x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x76}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0xd2001, &(0x7f0000000280)={'trans=unix,', {[{@cache_loose}, {@cache_none}, {@version_u}, {@version_9p2000}, {@fscache}, {@debug={'debug', 0x3d, 0x6}}], [{@func={'func', 0x3d, 'FILE_CHECK'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '%-$$!&'}}]}}) 21:23:04 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r5, 0x1}, 0x14}}, 0x0) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:23:04 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x1}, 0x14}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) tkill(0x0, 0x12) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:23:04 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x1}, 0x14}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) tkill(0x0, 0x12) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:23:04 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x1}, 0x14}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) tkill(0x0, 0x12) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:23:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f000000f3c0)={0x0, 0x0, &(0x7f000000f380)={&(0x7f000000f340)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0xc0000) [ 576.486805] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 576.501381] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 576.508491] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 576.534038] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 21:23:04 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) [ 576.560983] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 21:23:04 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=client,dfltuid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e6f6465766d61702c643dcbef989dd1b98783829bd5db3eb430c33c924109217bb27953d0351c7a19bd9223f096512c75758c1dc503243d8257d828450e6805f980c131fd2d9261b118cd75978e06999f7082bd0d2b9eaac12f35f93fdda5a951c3b6d570debc3dc4bc2ea63648ec3746c6123e1a3097186a581448f3a4da5d6f0086b118c7cfdefad69e801248dcf6eec9f87d5af35dff3024e09a7825f8f4a7462e9f7c64ce033e1569b1fd5fdeafe0ed2fa2f6a41c326cad7d4d98d396f02d1699bd0445fdec15f258f463fe2282de50e01f2e208f8efb1baa26", @ANYRESHEX=0x0, @ANYBLOB=',\x00']) 21:23:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x8, @mcast2, 0xaab}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) 21:23:04 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:23:04 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:23:04 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:23:04 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xc2000258) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x8f4) r3 = inotify_init1(0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)={'#! ', './file0', [{0x20, ']\xac--@\xda'}, {0x20, ']-'}, {}], 0xa, "f875d937e8b1a468e5f61838ab77a84aad660d5103c52916d82f3e8f7d795a4c21ef8a8700761064664901e13b"}, 0x43) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$KDGKBLED(r4, 0x4b64, &(0x7f0000000200)) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x8f4) r5 = dup2(0xffffffffffffffff, r3) r6 = openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000040), 0x2, 0x0) ftruncate(r6, 0x1000003) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) unshare(0x48020200) r7 = syz_open_dev$hidraw(&(0x7f0000000100), 0x40, 0x400) dup2(r7, r2) 21:23:04 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:23:21 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r7, 0x1}, 0x14}}, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r6}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r8, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:23:21 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x1}, 0x14}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) tkill(0x0, 0x12) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:23:21 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x1}, 0x14}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) tkill(0x0, 0x12) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:23:21 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) fstat(r2, &(0x7f0000000000)) close(r1) execveat(r0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000440)=[&(0x7f00000003c0)='!\\:\x00', &(0x7f0000000400)='nl80211\x00'], &(0x7f00000004c0)=[&(0x7f0000000480)='nl80211\x00'], 0x100) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r5, 0x1}, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x14, r6, 0x200, 0x70bd2d}, 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRES16, @ANYRES16=r6, @ANYBLOB="01002cbd7000fcdbdf252000000008000300", @ANYRES32=0x0, @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x20044080}, 0x4) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x1ba) 21:23:21 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:23:21 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1, 0xff}}, './file0\x00'}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r7, 0x1}, 0x14}}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0xfffffffffffffcb7, 0x0, 0x100, 0x0, 0x25dfdbfe}, 0x14}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000280)={{0x1, 0x1, 0x18, r5, @out_args}, './file0\x00'}) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r8) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_STATX={0x15, 0x1, 0x0, r3, &(0x7f00000003c0), &(0x7f0000000340)='./file0\x00', 0x20, 0x1000, 0x0, {0x0, r8}}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0\x00'}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4}, 0x8c) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:23:21 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x1}, 0x14}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) tkill(0x0, 0x12) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:23:21 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r5, 0x1}, 0x14}}, 0x0) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 593.539831] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 593.562831] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 593.582681] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 593.600449] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 593.607346] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 21:23:21 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) [ 593.630086] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 593.644496] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 593.667516] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 593.705350] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 21:23:21 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f00000003c0)='./file0\x00', 0x42000, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b00000000010000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="0200000003000000040000406a000f", 