed7e857aef6d3537de5d7f9f9fb1520693816d0d1e4bc96068720be3f13a68b536c13c5318c2a3ef3f24e60eb92dbb01e8008efbf5f8ec6a28825a3d3204347ed8e3ad12067c1320072c3bce3c2c3b0855fdc48eeb49767906a5b67a89aa777ffbbd22795c8ed1b698c8e50d45e8eff8a63338775cdc3e1a4d9145ceec7373279aa41f77f8ab82ef0f29e82db2bd5871f32fc8de5fdd8533d1303d2f18fa8c324c6ba40b2f77e5235bf463509458e2e50a7b60c7f8b27bea62051a87672159372b9203587ada4fbc40bc7db3671bd54beed8b4113226c81a046f842b89b52eaca864e6cd6bafb2ddf70de18499acd51a81853da1dddfaccd1dd120dbff1daa48d1daf9d0e0e72682bb7fba0ac29a70fbc4a14f934b01973b9442ddb6ac340a655f1073ebf1ad8855c13383f8127e971b9505188318dc0de1f2780742cd1c189fdeaf05eacaf03d4866d86df1c82e8b9116f0f0b379aca50997b9581e6d72933ddd1888541d9209bf593678fcd98e90d7c344b97a65c50cf6782f92a42a9cc0b26183a954a2aa1141d908c3d97610df389165f7726b1f8de1c0bfaba6ff912cf60fd5953e9989eaad51aceb627b5af98cfb6c4ea032d144fda304224c046c3a99a95cdcc7714c1da5201d9963041d98cd1d5db6625bd0e684a49f5d202df65778db2ab98904f8beb798855d3024374040fcf897d46eaed08ba172973541715f0187061bf9e88fa14831049725a6218f1710c2739b3e76571360df97b83f80a24b7c75965e8d050bfc8fdd15a1f785fc68904cee32926214f82ff45bf897f4f24894673ae45662d045cdf43666b36c3653d5d8f03f394d9785310bc25f65eb7279109c6be020aee483671759f8d0bf7826bf4a26a69fe7f3713264196a374144c799ff98d13c09b54b1a5e3e4cd1e59da8b2ef7f9f4c8f143ac43346f5deaa8fb81b3f77fdef7f40950efb8de7d23a9982f3d46380881003f1520726740cf2d9f54a1de6aa2f0387dcc688116734f464e0cde1d339a3af676b3766ec86d7774533713dd4af0eddc0f5ae8ccd10dd86674aa8a4091866892b8fe7d6b4762ab1698daca003c74b53d12b8004c22c8e24576a7ce8ce14ab6379044d4b8cfe460058bba9141bee758d3398cfde93fed314cc90243187c884551f0f6c13099f572632a4cc77195ae2453f0b051079f4a56c0e73ced20818c4022fee17eecf36845eb5082dcfa9d1275fd05205ec1685fad6e6371b602fb6e2b8e978c644ce062cdb25d83733351753283cb4a5b65d2be9ce5dd9ccb183b0ad4aeaa8c422a00b69ea847b58b7da498f89d87b1232240e24693ca5a90cf2f1a99489d84f671afb596577769a7c29811392cf5c27ca04ff029dca9d3a03984b703bf9ff0c592d3b04f5a6c563763576e3b4f14073fa406396b7b0d69868b040ce9bbf80b55932cca10a7d771f3ee3a2a250367d3cd33830d0243e64f9fa4136988f507530a350c798c8bd00c659af3f60c9099a22e6ae901cdfcd7518607776bf5b12d7372dfec1f52a8da7bbddba8bc1420cb795ca432ed697662f9c644c8708b2d0e17e9d46ba65046d9679e9ccf0a8654a61f2ae1375571476c6caa16ae7487f7331329ca455059c2263acb1bebdbbedb57856dce6c58b2843b6242665c87a68206ca800aff41fdb16f2400795d9137e8fb89cfa895478a03d5a5449f71397260f0986d5928af997e34c4214ed139f8e18f0efa95feabbd28c37c1c022c968060402c040353b414764639dd2d4d5542587145e4ba6fe21a19d59b5e3158206f8efb673baf01e0d2570cb1510669fbf0e31ce7c434105063a8c714b83bf6bb3a541898562484422aa1a8882e0a571391f6c17fe410b85bcfca98be29a9252eec83441010f6d860761123eb3ed0f85537f51c064043ddb485d75354cc5f62114edd2f48d4a406edf402412d0a02b97dbdade51e541c9d4dfbd6eea7f47fd7754226a98ad7eac5a75afd01fdbe690df757c17430fc59b786ad12d4695337a4212dbfd218c607b3decbecc102d3e81470dba73267c22f554602e4fe4c5482059dc436ca6a66b310eb32ea86a29fd1b1e73687814f69c5a8c61e0ceffac71cacfcc8907de35beaf8cc6e0abc46af7d876f1a5baa9b91e6c1e0a9e2031152082821f3ece4b36ff560fe8a61df6118f2ca50cde7302e898c814884acb19d80801103448e68035963e9b6a7eb127ed7404d2fe8202685489624be2ed47548b1a2b15ac331f79702b7d0f7a62c20d0217107507e008a83c4172033db838aba7632dde2113ff061a97d0dfe6c5d494742f6898714b6a0ec7c57a11921da41e0d11d6c3272c500ef43609619d9dbd35432e865e415ebc8c7f5c0fc9394325e880525c4f3b87534e710d8791a3f779e8234fbe3c851f9292ebd08e52d552ed697479c68afade9bf2c3c2dd5b59cec5c9ce9138c8bf27a45f54bae1882229f5730c93e5649de799abb19bf25f2883447bb16b2e86bd81025dba1b843ab40996d0ead0bf53de121163a968128cfa20916039aafa9500aef76a46bf53cfb02600723f08a3c3cb1ce8fad77b23c2ac6c960d2dc51ca19e4d39d6299581f96ef7b672e80f3d6cd80285c3a989c5a4924751e42660f0803b34477dc4172a9fb117bc77f0189a176ef6967c622c608029ad834ebb0e03eced52e17c495b9cd71a72372018339b1b3eb3d4ef710f0a9dbcaca627ffb28310e394434e50ffbbc55e46289fcfd5817526759fbe9bece2172a4c82d9d68fd8b0ce8d48b753aee9cfee192dc5ad1970d329581420dd2c3e6d92fa65bd0aa011a164d82f81348c97bc18c7b84411cb098dea2abf51de01155738f248d1599c735ae0b42aa9714d135c3156cad9ae2bae4161bba38ebe365970f8811ac40f6b17cc0d52388d869ebc73bb490556a95904d6d86d559ed577ce06fe5890296f5b27172b4430de97310885a37a6b437ff795e82aa52b6f95d82147da1abb2069c0852f1293ab3ee116a7cf43b2796605a9e20fbf097f7e7c1b261345ce0ecd071cbda6f5e2f87f152a41e8caf4c65c56bd1e3835d4d2171288f60755cb9924951c05999d401c2878d35aed8a040032422ac72f43030db47acd0f352720542ab7e04b89552f1edb000ef01fcf62f7293c036df9c3ce94624f238ecf95c3aea1f515b2e21e9366dbe6573ed08b361972cfe06439ceb5e624b73dee3559d5fdfb73982a4aeba7b63eaeedca4e9a5edbc824b6ebaee133039cb6f8dfb753ab3eed296d673461f44e8f5e4c882ec3e6eb8f3ed6f512aaa944fb5063fa15418013d3e7e122c4fd7dccaa58b7fff02ff4cc9dbc54bfc4fec4efe27989913108e7f51caeae7e526a2c03e68a1913d65170eaa6f02813644123f755a7f4a2a1f0d413b211ff3fe3beb674c53ed0ebd63946404dd6aae088c2dedcd0fa39eded546102f322725ebd856faafbac938165fe0b3d8134d389de9c2304c5b13e78ed35dce8279232aa03648b81d2cba46dc04de498444351f7b980ecac8008608e19cc53b0b33840ef5b4ba54adebeebfba842cce4c6d59031f195f283d8ebf1f5"}]}, 0x1168}, 0x1, 0x0, 0x0, 0x4004880}, 0x4000) sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x44, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40840}, 0x80) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:33:45 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r0, 0x0, 0x3, &(0x7f0000000040)={0x10000, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @private}}}, 0x108) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10}}], 0x10}, 0x0) 03:33:45 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x0) fcntl$setlease(r0, 0x400, 0x0) rename(&(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)='./file0\x00') 03:33:45 executing program 3: waitid(0x0, 0x0, 0x0, 0x0, 0x0) [ 1067.415442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1067.422276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1067.476826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:45 executing program 4: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x20082000) keyctl$join(0x1, &(0x7f0000000300)={'syz', 0x0}) keyctl$join(0x12, 0x0) 03:33:45 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) io_uring_setup(0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff5000/0xa000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000005280)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 03:33:45 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x0) fcntl$setlease(r0, 0x400, 0x0) rename(&(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)='./file0\x00') 03:33:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000003c0)={0x0, 0x3ff, 0x5}) 03:33:45 executing program 7: keyctl$negate(0xd, 0x0, 0x83, 0xfffffffffffffffa) keyctl$invalidate(0x15, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, r0, 0xfffffffffffffffa) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x34, r1, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}]}]}, 0x34}}, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000000280)={0x0, "bdfaf252afb740d91746ec198b96b4fdc814229a8d9f7ae5a76188edc3ad915ead23308e295ff60b4d5221fee13803098c007293783b5815124efb79c51dd23f", 0x34}, 0x48, r0) keyctl$update(0x2, r2, &(0x7f0000000300)="cc", 0x1) 03:33:45 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0xc00, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)={0xe0, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x84}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3fb9}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x10001}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x74bf}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1f}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20000000}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20008010}, 0x8800) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440), &(0x7f0000000000)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="10000000080211000001080202110004002000010000f2f9600dfa8770044900000108"], 0x28) 03:33:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001080), 0xffffffffffffffff) 03:33:46 executing program 4: msync(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5) 03:33:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x7000000, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:33:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x0) fcntl$setlease(r0, 0x400, 0x0) rename(&(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)='./file0\x00') 03:33:46 executing program 1: r0 = fork() kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0xff}) ptrace$setopts(0x4206, r0, 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000000)='wchan\x00') r1 = fork() ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000080)=0x5) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ptrace(0x4207, r0) 03:33:46 executing program 7: keyctl$negate(0xd, 0x0, 0x83, 0xfffffffffffffffa) keyctl$invalidate(0x15, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, r0, 0xfffffffffffffffa) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x34, r1, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}]}]}, 0x34}}, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000000280)={0x0, "bdfaf252afb740d91746ec198b96b4fdc814229a8d9f7ae5a76188edc3ad915ead23308e295ff60b4d5221fee13803098c007293783b5815124efb79c51dd23f", 0x34}, 0x48, r0) keyctl$update(0x2, r2, &(0x7f0000000300)="cc", 0x1) 03:33:46 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x480000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40084c0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = fsmount(0xffffffffffffffff, 0x0, 0x2) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000140)={0x20000009}) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000040)={0x30, r1, 0x20, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0xc, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x2}, 0x40011) 03:33:46 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setpgid(0x0, 0x0) 03:33:46 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) io_uring_setup(0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff5000/0xa000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000005280)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) [ 1068.135381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1068.146541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:46 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() tkill(r0, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x20, 0x0, 0x0, 0x0, 0xa0, 0xfc00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0) close(r2) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x0, 0x4, 0x9a, 0x72, 0x0, 0x200, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x57a, 0x1, @perf_bp={&(0x7f0000000300), 0xc}, 0x4, 0x800, 0x1, 0x0, 0x6, 0x1ff, 0x101, 0x0, 0x5, 0x0, 0x10001}, 0x0, 0xd, r1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) sendmsg$NL80211_CMD_SET_PMKSA(r2, 0x0, 0x4000) syz_io_uring_setup(0x7668, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0x0, 0x371}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000480)) openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/cpuinfo\x00', 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000000)) [ 1068.201243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1068.209520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1068.253799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:46 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) io_uring_setup(0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff5000/0xa000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000005280)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 03:33:46 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setpgid(0x0, 0x0) 03:33:46 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB]) 03:33:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x0) fcntl$setlease(r0, 0x400, 0x0) rename(&(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)='./file0\x00') 03:33:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x8000000, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:33:46 executing program 7: keyctl$negate(0xd, 0x0, 0x83, 0xfffffffffffffffa) keyctl$invalidate(0x15, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, r0, 0xfffffffffffffffa) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x34, r1, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}]}]}, 0x34}}, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000000280)={0x0, "bdfaf252afb740d91746ec198b96b4fdc814229a8d9f7ae5a76188edc3ad915ead23308e295ff60b4d5221fee13803098c007293783b5815124efb79c51dd23f", 0x34}, 0x48, r0) keyctl$update(0x2, r2, &(0x7f0000000300)="cc", 0x1) 03:33:46 executing program 1: perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) 03:33:46 executing program 4: perf_event_open$cgroup(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1068.605281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:46 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setpgid(0x0, 0x0) [ 1068.659972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1068.714755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:47 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) io_uring_setup(0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff5000/0xa000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000005280)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 03:33:47 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@mss, @window={0x3, 0x101}], 0x366) 03:33:47 executing program 7: keyctl$negate(0xd, 0x0, 0x83, 0xfffffffffffffffa) keyctl$invalidate(0x15, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, r0, 0xfffffffffffffffa) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x34, r1, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}]}]}, 0x34}}, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000000280)={0x0, "bdfaf252afb740d91746ec198b96b4fdc814229a8d9f7ae5a76188edc3ad915ead23308e295ff60b4d5221fee13803098c007293783b5815124efb79c51dd23f", 0x34}, 0x48, r0) keyctl$update(0x2, r2, &(0x7f0000000300)="cc", 0x1) 03:33:47 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setpgid(0x0, 0x0) 03:33:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) 03:33:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x9000000, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:33:47 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='stat\x00') pread64(r0, &(0x7f0000000080)=""/107, 0x6b, 0x0) 03:33:47 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x14c, 0x0, 0xd02, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0xe8, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x10000}, @NL802154_DEVKEY_ATTR_ID={0xc4, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffffe266dab7}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x28, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}]}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x14c}}, 0x2004000) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000700), 0x62c01, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x890e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x400) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000c80)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000880)={0x3a4, r1, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x7f}}}}, [@NL80211_ATTR_TID_CONFIG={0x1e0, 0x11d, 0x0, 0x1, [{0x1dc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3e}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c0, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xdc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1d, 0x2, [{0x5, 0x5}, {0x1, 0x9}, {0x5, 0x8}, {0x7, 0x9}, {0x0, 0x8}, {0x0, 0x7}, {0x6, 0x1}, {0x1, 0x4}, {0x7, 0x6}, {0x2, 0x2}, {0x4, 0x7}, {0x0, 0x5}, {0x0, 0x5}, {0x0, 0x5}, {0x3, 0x8}, {0x0, 0x3}, {0x2, 0xa}, {0x5, 0x5}, {0x3, 0x3}, {0x4, 0x5}, {0x0, 0xa}, {0x2, 0x1}, {0x2, 0x8}, {0x0, 0x3}, {}]}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x2, 0x9}, {0x7, 0x8}, {0x6, 0x7}, {0x5, 0x3}, {0x0, 0x1}, {0x4}, {0x0, 0x2}, {0x7}, {0x4, 0x6}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x2}, {0x1, 0x2}, {0x5, 0x6}, {0x5, 0x4}, {0x2, 0x7}, {0x3, 0x1}, {0x7, 0x6}, {0x7, 0x5}, {0x5, 0x6}, {0x4, 0x1}, {0x5, 0x9}, {0x6}, {0x0, 0x3}, {0x7, 0xd}, {0x1, 0xa}, {0x1, 0x5}, {0x2, 0x1}, {0x3, 0x6}, {0x0, 0x2}, {0x0, 0x4}, {0x1, 0x3}, {0x1, 0x3}, {0x0, 0x5}, {0x7, 0x9}, {0x7, 0x15}, {0x3, 0x5}, {0x5, 0x4}, {0x6, 0x5}, {0x5, 0x6}, {0x4, 0xa}, {0x7, 0x3}, {}, {0x4, 0x8}, {0x3, 0x6}, {0x7, 0x6}, {0x4, 0x7}, {0x0, 0x4}, {0x6, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x400, 0x3, 0x1, 0x1ff, 0x1, 0x400, 0xa17]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x2, 0x60, 0x1, 0x60, 0x48, 0x24, 0xc, 0x1b, 0x6, 0x18, 0xb, 0x3, 0x18, 0x5, 0x24, 0x24, 0xb, 0x6c, 0x4, 0x42, 0x6, 0x12, 0x5, 0x6c, 0x2, 0x9, 0x6c, 0x16, 0x1, 0x2e, 0x0]}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x0, 0x6}, {0x7, 0x9}, {0x3, 0x4}]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x24, 0x1b, 0x1b, 0x3, 0x5, 0x30, 0x6c, 0x18, 0x3, 0x1, 0x12, 0x24, 0x30, 0xb, 0x0, 0x2, 0x1, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x8000, 0x1, 0x278e, 0x401, 0x9, 0x1]}}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x1, 0x7}, {0x2, 0x3}, {0x4, 0x5}, {0x1, 0x4}, {0x1, 0xa}, {0x2, 0x5}, {0x7, 0xa}, {0x4, 0x8}, {0x5, 0x3}, {0x1, 0x6}, {0x4, 0x4}, {0x4, 0x1}, {0x1, 0x8}, {0x1, 0xa}]}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x21e3, 0x5, 0x3, 0x0, 0x20, 0xffff, 0x3, 0x8b]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x16, 0x2, 0xc, 0x12, 0x2, 0x18, 0xf, 0x60, 0xc, 0x24, 0x30, 0x36]}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x7, 0xa}, {0x2, 0x3}, {0x1, 0x3}, {0x7, 0x2}, {0x2, 0x4}, {0x7, 0x5}, {0x0, 0xa}, {0x6, 0x4}, {0x7, 0x9}, {0x6, 0x9}, {0x0, 0x3}, {0x5, 0x5}, {0x0, 0x7}]}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x1}, {0x4, 0x5}, {0x0, 0x6}]}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x31, 0x2, [{0x1, 0x9}, {0x0, 0x3}, {0x2, 0x9}, {0x0, 0x2}, {0x2, 0x2}, {0x1, 0x9}, {0x6, 0x3}, {0x4, 0x5}, {0x7, 0x4}, {0x5, 0x5}, {0x3, 0xa}, {0x0, 0x1e}, {0x1, 0x4}, {0x3, 0x4}, {0x2, 0x9}, {0x5, 0x1}, {0x1, 0x6}, {0x7, 0x5}, {0x3, 0x7}, {0x2}, {0x4, 0x8}, {0x1}, {0x0, 0x8}, {0x1, 0x6}, {0x0, 0xa}, {0x3, 0xa}, {0x6, 0x3}, {0x1, 0x3}, {0x2, 0x2}, {0x4, 0x6}, {0x5, 0x3}, {0x7, 0x6}, {0x5, 0x4}, {0x5, 0x1}, {0x3}, {0x3, 0x9}, {0x1, 0x8}, {0x5, 0x1}, {0x7, 0x2}, {0x2, 0x3}, {0x1, 0x4}, {0x5, 0x8}, {0x0, 0x1}, {0x6, 0x2}, {0x6, 0x2}]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x1, 0x1}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x9, 0x48, 0x48, 0x18, 0xb, 0x36, 0x6, 0x9, 0x1, 0x1b, 0x48, 0x3, 0x60, 0x6c, 0x4, 0x12, 0x5, 0x2, 0x6c, 0x6, 0x36, 0x60, 0xb, 0x3, 0x1, 0x6, 0x6, 0x1, 0x9, 0x6, 0x6c]}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xfff0, 0x458, 0x44e4, 0xffc1, 0xfff, 0x0, 0x6]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x5, 0xb, 0x48, 0x2, 0x16, 0x30, 0x3, 0xc, 0x48, 0x60, 0x6, 0x30, 0x18, 0x3, 0xc, 0x2d, 0xc, 0x12, 0x12, 0x5, 0x1b, 0x4, 0x2, 0x0, 0x2, 0x9, 0x6]}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x1a4, 0x11d, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xec, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x18, 0x30, 0x5, 0x41, 0x18, 0x1b, 0xc]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x5, 0x1b, 0x0, 0x9, 0x36, 0xc, 0x6, 0x48, 0x6, 0x6, 0x6, 0x6, 0x6c, 0x6, 0x2, 0x18, 0x869a2e4ab0fa1654, 0x9, 0x60, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f, 0x4, 0x3, 0x20, 0x30, 0x9, 0x5, 0xa7]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x39, 0x2, [{0x5, 0x2}, {0x1, 0x8}, {0x2, 0x7}, {0x2, 0x9}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x2}, {0x2, 0x2}, {0x4}, {0x1, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x7}, {0x5, 0x7}, {0x4, 0x4}, {0x7, 0xa}, {0x3}, {0x0, 0x3}, {0x3, 0x8}, {0x1, 0x9}, {0x0, 0x2}, {0x4, 0x9}, {0x0, 0x4}, {0x2, 0x4}, {0x0, 0xa}, {0x3, 0xa}, {0x4}, {0x4, 0x6}, {0x7, 0x7}, {0x2, 0x2}, {0x2, 0x9}, {0x5, 0x7}, {0x2, 0x2}, {0x5, 0x6}, {0x6, 0x3}, {0x2, 0x3}, {0x1, 0x6}, {0x0, 0x3}, {0x1, 0x2}, {}, {0x3, 0x6}, {0x4, 0x1}, {0x1, 0x5}, {0x6, 0x6}, {0x5, 0x9}, {0x7, 0xa}, {0x5, 0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x6}, {0x4, 0x3}, {0x0, 0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x2, 0x8}, {0x2, 0x2}, {0x1, 0x4}, {0x1}, {0x6, 0x6}, {0x1, 0x4}, {0x1, 0x6}, {0x4, 0x1}, {0x6, 0x4}, {0x6, 0x5}, {0x6, 0x4}, {0x3, 0xa}, {0x4, 0x8}, {0x6, 0xa}, {0x6, 0x3}, {0x7, 0xa}, {0x0, 0x8}, {0x0, 0x8}, {0x3, 0x5}, {0x3, 0x8}, {0x0, 0x1}, {0x4, 0xa}, {0x2, 0x9}, {0x6, 0x4}, {0x3, 0xa}, {0x0, 0xa}, {0x5, 0x6}, {0x6, 0x4}, {0x5, 0x8}, {0x0, 0x1}, {0x2, 0x6}, {0x1, 0x1}, {0x5, 0x6}, {0x6, 0x5}, {0x1, 0x6}, {0x3, 0x5}, {0x4, 0x9}, {0x0, 0x5}, {0x2, 0x2}, {0x7, 0x2}, {0x2, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3ff, 0x7f, 0x3, 0x7, 0x8001, 0x7, 0x6]}}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xbd, 0x800, 0x800, 0xfffd, 0x2000, 0x5, 0x7f, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8f}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9b}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x88}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x27}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4f}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}]}, 0x3a4}, 0x1, 0x0, 0x0, 0x20004040}, 0x800) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="100821b876460f265300000008021100000108021100000008991100000020000100000001000108"], 0x28) [ 1069.186271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:47 executing program 1: openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsu(0x0, 0x43, 0x2000) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x8, 0x40, 0xa7, 0x0, 0xb573, 0x40, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x10000, 0x9000}, 0x200, 0x10000, 0x400, 0x6, 0x7, 0x2, 0x4, 0x0, 0x1, 0x0, 0x1000000000000}, 0x0, 0x7, r0, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000080)="01", 0x292e9) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) [ 1069.254786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1069.314696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1069.368080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:47 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000000002f2f66696c6530003c87c4db0397cfe736466e55a182c25aea93f0d64c07b496afcf907182605685071403f5a7bc2a012621a76dda086c0c2aee20fdec314d6b9ab79fb0f034d70ba2a37ca3447de6b615345880ccd491c8d2005273f802870fe44fddac1000a7654304e5ba229af5d7287d444486534eee3b3245d03d6b5a799320"]) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x7fffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff85d}, 0x0, 0x80000f, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x7, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x9, 0x0, &(0x7f0000000040)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$netlink(r2, 0x10e, 0x9, 0x0, &(0x7f0000000000)) eventfd2(0xae, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r4, 0x4b35, 0x3d3) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r5, &(0x7f0000000080)="01", 0x292e9) 03:33:47 executing program 7: syz_mount_image$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={[{@name={'name', 0x3d, '.'}}, {}, {@name={'name', 0x3d, 'system.posix_acl_default\x00'}}]}) 03:33:47 executing program 0: socket(0x29, 0x0, 0x0) 03:33:47 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x20, 0x0, 0x5, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='y'}, @NL80211_ATTR_IE={0x4}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="040027bd70000b0e00000500000008000300", @ANYRES32=r5, @ANYBLOB="c8a3366e2e6c78ae5413f066148336d98b06dc1e8164706476fb71078ef54d73f1ccd8b62f652f2dc291a872ab1f3a295925a4b607271070826e6ff2d76dfb420517"], 0x1c}, 0x1, 0x0, 0x0, 0x40014}, 0x800) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x18, r4, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PBSS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40c0}, 0x4008040) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x7c, r6, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x3f, 0x3b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20040010) 03:33:47 executing program 5: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x120}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="00010000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="e200330080800000080211000001080211"], 0x100}}, 0x0) 03:33:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0xa0202, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3}) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000600), 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xa}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000300)='./file2\x00', 0x9001) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendfile(r1, r0, 0x0, 0xfffffdef) 03:33:47 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000001580)='projid_map\x00') write$P9_RWRITE(r0, 0x0, 0x0) 03:33:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xc000000, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1069.798868] cgroup: name respecified 03:33:47 executing program 1: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000040)={0x24, @long}, 0x11) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000005c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f00000004c0), 0x4000, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000100)='batadv0\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000540)={0x0, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3}, @l2={0x1f, 0x4, @any, 0xbee, 0x1}, @qipcrtr={0x2a, 0x4, 0xfffffffe}, 0x7, 0x0, 0x0, 0x0, 0xff, &(0x7f0000000080)='ip6erspan0\x00', 0x9, 0x1ff, 0xfffa}) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000480)='./file0\x00', r1) [ 1069.843624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:47 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r0, 0x10e, 0x5, 0x0, &(0x7f0000001080)) [ 1069.899489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1069.917298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:47 executing program 5: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x120}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="00010000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="e200330080800000080211000001080211"], 0x100}}, 0x0) 03:33:48 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20041) 03:33:48 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000000002f2f66696c6530003c87c4db0397cfe736466e55a182c25aea93f0d64c07b496afcf907182605685071403f5a7bc2a012621a76dda086c0c2aee20fdec314d6b9ab79fb0f034d70ba2a37ca3447de6b615345880ccd491c8d2005273f802870fe44fddac1000a7654304e5ba229af5d7287d444486534eee3b3245d03d6b5a799320"]) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x7fffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff85d}, 0x0, 0x80000f, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x7, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x9, 0x0, &(0x7f0000000040)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$netlink(r2, 0x10e, 0x9, 0x0, &(0x7f0000000000)) eventfd2(0xae, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r4, 0x4b35, 0x3d3) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r5, &(0x7f0000000080)="01", 0x292e9) 03:33:48 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000000002f2f66696c6530003c87c4db0397cfe736466e55a182c25aea93f0d64c07b496afcf907182605685071403f5a7bc2a012621a76dda086c0c2aee20fdec314d6b9ab79fb0f034d70ba2a37ca3447de6b615345880ccd491c8d2005273f802870fe44fddac1000a7654304e5ba229af5d7287d444486534eee3b3245d03d6b5a799320"]) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x7fffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff85d}, 0x0, 0x80000f, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x7, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x9, 0x0, &(0x7f0000000040)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$netlink(r2, 0x10e, 0x9, 0x0, &(0x7f0000000000)) eventfd2(0xae, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r4, 0x4b35, 0x3d3) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r5, &(0x7f0000000080)="01", 0x292e9) 03:33:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xd000000, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:33:48 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x40, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000440)={0x0, 0x0, 0x4, 0x5, 0x0, r0, 0x0}]) sync() 03:33:48 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r5, 0x29, 0x1c, &(0x7f0000000000)={@private2, r7}, 0x14) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f00000006c0)={0x184, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x800}, 0x84) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000080211000001080211000000080211060000002000010017000100012882848b960c121824"], 0x28) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) [ 1070.292428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:48 executing program 5: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x120}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="00010000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="e200330080800000080211000001080211"], 0x100}}, 0x0) [ 1070.350181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.522973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:48 executing program 7: pipe2(&(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="1f"]}) 03:33:48 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000000002f2f66696c6530003c87c4db0397cfe736466e55a182c25aea93f0d64c07b496afcf907182605685071403f5a7bc2a012621a76dda086c0c2aee20fdec314d6b9ab79fb0f034d70ba2a37ca3447de6b615345880ccd491c8d2005273f802870fe44fddac1000a7654304e5ba229af5d7287d444486534eee3b3245d03d6b5a799320"]) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x7fffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff85d}, 0x0, 0x80000f, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x7, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x9, 0x0, &(0x7f0000000040)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$netlink(r2, 0x10e, 0x9, 0x0, &(0x7f0000000000)) eventfd2(0xae, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r4, 0x4b35, 0x3d3) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r5, &(0x7f0000000080)="01", 0x292e9) 03:33:48 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000000002f2f66696c6530003c87c4db0397cfe736466e55a182c25aea93f0d64c07b496afcf907182605685071403f5a7bc2a012621a76dda086c0c2aee20fdec314d6b9ab79fb0f034d70ba2a37ca3447de6b615345880ccd491c8d2005273f802870fe44fddac1000a7654304e5ba229af5d7287d444486534eee3b3245d03d6b5a799320"]) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x7fffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff85d}, 0x0, 0x80000f, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x7, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x9, 0x0, &(0x7f0000000040)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$netlink(r2, 0x10e, 0x9, 0x0, &(0x7f0000000000)) eventfd2(0xae, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r4, 0x4b35, 0x3d3) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r5, &(0x7f0000000080)="01", 0x292e9) 03:33:48 executing program 5: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x120}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="00010000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="e200330080800000080211000001080211"], 0x100}}, 0x0) 03:33:48 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x8001, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000800)={{}, 0x0, 0x1c, @inherit={0x78, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000600000000000000013e00000000000015da4e49000000003e00000000000000010000000000000000aa000000000000000500000000000000010001000000000011022c3600000000030000000000000007000000000000000900000000000000"]}, @devid}) syz_open_dev$rtc(&(0x7f00000007c0), 0x0, 0x0) 03:33:49 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="087c48e34edb4b5a"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) clock_gettime(0x0, &(0x7f0000000000)) nanosleep(&(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000040)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000380)=ANY=[@ANYBLOB="1000000008021100000108cc02110000000889dcb2fd1c27daa97ae1ed93a8c1ce6d8d1287dfb7dc5b"], 0x28) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r3) 03:33:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xf000000, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:33:49 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x40, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000440)={0x0, 0x0, 0x4, 0x5, 0x0, r0, 0x0}]) sync() [ 1071.110725] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1071.146015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:49 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x40, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000440)={0x0, 0x0, 0x4, 0x5, 0x0, r0, 0x0}]) sync() [ 1071.195272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:49 executing program 7: r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000140)=""/202, 0xca) 03:33:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000100)={0x24, 0x28, 0x101, 0x0, 0x0, "", [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0x4}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x24}], 0x1}, 0x0) 03:33:49 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000000002f2f66696c6530003c87c4db0397cfe736466e55a182c25aea93f0d64c07b496afcf907182605685071403f5a7bc2a012621a76dda086c0c2aee20fdec314d6b9ab79fb0f034d70ba2a37ca3447de6b615345880ccd491c8d2005273f802870fe44fddac1000a7654304e5ba229af5d7287d444486534eee3b3245d03d6b5a799320"]) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x7fffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff85d}, 0x0, 0x80000f, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x7, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x9, 0x0, &(0x7f0000000040)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$netlink(r2, 0x10e, 0x9, 0x0, &(0x7f0000000000)) eventfd2(0xae, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r4, 0x4b35, 0x3d3) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r5, &(0x7f0000000080)="01", 0x292e9) 03:33:49 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000000002f2f66696c6530003c87c4db0397cfe736466e55a182c25aea93f0d64c07b496afcf907182605685071403f5a7bc2a012621a76dda086c0c2aee20fdec314d6b9ab79fb0f034d70ba2a37ca3447de6b615345880ccd491c8d2005273f802870fe44fddac1000a7654304e5ba229af5d7287d444486534eee3b3245d03d6b5a799320"]) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x7fffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff85d}, 0x0, 0x80000f, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x7, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x9, 0x0, &(0x7f0000000040)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$netlink(r2, 0x10e, 0x9, 0x0, &(0x7f0000000000)) eventfd2(0xae, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r4, 0x4b35, 0x3d3) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r5, &(0x7f0000000080)="01", 0x292e9) 03:33:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x60000000, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:33:49 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x40, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000440)={0x0, 0x0, 0x4, 0x5, 0x0, r0, 0x0}]) sync() 03:33:49 executing program 3: recvmmsg$unix(0xffffffffffffffff, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) [ 1071.490426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:49 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x40, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000440)={0x0, 0x0, 0x4, 0x5, 0x0, r0, 0x0}]) sync() 03:33:49 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000600)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x34, @void, [{0xdd, 0x3d, "7c4da553389f1a5f33db5503ee0215f8d333296331c002cd43ec8bb1ce01c3c14dd407b0d7fa7f60889cc940601a8a748b192cc3b17952771f4770224d"}, {0xdd, 0x59, "2491090ba45bde37aef91cbddcfbf6325f32e17ced663488c29f634e51aa4e9fb691a7d7e92c3561a5bdbf44eb69a5f90616a11f77a1f73ecb636023f263e8215ecad0a95ea383faa40a79c90514df9e5ca785ca561f443d92"}]}, 0xb8) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1071.550294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1071.603836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1071.679418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:49 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000180)={0x0, 0x2, r0}) 03:33:49 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000340)='./file0/file0\x00', 0x100, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/file0\x00', 0x100, &(0x7f0000000240)={0x100008, 0x0, 0x100000}, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001700)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/210, 0xd2}, {&(0x7f0000001480)=""/79, 0x4f}, {&(0x7f0000001500)=""/104, 0x68}, {&(0x7f0000001580)=""/222, 0xde}, {&(0x7f0000001680)=""/110, 0x6e}], 0x6, 0x1000, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000300)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x400040, 0x0) [ 1071.762106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1071.814408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:50 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x40, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000440)={0x0, 0x0, 0x4, 0x5, 0x0, r0, 0x0}]) sync() 03:33:50 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x40, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000440)={0x0, 0x0, 0x4, 0x5, 0x0, r0, 0x0}]) sync() 03:33:50 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000180)={0x0, 0x2, r0}) 03:33:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x88000000, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:33:50 executing program 3: recvmmsg$unix(0xffffffffffffffff, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) 03:33:50 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000180)={0x0, 0x2, r0}) [ 1072.225267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1072.291864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:50 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000180)={0x0, 0x2, r0}) [ 1072.344561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:50 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000180)={0x0, 0x2, r0}) 03:33:50 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000180)={0x0, 0x2, r0}) 03:33:50 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000180)={0x0, 0x2, r0}) 03:33:50 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000180)={0x0, 0x2, r0}) 03:33:50 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xc}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0xff, 0x8, 0x0, 0x1, 0x0, 0x7, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000040), 0x8}, 0x4c22, 0xfffffffffffff4a8, 0x8, 0x6, 0x10000, 0x9, 0x9, 0x0, 0x92, 0x0, 0x9}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x18) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000001a00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) 03:33:50 executing program 3: recvmmsg$unix(0xffffffffffffffff, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) 03:33:50 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setregid(0xee01, 0x0) setregid(0x0, 0x0) 03:33:50 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000180)={0x0, 0x2, r0}) 03:33:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x888effff, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1072.785595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:50 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f00000000c0)={{}, 'port0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_gfeatures={0x27}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000001680)={0x2, 0x1, 0x1, 'queue0\x00', 0x3}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f00000015c0)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)={0x7f7, 0x10000, 0xfffffffb, 0x3, 0x1, 0x200}) r4 = mq_open(&(0x7f0000000000)='@\x00', 0xc1, 0xb2, &(0x7f0000000040)={0xa554, 0x7, 0x8001, 0x8}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000500)={{}, r5, 0x12, @unused=[0x1, 0x1, 0x7ff, 0x6], @subvolid=0x80000000}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000200)={{r0}, r5, 0x18, @unused=[0x3ff, 0xcd0, 0x0, 0x4], @name="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"}) [ 1072.843620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:50 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000180)=@l2, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)) splice(r0, 0x0, r1, 0x0, 0x9, 0x4) pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCCBRK(r1, 0x5428) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000a40)={0x10, 0x12, 0x5cd72c73c6d2024b}, 0x10}], 0x1}, 0x0) creat(&(0x7f0000000240)='./file1\x00', 0x179) 03:33:50 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000180)={0x0, 0x2, r0}) 03:33:50 executing program 1: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ff3000/0x4000)=nil, 0x4000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000140)=""/237) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x1b}, 0x18) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) r3 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0xff, 0x2, 0x0, 0x2, 0x0, 0x2, 0x100a, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x6, 0x9}, 0x4000, 0x4000, 0x3, 0x5, 0x2e77, 0xaf7d, 0x36d9, 0x0, 0xfffffffa, 0x0, 0x7}, r3, 0x1, r1, 0x2) shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f0000000340)=""/95) shmctl$IPC_RMID(r2, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) ioctl$SNAPSHOT_FREE(r4, 0x3305) r5 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ff2000/0x3000)=nil) shmctl$IPC_RMID(r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000480)=ANY=[@ANYBLOB="ab0000ff120000000000000038125e138926ac5b062a77951e7abaf352dba23a0d6b63e343f17949456af8a899db336a46b85b305ef5cc29fc9cd7928e9c9bb32f2ec9d745d8a9503af3ec29727fecf58eae79fd080cf7459a0fb172355482c85050d01c9b25268d03b9e2b1796a7f2aab10", @ANYRES32=r0]) 03:33:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='bic\x00', 0x4) 03:33:50 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x0, 0x0, 0x2}) [ 1072.993712] EXT4-fs warning (device sda): verify_group_input:171: Reserved blocks too high (2) 03:33:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xe7030000, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:33:51 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ff3000/0x4000)=nil, 0x4000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000140)=""/237) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x1b}, 0x18) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil) r3 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0xff, 0x2, 0x0, 0x2, 0x0, 0x2, 0x100a, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x6, 0x9}, 0x4000, 0x4000, 0x3, 0x5, 0x2e77, 0x0, 0x36d9, 0x0, 0xfffffffa, 0x0, 0x7}, r3, 0x1, r1, 0x2) shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f0000000340)=""/95) shmctl$IPC_RMID(r2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) r4 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ff2000/0x3000)=nil) shmctl$IPC_RMID(r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000540)=ANY=[@ANYBLOB="ab4200ff120000000000000038125e138926ac5b062a77951e7abaf352dba23a0d6b63e343f17949456af8a899db336a46b89e523df8ba60f9096848fb5b305ef5cc29fc9cd7928e9c9bb32f2ec8d745d8a9503af3ec29727fecf58eae79fd080cf7459a0f0000000000000000d01c9b25268d03b9e2b1796a7f2aab10", @ANYRES32=r0]) 03:33:51 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', r0, 0x0) setxattr$security_selinux(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480), &(0x7f00000004c0)='system_u:object_r:policy_config_t:s0\x00', 0x25, 0x0) [ 1073.107662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:51 executing program 1: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ff3000/0x4000)=nil, 0x4000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000140)=""/237) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x1b}, 0x18) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) r3 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0xff, 0x2, 0x0, 0x2, 0x0, 0x2, 0x100a, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x6, 0x9}, 0x4000, 0x4000, 0x3, 0x5, 0x2e77, 0xaf7d, 0x36d9, 0x0, 0xfffffffa, 0x0, 0x7}, r3, 0x1, r1, 0x2) shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f0000000340)=""/95) shmctl$IPC_RMID(r2, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) ioctl$SNAPSHOT_FREE(r4, 0x3305) r5 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ff2000/0x3000)=nil) shmctl$IPC_RMID(r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000480)=ANY=[@ANYBLOB="ab0000ff120000000000000038125e138926ac5b062a77951e7abaf352dba23a0d6b63e343f17949456af8a899db336a46b85b305ef5cc29fc9cd7928e9c9bb32f2ec9d745d8a9503af3ec29727fecf58eae79fd080cf7459a0fb172355482c85050d01c9b25268d03b9e2b1796a7f2aab10", @ANYRES32=r0]) 03:33:51 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000180)=@l2, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)) splice(r0, 0x0, r1, 0x0, 0x9, 0x4) pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCCBRK(r1, 0x5428) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000a40)={0x10, 0x12, 0x5cd72c73c6d2024b}, 0x10}], 0x1}, 0x0) creat(&(0x7f0000000240)='./file1\x00', 0x179) 03:33:51 executing program 5: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ff3000/0x4000)=nil, 0x4000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000140)=""/237) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x1b}, 0x18) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) r3 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0xff, 0x2, 0x0, 0x2, 0x0, 0x2, 0x100a, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x6, 0x9}, 0x4000, 0x4000, 0x3, 0x5, 0x2e77, 0xaf7d, 0x36d9, 0x0, 0xfffffffa, 0x0, 0x7}, r3, 0x1, r1, 0x2) shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f0000000340)=""/95) shmctl$IPC_RMID(r2, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) ioctl$SNAPSHOT_FREE(r4, 0x3305) r5 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ff2000/0x3000)=nil) shmctl$IPC_RMID(r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000480)=ANY=[@ANYBLOB="ab0000ff120000000000000038125e138926ac5b062a77951e7abaf352dba23a0d6b63e343f17949456af8a899db336a46b85b305ef5cc29fc9cd7928e9c9bb32f2ec9d745d8a9503af3ec29727fecf58eae79fd080cf7459a0fb172355482c85050d01c9b25268d03b9e2b1796a7f2aab10", @ANYRES32=r0]) 03:33:51 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ff3000/0x4000)=nil, 0x4000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000140)=""/237) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x1b}, 0x18) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil) r3 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0xff, 0x2, 0x0, 0x2, 0x0, 0x2, 0x100a, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x6, 0x9}, 0x4000, 0x4000, 0x3, 0x5, 0x2e77, 0x0, 0x36d9, 0x0, 0xfffffffa, 0x0, 0x7}, r3, 0x1, r1, 0x2) shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f0000000340)=""/95) shmctl$IPC_RMID(r2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) r4 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ff2000/0x3000)=nil) shmctl$IPC_RMID(r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000540)=ANY=[@ANYBLOB="ab4200ff120000000000000038125e138926ac5b062a77951e7abaf352dba23a0d6b63e343f17949456af8a899db336a46b89e523df8ba60f9096848fb5b305ef5cc29fc9cd7928e9c9bb32f2ec8d745d8a9503af3ec29727fecf58eae79fd080cf7459a0f0000000000000000d01c9b25268d03b9e2b1796a7f2aab10", @ANYRES32=r0]) 03:33:51 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000180)=@l2, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)) splice(r0, 0x0, r1, 0x0, 0x9, 0x4) pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCCBRK(r1, 0x5428) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000a40)={0x10, 0x12, 0x5cd72c73c6d2024b}, 0x10}], 0x1}, 0x0) creat(&(0x7f0000000240)='./file1\x00', 0x179) 03:33:51 executing program 3: recvmmsg$unix(0xffffffffffffffff, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) 03:33:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xf0ffffff, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:33:51 executing program 1: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ff3000/0x4000)=nil, 0x4000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000140)=""/237) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x1b}, 0x18) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) r3 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0xff, 0x2, 0x0, 0x2, 0x0, 0x2, 0x100a, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x6, 0x9}, 0x4000, 0x4000, 0x3, 0x5, 0x2e77, 0xaf7d, 0x36d9, 0x0, 0xfffffffa, 0x0, 0x7}, r3, 0x1, r1, 0x2) shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f0000000340)=""/95) shmctl$IPC_RMID(r2, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) ioctl$SNAPSHOT_FREE(r4, 0x3305) r5 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ff2000/0x3000)=nil) shmctl$IPC_RMID(r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000480)=ANY=[@ANYBLOB="ab0000ff120000000000000038125e138926ac5b062a77951e7abaf352dba23a0d6b63e343f17949456af8a899db336a46b85b305ef5cc29fc9cd7928e9c9bb32f2ec9d745d8a9503af3ec29727fecf58eae79fd080cf7459a0fb172355482c85050d01c9b25268d03b9e2b1796a7f2aab10", @ANYRES32=r0]) [ 1073.387816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1073.451955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1073.505699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xfcffffff, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:33:51 executing program 3: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ff3000/0x4000)=nil, 0x4000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000140)=""/237) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x1b}, 0x18) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil) r3 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0xff, 0x2, 0x0, 0x2, 0x0, 0x2, 0x100a, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x6, 0x9}, 0x4000, 0x4000, 0x3, 0x5, 0x2e77, 0x0, 0x36d9, 0x0, 0xfffffffa, 0x0, 0x7}, r3, 0x1, r1, 0x2) shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f0000000340)=""/95) shmctl$IPC_RMID(r2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) r4 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ff2000/0x3000)=nil) shmctl$IPC_RMID(r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000540)=ANY=[@ANYBLOB="ab4200ff120000000000000038125e138926ac5b062a77951e7abaf352dba23a0d6b63e343f17949456af8a899db336a46b89e523df8ba60f9096848fb5b305ef5cc29fc9cd7928e9c9bb32f2ec8d745d8a9503af3ec29727fecf58eae79fd080cf7459a0f0000000000000000d01c9b25268d03b9e2b1796a7f2aab10", @ANYRES32=r0]) 03:33:51 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000180)=@l2, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)) splice(r0, 0x0, r1, 0x0, 0x9, 0x4) pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCCBRK(r1, 0x5428) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000a40)={0x10, 0x12, 0x5cd72c73c6d2024b}, 0x10}], 0x1}, 0x0) creat(&(0x7f0000000240)='./file1\x00', 0x179) 03:33:51 executing program 1: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ff3000/0x4000)=nil, 0x4000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000140)=""/237) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x1b}, 0x18) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) r3 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0xff, 0x2, 0x0, 0x2, 0x0, 0x2, 0x100a, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x6, 0x9}, 0x4000, 0x4000, 0x3, 0x5, 0x2e77, 0xaf7d, 0x36d9, 0x0, 0xfffffffa, 0x0, 0x7}, r3, 0x1, r1, 0x2) shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f0000000340)=""/95) shmctl$IPC_RMID(r2, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) ioctl$SNAPSHOT_FREE(r4, 0x3305) r5 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ff2000/0x3000)=nil) shmctl$IPC_RMID(r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000480)=ANY=[@ANYBLOB="ab0000ff120000000000000038125e138926ac5b062a77951e7abaf352dba23a0d6b63e343f17949456af8a899db336a46b85b305ef5cc29fc9cd7928e9c9bb32f2ec9d745d8a9503af3ec29727fecf58eae79fd080cf7459a0fb172355482c85050d01c9b25268d03b9e2b1796a7f2aab10", @ANYRES32=r0]) 03:33:51 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = signalfd4(r0, &(0x7f0000000040)={[0xff]}, 0x8, 0x400) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r0) r5 = openat2(r3, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x2042, 0x1, 0x20}, 0x18) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000007c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000840)={r6, 0x3, r3, 0x6}) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r4, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x1c}}, 0x4000000) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x400, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="36228a7f9fe983d4ac2f5b5000000008021100000008021100000008021100000000000000000000000000640001000006020202020202"], 0x2c) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000880)=ANY=[@ANYBLOB="100000000802110a00010802110000000802110000002000010000000100010882848b960c1218241220bfcd65f3591338a8e131701bc46a1a07771ae464620af745de1a1b66030a33e58a1d000282511a95af0d6ba8e75151830b7ab708f42bf7dd34f761c86ecfa4bdd494240a85fc27ffea2b61cf92d65943b74abd03d3661289577f1f39b65270f62a5a0bb4"], 0x28) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x42000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, r1, 0x501, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xe6}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x2}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="63deeb59e130"}]}, 0x30}}, 0x10000) 03:33:51 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ff3000/0x4000)=nil, 0x4000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000140)=""/237) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x1b}, 0x18) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil) r3 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0xff, 0x2, 0x0, 0x2, 0x0, 0x2, 0x100a, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x6, 0x9}, 0x4000, 0x4000, 0x3, 0x5, 0x2e77, 0x0, 0x36d9, 0x0, 0xfffffffa, 0x0, 0x7}, r3, 0x1, r1, 0x2) shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f0000000340)=""/95) shmctl$IPC_RMID(r2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) r4 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ff2000/0x3000)=nil) shmctl$IPC_RMID(r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000540)=ANY=[@ANYBLOB="ab4200ff120000000000000038125e138926ac5b062a77951e7abaf352dba23a0d6b63e343f17949456af8a899db336a46b89e523df8ba60f9096848fb5b305ef5cc29fc9cd7928e9c9bb32f2ec8d745d8a9503af3ec29727fecf58eae79fd080cf7459a0f0000000000000000d01c9b25268d03b9e2b1796a7f2aab10", @ANYRES32=r0]) 03:33:51 executing program 5: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ff3000/0x4000)=nil, 0x4000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000140)=""/237) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x1b}, 0x18) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) r3 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0xff, 0x2, 0x0, 0x2, 0x0, 0x2, 0x100a, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x6, 0x9}, 0x4000, 0x4000, 0x3, 0x5, 0x2e77, 0xaf7d, 0x36d9, 0x0, 0xfffffffa, 0x0, 0x7}, r3, 0x1, r1, 0x2) shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f0000000340)=""/95) shmctl$IPC_RMID(r2, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) ioctl$SNAPSHOT_FREE(r4, 0x3305) r5 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ff2000/0x3000)=nil) shmctl$IPC_RMID(r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000480)=ANY=[@ANYBLOB="ab0000ff120000000000000038125e138926ac5b062a77951e7abaf352dba23a0d6b63e343f17949456af8a899db336a46b85b305ef5cc29fc9cd7928e9c9bb32f2ec9d745d8a9503af3ec29727fecf58eae79fd080cf7459a0fb172355482c85050d01c9b25268d03b9e2b1796a7f2aab10", @ANYRES32=r0]) 03:33:51 executing program 7: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ff3000/0x4000)=nil, 0x4000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000140)=""/237) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x1b}, 0x18) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil) r3 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0xff, 0x2, 0x0, 0x2, 0x0, 0x2, 0x100a, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x6, 0x9}, 0x4000, 0x4000, 0x3, 0x5, 0x2e77, 0x0, 0x36d9, 0x0, 0xfffffffa, 0x0, 0x7}, r3, 0x1, r1, 0x2) shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f0000000340)=""/95) shmctl$IPC_RMID(r2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) r4 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ff2000/0x3000)=nil) shmctl$IPC_RMID(r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000540)=ANY=[@ANYBLOB="ab4200ff120000000000000038125e138926ac5b062a77951e7abaf352dba23a0d6b63e343f17949456af8a899db336a46b89e523df8ba60f9096848fb5b305ef5cc29fc9cd7928e9c9bb32f2ec8d745d8a9503af3ec29727fecf58eae79fd080cf7459a0f0000000000000000d01c9b25268d03b9e2b1796a7f2aab10", @ANYRES32=r0]) 03:33:51 executing program 3: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ff3000/0x4000)=nil, 0x4000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000140)=""/237) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x1b}, 0x18) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil) r3 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0xff, 0x2, 0x0, 0x2, 0x0, 0x2, 0x100a, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x6, 0x9}, 0x4000, 0x4000, 0x3, 0x5, 0x2e77, 0x0, 0x36d9, 0x0, 0xfffffffa, 0x0, 0x7}, r3, 0x1, r1, 0x2) shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f0000000340)=""/95) shmctl$IPC_RMID(r2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) r4 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ff2000/0x3000)=nil) shmctl$IPC_RMID(r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000540)=ANY=[@ANYBLOB="ab4200ff120000000000000038125e138926ac5b062a77951e7abaf352dba23a0d6b63e343f17949456af8a899db336a46b89e523df8ba60f9096848fb5b305ef5cc29fc9cd7928e9c9bb32f2ec8d745d8a9503af3ec29727fecf58eae79fd080cf7459a0f0000000000000000d01c9b25268d03b9e2b1796a7f2aab10", @ANYRES32=r0]) [ 1074.062294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:52 executing program 5: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ff3000/0x4000)=nil, 0x4000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000140)=""/237) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x1b}, 0x18) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) r3 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0xff, 0x2, 0x0, 0x2, 0x0, 0x2, 0x100a, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x6, 0x9}, 0x4000, 0x4000, 0x3, 0x5, 0x2e77, 0xaf7d, 0x36d9, 0x0, 0xfffffffa, 0x0, 0x7}, r3, 0x1, r1, 0x2) shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f0000000340)=""/95) shmctl$IPC_RMID(r2, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) ioctl$SNAPSHOT_FREE(r4, 0x3305) r5 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ff2000/0x3000)=nil) shmctl$IPC_RMID(r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000480)=ANY=[@ANYBLOB="ab0000ff120000000000000038125e138926ac5b062a77951e7abaf352dba23a0d6b63e343f17949456af8a899db336a46b85b305ef5cc29fc9cd7928e9c9bb32f2ec9d745d8a9503af3ec29727fecf58eae79fd080cf7459a0fb172355482c85050d01c9b25268d03b9e2b1796a7f2aab10", @ANYRES32=r0]) 03:33:52 executing program 1: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ff3000/0x4000)=nil, 0x4000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000140)=""/237) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x1b}, 0x18) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil) r3 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0xff, 0x2, 0x0, 0x2, 0x0, 0x2, 0x100a, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x6, 0x9}, 0x4000, 0x4000, 0x3, 0x5, 0x2e77, 0x0, 0x36d9, 0x0, 0xfffffffa, 0x0, 0x7}, r3, 0x1, r1, 0x2) shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f0000000340)=""/95) shmctl$IPC_RMID(r2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) r4 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ff2000/0x3000)=nil) shmctl$IPC_RMID(r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000540)=ANY=[@ANYBLOB="ab4200ff120000000000000038125e138926ac5b062a77951e7abaf352dba23a0d6b63e343f17949456af8a899db336a46b89e523df8ba60f9096848fb5b305ef5cc29fc9cd7928e9c9bb32f2ec8d745d8a9503af3ec29727fecf58eae79fd080cf7459a0f0000000000000000d01c9b25268d03b9e2b1796a7f2aab10", @ANYRES32=r0]) [ 1076.952766] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1076.962131] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1076.968622] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1076.976363] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1076.980321] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1076.981898] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1079.057195] Bluetooth: hci0: command 0x0409 tx timeout [ 1081.105225] Bluetooth: hci0: command 0x041b tx timeout [ 1083.153138] Bluetooth: hci0: command 0x040f tx timeout [ 1085.202158] Bluetooth: hci0: command 0x0419 tx timeout [ 1106.127003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1106.128561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1106.133575] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1106.238578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1106.239813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1106.242562] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1106.810420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1106.845020] wlan1: authenticate with 08:02:11:00:00:00 [ 1106.846701] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 1106.866285] wlan1: authenticated [ 1106.867757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1106.868491] mac80211_hwsim hwsim83 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP [ 1106.871934] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 1106.928480] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 1106.930865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1106.932768] wlan1: associated [ 1107.244715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1107.294409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1107.343937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:34:25 executing program 7: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ff3000/0x4000)=nil, 0x4000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000140)=""/237) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x1b}, 0x18) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil) r3 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0xff, 0x2, 0x0, 0x2, 0x0, 0x2, 0x100a, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x6, 0x9}, 0x4000, 0x4000, 0x3, 0x5, 0x2e77, 0x0, 0x36d9, 0x0, 0xfffffffa, 0x0, 0x7}, r3, 0x1, r1, 0x2) shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f0000000340)=""/95) shmctl$IPC_RMID(r2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) r4 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ff2000/0x3000)=nil) shmctl$IPC_RMID(r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000540)=ANY=[@ANYBLOB="ab4200ff120000000000000038125e138926ac5b062a77951e7abaf352dba23a0d6b63e343f17949456af8a899db336a46b89e523df8ba60f9096848fb5b305ef5cc29fc9cd7928e9c9bb32f2ec8d745d8a9503af3ec29727fecf58eae79fd080cf7459a0f0000000000000000d01c9b25268d03b9e2b1796a7f2aab10", @ANYRES32=r0]) 03:34:25 executing program 1: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ff3000/0x4000)=nil, 0x4000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000140)=""/237) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x1b}, 0x18) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil) r3 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0xff, 0x2, 0x0, 0x2, 0x0, 0x2, 0x100a, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x6, 0x9}, 0x4000, 0x4000, 0x3, 0x5, 0x2e77, 0x0, 0x36d9, 0x0, 0xfffffffa, 0x0, 0x7}, r3, 0x1, r1, 0x2) shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f0000000340)=""/95) shmctl$IPC_RMID(r2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) r4 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ff2000/0x3000)=nil) shmctl$IPC_RMID(r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000540)=ANY=[@ANYBLOB="ab4200ff120000000000000038125e138926ac5b062a77951e7abaf352dba23a0d6b63e343f17949456af8a899db336a46b89e523df8ba60f9096848fb5b305ef5cc29fc9cd7928e9c9bb32f2ec8d745d8a9503af3ec29727fecf58eae79fd080cf7459a0f0000000000000000d01c9b25268d03b9e2b1796a7f2aab10", @ANYRES32=r0]) 03:34:25 executing program 0: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ff3000/0x4000)=nil, 0x4000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000140)=""/237) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x1b}, 0x18) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) r3 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0xff, 0x2, 0x0, 0x2, 0x0, 0x2, 0x100a, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x6, 0x9}, 0x4000, 0x4000, 0x3, 0x5, 0x2e77, 0xaf7d, 0x36d9, 0x0, 0xfffffffa, 0x0, 0x7}, r3, 0x1, r1, 0x2) shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f0000000340)=""/95) shmctl$IPC_RMID(r2, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) ioctl$SNAPSHOT_FREE(r4, 0x3305) r5 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ff2000/0x3000)=nil) shmctl$IPC_RMID(r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000480)=ANY=[@ANYBLOB="ab0000ff120000000000000038125e138926ac5b062a77951e7abaf352dba23a0d6b63e343f17949456af8a899db336a46b85b305ef5cc29fc9cd7928e9c9bb32f2ec9d745d8a9503af3ec29727fecf58eae79fd080cf7459a0fb172355482c85050d01c9b25268d03b9e2b1796a7f2aab10", @ANYRES32=r0]) 03:34:25 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ff3000/0x4000)=nil, 0x4000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000140)=""/237) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x1b}, 0x18) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil) r3 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0xff, 0x2, 0x0, 0x2, 0x0, 0x2, 0x100a, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x6, 0x9}, 0x4000, 0x4000, 0x3, 0x5, 0x2e77, 0x0, 0x36d9, 0x0, 0xfffffffa, 0x0, 0x7}, r3, 0x1, r1, 0x2) shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f0000000340)=""/95) shmctl$IPC_RMID(r2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) r4 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ff2000/0x3000)=nil) shmctl$IPC_RMID(r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000540)=ANY=[@ANYBLOB="ab4200ff120000000000000038125e138926ac5b062a77951e7abaf352dba23a0d6b63e343f17949456af8a899db336a46b89e523df8ba60f9096848fb5b305ef5cc29fc9cd7928e9c9bb32f2ec8d745d8a9503af3ec29727fecf58eae79fd080cf7459a0f0000000000000000d01c9b25268d03b9e2b1796a7f2aab10", @ANYRES32=r0]) 03:34:25 executing program 3: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ff3000/0x4000)=nil, 0x4000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000140)=""/237) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x1b}, 0x18) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil) r3 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0xff, 0x2, 0x0, 0x2, 0x0, 0x2, 0x100a, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x6, 0x9}, 0x4000, 0x4000, 0x3, 0x5, 0x2e77, 0x0, 0x36d9, 0x0, 0xfffffffa, 0x0, 0x7}, r3, 0x1, r1, 0x2) shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f0000000340)=""/95) shmctl$IPC_RMID(r2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) r4 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ff2000/0x3000)=nil) shmctl$IPC_RMID(r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000540)=ANY=[@ANYBLOB="ab4200ff120000000000000038125e138926ac5b062a77951e7abaf352dba23a0d6b63e343f17949456af8a899db336a46b89e523df8ba60f9096848fb5b305ef5cc29fc9cd7928e9c9bb32f2ec8d745d8a9503af3ec29727fecf58eae79fd080cf7459a0f0000000000000000d01c9b25268d03b9e2b1796a7f2aab10", @ANYRES32=r0]) 03:34:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xffff8e88, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:34:25 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) r3 = dup3(r0, r0, 0x80000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x28, r5, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='y'}, @NL80211_ATTR_IE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000040)={0x28, r1, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4135, 0x48}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4048000}, 0x20000081) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001480)={0x1168, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x80}, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xffff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x100}, @NL80211_ATTR_VENDOR_DATA={0xda, 0xc5, "f65a6f9a2c293bd46564343f14fc05b4e4d0a21eee711464474cd1d5a60dc384db293f764e869c32bb9314940f216efc0563f92180562ca948b8ca4f2568341e2ba0a92e6e44509057c6d399734dda62a0ad1c8369f35db550def2bb72c4cb267c29070f6b420a50731592182cb97fba05f72b5ec88b5a8df7c4a534ef0a4790d9f3ce4bcd477e061dd131ca3cd1cdbf1057b8ddd1bd95ca9c6d3721ffa767ad224161625c416811b0f740892e842877063b542e2d3fc52bae61a4102909ebb49e27db52fb2165b1b03f5a858698b18813bcf2808c99"}, @NL80211_ATTR_VENDOR_DATA={0x4}, @NL80211_ATTR_VENDOR_DATA={0x38, 0xc5, "e8107b60042269e135ee21f700861496e3c7f53fef6c5fc4862cd7c10bc25ec8601e3d094e13fc3a59ccd289810a589888e7421b"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xffff}, @NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "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"}]}, 0x1168}, 0x1, 0x0, 0x0, 0x4004880}, 0x4000) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf250600000008000300", @ANYRES32=r6, @ANYBLOB="05005300000004000000000000000000000403038303030000513febe0ed88e9b50793de5abe0a5a04835e18e0f5034c72532876092930e4216819d9267da27ea4db3603cbc9de91d5567a53a9e32b826cd02ae20c32ad7220a07edc8eefc9ae7e11db289205e1921bd993337b6c578cadc77650c264ab64a78971e246c78be5c31670dd52d2d967cfdee313d53ea4a33fc3289348b358bd0cf3b55746178f03003fb9363c894c1a68aba1c864a5e5df5050c0bb979ce6f752135402db7f3d88746afd8b4968392f0b02f59a4feaaefd1d137071c4c164e488c9b83885865c191b797ee65445d090b850f96701ea905e76eb40a7bc57fe3a8fcb63dd6a8bae409d31d72a02c3f6d61936355b6830a2167e6d21571841bb000c5d9b1fd86565f2219d1eed287f658d2e3b47972d20e387d0216eeda52345eb29c13091ecb0555554e402262c7b5e34fb39de541535000000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x40000c1) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x2, @default, @void, @void}, 0x1e) 03:34:25 executing program 5: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ff3000/0x4000)=nil, 0x4000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000140)=""/237) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x1b}, 0x18) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) r3 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0xff, 0x2, 0x0, 0x2, 0x0, 0x2, 0x100a, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x6, 0x9}, 0x4000, 0x4000, 0x3, 0x5, 0x2e77, 0xaf7d, 0x36d9, 0x0, 0xfffffffa, 0x0, 0x7}, r3, 0x1, r1, 0x2) shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f0000000340)=""/95) shmctl$IPC_RMID(r2, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) ioctl$SNAPSHOT_FREE(r4, 0x3305) r5 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ff2000/0x3000)=nil) shmctl$IPC_RMID(r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000480)=ANY=[@ANYBLOB="ab0000ff120000000000000038125e138926ac5b062a77951e7abaf352dba23a0d6b63e343f17949456af8a899db336a46b85b305ef5cc29fc9cd7928e9c9bb32f2ec9d745d8a9503af3ec29727fecf58eae79fd080cf7459a0fb172355482c85050d01c9b25268d03b9e2b1796a7f2aab10", @ANYRES32=r0]) [ 1107.528963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:34:25 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', 0x26e1, 0x62) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000001440)=ANY=[@ANYRES32=r0, @ANYRESHEX]) syncfs(r1) setresuid(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x2, @perf_config_ext={0x5}, 0x26, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, 0x0) [ 1107.574197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:34:25 executing program 7: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ff3000/0x4000)=nil, 0x4000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000140)=""/237) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x1b}, 0x18) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil) r3 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0xff, 0x2, 0x0, 0x2, 0x0, 0x2, 0x100a, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x6, 0x9}, 0x4000, 0x4000, 0x3, 0x5, 0x2e77, 0x0, 0x36d9, 0x0, 0xfffffffa, 0x0, 0x7}, r3, 0x1, r1, 0x2) shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f0000000340)=""/95) shmctl$IPC_RMID(r2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) r4 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ff2000/0x3000)=nil) shmctl$IPC_RMID(r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000540)=ANY=[@ANYBLOB="ab4200ff120000000000000038125e138926ac5b062a77951e7abaf352dba23a0d6b63e343f17949456af8a899db336a46b89e523df8ba60f9096848fb5b305ef5cc29fc9cd7928e9c9bb32f2ec8d745d8a9503af3ec29727fecf58eae79fd080cf7459a0f0000000000000000d01c9b25268d03b9e2b1796a7f2aab10", @ANYRES32=r0]) 03:34:25 executing program 1: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ff3000/0x4000)=nil, 0x4000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000140)=""/237) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x1b}, 0x18) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil) r3 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0xff, 0x2, 0x0, 0x2, 0x0, 0x2, 0x100a, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x6, 0x9}, 0x4000, 0x4000, 0x3, 0x5, 0x2e77, 0x0, 0x36d9, 0x0, 0xfffffffa, 0x0, 0x7}, r3, 0x1, r1, 0x2) shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f0000000340)=""/95) shmctl$IPC_RMID(r2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) r4 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ff2000/0x3000)=nil) shmctl$IPC_RMID(r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000540)=ANY=[@ANYBLOB="ab4200ff120000000000000038125e138926ac5b062a77951e7abaf352dba23a0d6b63e343f17949456af8a899db336a46b89e523df8ba60f9096848fb5b305ef5cc29fc9cd7928e9c9bb32f2ec8d745d8a9503af3ec29727fecf58eae79fd080cf7459a0f0000000000000000d01c9b25268d03b9e2b1796a7f2aab10", @ANYRES32=r0]) [ 1107.638462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1107.693740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:34:25 executing program 5: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ff3000/0x4000)=nil, 0x4000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000140)=""/237) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x1b}, 0x18) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) r3 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0xff, 0x2, 0x0, 0x2, 0x0, 0x2, 0x100a, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x6, 0x9}, 0x4000, 0x4000, 0x3, 0x5, 0x2e77, 0xaf7d, 0x36d9, 0x0, 0xfffffffa, 0x0, 0x7}, r3, 0x1, r1, 0x2) shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f0000000340)=""/95) shmctl$IPC_RMID(r2, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) ioctl$SNAPSHOT_FREE(r4, 0x3305) r5 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ff2000/0x3000)=nil) shmctl$IPC_RMID(r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000480)=ANY=[@ANYBLOB="ab0000ff120000000000000038125e138926ac5b062a77951e7abaf352dba23a0d6b63e343f17949456af8a899db336a46b85b305ef5cc29fc9cd7928e9c9bb32f2ec9d745d8a9503af3ec29727fecf58eae79fd080cf7459a0fb172355482c85050d01c9b25268d03b9e2b1796a7f2aab10", @ANYRES32=r0]) 03:34:25 executing program 0: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ff3000/0x4000)=nil, 0x4000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000140)=""/237) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x1b}, 0x18) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) r3 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0xff, 0x2, 0x0, 0x2, 0x0, 0x2, 0x100a, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x6, 0x9}, 0x4000, 0x4000, 0x3, 0x5, 0x2e77, 0xaf7d, 0x36d9, 0x0, 0xfffffffa, 0x0, 0x7}, r3, 0x1, r1, 0x2) shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f0000000340)=""/95) shmctl$IPC_RMID(r2, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) ioctl$SNAPSHOT_FREE(r4, 0x3305) r5 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ff2000/0x3000)=nil) shmctl$IPC_RMID(r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000480)=ANY=[@ANYBLOB="ab0000ff120000000000000038125e138926ac5b062a77951e7abaf352dba23a0d6b63e343f17949456af8a899db336a46b85b305ef5cc29fc9cd7928e9c9bb32f2ec9d745d8a9503af3ec29727fecf58eae79fd080cf7459a0fb172355482c85050d01c9b25268d03b9e2b1796a7f2aab10", @ANYRES32=r0]) 03:34:25 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1010c2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x10000027f) sendfile(r0, r1, 0x0, 0x10000027f) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e21, @multicast2}}, 0x0, 0x0, 0x44, 0x0, "704f5992d666aa2888e479ca552ee155f638582a91ca97213cf4774a2e4c350cdc3f9f62a4c21970bd149a52fa311b916bf00b51b808c412ed6b9fcbb5be4a2fb7dd8fd0dfa22b4100"}, 0xd8) r3 = fork() prlimit64(r3, 0x5, &(0x7f0000000000)={0x8, 0x4}, &(0x7f0000000100)) 03:34:25 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x50, r1, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x44}, @void, @val={0xc, 0x99, {0x8, 0x7c}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x81}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x83f}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x9}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4880) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @initial, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:34:25 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000001c0)={0x0, 0x0, 0x80000001}) 03:34:25 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000340)=ANY=[@ANYBLOB="0018000000", @ANYRES32, @ANYBLOB="01000080000000002e00"]) getpgid(r0) [ 1108.002013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:34:25 executing program 5: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ff3000/0x4000)=nil, 0x4000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000140)=""/237) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x1b}, 0x18) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) r3 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0xff, 0x2, 0x0, 0x2, 0x0, 0x2, 0x100a, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x6, 0x9}, 0x4000, 0x4000, 0x3, 0x5, 0x2e77, 0xaf7d, 0x36d9, 0x0, 0xfffffffa, 0x0, 0x7}, r3, 0x1, r1, 0x2) shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f0000000340)=""/95) shmctl$IPC_RMID(r2, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) ioctl$SNAPSHOT_FREE(r4, 0x3305) r5 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ff2000/0x3000)=nil) shmctl$IPC_RMID(r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000480)=ANY=[@ANYBLOB="ab0000ff120000000000000038125e138926ac5b062a77951e7abaf352dba23a0d6b63e343f17949456af8a899db336a46b85b305ef5cc29fc9cd7928e9c9bb32f2ec9d745d8a9503af3ec29727fecf58eae79fd080cf7459a0fb172355482c85050d01c9b25268d03b9e2b1796a7f2aab10", @ANYRES32=r0]) [ 1108.031827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:34:25 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', 0x26e1, 0x62) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000001440)=ANY=[@ANYRES32=r0, @ANYRESHEX]) syncfs(r1) setresuid(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x2, @perf_config_ext={0x5}, 0x26, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, 0x0) [ 1108.053540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:34:26 executing program 0: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ff3000/0x4000)=nil, 0x4000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000140)=""/237) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x1b}, 0x18) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) r3 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0xff, 0x2, 0x0, 0x2, 0x0, 0x2, 0x100a, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x6, 0x9}, 0x4000, 0x4000, 0x3, 0x5, 0x2e77, 0xaf7d, 0x36d9, 0x0, 0xfffffffa, 0x0, 0x7}, r3, 0x1, r1, 0x2) shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f0000000340)=""/95) shmctl$IPC_RMID(r2, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) ioctl$SNAPSHOT_FREE(r4, 0x3305) r5 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ff2000/0x3000)=nil) shmctl$IPC_RMID(r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000480)=ANY=[@ANYBLOB="ab0000ff120000000000000038125e138926ac5b062a77951e7abaf352dba23a0d6b63e343f17949456af8a899db336a46b85b305ef5cc29fc9cd7928e9c9bb32f2ec9d745d8a9503af3ec29727fecf58eae79fd080cf7459a0fb172355482c85050d01c9b25268d03b9e2b1796a7f2aab10", @ANYRES32=r0]) 03:34:26 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', 0x26e1, 0x62) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000001440)=ANY=[@ANYRES32=r0, @ANYRESHEX]) syncfs(r1) setresuid(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x2, @perf_config_ext={0x5}, 0x26, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, 0x0) 03:34:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xffffff7f, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:34:26 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) r2 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f00000001c0)='./file0\x00') ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400}) r3 = gettid() getpriority(0x0, r3) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="5f2747fca7dc2a4f003e4676cf4df4a73099dfd0dcd1340986204590f4c56b48dd719ddb2b2909a6901eb7fe645c4ca6f8ef", 0x32}, {&(0x7f00000003c0)="dc532d59d6a4e3419d5926eb02d8ffbc2022ba7f77903e5c9562c9281fb2ee9e230271921543e145d2588b143893057ff420f8dd1a4d2f01ef921b6cd42da727c8b0dfa859c0ca0378b84d9f4dba9738f4b0393671fa6660f02c64bb573f8cdc64a52f6dd81077db52a57c52eadf32a317a435af56f07519e696dd3ef23890b65a49b058057138b666f5380c3131a20ddb9df719fbdd44f72bd4e03d5ef2fc6aca3bee8756", 0xa5}, {&(0x7f0000000480)="b3b84b617350af3a6924f4ea20c929ea43ac62758c02e2c12adf89b120e499146543f2151201b05c3993997241a0126bb0f562d03813441913490f35cae74061fc39bf4d7351a42edb4193a60e2fb00f3c6b99eab193a2b61d5700af99e88590a702ed50ffe3e3ea826be22b47a03d32e5deefb61ec8bb5e24d73cce985d2dd42ed0a8fbeef05697800a28318175deeb446c2ccca91d614a5189f2848ea00c65808da98ff561e100ee48a1daf2be00ea6d10360b625ca921630606704b42f0fedf4c2ccf9bcb083b5fd38c15e3ea1c240095bdc3061cb87d8063eec9139615", 0xdf}], 0x3, 0x2, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r4, &(0x7f0000000080)="01", 0x292e9) 03:34:26 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', 0x26e1, 0x62) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000001440)=ANY=[@ANYRES32=r0, @ANYRESHEX]) syncfs(r1) setresuid(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x2, @perf_config_ext={0x5}, 0x26, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, 0x0) 03:34:26 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="b00000000802000000000000000600000000000001000000000000000000"], 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:34:26 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', 0x26e1, 0x62) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="010001040000000000000000", @ANYRES32=r0, @ANYBLOB="00000000000000000000000000020000"]) pread64(0xffffffffffffffff, &(0x7f0000000300)=""/102389, 0x18ff5, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x1000}) readv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/75, 0x4b}], 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) syncfs(r1) getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000001f40)={{{@in6=@dev, @in6=@local}}, {{@in6=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000002040)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000019300)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x80000) 03:34:26 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1010c2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x10000027f) sendfile(r0, r1, 0x0, 0x10000027f) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e21, @multicast2}}, 0x0, 0x0, 0x44, 0x0, "704f5992d666aa2888e479ca552ee155f638582a91ca97213cf4774a2e4c350cdc3f9f62a4c21970bd149a52fa311b916bf00b51b808c412ed6b9fcbb5be4a2fb7dd8fd0dfa22b4100"}, 0xd8) r3 = fork() prlimit64(r3, 0x5, &(0x7f0000000000)={0x8, 0x4}, &(0x7f0000000100)) [ 1108.363324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1108.400244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1108.421013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1108.478258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:34:26 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', 0x26e1, 0x62) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000001440)=ANY=[@ANYRES32=r0, @ANYRESHEX]) syncfs(r1) setresuid(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x2, @perf_config_ext={0x5}, 0x26, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, 0x0) 03:34:26 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000002440), &(0x7f0000002480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0xb, r0, 0x0, 0x0, 0x0) [ 1108.798987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1108.844317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:34:26 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000580)}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x9a, &(0x7f0000000000)=0x0) r2 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000540)='sync\x00', 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x4, 0x1f, 0xb1, 0x80, 0x0, 0x7, 0x0, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000480), 0x5}, 0x2000, 0x6, 0x10000, 0x3, 0x5, 0xd, 0x2, 0x0, 0x0, 0x0, 0x200000000}, 0xffffffffffffffff, 0x1, r3, 0x8) io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, &(0x7f0000000180)="446b32b6a4b729e0ea3dab2358acc0208a9effbf9c6c78abaf9be2e206a1a511c1ca50e678e38a8e861f59b3927cff13845f903e933f7c54c38711446394776b1d8a3a696574684fb9f8a0614c96ba15f5c491fa6360895aa8afd9144858b0f7fe0bbe1dc7a76dffc48f24a6b6dd8edb5c", 0x71}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x6, 0x1, r0, &(0x7f0000000200)="5e0a9cf43585b660ed6229bc13102a4d0123ee829f171b2cdbcaad2116678aefebeb1498293b45dca9a6b978fd56dede4f067f346a60899f6a6f4d6110cc80fb60bd34e8ccb6011523156e82ff03f71c6601bddab1", 0x55, 0x9, 0x0, 0x1}]) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r4 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 03:34:26 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1010c2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x10000027f) sendfile(r0, r1, 0x0, 0x10000027f) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e21, @multicast2}}, 0x0, 0x0, 0x44, 0x0, "704f5992d666aa2888e479ca552ee155f638582a91ca97213cf4774a2e4c350cdc3f9f62a4c21970bd149a52fa311b916bf00b51b808c412ed6b9fcbb5be4a2fb7dd8fd0dfa22b4100"}, 0xd8) r3 = fork() prlimit64(r3, 0x5, &(0x7f0000000000)={0x8, 0x4}, &(0x7f0000000100)) 03:34:26 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) r2 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f00000001c0)='./file0\x00') ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400}) r3 = gettid() getpriority(0x0, r3) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="5f2747fca7dc2a4f003e4676cf4df4a73099dfd0dcd1340986204590f4c56b48dd719ddb2b2909a6901eb7fe645c4ca6f8ef", 0x32}, {&(0x7f00000003c0)="dc532d59d6a4e3419d5926eb02d8ffbc2022ba7f77903e5c9562c9281fb2ee9e230271921543e145d2588b143893057ff420f8dd1a4d2f01ef921b6cd42da727c8b0dfa859c0ca0378b84d9f4dba9738f4b0393671fa6660f02c64bb573f8cdc64a52f6dd81077db52a57c52eadf32a317a435af56f07519e696dd3ef23890b65a49b058057138b666f5380c3131a20ddb9df719fbdd44f72bd4e03d5ef2fc6aca3bee8756", 0xa5}, {&(0x7f0000000480)="b3b84b617350af3a6924f4ea20c929ea43ac62758c02e2c12adf89b120e499146543f2151201b05c3993997241a0126bb0f562d03813441913490f35cae74061fc39bf4d7351a42edb4193a60e2fb00f3c6b99eab193a2b61d5700af99e88590a702ed50ffe3e3ea826be22b47a03d32e5deefb61ec8bb5e24d73cce985d2dd42ed0a8fbeef05697800a28318175deeb446c2ccca91d614a5189f2848ea00c65808da98ff561e100ee48a1daf2be00ea6d10360b625ca921630606704b42f0fedf4c2ccf9bcb083b5fd38c15e3ea1c240095bdc3061cb87d8063eec9139615", 0xdf}], 0x3, 0x2, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r4, &(0x7f0000000080)="01", 0x292e9) 03:34:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xfffffff0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:34:26 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', 0x26e1, 0x62) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000001440)=ANY=[@ANYRES32=r0, @ANYRESHEX]) syncfs(r1) setresuid(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x2, @perf_config_ext={0x5}, 0x26, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, 0x0) [ 1109.151122] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1109.216763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1109.291895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1109.600750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1109.650491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1113.937521] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 1118.289252] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 1122.641287] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 1125.027838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1125.034166] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1125.036488] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1125.041674] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1125.044631] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1125.046221] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1127.121650] Bluetooth: hci3: command 0x0409 tx timeout [ 1129.170583] Bluetooth: hci3: command 0x041b tx timeout [ 1131.217199] Bluetooth: hci3: command 0x040f tx timeout [ 1133.265176] Bluetooth: hci3: command 0x0419 tx timeout [ 1151.813762] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1151.815293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1151.820350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1151.908550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1151.909821] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1151.913183] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1152.477087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1152.514941] wlan1: authenticate with 08:02:11:00:00:00 [ 1152.516656] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 1152.536545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1152.593930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1152.626193] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 1152.729160] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 1152.833131] wlan1: authentication with 08:02:11:00:00:00 timed out [ 1152.906629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1152.940444] wlan1: authenticate with 08:02:11:00:00:00 [ 1152.942311] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 1152.956887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xfffffffc, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:35:10 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) r2 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f00000001c0)='./file0\x00') ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400}) r3 = gettid() getpriority(0x0, r3) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="5f2747fca7dc2a4f003e4676cf4df4a73099dfd0dcd1340986204590f4c56b48dd719ddb2b2909a6901eb7fe645c4ca6f8ef", 0x32}, {&(0x7f00000003c0)="dc532d59d6a4e3419d5926eb02d8ffbc2022ba7f77903e5c9562c9281fb2ee9e230271921543e145d2588b143893057ff420f8dd1a4d2f01ef921b6cd42da727c8b0dfa859c0ca0378b84d9f4dba9738f4b0393671fa6660f02c64bb573f8cdc64a52f6dd81077db52a57c52eadf32a317a435af56f07519e696dd3ef23890b65a49b058057138b666f5380c3131a20ddb9df719fbdd44f72bd4e03d5ef2fc6aca3bee8756", 0xa5}, {&(0x7f0000000480)="b3b84b617350af3a6924f4ea20c929ea43ac62758c02e2c12adf89b120e499146543f2151201b05c3993997241a0126bb0f562d03813441913490f35cae74061fc39bf4d7351a42edb4193a60e2fb00f3c6b99eab193a2b61d5700af99e88590a702ed50ffe3e3ea826be22b47a03d32e5deefb61ec8bb5e24d73cce985d2dd42ed0a8fbeef05697800a28318175deeb446c2ccca91d614a5189f2848ea00c65808da98ff561e100ee48a1daf2be00ea6d10360b625ca921630606704b42f0fedf4c2ccf9bcb083b5fd38c15e3ea1c240095bdc3061cb87d8063eec9139615", 0xdf}], 0x3, 0x2, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r4, &(0x7f0000000080)="01", 0x292e9) 03:35:10 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x7f, 0x1, 0x2, 0xf, 0x2}}) 03:35:10 executing program 7: syz_mount_image$iso9660(&(0x7f0000001a80), &(0x7f0000001ac0)='./file0\x00', 0x0, 0x0, &(0x7f0000002bc0), 0x0, &(0x7f0000002c00)={[], [{@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}]}) 03:35:10 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1010c2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x10000027f) sendfile(r0, r1, 0x0, 0x10000027f) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e21, @multicast2}}, 0x0, 0x0, 0x44, 0x0, "704f5992d666aa2888e479ca552ee155f638582a91ca97213cf4774a2e4c350cdc3f9f62a4c21970bd149a52fa311b916bf00b51b808c412ed6b9fcbb5be4a2fb7dd8fd0dfa22b4100"}, 0xd8) r3 = fork() prlimit64(r3, 0x5, &(0x7f0000000000)={0x8, 0x4}, &(0x7f0000000100)) 03:35:10 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', 0x26e1, 0x62) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000001440)=ANY=[@ANYRES32=r0, @ANYRESHEX]) syncfs(r1) setresuid(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x2, @perf_config_ext={0x5}, 0x26, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, 0x0) [ 1153.049154] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) 03:35:11 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001480)={0x1168, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x80}, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xffff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x100}, @NL80211_ATTR_VENDOR_DATA={0xda, 0xc5, "f65a6f9a2c293bd46564343f14fc05b4e4d0a21eee711464474cd1d5a60dc384db293f764e869c32bb9314940f216efc0563f92180562ca948b8ca4f2568341e2ba0a92e6e44509057c6d399734dda62a0ad1c8369f35db550def2bb72c4cb267c29070f6b420a50731592182cb97fba05f72b5ec88b5a8df7c4a534ef0a4790d9f3ce4bcd477e061dd131ca3cd1cdbf1057b8ddd1bd95ca9c6d3721ffa767ad224161625c416811b0f740892e842877063b542e2d3fc52bae61a4102909ebb49e27db52fb2165b1b03f5a858698b18813bcf2808c99"}, @NL80211_ATTR_VENDOR_DATA={0x4}, @NL80211_ATTR_VENDOR_DATA={0x38, 0xc5, "e8107b60042269e135ee21f700861496e3c7f53fef6c5fc4862cd7c10bc25ec8601e3d094e13fc3a59ccd289810a589888e7421b"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xffff}, @NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "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"}]}, 0x1168}, 0x1, 0x0, 0x0, 0x4004880}, 0x4000) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000880)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000600)={0x224, r1, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x20}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0xc, {0x6e, 0x1}}}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x1, 0x2, 0x0, {0x7, 0xefb, 0x0, 0x9, 0x0, 0x0, 0x1, 0x1}, 0x300, 0x7fffffff, 0x6}}, @NL80211_ATTR_IE={0x1ce, 0x2a, [@mesh_id={0x72, 0x6}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x51, @not_ext={{0x1, 0x1}, 0xf8, 0x20, 0x7fff, @broadcast, 0x3, "", 0x20, 0x1, 0x5, [{{0x1, 0x0, 0x1}, @device_a, 0x1113}, {{}, @broadcast, 0x80}, {{0x1, 0x0, 0x1}, @device_b, 0x6}, {{0x1}, @device_a, 0xc0bd}, {{0x0, 0x0, 0x1}, @device_b, 0xfffffff7}]}}, @ssid, @mesh_chsw={0x76, 0x6, {0x1, 0x2, 0x3d, 0x1ff}}, @gcr_ga={0xbd, 0x6}, @random={0x9, 0xac, "7600bf5d4807022fa79fcaca37532db3bd0b9610df881a09864a6f2d0551f62efd0988d80c6a47f4a9cbb741921bda752b2cdeaabd6da515d34e6770fce8bc3009b93f5c2bba834ac95ad37aaedf47a98433583ac87a8d180c6983853d1808b6f7b459a6e0192b0791ee9258adf507a9246536a73d6259e6e72b032a46c05069ef1ab402b09cb5ede89fdc472f981004a25b853a007fba8131f33342164f08badfcfc3713c40ebad1b1a3828"}, @supported_rates={0x1, 0x1, [{0x18}]}, @measure_req={0x26, 0xa2, {0x20, 0x72, 0xff, "3e968942c9e70d0e431e267be8023f2217575cbebf2faf5406b346ba528984d543bfef1d364fa4afdeac57bc6f5494e55fb011cdae4b405106784cbc81480ccd7dfee6f2f09d4fe0d8200d5f87cef6d0f9780bda69ce31292cf3c560a7a6a57378c51833e85b8b6ebffadd3fe631aabf81793eec4993eef4d60b3f291e0b4ba84b4a32022bd85c592c2758d16ebf83df211872d1a945cde60ac434fa229ee0"}}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x8008848}, 0x8041) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3e001c56b1a85d6920569f91226da452008000", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202030033054b00000a00350000000000080026006c000000000000cf0000000000"], 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000828bd7000fcdbdf25010000000600000000000000657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x44000000}, 0x4040000) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:35:11 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000002440), &(0x7f0000002480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0xb, r0, 0x0, 0x0, 0x0) [ 1153.117953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:11 executing program 7: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x6}]}, 0x10) [ 1153.154267] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 1153.175598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:11 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000002440), &(0x7f0000002480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0xb, r0, 0x0, 0x0, 0x0) [ 1153.246093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1153.251384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1153.258094] wlan1: authentication with 08:02:11:00:00:00 timed out 03:35:11 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) r2 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f00000001c0)='./file0\x00') ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400}) r3 = gettid() getpriority(0x0, r3) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="5f2747fca7dc2a4f003e4676cf4df4a73099dfd0dcd1340986204590f4c56b48dd719ddb2b2909a6901eb7fe645c4ca6f8ef", 0x32}, {&(0x7f00000003c0)="dc532d59d6a4e3419d5926eb02d8ffbc2022ba7f77903e5c9562c9281fb2ee9e230271921543e145d2588b143893057ff420f8dd1a4d2f01ef921b6cd42da727c8b0dfa859c0ca0378b84d9f4dba9738f4b0393671fa6660f02c64bb573f8cdc64a52f6dd81077db52a57c52eadf32a317a435af56f07519e696dd3ef23890b65a49b058057138b666f5380c3131a20ddb9df719fbdd44f72bd4e03d5ef2fc6aca3bee8756", 0xa5}, {&(0x7f0000000480)="b3b84b617350af3a6924f4ea20c929ea43ac62758c02e2c12adf89b120e499146543f2151201b05c3993997241a0126bb0f562d03813441913490f35cae74061fc39bf4d7351a42edb4193a60e2fb00f3c6b99eab193a2b61d5700af99e88590a702ed50ffe3e3ea826be22b47a03d32e5deefb61ec8bb5e24d73cce985d2dd42ed0a8fbeef05697800a28318175deeb446c2ccca91d614a5189f2848ea00c65808da98ff561e100ee48a1daf2be00ea6d10360b625ca921630606704b42f0fedf4c2ccf9bcb083b5fd38c15e3ea1c240095bdc3061cb87d8063eec9139615", 0xdf}], 0x3, 0x2, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r4, &(0x7f0000000080)="01", 0x292e9) [ 1153.314118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1153.368697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:11 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x7f, 0x1, 0x2, 0xf, 0x2}}) 03:35:11 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, r3}, 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fstat(r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00'}) fallocate(r4, 0x0, 0x0, 0x0) 03:35:11 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000002440), &(0x7f0000002480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0xb, r0, 0x0, 0x0, 0x0) 03:35:11 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syncfs(0xffffffffffffffff) creat(&(0x7f0000000240)='./file1\x00', 0x0) [ 1153.562158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:11 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) [ 1153.614371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1153.664641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1153.679456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xf, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1153.697745] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1153.719878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1153.760591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:11 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x7f, 0x1, 0x2, 0xf, 0x2}}) 03:35:11 executing program 1: r0 = epoll_create1(0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup2(r2, r0) 03:35:11 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001480)={0x1168, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x80}, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xffff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x100}, @NL80211_ATTR_VENDOR_DATA={0xda, 0xc5, "f65a6f9a2c293bd46564343f14fc05b4e4d0a21eee711464474cd1d5a60dc384db293f764e869c32bb9314940f216efc0563f92180562ca948b8ca4f2568341e2ba0a92e6e44509057c6d399734dda62a0ad1c8369f35db550def2bb72c4cb267c29070f6b420a50731592182cb97fba05f72b5ec88b5a8df7c4a534ef0a4790d9f3ce4bcd477e061dd131ca3cd1cdbf1057b8ddd1bd95ca9c6d3721ffa767ad224161625c416811b0f740892e842877063b542e2d3fc52bae61a4102909ebb49e27db52fb2165b1b03f5a858698b18813bcf2808c99"}, @NL80211_ATTR_VENDOR_DATA={0x4}, @NL80211_ATTR_VENDOR_DATA={0x38, 0xc5, "e8107b60042269e135ee21f700861496e3c7f53fef6c5fc4862cd7c10bc25ec8601e3d094e13fc3a59ccd289810a589888e7421b"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xffff}, @NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "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"}]}, 0x1168}, 0x1, 0x0, 0x0, 0x4004880}, 0x4000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x94, r3, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x1d}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x5f, 0x33, @action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x20}, @broadcast, @broadcast, @random="370c8e7c2a16", {0x3, 0x9}}, @ver_80211n={0x0, 0x9, 0x1, 0x1, 0x0, 0x3, 0x1}}, @tdls_setup_resp={0xc, 0x1, 0x36, 0x3, @val=0x80, @val={0x1, 0x6, [{0x60, 0x1}, {0x1, 0x1}, {0x6c}, {0x36, 0x1}, {0x2, 0x1}, {0x9, 0x1}]}, @val={0x2d, 0x1a, {0x2000, 0x1, 0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x1, 0x401, 0x8e}}, @val={0x65, 0x12, {@initial, @broadcast, @device_b}}}}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x94}, 0x1, 0x0, 0x0, 0x4004}, 0x4004) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:35:11 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syncfs(0xffffffffffffffff) creat(&(0x7f0000000240)='./file1\x00', 0x0) [ 1153.832956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1153.886370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1153.889245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1153.912802] wlan1: authenticate with 08:02:11:00:00:00 [ 1153.913922] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 1153.946615] wlan1: authenticated [ 1153.946931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1153.948024] mac80211_hwsim hwsim85 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP [ 1153.951159] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 1154.002695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1154.003591] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 1154.005288] wlan1: associated [ 1154.197293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1154.247793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1154.315744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1154.370240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:12 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x7f, 0x1, 0x2, 0xf, 0x2}}) 03:35:12 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) io_uring_setup(0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB]) 03:35:12 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, r3}, 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fstat(r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00'}) fallocate(r4, 0x0, 0x0, 0x0) 03:35:12 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) 03:35:12 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syncfs(0xffffffffffffffff) creat(&(0x7f0000000240)='./file1\x00', 0x0) 03:35:12 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000"], 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x40}}, 0x1, 0xfffd, @random=0x7, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:35:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:35:12 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, r3}, 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fstat(r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00'}) fallocate(r4, 0x0, 0x0, 0x0) 03:35:12 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f00000012c0)='smaps_rollup\x00') ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) mq_open(&(0x7f0000001680)='A\x10Q}\x1b\x9e\xfcF\xd6\xb9\xbb\x93~\x01\xdd\xd3\x058x9\xb2io\x88\xe4\xba\x8a;\x9a\x1d:C\v(\xc3v\xb7\x1f\x95rE\xd7\x9d\x9bR\xb9\xc8n\xa0\xeb[\x9bqx\xcf\xcb\x97\x13L\xbe\xe3\xd4r\x90\xab?\x1b\x89\xfcJ\x86\x0e\xb5K;\xad\xab\xd8\xdf\\\x8cF\xcf\xa4\xa7p0\x0f\xce\x15\x03p)\xc0C\xba\xb0&0\xf2\xfb\xf6\'\xe1M\x0ery_vzZ\x88\x15\xf5K\xda\x94q\x98\xa3\xc9@\xa7y\xc2C~\xfcS\x98\xb9\xa4\xda\x1f\f\xff\xb7\xdc,?\x0ez\xf6!\xf7\x14d\xaa\x93\\N!\\]ma\x00%\xd2ehdk4\xc7\xff\xc8^\xa5\xc6\xce\x9b\xb5\x1f|\xd0\xab\xc3^\xb40\xc0\xa6G\f\x0f+\xe1\xbd\xbeq\xe3', 0x882, 0x100, &(0x7f0000000040)={0xa554, 0x7, 0x8001}) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000100)) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) [ 1154.571897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1154.635724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:12 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) 03:35:12 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {0x10}}, 0x24, 0x0) [ 1154.699687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1154.716450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1154.749030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:12 executing program 1: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) io_setup(0xd29, &(0x7f0000000780)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000000)="1c", 0xf}]) 03:35:12 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, r3}, 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fstat(r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00'}) fallocate(r4, 0x0, 0x0, 0x0) [ 1154.825750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:12 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='./file0\x00') pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 03:35:12 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) 03:35:12 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x89a2, &(0x7f0000000440)={'wpan1\x00'}) 03:35:12 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syncfs(0xffffffffffffffff) creat(&(0x7f0000000240)='./file1\x00', 0x0) [ 1155.038418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:13 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x21, 0x0, 0x0) [ 1155.082886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1155.136968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:13 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)='\"', 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r1, 0x0) syz_io_uring_submit(r2, 0x0, 0x0, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) [ 1155.162023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1155.175015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xc0, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:35:13 executing program 5: prctl$PR_MCE_KILL(0x26, 0x1, 0x3) [ 1155.389942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1155.455383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1155.511313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1155.823859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1155.874630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xec0, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:35:13 executing program 5: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000140)='rpc_pipefs\x00', 0x0, r1) 03:35:13 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/locks\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x2) 03:35:13 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)={0x30, r0, 0xc0822a29f05aae81, 0x0, 0x0, {{0x55}, {@val={0x8, 0x55}, @val={0x8}, @val={0xc}}}}, 0x30}}, 0x0) 03:35:13 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) r3 = fsopen(&(0x7f0000000000)='securityfs\x00', 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000040)=0x7) recvmmsg(r0, &(0x7f0000005280)=[{{&(0x7f0000000540)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000005c0)=""/162, 0xa2}, {&(0x7f0000000680)=""/206, 0xce}, {&(0x7f0000000780)=""/184, 0xb8}, {&(0x7f0000000840)=""/114, 0x72}], 0x4}, 0x80000000}, {{&(0x7f0000000900)=@nl, 0x80, &(0x7f0000001e00)=[{&(0x7f0000000980)=""/194, 0xc2}, {&(0x7f0000000a80)=""/234, 0xea}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/230, 0xe6}, {&(0x7f0000004fc0)=""/71, 0x47}, {&(0x7f0000001d00)}, {&(0x7f0000001d40)=""/157, 0x9d}], 0x7, &(0x7f0000001e80)=""/103, 0x67}, 0xedef}, {{&(0x7f0000001f00)=@un=@abs, 0x80, &(0x7f0000003300)=[{&(0x7f0000001f80)=""/58, 0x3a}, {&(0x7f0000001fc0)=""/199, 0xc7}, {&(0x7f00000020c0)=""/4096, 0x1000}, {&(0x7f00000030c0)=""/194, 0xc2}, {&(0x7f00000031c0)=""/9, 0x9}, {&(0x7f0000003200)=""/248, 0xf8}], 0x6, &(0x7f0000003380)=""/211, 0xd3}, 0x7fffffff}, {{&(0x7f0000003480)=@tipc=@name, 0x80, &(0x7f0000003800)=[{&(0x7f0000003500)=""/204, 0xcc}, {&(0x7f0000003600)=""/21, 0x15}, {&(0x7f0000003640)=""/149, 0x95}, {&(0x7f0000003700)=""/115, 0x73}, {&(0x7f0000003780)=""/99, 0x63}], 0x5}, 0x4fc}, {{0x0, 0x0, &(0x7f0000004c80)=[{&(0x7f0000003880)=""/4096, 0x1000}, {&(0x7f0000004880)=""/182, 0xb6}, {&(0x7f0000004940)=""/91, 0x5b}, {&(0x7f00000049c0)=""/61, 0x3d}, {&(0x7f0000004a00)=""/128, 0x80}, {&(0x7f0000004a80)=""/11, 0xb}, {&(0x7f0000004ac0)=""/161, 0xa1}, {&(0x7f0000004b80)=""/246, 0xf6}], 0x8}, 0x3}, {{&(0x7f0000004d00)=@xdp, 0x80, &(0x7f0000004ec0)=[{&(0x7f0000004d80)=""/179, 0xb3}, {&(0x7f0000004e40)=""/113, 0x71}], 0x2, &(0x7f0000004f00)=""/148, 0x94}, 0x3}, {{0x0, 0x0, &(0x7f0000005200), 0x0, &(0x7f0000005240)=""/6, 0x6}, 0x8}], 0x7, 0x12000, 0x0) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="10000000080211000001080211000000080211000000200001000000010001088284cb960c121824"], 0x28) syz_80211_inject_frame(&(0x7f0000001c80), &(0x7f0000001cc0)=@ctrl_frame=@ba={{}, {}, @device_a, @device_b, @compressed={{0x0, 0x0, 0x1, 0x0, 0xa}, {0x2, 0x4}, "bc1d153adea5ce27"}}, 0x1c) 03:35:13 executing program 0: ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000240)=0x5) perf_event_open(0x0, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) prctl$PR_SET_DUMPABLE(0x4, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) keyctl$clear(0x7, 0xfffffffffffffffa) r0 = request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)=']:(#^.\x00', 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, &(0x7f0000000200)='\x00\x00\x00\x00', 0x4, r1) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffd, r1, 0x1) prctl$PR_SET_DUMPABLE(0x4, 0x0) getpriority(0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) 03:35:13 executing program 4: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x4d031, 0xffffffffffffffff, 0x0) 03:35:13 executing program 3: r0 = syz_io_uring_setup(0x4f02, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x102) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x55a1, &(0x7f0000000040), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000200)) syz_io_uring_submit(r3, r2, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)}, 0x0) io_uring_enter(r0, 0x6c64, 0x0, 0x0, 0x0, 0x0) [ 1155.973628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1156.029799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1156.057209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1156.069008] dns_resolver_preparse: 4 callbacks suppressed [ 1156.069030] dns_resolver: Unsupported server list version (0) [ 1156.086265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1156.099323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1156.121210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:14 executing program 7: r0 = syz_io_uring_setup(0x2b2, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 03:35:14 executing program 4: r0 = inotify_init() r1 = inotify_add_watch(r0, &(0x7f0000000300)='.\x00', 0x1630009be) inotify_rm_watch(r0, r1) readv(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/223, 0xdf}], 0x1) [ 1156.181232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:14 executing program 0: ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000240)=0x5) perf_event_open(0x0, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) prctl$PR_SET_DUMPABLE(0x4, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) keyctl$clear(0x7, 0xfffffffffffffffa) r0 = request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)=']:(#^.\x00', 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, &(0x7f0000000200)='\x00\x00\x00\x00', 0x4, r1) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffd, r1, 0x1) prctl$PR_SET_DUMPABLE(0x4, 0x0) getpriority(0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) 03:35:14 executing program 3: ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000240)=0x5) perf_event_open(0x0, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) prctl$PR_SET_DUMPABLE(0x4, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) keyctl$clear(0x7, 0xfffffffffffffffa) r0 = request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)=']:(#^.\x00', 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, &(0x7f0000000200)='\x00\x00\x00\x00', 0x4, r1) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffd, r1, 0x1) prctl$PR_SET_DUMPABLE(0x4, 0x0) getpriority(0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) 03:35:14 executing program 1: ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000240)=0x5) perf_event_open(0x0, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) prctl$PR_SET_DUMPABLE(0x4, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) keyctl$clear(0x7, 0xfffffffffffffffa) r0 = request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)=']:(#^.\x00', 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, &(0x7f0000000200)='\x00\x00\x00\x00', 0x4, r1) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffd, r1, 0x1) prctl$PR_SET_DUMPABLE(0x4, 0x0) getpriority(0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) 03:35:14 executing program 5: ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000240)=0x5) perf_event_open(0x0, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) prctl$PR_SET_DUMPABLE(0x4, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) keyctl$clear(0x7, 0xfffffffffffffffa) r0 = request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)=']:(#^.\x00', 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, &(0x7f0000000200)='\x00\x00\x00\x00', 0x4, r1) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffd, r1, 0x1) prctl$PR_SET_DUMPABLE(0x4, 0x0) getpriority(0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) 03:35:14 executing program 4: r0 = inotify_init() r1 = inotify_add_watch(r0, &(0x7f0000000300)='.\x00', 0x1630009be) inotify_rm_watch(r0, r1) readv(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/223, 0xdf}], 0x1) [ 1156.459036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1156.467527] dns_resolver: Unsupported server list version (0) [ 1156.478883] dns_resolver: Unsupported server list version (0) [ 1156.503650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1156.525514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1156.535830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1156.549637] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:14 executing program 3: ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000240)=0x5) perf_event_open(0x0, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) prctl$PR_SET_DUMPABLE(0x4, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) keyctl$clear(0x7, 0xfffffffffffffffa) r0 = request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)=']:(#^.\x00', 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, &(0x7f0000000200)='\x00\x00\x00\x00', 0x4, r1) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffd, r1, 0x1) prctl$PR_SET_DUMPABLE(0x4, 0x0) getpriority(0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) [ 1156.583783] dns_resolver: Unsupported server list version (0) [ 1156.635283] dns_resolver: Unsupported server list version (0) [ 1156.728650] dns_resolver: Unsupported server list version (0) [ 1156.825729] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING) [ 1159.259500] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1159.267451] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1159.272574] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1159.278554] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1159.281571] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1159.283146] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1161.297213] Bluetooth: hci3: command 0x0409 tx timeout [ 1163.345159] Bluetooth: hci3: command 0x041b tx timeout [ 1165.394130] Bluetooth: hci3: command 0x040f tx timeout [ 1167.441132] Bluetooth: hci3: command 0x0419 tx timeout [ 1186.765492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1186.766480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1186.769194] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1186.868388] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1186.869927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1186.873614] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1187.424406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1187.453582] wlan1: authenticate with 08:02:11:00:00:00 [ 1187.455884] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 1187.481463] wlan1: authenticated [ 1187.482421] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1187.482806] mac80211_hwsim hwsim87 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP [ 1187.486689] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 1187.544965] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 1187.546652] wlan1: associated [ 1187.549565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1187.556218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1187.868466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1187.918138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:45 executing program 3: ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000240)=0x5) perf_event_open(0x0, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) prctl$PR_SET_DUMPABLE(0x4, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) keyctl$clear(0x7, 0xfffffffffffffffa) r0 = request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)=']:(#^.\x00', 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, &(0x7f0000000200)='\x00\x00\x00\x00', 0x4, r1) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffd, r1, 0x1) prctl$PR_SET_DUMPABLE(0x4, 0x0) getpriority(0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) 03:35:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x33fe0, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:35:45 executing program 7: ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000240)=0x5) perf_event_open(0x0, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) prctl$PR_SET_DUMPABLE(0x4, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) keyctl$clear(0x7, 0xfffffffffffffffa) r0 = request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)=']:(#^.\x00', 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, &(0x7f0000000200)='\x00\x00\x00\x00', 0x4, r1) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffd, r1, 0x1) prctl$PR_SET_DUMPABLE(0x4, 0x0) getpriority(0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) 03:35:45 executing program 0: ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000240)=0x5) perf_event_open(0x0, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) prctl$PR_SET_DUMPABLE(0x4, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) keyctl$clear(0x7, 0xfffffffffffffffa) r0 = request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)=']:(#^.\x00', 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, &(0x7f0000000200)='\x00\x00\x00\x00', 0x4, r1) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffd, r1, 0x1) prctl$PR_SET_DUMPABLE(0x4, 0x0) getpriority(0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) 03:35:45 executing program 4: r0 = inotify_init() r1 = inotify_add_watch(r0, &(0x7f0000000300)='.\x00', 0x1630009be) inotify_rm_watch(r0, r1) readv(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/223, 0xdf}], 0x1) 03:35:45 executing program 5: ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000240)=0x5) perf_event_open(0x0, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) prctl$PR_SET_DUMPABLE(0x4, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) keyctl$clear(0x7, 0xfffffffffffffffa) r0 = request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)=']:(#^.\x00', 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, &(0x7f0000000200)='\x00\x00\x00\x00', 0x4, r1) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffd, r1, 0x1) prctl$PR_SET_DUMPABLE(0x4, 0x0) getpriority(0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) 03:35:45 executing program 1: ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000240)=0x5) perf_event_open(0x0, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) prctl$PR_SET_DUMPABLE(0x4, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) keyctl$clear(0x7, 0xfffffffffffffffa) r0 = request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)=']:(#^.\x00', 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, &(0x7f0000000200)='\x00\x00\x00\x00', 0x4, r1) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffd, r1, 0x1) prctl$PR_SET_DUMPABLE(0x4, 0x0) getpriority(0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) 03:35:45 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x20, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000008021100000108021100000008e410000000200001157edc80519ffbcccbba9e52b3022c020000000100010882848a960c121824d9"], 0x28) [ 1188.032914] dns_resolver: Unsupported server list version (0) [ 1188.071913] dns_resolver: Unsupported server list version (0) 03:35:46 executing program 4: r0 = inotify_init() r1 = inotify_add_watch(r0, &(0x7f0000000300)='.\x00', 0x1630009be) inotify_rm_watch(r0, r1) readv(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/223, 0xdf}], 0x1) [ 1188.087692] dns_resolver: Unsupported server list version (0) [ 1188.092406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1188.097206] dns_resolver: Unsupported server list version (0) [ 1188.108607] dns_resolver: Unsupported server list version (0) [ 1188.148143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1188.159256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1188.214806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1188.215591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1188.273794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1188.527448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1188.585990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1188.599257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1188.650210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x7ffff000, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:35:46 executing program 0: ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000240)=0x5) perf_event_open(0x0, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) prctl$PR_SET_DUMPABLE(0x4, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) keyctl$clear(0x7, 0xfffffffffffffffa) r0 = request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)=']:(#^.\x00', 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, &(0x7f0000000200)='\x00\x00\x00\x00', 0x4, r1) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffd, r1, 0x1) prctl$PR_SET_DUMPABLE(0x4, 0x0) getpriority(0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) 03:35:46 executing program 5: ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000240)=0x5) perf_event_open(0x0, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) prctl$PR_SET_DUMPABLE(0x4, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) keyctl$clear(0x7, 0xfffffffffffffffa) r0 = request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)=']:(#^.\x00', 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, &(0x7f0000000200)='\x00\x00\x00\x00', 0x4, r1) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffd, r1, 0x1) prctl$PR_SET_DUMPABLE(0x4, 0x0) getpriority(0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) 03:35:46 executing program 7: ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000240)=0x5) perf_event_open(0x0, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) prctl$PR_SET_DUMPABLE(0x4, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) keyctl$clear(0x7, 0xfffffffffffffffa) r0 = request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)=']:(#^.\x00', 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, &(0x7f0000000200)='\x00\x00\x00\x00', 0x4, r1) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffd, r1, 0x1) prctl$PR_SET_DUMPABLE(0x4, 0x0) getpriority(0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) 03:35:46 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000840)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0), 0x0, &(0x7f0000000a00)={[{@none}]}) 03:35:46 executing program 1: ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000240)=0x5) perf_event_open(0x0, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) prctl$PR_SET_DUMPABLE(0x4, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) keyctl$clear(0x7, 0xfffffffffffffffa) r0 = request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)=']:(#^.\x00', 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, &(0x7f0000000200)='\x00\x00\x00\x00', 0x4, r1) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffd, r1, 0x1) prctl$PR_SET_DUMPABLE(0x4, 0x0) getpriority(0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) 03:35:46 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000540)=@data_frame={@no_qos=@type01={{0x0, 0x2, 0x7, 0x0, 0x1, 0x1}, {0x310}, @device_b, @from_mac=@broadcast, @device_b, {0x8, 0xff}}, @random="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"}, 0x42a) 03:35:46 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='clear_refs\x00') perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x3, 0xec, 0x20, 0x8, 0x0, 0x80000001, 0x40, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0xffffffffffffffa8}, 0x2010, 0x4, 0x7af6, 0x1, 0xffffffff, 0x3f, 0x9, 0x0, 0x3, 0x0, 0x9}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x2) pwritev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)='3', 0x1}], 0x1, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syncfs(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRES64=r1, @ANYRESHEX, @ANYRES16, @ANYRESDEC, @ANYRES64, @ANYRES32, @ANYRESOCT]) [ 1188.773634] dns_resolver: Unsupported server list version (0) [ 1188.846929] dns_resolver: Unsupported server list version (0) [ 1188.853651] cgroup: Need name or subsystem set [ 1188.867227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1188.871795] cgroup: Need name or subsystem set [ 1188.885842] dns_resolver: Unsupported server list version (0) [ 1188.908014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1188.921606] dns_resolver: Unsupported server list version (0) [ 1188.928601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:46 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r0, 0x0) 03:35:46 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000840)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0), 0x0, &(0x7f0000000a00)={[{@none}]}) [ 1188.968330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1188.983851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:46 executing program 7: ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000240)=0x5) perf_event_open(0x0, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) prctl$PR_SET_DUMPABLE(0x4, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) keyctl$clear(0x7, 0xfffffffffffffffa) r0 = request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)=']:(#^.\x00', 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, &(0x7f0000000200)='\x00\x00\x00\x00', 0x4, r1) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffd, r1, 0x1) prctl$PR_SET_DUMPABLE(0x4, 0x0) getpriority(0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) [ 1189.026172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:46 executing program 0: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0) [ 1189.047325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:46 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r0, 0x0, 0x51, 0x20012041, 0x0, 0x3) [ 1189.100490] cgroup: Need name or subsystem set 03:35:47 executing program 1: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) getpriority(0x1, 0x0) [ 1189.158647] dns_resolver: Unsupported server list version (0) 03:35:47 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000840)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0), 0x0, &(0x7f0000000a00)={[{@none}]}) 03:35:47 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000001100)=[{0x0, 0x0, 0x7}], 0x0, &(0x7f0000001180)={[{@mode}], [{@hash}]}) [ 1189.295500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1189.319104] cgroup: Need name or subsystem set [ 1189.351152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1189.378456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1189.431131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1189.471384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:47 executing program 3: syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) 03:35:47 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000840)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0), 0x0, &(0x7f0000000a00)={[{@none}]}) 03:35:47 executing program 0: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000001c80)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) 03:35:47 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$sock(r0, &(0x7f0000001380)={&(0x7f0000000000)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f00000012c0)=[@txtime={{0x18}}], 0x18}, 0x0) 03:35:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xfffffdef, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:35:47 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @val={0x3, 0x1, 0xad}, @void, @void, @void, @void, @void}, 0x39) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:35:47 executing program 7: times(&(0x7f0000000000)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) readv(r0, &(0x7f0000001600)=[{&(0x7f0000001200)=""/12, 0xc}, {&(0x7f0000001240)=""/103, 0x67}, {0x0}, {0x0}], 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) 03:35:47 executing program 5: pread64(0xffffffffffffffff, 0x0, 0x0, 0x610) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x7, 0x0, 0x5d, 0x8, 0x0, 0x0, 0x800a1, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_config_ext={0xbd0d513}, 0x1060, 0xed67000000000, 0x7fffffff, 0x1, 0x4, 0x0, 0x200, 0x0, 0x9, 0x0, 0x8000}, 0xffffffffffffffff, 0x2, r0, 0x8) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x10001}}, './file0\x00'}) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000000c0)) readv(r1, &(0x7f0000000680)=[{&(0x7f0000000180)=""/224, 0xe0}, {&(0x7f0000000080)=""/41, 0x29}, {&(0x7f0000000300)=""/212, 0xd4}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/252, 0xfc}], 0x6) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4) [ 1189.611628] cgroup: Need name or subsystem set [ 1189.626440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1189.640350] raw_sendmsg: syz-executor.1 forgot to set AF_INET. Fix it! [ 1189.655544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1189.687347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1189.715978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:47 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80084503, 0x0) [ 1189.749523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:47 executing program 4: syz_emit_ethernet(0x3a, &(0x7f0000000380)={@broadcast, @empty, @val={@void}, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x21, 0x0, @private=0xa010102, @rand_addr=0x64010101, {[@ssrr={0x89, 0x3, 0xa3}]}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "68a7c7", 0x0, ',\vI'}}}}}}, 0x0) [ 1189.771942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:47 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) syz_io_uring_setup(0x24bf, &(0x7f0000000000), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) [ 1190.070771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1190.086982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1190.121103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1190.136027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1190.171008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:48 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5413, 0x0) 03:35:48 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1, @ANYRES64=r2]) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x4800) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0xa4b1) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) readv(r3, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000340)=""/30, 0x2b}], 0x24) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r4, &(0x7f0000000080)="01", 0x292e9) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000400)={&(0x7f0000000240), 0xc, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000428bd7000fedbdf254300000008000300", @ANYRES32=0x0, @ANYBLOB="0c0058094a000000000000000c00580048000000000000000c00580050000000000000000c00580013000000000000000c003ef5de3093f13ea333a6ce896d58001c000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x48880}, 0x4) 03:35:48 executing program 1: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000480)={{0x2, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0xffffffffffffffff}) msgrcv(0x0, &(0x7f0000000500)={0x0, ""/4096}, 0x1008, 0x2, 0x0) msgsnd(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02"], 0xfd1, 0x0) 03:35:48 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) syz_io_uring_setup(0x24bf, &(0x7f0000000000), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 03:35:48 executing program 7: times(&(0x7f0000000000)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) readv(r0, &(0x7f0000001600)=[{&(0x7f0000001200)=""/12, 0xc}, {&(0x7f0000001240)=""/103, 0x67}, {0x0}, {0x0}], 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) 03:35:48 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@ctrl_frame=@cf_end={{}, {0x7f}, @device_a, @from_mac=@device_b}, 0x10) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r4) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x30, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x30}}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000040)={0x24, r5, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x800) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:35:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x6, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:35:48 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) [ 1190.402229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1190.411492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1190.477297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1190.477895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:48 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) syz_io_uring_setup(0x24bf, &(0x7f0000000000), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 03:35:48 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) [ 1190.548593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1190.576555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:48 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 03:35:48 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/251, 0xfb}, {&(0x7f0000000380)=""/66, 0x42}], 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000340)=0x1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000000)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') pread64(r2, 0x0, 0x0, 0x610) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000000)) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0xc0, 0x8) 03:35:48 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1, @ANYRES64=r2]) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x4800) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0xa4b1) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) readv(r3, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000340)=""/30, 0x2b}], 0x24) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r4, &(0x7f0000000080)="01", 0x292e9) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000400)={&(0x7f0000000240), 0xc, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000428bd7000fedbdf254300000008000300", @ANYRES32=0x0, @ANYBLOB="0c0058094a000000000000000c00580048000000000000000c00580050000000000000000c00580013000000000000000c003ef5de3093f13ea333a6ce896d58001c000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x48880}, 0x4) 03:35:48 executing program 7: times(&(0x7f0000000000)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) readv(r0, &(0x7f0000001600)=[{&(0x7f0000001200)=""/12, 0xc}, {&(0x7f0000001240)=""/103, 0x67}, {0x0}, {0x0}], 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) 03:35:48 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 03:35:48 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) syz_io_uring_setup(0x24bf, &(0x7f0000000000), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 03:35:48 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) [ 1190.865437] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1190.901005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1190.915244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1190.952961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1190.974086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0xc, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:35:48 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000000)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @val={0x2d, 0x1a, {0x400, 0x1, 0x1, 0x0, {0x7000000000, 0x1b94, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x2, 0x5}}}, 0x44) 03:35:49 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 03:35:49 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) [ 1191.742181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1191.785764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:49 executing program 7: times(&(0x7f0000000000)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) readv(r0, &(0x7f0000001600)=[{&(0x7f0000001200)=""/12, 0xc}, {&(0x7f0000001240)=""/103, 0x67}, {0x0}, {0x0}], 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) [ 1191.815695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1191.858383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1191.872106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:49 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) getdents64(r0, 0x0, 0x0) [ 1191.911532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:49 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xa, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r1, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000011c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./fi']) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1192.189199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1192.222313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1192.237241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1192.273929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1192.286952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:35:50 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1, @ANYRES64=r2]) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x4800) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0xa4b1) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) readv(r3, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000340)=""/30, 0x2b}], 0x24) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r4, &(0x7f0000000080)="01", 0x292e9) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000400)={&(0x7f0000000240), 0xc, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000428bd7000fedbdf254300000008000300", @ANYRES32=0x0, @ANYBLOB="0c0058094a000000000000000c00580048000000000000000c00580050000000000000000c00580013000000000000000c003ef5de3093f13ea333a6ce896d58001c000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x48880}, 0x4) 03:35:50 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000003e80)={0x0, 0x0, &(0x7f0000003e40)={&(0x7f0000003b80)={0x14, 0x10, 0x0, 0x801}, 0x14}}, 0x0) 03:35:50 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000011d00), &(0x7f0000011d40), &(0x7f0000011d80)) 03:35:50 executing program 7: openat$vcsu(0xffffffffffffff9c, &(0x7f0000005d80), 0x0, 0x0) 03:35:50 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r2 = dup(r0) getpeername$inet6(r2, 0x0, &(0x7f0000000580)) 03:35:50 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000003091bdb63cf127e0821caa800eebebebd6f23b9a34166803e579ac3a359cae2b9ed72add038260d4ba59111b3cda8f6f259cc303afb20c14efaac33aca38cabfbf56303f5b30000ffff59adeab06a481ac97db661ceb3fcacbb7e7f64b519423e273a3a03edf46d0686dd50268332a79f610497081c0241fd8bde3e60aa746d07467608d4909a81cd7cd9", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000"], 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:35:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0xe, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:35:50 executing program 0: r0 = syz_io_uring_setup(0x5b4f, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000380)=0x0) pipe(&(0x7f0000000100)) inotify_init1(0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) [ 1192.514022] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1192.540466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1192.569504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1192.608849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1192.668130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1192.824987] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING) [ 1193.037548] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1193.051957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1193.094922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1195.416649] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1195.424877] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1195.426682] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1195.434860] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1195.437709] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1195.439874] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1197.457280] Bluetooth: hci0: command 0x0409 tx timeout [ 1199.505291] Bluetooth: hci0: command 0x041b tx timeout [ 1201.553155] Bluetooth: hci0: command 0x040f tx timeout [ 1203.601090] Bluetooth: hci0: command 0x0419 tx timeout [ 1221.231530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1221.232900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1221.257314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1221.269922] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1221.271271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1221.275339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1221.817947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1221.876361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1221.932479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1222.242471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1222.295256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:36:20 executing program 7: perf_event_open(&(0x7f0000000280)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:36:20 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1, @ANYRES64=r2]) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x4800) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0xa4b1) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) readv(r3, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000340)=""/30, 0x2b}], 0x24) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r4, &(0x7f0000000080)="01", 0x292e9) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000400)={&(0x7f0000000240), 0xc, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000428bd7000fedbdf254300000008000300", @ANYRES32=0x0, @ANYBLOB="0c0058094a000000000000000c00580048000000000000000c00580050000000000000000c00580013000000000000000c003ef5de3093f13ea333a6ce896d58001c000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x48880}, 0x4) 03:36:20 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000100)=[{0x0, 0x2}, {}], 0x2, 0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0xee01}}) 03:36:20 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000380)='./file1\x00', 0xffffffffffffff9c) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200081}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(r0, &(0x7f0000000000)='./file1\x00', r0, &(0x7f0000000040)='./file0\x00') r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x4, 0x1}, 0x6) getpeername(r3, &(0x7f0000000300), &(0x7f00000001c0)=0x80) bind(r3, &(0x7f0000000480)=@l2tp={0x2, 0x0, @empty, 0x2}, 0x80) r4 = dup(r3) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r4) 03:36:20 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='trusted.overlay.upper\x00', &(0x7f0000000140)=""/94, 0x5e) 03:36:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0xf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:36:20 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0xfffffffffffffc00, 0x11, 0xd}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r4, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x49}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0), &(0x7f0000000000)=@mgmt_frame=@assoc_resp={@with_ht={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x7}, @device_a, @device_b, @initial, {0x2, 0x8}}, @ver_80211n={0x0, 0x1f, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1}}, 0x1, 0x0, @default, @void, @void}, 0x22) 03:36:20 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa, 0x8010, r0, 0x10000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x660083, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0xf4, 0x0, 0x0, 0x70bd27, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x24048044}, 0x2000c850) syz_io_uring_setup(0x3a89, &(0x7f0000000440)={0x0, 0x34f2, 0x1, 0x3, 0x29, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) openat$vcs(0xffffffffffffff9c, &(0x7f0000001800), 0x80000, 0x0) 03:36:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a940)=[{&(0x7f00000003c0)={0x28, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64=0x3f50}]}, 0x28}], 0x1}, 0x0) [ 1222.553911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1222.607888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1222.620570] wlan1: authenticate with 08:02:11:00:00:00 [ 1222.621999] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 1222.627990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:36:20 executing program 7: perf_event_open(&(0x7f0000000280)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1222.677859] wlan1: authenticated [ 1222.679345] mac80211_hwsim hwsim89 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP [ 1222.679359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1222.683635] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 1222.699393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1222.742817] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 1222.743314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1222.744765] wlan1: associated [ 1222.812298] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 03:36:20 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000001480)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @empty}}) 03:36:20 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) lstat(0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000480)="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") perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 03:36:20 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chmod(&(0x7f0000000000)='./file1\x00', 0x0) 03:36:20 executing program 7: perf_event_open(&(0x7f0000000280)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:36:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1b}]}, 0x1c}}, 0x0) [ 1223.026985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1223.043280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1223.090204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1223.140943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:36:21 executing program 7: perf_event_open(&(0x7f0000000280)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:36:21 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000080)="01", 0x292e9) 03:36:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x1a, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:36:21 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000500)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40}, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="840ed7cb019cc4c626bd522b9b297ab0228f"}, {&(0x7f0000000440)="f117c9546fdf673e848c4c40aae7d578e6a70ca6261a43b646cf390b39b5b5f8e490cbc2954c666512f0df544eee3737d7dfed7d929427a7110deb7349410be3c1ce5c55ab6187bb39dc6908fd34b3b34203a5184310cdcb173d03bad191e46181"}, {&(0x7f0000000300)="9fb8735a86"}]}}], 0x63, 0x24048894) [ 1223.453919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1223.509539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1223.569932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1223.887264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1223.933648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:36:21 executing program 5: syz_open_dev$evdev(&(0x7f0000001a00), 0x3, 0x220000) 03:36:21 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0), 0x20) 03:36:22 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 03:36:22 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000001c0)='./file1\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) 03:36:22 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000500)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40}, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="840ed7cb019cc4c626bd522b9b297ab0228f"}, {&(0x7f0000000440)="f117c9546fdf673e848c4c40aae7d578e6a70ca6261a43b646cf390b39b5b5f8e490cbc2954c666512f0df544eee3737d7dfed7d929427a7110deb7349410be3c1ce5c55ab6187bb39dc6908fd34b3b34203a5184310cdcb173d03bad191e46181"}, {&(0x7f0000000300)="9fb8735a86"}]}}], 0x63, 0x24048894) 03:36:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x25, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:36:22 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000500)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40}, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="840ed7cb019cc4c626bd522b9b297ab0228f"}, {&(0x7f0000000440)="f117c9546fdf673e848c4c40aae7d578e6a70ca6261a43b646cf390b39b5b5f8e490cbc2954c666512f0df544eee3737d7dfed7d929427a7110deb7349410be3c1ce5c55ab6187bb39dc6908fd34b3b34203a5184310cdcb173d03bad191e46181"}, {&(0x7f0000000300)="9fb8735a86"}]}}], 0x63, 0x24048894) 03:36:22 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000) 03:36:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="14002c"], 0x30}}, 0x0) [ 1224.210937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:36:22 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@delpolicy={0x50, 0x14, 0x401, 0x0, 0x0, {{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x3}}, 0x50}}, 0x0) [ 1224.292828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1224.295651] [ 1224.295930] ====================================================== [ 1224.296790] WARNING: possible circular locking dependency detected [ 1224.297615] 6.1.0-next-20221219 #1 Not tainted [ 1224.298217] ------------------------------------------------------ [ 1224.298998] syz-executor.1/305828 is trying to acquire lock: [ 1224.299726] ffff88800ff12170 (&journal->j_barrier){+.+.}-{3:3}, at: jbd2_journal_lock_updates+0x162/0x310 [ 1224.300998] [ 1224.300998] but task is already holding lock: [ 1224.301730] ffff88800ff10b90 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_change_inode_journal_flag+0x17f/0x550 [ 1224.306471] [ 1224.306471] which lock already depends on the new lock. [ 1224.306471] [ 1224.307512] [ 1224.307512] the existing dependency chain (in reverse order) is: [ 1224.308489] [ 1224.308489] -> #3 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 1224.309417] ext4_writepages+0x1a9/0x5b0 [ 1224.310038] do_writepages+0x1b4/0x6a0 [ 1224.310630] filemap_fdatawrite_wbc+0x14b/0x1b0 [ 1224.311324] __filemap_fdatawrite_range+0xba/0x100 [ 1224.312071] filemap_write_and_wait_range+0xa5/0x130 [ 1224.312837] __iomap_dio_rw+0x5ea/0x1bd0 [ 1224.313465] iomap_dio_rw+0x40/0xa0 [ 1224.314032] ext4_file_write_iter+0xb5d/0x1930 [ 1224.314701] vfs_write+0xa4f/0xe40 [ 1224.315267] ksys_write+0x12b/0x260 [ 1224.315841] do_syscall_64+0x3f/0x90 [ 1224.316434] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1224.317198] [ 1224.317198] -> #2 (&sb->s_type->i_mutex_key#6){++++}-{3:3}: [ 1224.318168] down_read+0x9c/0x450 [ 1224.318726] ext4_bmap+0x52/0x470 [ 1224.319280] bmap+0xb0/0x130 [ 1224.319772] jbd2_journal_bmap+0xac/0x190 [ 1224.320406] jbd2_journal_flush+0x857/0xc10 [ 1224.321050] __ext4_ioctl+0x9be/0x4560 [ 1224.321650] __x64_sys_ioctl+0x19e/0x210 [ 1224.322265] do_syscall_64+0x3f/0x90 [ 1224.322821] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1224.323589] [ 1224.323589] -> #1 (&journal->j_checkpoint_mutex){+.+.}-{3:3}: [ 1224.324560] mutex_lock_io_nested+0x14c/0x1330 [ 1224.325237] jbd2_journal_flush+0x19e/0xc10 [ 1224.325874] __ext4_ioctl+0x9be/0x4560 [ 1224.326472] __x64_sys_ioctl+0x19e/0x210 [ 1224.327087] do_syscall_64+0x3f/0x90 [ 1224.327641] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1224.328410] [ 1224.328410] -> #0 (&journal->j_barrier){+.+.}-{3:3}: [ 1224.329275] __lock_acquire+0x2a02/0x5e70 [ 1224.329916] lock_acquire.part.0+0x11e/0x340 [ 1224.330579] __mutex_lock+0x136/0x14e0 [ 1224.331183] jbd2_journal_lock_updates+0x162/0x310 [ 1224.331911] ext4_change_inode_journal_flag+0x187/0x550 [ 1224.332683] ext4_fileattr_set+0x14fa/0x19f0 [ 1224.333320] vfs_fileattr_set+0x780/0xb90 [ 1224.333917] do_vfs_ioctl+0xa6c/0x1af0 [ 1224.334481] __x64_sys_ioctl+0x110/0x210 [ 1224.335074] do_syscall_64+0x3f/0x90 [ 1224.335605] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1224.336347] [ 1224.336347] other info that might help us debug this: [ 1224.336347] [ 1224.337338] Chain exists of: [ 1224.337338] &journal->j_barrier --> &sb->s_type->i_mutex_key#6 --> &sbi->s_writepages_rwsem [ 1224.337338] [ 1224.338985] Possible unsafe locking scenario: [ 1224.338985] [ 1224.339745] CPU0 CPU1 [ 1224.340352] ---- ---- [ 1224.340946] lock(&sbi->s_writepages_rwsem); [ 1224.341534] lock(&sb->s_type->i_mutex_key#6); [ 1224.342468] lock(&sbi->s_writepages_rwsem); [ 1224.343351] lock(&journal->j_barrier); [ 1224.343892] [ 1224.343892] *** DEADLOCK *** [ 1224.343892] [ 1224.344657] 4 locks held by syz-executor.1/305828: [ 1224.345303] #0: ffff88800ff06438 (sb_writers#3){.+.+}-{0:0}, at: do_vfs_ioctl+0xa2f/0x1af0 [ 1224.346465] #1: ffff8880489a21d0 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: vfs_fileattr_set+0x14c/0xb90 [ 1224.347768] #2: ffff8880489a2370 (mapping.invalidate_lock){++++}-{3:3}, at: ext4_change_inode_journal_flag+0x126/0x550 [ 1224.349198] #3: ffff88800ff10b90 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_change_inode_journal_flag+0x17f/0x550 [ 1224.350627] [ 1224.350627] stack backtrace: [ 1224.351190] CPU: 0 PID: 305828 Comm: syz-executor.1 Not tainted 6.1.0-next-20221219 #1 [ 1224.352199] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1224.353242] Call Trace: [ 1224.353585] [ 1224.353895] dump_stack_lvl+0x8f/0xb7 [ 1224.354431] check_noncircular+0x263/0x2e0 [ 1224.355007] ? __pfx_check_noncircular+0x10/0x10 [ 1224.355640] ? check_irq_usage+0x189/0xc60 [ 1224.356227] ? __bfs+0x29e/0x6b0 [ 1224.356690] ? __pfx_check_irq_usage+0x10/0x10 [ 1224.357303] __lock_acquire+0x2a02/0x5e70 [ 1224.357869] ? __pfx_mark_lock.part.0+0x10/0x10 [ 1224.358500] ? __pfx___lock_acquire+0x10/0x10 [ 1224.359117] ? perf_trace_lock_acquire+0xfd/0x530 [ 1224.359779] lock_acquire.part.0+0x11e/0x340 [ 1224.360385] ? jbd2_journal_lock_updates+0x162/0x310 [ 1224.361063] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1224.361723] ? rcu_read_lock_sched_held+0x42/0x80 [ 1224.362381] ? trace_lock_acquire+0x14c/0x1c0 [ 1224.362983] ? jbd2_journal_lock_updates+0x162/0x310 [ 1224.363652] ? lock_acquire+0x32/0xc0 [ 1224.364175] ? jbd2_journal_lock_updates+0x162/0x310 [ 1224.364873] __mutex_lock+0x136/0x14e0 [ 1224.365410] ? jbd2_journal_lock_updates+0x162/0x310 [ 1224.366086] ? lock_is_held_type+0xdb/0x130 [ 1224.366665] ? jbd2_journal_lock_updates+0x162/0x310 [ 1224.367333] ? __pfx___mutex_lock+0x10/0x10 [ 1224.367909] ? lock_release+0x3b6/0x750 [ 1224.368454] ? jbd2_journal_lock_updates+0x154/0x310 [ 1224.369130] ? __pfx_lock_release+0x10/0x10 [ 1224.369715] ? __pfx_do_raw_write_lock+0x10/0x10 [ 1224.370354] ? lock_acquire+0x32/0xc0 [ 1224.370876] ? jbd2_journal_lock_updates+0xc5/0x310 [ 1224.371552] jbd2_journal_lock_updates+0x162/0x310 [ 1224.372213] ? __pfx_jbd2_journal_lock_updates+0x10/0x10 [ 1224.372926] ? _find_next_bit+0x11b/0x150 [ 1224.373476] ? lock_is_held_type+0xdb/0x130 [ 1224.374052] ext4_change_inode_journal_flag+0x187/0x550 [ 1224.374739] ? __ext4_journal_stop+0x10b/0x1f0 [ 1224.375347] ext4_fileattr_set+0x14fa/0x19f0 [ 1224.375942] ? __pfx_ext4_fileattr_set+0x10/0x10 [ 1224.376583] ? lock_acquire+0x32/0xc0 [ 1224.377093] ? down_write+0x157/0x220 [ 1224.377601] ? memset+0x24/0x50 [ 1224.378044] ? fileattr_fill_flags+0x27f/0x320 [ 1224.378648] vfs_fileattr_set+0x780/0xb90 [ 1224.379199] ? __pfx_vfs_fileattr_set+0x10/0x10 [ 1224.379812] ? __mnt_want_write+0x1fe/0x2f0 [ 1224.380383] ? memset+0x24/0x50 [ 1224.380836] do_vfs_ioctl+0xa6c/0x1af0 [ 1224.381357] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1224.381933] ? inode_has_perm+0x171/0x1d0 [ 1224.382509] ? __pfx_file_has_perm+0x10/0x10 [ 1224.383108] ? __pfx___fget_files+0x10/0x10 [ 1224.383663] ? lock_acquire+0x32/0xc0 [ 1224.384176] ? selinux_file_ioctl+0xb5/0x260 [ 1224.384771] __x64_sys_ioctl+0x110/0x210 [ 1224.385302] do_syscall_64+0x3f/0x90 [ 1224.385783] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1224.386459] RIP: 0033:0x7f7ff687ab19 [ 1224.386933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1224.389185] RSP: 002b:00007f7ff3df0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1224.390132] RAX: ffffffffffffffda RBX: 00007f7ff698df60 RCX: 00007f7ff687ab19 [ 1224.391013] RDX: 0000000020000040 RSI: 0000000040086602 RDI: 0000000000000003 [ 1224.391892] RBP: 00007f7ff68d4f6d R08: 0000000000000000 R09: 0000000000000000 [ 1224.392793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1224.393683] R13: 00007ffe5136bfaf R14: 00007f7ff3df0300 R15: 0000000000022000 [ 1224.394622] [ 1224.400871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:36:22 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000500)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40}, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="840ed7cb019cc4c626bd522b9b297ab0228f"}, {&(0x7f0000000440)="f117c9546fdf673e848c4c40aae7d578e6a70ca6261a43b646cf390b39b5b5f8e490cbc2954c666512f0df544eee3737d7dfed7d929427a7110deb7349410be3c1ce5c55ab6187bb39dc6908fd34b3b34203a5184310cdcb173d03bad191e46181"}, {&(0x7f0000000300)="9fb8735a86"}]}}], 0x63, 0x24048894) 03:36:22 executing program 5: r0 = io_uring_setup(0x454c, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x17, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00o'], 0x1) 03:36:22 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000001c0)='./file1\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) 03:36:22 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000500)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40}, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="840ed7cb019cc4c626bd522b9b297ab0228f"}, {&(0x7f0000000440)="f117c9546fdf673e848c4c40aae7d578e6a70ca6261a43b646cf390b39b5b5f8e490cbc2954c666512f0df544eee3737d7dfed7d929427a7110deb7349410be3c1ce5c55ab6187bb39dc6908fd34b3b34203a5184310cdcb173d03bad191e46181"}, {&(0x7f0000000300)="9fb8735a86"}]}}], 0x63, 0x24048894) 03:36:22 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000840)='ns/pid\x00') [ 1224.709903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1224.759576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:36:22 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000280)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLK\xa4g?K)\xa0\xf0\x9b8Y\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x05\x00\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\xff#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x80L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x04\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf27x!N;\xb5x\t\xa4E\xbe\x93r\x04\a\x00\x00\x00\x00\x00\x00\x00\"\xa1\xd8\x06>\xc9\xe2\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\x01\x01\x00\x00\x00\x00\x00\x00\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/\\\x01\xe2\xba\x0e\xe3\xf95\x1d\x10\xa7\x97\xbf\x8e\xac\x81\xc9\x13\x8e\xb3\xf3\xb5d\xa1\xcf\x1d\x92\x9b\x9b\xa7\x12F\xa0\xe0\xff\x1a\x8e\xe2ae^=\n\xe1\xa6\xb8\xe9v\x8f2\xf4\xac\xe5\xdf\xffi`Mo\x1e\x1cMN<\x1b\xd8\xfe\xd6P\xcdQ\x83\xfa\xe7\x1d\xd5\x01n\xa7~\x8b\x90/62\xff;.S\xf7\x0flwa\x16\xf0\xf2(\x96V,\xd7s\xaaOE\xd3H\xfd`}\xd8\xbc\x9a\xca\xe3\n\xd7fCe\xd8\xbb\xdao\xb0\x85\xcc\xedv\x94\xb5\xc4\xb6[>\xb9,\xfch_-s\x94,F\x15\xd8m5>\x94\x84\xf5\x00\xc3\xf6m\xc7B\t{\xe0d\xc65(\x18\x9c\xad\x13b6\xca\x16\x95\xcb^zF\xd0\x1a\x8dP\x94\x19\xa4\xbfr=\xb6\xae0D\'e7p\xe6\fI\xdd\x12\x82\xc4\x8ax\xe5d\xfe\x9a\x1b\xa6\v\xc9\x151\x0f\xdf\bq\xb6 n\xc5\xd1\xa2\xac]\xa4w6\xf5=\x97f\xdd\x91_\xf8?Kr', 0x0) ftruncate(r0, 0x2000000) fallocate(r0, 0x0, 0x0, 0xf9c) 03:36:22 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000500)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40}, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="840ed7cb019cc4c626bd522b9b297ab0228f"}, {&(0x7f0000000440)="f117c9546fdf673e848c4c40aae7d578e6a70ca6261a43b646cf390b39b5b5f8e490cbc2954c666512f0df544eee3737d7dfed7d929427a7110deb7349410be3c1ce5c55ab6187bb39dc6908fd34b3b34203a5184310cdcb173d03bad191e46181"}, {&(0x7f0000000300)="9fb8735a86"}]}}], 0x63, 0x24048894) 03:36:22 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000001c0)='./file1\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) 03:36:22 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/53, 0x35, 0xf42) 03:36:22 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000500)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40}, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="840ed7cb019cc4c626bd522b9b297ab0228f"}, {&(0x7f0000000440)="f117c9546fdf673e848c4c40aae7d578e6a70ca6261a43b646cf390b39b5b5f8e490cbc2954c666512f0df544eee3737d7dfed7d929427a7110deb7349410be3c1ce5c55ab6187bb39dc6908fd34b3b34203a5184310cdcb173d03bad191e46181"}, {&(0x7f0000000300)="9fb8735a86"}]}}], 0x63, 0x24048894) 03:36:22 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000) 03:36:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x2e, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:36:22 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000001540)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x40, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x1f, 0x41}}, [{0xdd, 0x1e, "070df4fae5f24cb261feee97afb52e714bf0bcb75223219a9013b782d0f2"}, {0xdd, 0xe0, "ba646797074a390f9a545cbfaeda6788f95e436dc1f71e1100e8575a6fa766a7fe0715f978fc3eac881c319ae7320a5ba049bc0e1ffef6e008c8bdceee6497d7d6baf073aae7aee2ce78b837daf0fab3401ddebe82f394adf5728545b52c08ad0cede882291565f6b4360daf473d6ca922117a483439dbacb0cf1e4a2bf26a928aff0288d7e684063d12df1d18001ea5fb50b49cb516f054feffd065ac6d7edde646fc88f941a2191a89ff6c2c135bf81fdd309169cd444337737740905d6c9e715263004dc2ba5969541505ca9157a06060c40c664b1764224a11b39d335e29"}, {0xdd, 0xde, "c26dbec44651626a52742421c64b7ee50e498473c45ceae1e3b4288e48ecdfcf4348264d52a8400ae87111304b162a4aa928703e416d5111fc0ef2c993a8e2a4eed4ebc4a49998595d7b8712298c2c7d2533d65be8ca6fbd1baa908836b18a1a00fe15c9c22c41502ffc2e7920de0630e0e1892d3b34c949f52482a184aed93489763f81c30b73568dc9c06331c94ce3282fbae115c393aa478ba000b06e8974ffabe2f15abec2405f0cb16419cdfa3abab66c3b231020c72923c157c403fa9b5e9a388033f50f127cedc4ad993af8bcc547081e8920d57a3e725acbce8d"}, {0xdd, 0xd5, "1d4ab88b1b03dc206c206714e4cb8914656ab81d6b73c23afd98af24ccd71864e85026f9a7ac527132d9510ca2860a1e255f4e4bf1607e05ce6f65418e1f1d87126f71e63759d6621f72491cdc79f268dc3d2298a6dc7aae1142d5e38e3384469e382a1a99c7909088f8d08b0b9ae2f147f681945182ac62cdc5352f676138df455b256e676a31f42d927a95fba0fa2b9894fea1c2f9227b912ec3a3883ad3be6ee4a2654f0a9cc958a11a1d7597e1e2b91d512ee576a57a55c8a8f672b987237be5dbacfed2c02e84c27bdf03eedf07acdc550dca"}, {0xdd, 0x6e, "3d7f442c7ce63db2c5b0290b0d549daf06b5501b79fd07052b2296102b2031de29d1fd5d2eb65d00158893b471cd3faadc5b4835c01a4f30d88717fcce52765360fc7dd4b2551eed14b32d7277d4c8d83fc82a07c52c37dd714e9c3e5dcaf66325d00cb036a545f5e1931d129243"}, {0xdd, 0x8d, "42938607d99d03955bf4e5aa9343b745d39bd864c859c2ab246470ea4e1d85978354062fa55ecfefc6a9685b0619a18d97eb991fb37d87df1ce14538ea1a05bf484d4759f48eb6047832805632daee10d82202cbad2b142c96a9c864ef3b73ab8d5d3dc46741049e506dcfa084d3e5be7c24bba22371166c2f5dd3f1f1e9fc081e890c273c056a4baba0bdc1c1"}, {0xdd, 0xac, "0f637c907278540758bf4667881873674930a9464ae1776d7c1c642e1e7565d92a76a7df7cf8a263c55a17432130445a1796abf669af19c65d90b13d92a2bae94fb514044d7ff74c0aa5bd60b845caa523e6d9136292f7309bba43fe47bd64283c9c2dbd15bba55d9026be706b8e1bf30422ddc63a32d546f2ebcfc93eb3f21c310a8ff80721bb4d4ee60fe987b4afd7ace880a3edddbe2d6442cfe3ad881b1e47a820dd4709462016c05114"}]}, 0x4a5) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="030000000031fdbe8d1614030a653000"]) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r0) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xb8, r4, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1c04}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x59}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xd772b814f3e0aeb3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x21}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8001}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x2200c880}, 0x4000) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000006c0), &(0x7f0000000700)=@data_frame={@qos_ht={{{@type11={{0x0, 0x2, 0xb, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x9}, @device_b, @broadcast, @broadcast, {0x8, 0x3}, @broadcast}, {0x2, 0x1}}, {@type10={{0x0, 0x2, 0xd, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x40}, @initial, @device_b, @initial, {0xb, 0x1}}, {0x6, 0x0, 0x2, 0x1, 0x60}}}, @ver_80211n={0x0, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}}, @random="6836b4b73a8c08b6c953618aae058be575dee4062b2e5ad0fcf1fd88f72462e4f258aa28ecfcfe3005f27d3ba8ed3aae48050f0906ebda3ac33ab916140c0dae54d93279ea6f8bc40fb81305c424539413f63a1bede36e86d22160c4a2ac932794488260aebf73d0768a40480950be492890cb4ca8ad93bd255045237cc71ff8d7e0025ac236f42da58022886fcae54911cb00530fd024c9071d907b3cc2606c07dbe60a9afba296bfde174fd23331f90dcefd0a1cf44720e33618413d1d092fccbf7fff35eda0411f16d9e924cafe835e64e3dfb2e51a397d326fa67e5d7bc2a4babf0e3020b7820daf1e70f34d706d7961b042e51feb17a6eb74a2f90c721461d046cbe6ff750b28ab9aab13e2f5d125b0b4e0c4b99f7c855557d123546d01739d08a9ef3d6d0660e5ccd5bad0fd1766ef2beb009189966b2203d8f85550ab8bf30c4f2c542a4bab44de34306d73c7e45f77fbb55427d40f1ddef0a7b15a8ad1bafd5e341477fa7e094a33e7585af5039945673e6a79f1428454b9bd64622f1bd0d1eb144ce9eda8cb194152f395bd84ccbbbb5dc90e3a435d4bd6c705dfb20741df1b80fa278826403af18b30657fef86c9fa04f18c2474282d4dd54760b458b4163c1491cf7f356da1d8ec3025c64497d6f790fa2455668daeae9e1257d85f089a591d846e1a5be8938625d66ee43834dfd687965669f84648e901e46d6a4263d4bab8cb00f91b0a83676991f92c189f1d66eb00ddba1c17ae5bdc52c7702e258a4267f10f9cdb8edc853bcd3658cd4a10eeef83487b59b006a88603b9fa8282bbaf636ab4b10cb86c84a4dabb63e2f2c41e7aaaeeadf03c54571e130fdbfd9917b188be0af12870a88cf53296cf68b5c1288c8fe573eb7b9141574a3d4c4dadc131633c9b7fe4c0bffda6f812aa342bd9d7d6ef87ad2761e12e4d5fa2ea97b746a62be98e1ef257630ffa1b9af2a9415ccdffef80f9a98704dd9d1e57f9c872e778ba77c202afb571379e949188452300beeaa84ff4d07b911ea00b29fca746f2982e8428c9d588161e78835b68a35f5baa2a424e7637ec63d048854375c01f3f7ad2292c154710961a1d33de7a39406df1afffebe32f344bc18473c0c6ec979f53538c41fdd1f501d325dad525d411043d28812a8ccf4a355ae2b690db138c59410fa706552b7820faf5f671335c33c4a1cf4f815b9c815a659116ee1d3329beaa1ef0b617598ae7673914e5358cb279db6b283a90468042cce162340a6d705eb065fa954559b8514c125561a33b7899c2c2ecd206a1e898b852f7a49d9d417a062c013a32f10596129cc027864a0eb3fcfa53bd9e3bd0470ac055a56cada6a091e176e9ff02f3baec36f8145b930dd925e333690586036f2e9b00c3ac59160f150bd395f7c0eabce41135c9adc9620250623cbf6b27215edd23573663aa837bdba452ca74b672ddee00ae0532fc8a1a436b5e4ea13d755e6b627de8362e4f7c82827e7f2151d10d38f2a939045dc28e2f4e77e2a88b80a49fe67db2352d6f6b21c2979b867462d05a30509ac810f262e0d76510ff9c736121de6261b39631ed7c6dd0499d6520e8c3f78a4307bd5190aaabfbabd22e08e5c4ba0184135a16f5e0cc7bc5151f23057d9918bb02547d5f4e34ae76eff56060d74fcc4fe325f728fd2c779edebf0d6c3d920d5a8790625ff5b11aaf2b6e455cb526ac9c251f61c03bba0544e60ee45d3d3d57250d216ece2c20c6ead57a9435113673456108553f3d627eb24ec546001627aeaaf8d833eee6049281bd59a1180a44b420616510092d39f05bb1c38b3059f8be4adfa406507aca254b74fbbb4f7b0d58a8cea5e302d4bb2e60fd57aeadfc00f3062d5a2f0d662ad1734f9de2efad441ba6e04b505abcb47641b831a19e1d2242e5569489199664100dd372d73219e074c55be84f6c350a047a580f328e7e55bddc9af303229c7c59b478d2b0e26c36b7502f9e5ca4e336ecf97cc82fdc0b9f8f2659255e541e62f7079460547de73329f3ce8eadbe6ef63b04a167165a55cdc0ffac16ea98f84caed23b5f1a73fd53812b8eb04f0d7de5683109b556ad96c90be128d7993c2c63f5968b6651b03f9f7261927d801f3427b60c448ecbe04866971681daa217012a348554365dfe530dcb4c483a52391ae83fc572c2f0b4b4cb6b3a6a70180c0480f78e97820b96f1af9e2af885449832f1b4244e67b5a8867421b33cdc7f09e5082533e701c6dd49fcc3a05f436944193ac0c9333959c601e30dc970434da0bdf973e168d9907fc27558a58fda1064bee82e85c44550c633c8e6a6c1e50293d89358a5b8ce6e9ef1fc3df30bea7085a51bfb7a054adfe9d41670bcaef22c8cf25b189584fc6dcfc288ff030000918016b5fe7d7cf630aeae37cef203c1f18d95d3063aa015c93839b82f7496de046706c8954c375b48de6b879788e8df40f9b879903a60119a1b67974e1f3b3fcd7a09a7290bb5ae6bce4a575b74b610dccf54e29da602a5eea23014b67b3c78039f4479c8134562a29a90616852ddaa9a47eb35976a34b71fa6da6068915acb3053c70ac4dd9d7be048d348d4ab4c665471b9f9dc8a9fe29dc7def9b983bc911bbc6c64bb73f82d02dc05f7a7bc7893325048acbb7d23d552640bb5036f2e804d7ad9ae5425a5f409ea7880bf3749962a8b2fe334a2808095cbd38c70b44ca5e7d64f06f456fd667b6a9fe4036a4e3af8d7b0778e4b18e8398c2defbd5107fe4de940689dd0c6269b8af1046da859dde228e426c3d1ef53294a8f22fd29da532e2698994d5f49d3a4488df7"}, 0x80b) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000001080)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001040)={&(0x7f0000000f80)={0xac, r1, 0x200, 0x5, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffffc, 0x5d}}}}, [@NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x80000000}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7fff}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x563}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x60a}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfff}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x40}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x688}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x2000050}, 0x4040000) [ 1224.872705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:36:22 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000) [ 1224.961083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:36:22 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000280)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLK\xa4g?K)\xa0\xf0\x9b8Y\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x05\x00\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\xff#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x80L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x04\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf27x!N;\xb5x\t\xa4E\xbe\x93r\x04\a\x00\x00\x00\x00\x00\x00\x00\"\xa1\xd8\x06>\xc9\xe2\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\x01\x01\x00\x00\x00\x00\x00\x00\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/\\\x01\xe2\xba\x0e\xe3\xf95\x1d\x10\xa7\x97\xbf\x8e\xac\x81\xc9\x13\x8e\xb3\xf3\xb5d\xa1\xcf\x1d\x92\x9b\x9b\xa7\x12F\xa0\xe0\xff\x1a\x8e\xe2ae^=\n\xe1\xa6\xb8\xe9v\x8f2\xf4\xac\xe5\xdf\xffi`Mo\x1e\x1cMN<\x1b\xd8\xfe\xd6P\xcdQ\x83\xfa\xe7\x1d\xd5\x01n\xa7~\x8b\x90/62\xff;.S\xf7\x0flwa\x16\xf0\xf2(\x96V,\xd7s\xaaOE\xd3H\xfd`}\xd8\xbc\x9a\xca\xe3\n\xd7fCe\xd8\xbb\xdao\xb0\x85\xcc\xedv\x94\xb5\xc4\xb6[>\xb9,\xfch_-s\x94,F\x15\xd8m5>\x94\x84\xf5\x00\xc3\xf6m\xc7B\t{\xe0d\xc65(\x18\x9c\xad\x13b6\xca\x16\x95\xcb^zF\xd0\x1a\x8dP\x94\x19\xa4\xbfr=\xb6\xae0D\'e7p\xe6\fI\xdd\x12\x82\xc4\x8ax\xe5d\xfe\x9a\x1b\xa6\v\xc9\x151\x0f\xdf\bq\xb6 n\xc5\xd1\xa2\xac]\xa4w6\xf5=\x97f\xdd\x91_\xf8?Kr', 0x0) ftruncate(r0, 0x2000000) fallocate(r0, 0x0, 0x0, 0xf9c) 03:36:22 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000280)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLK\xa4g?K)\xa0\xf0\x9b8Y\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x05\x00\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\xff#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x80L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x04\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf27x!N;\xb5x\t\xa4E\xbe\x93r\x04\a\x00\x00\x00\x00\x00\x00\x00\"\xa1\xd8\x06>\xc9\xe2\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\x01\x01\x00\x00\x00\x00\x00\x00\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/\\\x01\xe2\xba\x0e\xe3\xf95\x1d\x10\xa7\x97\xbf\x8e\xac\x81\xc9\x13\x8e\xb3\xf3\xb5d\xa1\xcf\x1d\x92\x9b\x9b\xa7\x12F\xa0\xe0\xff\x1a\x8e\xe2ae^=\n\xe1\xa6\xb8\xe9v\x8f2\xf4\xac\xe5\xdf\xffi`Mo\x1e\x1cMN<\x1b\xd8\xfe\xd6P\xcdQ\x83\xfa\xe7\x1d\xd5\x01n\xa7~\x8b\x90/62\xff;.S\xf7\x0flwa\x16\xf0\xf2(\x96V,\xd7s\xaaOE\xd3H\xfd`}\xd8\xbc\x9a\xca\xe3\n\xd7fCe\xd8\xbb\xdao\xb0\x85\xcc\xedv\x94\xb5\xc4\xb6[>\xb9,\xfch_-s\x94,F\x15\xd8m5>\x94\x84\xf5\x00\xc3\xf6m\xc7B\t{\xe0d\xc65(\x18\x9c\xad\x13b6\xca\x16\x95\xcb^zF\xd0\x1a\x8dP\x94\x19\xa4\xbfr=\xb6\xae0D\'e7p\xe6\fI\xdd\x12\x82\xc4\x8ax\xe5d\xfe\x9a\x1b\xa6\v\xc9\x151\x0f\xdf\bq\xb6 n\xc5\xd1\xa2\xac]\xa4w6\xf5=\x97f\xdd\x91_\xf8?Kr', 0x0) ftruncate(r0, 0x2000000) fallocate(r0, 0x0, 0x0, 0xf9c) [ 1224.999959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:36:22 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000001c0)='./file1\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) 03:36:22 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x3) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) [ 1225.032514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1225.057523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:36:22 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000) [ 1225.086841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:36:23 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003980), 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="00010000", @ANYRES16=r2, @ANYBLOB="010000000000000000f83f00000008000300", @ANYRES32=r1], 0x100}}, 0x0) [ 1225.148558] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1225.394915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1225.404278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1225.409195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1225.445136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:36:23 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000280)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLK\xa4g?K)\xa0\xf0\x9b8Y\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x05\x00\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\xff#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x80L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x04\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf27x!N;\xb5x\t\xa4E\xbe\x93r\x04\a\x00\x00\x00\x00\x00\x00\x00\"\xa1\xd8\x06>\xc9\xe2\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\x01\x01\x00\x00\x00\x00\x00\x00\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/\\\x01\xe2\xba\x0e\xe3\xf95\x1d\x10\xa7\x97\xbf\x8e\xac\x81\xc9\x13\x8e\xb3\xf3\xb5d\xa1\xcf\x1d\x92\x9b\x9b\xa7\x12F\xa0\xe0\xff\x1a\x8e\xe2ae^=\n\xe1\xa6\xb8\xe9v\x8f2\xf4\xac\xe5\xdf\xffi`Mo\x1e\x1cMN<\x1b\xd8\xfe\xd6P\xcdQ\x83\xfa\xe7\x1d\xd5\x01n\xa7~\x8b\x90/62\xff;.S\xf7\x0flwa\x16\xf0\xf2(\x96V,\xd7s\xaaOE\xd3H\xfd`}\xd8\xbc\x9a\xca\xe3\n\xd7fCe\xd8\xbb\xdao\xb0\x85\xcc\xedv\x94\xb5\xc4\xb6[>\xb9,\xfch_-s\x94,F\x15\xd8m5>\x94\x84\xf5\x00\xc3\xf6m\xc7B\t{\xe0d\xc65(\x18\x9c\xad\x13b6\xca\x16\x95\xcb^zF\xd0\x1a\x8dP\x94\x19\xa4\xbfr=\xb6\xae0D\'e7p\xe6\fI\xdd\x12\x82\xc4\x8ax\xe5d\xfe\x9a\x1b\xa6\v\xc9\x151\x0f\xdf\bq\xb6 n\xc5\xd1\xa2\xac]\xa4w6\xf5=\x97f\xdd\x91_\xf8?Kr', 0x0) ftruncate(r0, 0x2000000) fallocate(r0, 0x0, 0x0, 0xf9c) 03:36:23 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000280)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLK\xa4g?K)\xa0\xf0\x9b8Y\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x05\x00\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\xff#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x80L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x04\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf27x!N;\xb5x\t\xa4E\xbe\x93r\x04\a\x00\x00\x00\x00\x00\x00\x00\"\xa1\xd8\x06>\xc9\xe2\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\x01\x01\x00\x00\x00\x00\x00\x00\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/\\\x01\xe2\xba\x0e\xe3\xf95\x1d\x10\xa7\x97\xbf\x8e\xac\x81\xc9\x13\x8e\xb3\xf3\xb5d\xa1\xcf\x1d\x92\x9b\x9b\xa7\x12F\xa0\xe0\xff\x1a\x8e\xe2ae^=\n\xe1\xa6\xb8\xe9v\x8f2\xf4\xac\xe5\xdf\xffi`Mo\x1e\x1cMN<\x1b\xd8\xfe\xd6P\xcdQ\x83\xfa\xe7\x1d\xd5\x01n\xa7~\x8b\x90/62\xff;.S\xf7\x0flwa\x16\xf0\xf2(\x96V,\xd7s\xaaOE\xd3H\xfd`}\xd8\xbc\x9a\xca\xe3\n\xd7fCe\xd8\xbb\xdao\xb0\x85\xcc\xedv\x94\xb5\xc4\xb6[>\xb9,\xfch_-s\x94,F\x15\xd8m5>\x94\x84\xf5\x00\xc3\xf6m\xc7B\t{\xe0d\xc65(\x18\x9c\xad\x13b6\xca\x16\x95\xcb^zF\xd0\x1a\x8dP\x94\x19\xa4\xbfr=\xb6\xae0D\'e7p\xe6\fI\xdd\x12\x82\xc4\x8ax\xe5d\xfe\x9a\x1b\xa6\v\xc9\x151\x0f\xdf\bq\xb6 n\xc5\xd1\xa2\xac]\xa4w6\xf5=\x97f\xdd\x91_\xf8?Kr', 0x0) ftruncate(r0, 0x2000000) fallocate(r0, 0x0, 0x0, 0xf9c) 03:36:23 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000010c0)={0x20, 0x11, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x2}, @typed={0x4, 0x0, 0x0, 0x0, @binary}]}, 0x20}], 0x1}, 0x0) 03:36:23 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003980), 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="00010000", @ANYRES16=r2, @ANYBLOB="010000000000000000f83f00000008000300", @ANYRES32=r1], 0x100}}, 0x0) 03:36:23 executing program 1: openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsu(0x0, 0x43, 0x2000) perf_event_open(0x0, 0x0, 0x7, r0, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000080)="01", 0x292e9) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) 03:36:23 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x0, 0x0, 0x0) 03:36:23 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) ftruncate(r0, 0x9) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 03:36:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x3b, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1225.599262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1225.622467] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.0'. 03:36:23 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) 03:36:23 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000280)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLK\xa4g?K)\xa0\xf0\x9b8Y\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x05\x00\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\xff#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x80L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x04\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf27x!N;\xb5x\t\xa4E\xbe\x93r\x04\a\x00\x00\x00\x00\x00\x00\x00\"\xa1\xd8\x06>\xc9\xe2\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\x01\x01\x00\x00\x00\x00\x00\x00\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/\\\x01\xe2\xba\x0e\xe3\xf95\x1d\x10\xa7\x97\xbf\x8e\xac\x81\xc9\x13\x8e\xb3\xf3\xb5d\xa1\xcf\x1d\x92\x9b\x9b\xa7\x12F\xa0\xe0\xff\x1a\x8e\xe2ae^=\n\xe1\xa6\xb8\xe9v\x8f2\xf4\xac\xe5\xdf\xffi`Mo\x1e\x1cMN<\x1b\xd8\xfe\xd6P\xcdQ\x83\xfa\xe7\x1d\xd5\x01n\xa7~\x8b\x90/62\xff;.S\xf7\x0flwa\x16\xf0\xf2(\x96V,\xd7s\xaaOE\xd3H\xfd`}\xd8\xbc\x9a\xca\xe3\n\xd7fCe\xd8\xbb\xdao\xb0\x85\xcc\xedv\x94\xb5\xc4\xb6[>\xb9,\xfch_-s\x94,F\x15\xd8m5>\x94\x84\xf5\x00\xc3\xf6m\xc7B\t{\xe0d\xc65(\x18\x9c\xad\x13b6\xca\x16\x95\xcb^zF\xd0\x1a\x8dP\x94\x19\xa4\xbfr=\xb6\xae0D\'e7p\xe6\fI\xdd\x12\x82\xc4\x8ax\xe5d\xfe\x9a\x1b\xa6\v\xc9\x151\x0f\xdf\bq\xb6 n\xc5\xd1\xa2\xac]\xa4w6\xf5=\x97f\xdd\x91_\xf8?Kr', 0x0) ftruncate(r0, 0x2000000) fallocate(r0, 0x0, 0x0, 0xf9c) 03:36:23 executing program 7: ioctl$CDROMGETSPINDOWN(0xffffffffffffffff, 0x531d, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) r1 = inotify_init1(0x0) r2 = pidfd_getfd(r0, r0, 0x0) r3 = openat(r2, &(0x7f0000000140)='./file0\x00', 0x400000, 0x0) r4 = dup2(r1, r0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0x2}], 0x1, &(0x7f0000000700)}, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(r4, 0x5396, &(0x7f0000000400)={0x67e}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x480000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r5, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x28, 0x0, 0x400, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x2d3, 0x49}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4001) [ 1225.667590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1225.673188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:36:23 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000280)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLK\xa4g?K)\xa0\xf0\x9b8Y\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x05\x00\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\xff#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x80L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x04\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf27x!N;\xb5x\t\xa4E\xbe\x93r\x04\a\x00\x00\x00\x00\x00\x00\x00\"\xa1\xd8\x06>\xc9\xe2\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\x01\x01\x00\x00\x00\x00\x00\x00\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/\\\x01\xe2\xba\x0e\xe3\xf95\x1d\x10\xa7\x97\xbf\x8e\xac\x81\xc9\x13\x8e\xb3\xf3\xb5d\xa1\xcf\x1d\x92\x9b\x9b\xa7\x12F\xa0\xe0\xff\x1a\x8e\xe2ae^=\n\xe1\xa6\xb8\xe9v\x8f2\xf4\xac\xe5\xdf\xffi`Mo\x1e\x1cMN<\x1b\xd8\xfe\xd6P\xcdQ\x83\xfa\xe7\x1d\xd5\x01n\xa7~\x8b\x90/62\xff;.S\xf7\x0flwa\x16\xf0\xf2(\x96V,\xd7s\xaaOE\xd3H\xfd`}\xd8\xbc\x9a\xca\xe3\n\xd7fCe\xd8\xbb\xdao\xb0\x85\xcc\xedv\x94\xb5\xc4\xb6[>\xb9,\xfch_-s\x94,F\x15\xd8m5>\x94\x84\xf5\x00\xc3\xf6m\xc7B\t{\xe0d\xc65(\x18\x9c\xad\x13b6\xca\x16\x95\xcb^zF\xd0\x1a\x8dP\x94\x19\xa4\xbfr=\xb6\xae0D\'e7p\xe6\fI\xdd\x12\x82\xc4\x8ax\xe5d\xfe\x9a\x1b\xa6\v\xc9\x151\x0f\xdf\bq\xb6 n\xc5\xd1\xa2\xac]\xa4w6\xf5=\x97f\xdd\x91_\xf8?Kr', 0x0) ftruncate(r0, 0x2000000) fallocate(r0, 0x0, 0x0, 0xf9c) 03:36:23 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003980), 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="00010000", @ANYRES16=r2, @ANYBLOB="010000000000000000f83f00000008000300", @ANYRES32=r1], 0x100}}, 0x0) [ 1225.722305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1225.746580] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1225.813081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:36:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000880)={0x14, r1, 0x1, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) [ 1225.935926] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1226.033168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1226.082991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1226.134145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1226.149906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1226.261489] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING) [ 1230.609120] Bluetooth: hci0: Opcode 0x c03 failed: -110 VM DIAGNOSIS: 11:27:33 Registers: info registers vcpu 0 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff824889c5 RDI=ffffffff87dc95e0 RBP=ffffffff87dc95a0 RSP=ffff88804a6d6fa8 R8 =0000000000000001 R9 =000000000000000a R10=000000000000002d R11=0000000000000001 R12=000000000000002d R13=ffffffff87dc95a0 R14=0000000000000010 R15=ffffffff824889b0 RIP=ffffffff82488a1d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f7ff3df0700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe643782d000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe643782b000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2cf24000 CR3=0000000036270000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=8100000000000000 4007 FPR6=8740000000000000 4008 FPR7=8740000000000000 4008 XMM00=0000000000000000403ce9202fc23cd0 XMM01=00000000000000000000000000000000 XMM02=000000000000000040f1cc0000000000 XMM03=e5b45c8935100e293a07e73f87f4eaaa XMM04=0000000000000000bf86b76f16102ee0 XMM05=000000c00008cf70000000c00008cf40 XMM06=00000000000000003fd3333333333333 XMM07=00000000000000003fe0797b4b95a358 XMM08=00000000000000003fdfbefac97b6c8c XMM09=00000000000000003f95894631506260 XMM10=00000000000000003f999999999999a0 XMM11=000000c00008cd10000000c00008cce0 XMM12=000000c00008cca0000000c00008cc90 XMM13=000000c00008cc20000000c00008cdc0 XMM14=000000c00008cc70000000c00008cc80 XMM15=000000c00008cc30000000c00008cd00 info registers vcpu 1 RAX=1ffffffff0bffdee RBX=ffffffff85ffef74 RCX=ffffffff842bc944 RDX=0000000000000000 RSI=ffffffff8644ef82 RDI=ffffffff85ffef74 RBP=ffffffff85ffef74 RSP=ffff888037fef508 R8 =ffffffff8644ef82 R9 =ffffffff8608af9c R10=ffffed1006ffdec7 R11=0000000000038001 R12=ffffffff85ffef74 R13=ffffffff85ffef74 R14=ffffffff85ffef74 R15=dffffc0000000000 RIP=ffffffff8112c53f RFL=00000017 [----APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555555af5400 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 ffff888000000000 00000000 00000000 TR =0040 fffffe1a3208b000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe1a32089000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555556282c58 CR3=0000000032f10000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=8100000000000000 4007 FPR6=8740000000000000 4008 FPR7=8740000000000000 4008 XMM00=00000000000000000000000000000000 XMM01=00007fc782cd27c000007fc782cd27c8 XMM02=00007fc782cd27e000007fc782cd27c0 XMM03=00007fc782cd27c800007fc782cd27c0 XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000