0xf, 0x800}, {&(0x7f0000010500)="ffff3f00000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1002}, {&(0x7f0000011600)="ed41000000080000dff6655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x20ff}, {&(0x7f0000000400)="584f68d322fd59a774d97b8994c198d7cf76ac9fe8f143158ca3d5781514c2a90ca743cccb03c6ccae7cd6d29cbdd887843e5775a9e1dc8c7c992e8f66151a185899a3ab39c747ecbadc097e12844bc023a6d3bbb7070db7b0a5a9eb261ed7c9f1568feb4570dfe95731508f92efe0ffab66f2a1745762bedbf1a79f4993b87accfe928c457565dfdc597325e1f1f3e0c9378d980546b5d41c1908b7ffd50f381bea61aa5eaf3c7ce1b0", 0xaa, 0x400}, {&(0x7f00000004c0)="45be2313e9971878aa3ba4bc849fbacf970a63190de125f6158f4b183cd9399799f16daff047792c7c8c532ff74c42112b06d2abf117b68b55ea40ac2af0ddfa6e3319c7477d3102eb5881e3402292a0c937211afd0ad2f67f2012508a03b2d67d3b7f3dee6e5b082e703e67", 0x6c, 0x8000}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) name_to_handle_at(r2, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@reiserfs_5={0x14, 0x5, {0x8, 0x5, 0x0, 0x200, 0x378d}}, &(0x7f0000000300), 0xc00) fsetxattr$security_capability(r0, &(0x7f0000000340), &(0x7f0000000380)=@v2, 0x14, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r4, 0x3, 0xe3ff, 0x8000) connect$inet6(r4, &(0x7f0000001180)={0xa, 0x4e24, 0x9, @remote, 0x1ff}, 0x1c) write$binfmt_elf64(r1, &(0x7f00000008c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x6, 0x9, 0x0, 0x101, 0x2, 0x3, 0x5, 0x193, 0x40, 0x94, 0x1, 0x9, 0x38, 0x2, 0x365, 0x9, 0xfff9}, [{0x0, 0x325, 0x788, 0x6, 0xffff, 0x7fffffff, 0x9, 0x9}, {0x2, 0x1f, 0xffffffff, 0x7, 0x7ff, 0x4, 0x100000000, 0x7}], "029b4b52c3d264e3092cd5663c6f4de3e0bf601cfe87a58881a48807b4c14f47b48a19b9cfa66a5c1e049ab390f1066c47ccada1ef63510582ba699fce2f631c377a24e653ce5f931783c0d684bdfd01bd8a2c84117950818f17a40c1fafd2fb896e76990a1edb60060b17121732d642ecad96e192ae38b2a972009041bbf921e9ca154c34bb1e501d08c3839b56d3fe8d45fe999f13efe6c5d47a63923174de8d02d380e8d633b14467dd1d08590313c3af8049551d3e6413032c8c68e9f49f89bd24fc153b50c9688b7c5d15a82414867a04d1f33f1b", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x887) accept4(r3, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f0000000180)=0x80, 0x80800) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x81, 0x2, &(0x7f0000000780)=[{&(0x7f0000000600)="d3b2f64bb9e1fc2888bb52117c5149eaecfe2c416132954d269b8bb4a96f1ef3f3d916f6cb1ce8b4c3084a4abf4849cae96169cc595b6243d9711269f31f2d62d6e91145bd85b88d403bc2d390b78fe0273021c3fd186e1aa34ebfe183fec12b3e7e6814ddd03035301dd8bb17990ef34ff88b54edf1a1902bb8bf22c2eda88a134c14358a9f4e6ff7d80c4ffa2ef3b5b0470e63d217c85cfac566f8d655bffd03c05661e9e022091cf7ce575ea09eb685f5330236f416321a99d4e6fcdc36c7475ee8b2af0671ec3e64622e6e0f7dab877128c9e9f951f4", 0xd8, 0x100000000}, {&(0x7f0000000700)="ef8ff98fe373676e49237097bbbe8f16acc8ccd86538c81b8a825d8c1b9725cbfc54be34b589cc51dcdbdacc3bd9a63fb55dd43169488bd2e10bbae59e4ea39160d7a8cbf5f42d24f512385391606109807cec6ee0", 0x55, 0x6}], 0x98, &(0x7f00000007c0)={[{@dots}, {@fat=@debug}, {@fat=@tz_utc}, {@nodots}, {@dots}], [{@dont_appraise}, {@fsmagic={'fsmagic', 0x3d, 0xff}}, {@fsuuid={'fsuuid', 0x3d, {[0x33, 0x66, 0x33, 0x39, 0x61, 0x57, 0x38, 0x34], 0x2d, [0x34, 0x66, 0x63, 0x33], 0x2d, [0x64, 0x67eb6e912ff6b998, 0x33], 0x2d, [0x36, 0x35, 0x61, 0x61], 0x2d, [0x37, 0x62, 0x65, 0x37, 0x38, 0x65, 0x39, 0x63]}}}, {@context={'context', 0x3d, 'system_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x39, 0x34, 0x34, 0x63, 0x66, 0x36, 0x63], 0x2d, [0x34, 0x34, 0x33, 0x35], 0x2d, [0x30, 0x30, 0x62, 0x33], 0x2d, [0x63, 0x61, 0x64, 0x66], 0x2d, [0x33, 0x78, 0x35, 0x64, 0x62, 0x6e, 0x61, 0x39]}}}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}]}) write$P9_RFLUSH(r0, &(0x7f0000000000)={0x7}, 0x7) fallocate(r0, 0x0, 0x0, 0x2) 21:23:21 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:23:21 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x242e2, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0xc) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x3, 0xe3ff, 0x8000) unlinkat(r2, &(0x7f00000000c0)='./file0\x00', 0x0) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000280)="c8", 0x1}], 0x1) mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0xb) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) [ 594.008278] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 594.099791] FAT-fs (loop5): Unrecognized mount option "dont_appraise" or missing value 21:23:21 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:23:21 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',nodevmap,subj_type=lo\x00,defco\b\x00\x00\x00\x00\x00\x00\x00ot,smackfsroot=lo\x00,dont_appraise,audit,\x00']) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'}) [ 594.184044] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 594.275754] FAT-fs (loop5): Unrecognized mount option "dont_appraise" or missing value 21:23:22 executing program 3: syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r0, r1, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:23:22 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:23:36 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r7, 0x1}, 0x14}}, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r6}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r8, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:23:36 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:23:36 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x1}, 0x14}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) tkill(0x0, 0x12) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:23:36 executing program 3: syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r0, r1, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:23:36 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',nodevmap,subj_type=lo\x00,defco\b\x00\x00\x00\x00\x00\x00\x00ot,smackfsroot=lo\x00,dont_appraise,audit,\x00']) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'}) 21:23:36 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r5, 0x1}, 0x14}}, 0x0) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:23:36 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x1}, 0x14}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) tkill(0x0, 0x12) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:23:36 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x1}, 0x14}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) tkill(0x0, 0x12) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 608.829484] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 608.843236] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 608.871779] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 21:23:36 executing program 3: syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r0, r1, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:23:36 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:23:36 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',nodevmap,subj_type=lo\x00,defco\b\x00\x00\x00\x00\x00\x00\x00ot,smackfsroot=lo\x00,dont_appraise,audit,\x00']) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'}) 21:23:37 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:23:37 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:23:37 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r7, 0x1}, 0x14}}, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r6}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r8, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:23:37 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) [ 609.907131] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 21:23:37 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:23:51 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x1}, 0x14}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) tkill(0x0, 0x12) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:23:51 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r7, 0x1}, 0x14}}, 0x0) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r8, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:23:51 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:23:51 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:23:51 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:23:51 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x1}, 0x14}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) tkill(0x0, 0x12) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:23:51 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x1}, 0x14}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) tkill(0x0, 0x12) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:23:51 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x1}, 0x14}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) tkill(0x0, 0x12) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 624.340574] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 21:23:51 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, 0x0) [ 624.350265] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 624.377996] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 21:23:52 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, 0x0) 21:23:52 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, 0x0) 21:23:52 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x1}, 0x14}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) tkill(0x0, 0x12) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 624.854001] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 21:23:54 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x1}, 0x14}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) tkill(0x0, 0x12) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 627.237363] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 21:23:54 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x1}, 0x14}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) tkill(0x0, 0x12) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 627.419660] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 21:23:55 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x1}, 0x14}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) tkill(0x0, 0x12) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 627.521322] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 21:23:55 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:24:07 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x1}, 0x14}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) tkill(0x0, 0x12) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:24:07 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:24:07 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x1}, 0x14}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) tkill(0x0, 0x12) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:24:07 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x1}, 0x14}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:24:07 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:24:07 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x1}, 0x14}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) tkill(0x0, 0x12) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:24:07 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r7, 0x1}, 0x14}}, 0x0) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r8, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:24:07 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x1}, 0x14}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) tkill(0x0, 0x12) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 639.478127] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 639.489006] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 639.507919] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 639.524561] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 639.550817] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 639.558640] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 21:24:07 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:24:07 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:24:07 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:24:07 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:24:08 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:24:08 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:24:08 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:24:08 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() fork() dup2(r0, r0) fork() r1 = fork() ptrace$setopts(0x4206, r1, 0x4, 0x0) tkill(r1, 0x12) tkill(r1, 0x16) tkill(r1, 0x12) wait4(r1, &(0x7f0000000200), 0x80000000, 0x0) tkill(r1, 0x32) 21:24:21 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x1}, 0x14}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) tkill(0x0, 0x12) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:24:21 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:24:21 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:24:21 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x1}, 0x14}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) tkill(0x0, 0x12) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:24:21 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x1}, 0x14}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) tkill(0x0, 0x12) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:24:21 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x1}, 0x14}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) tkill(0x0, 0x12) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:24:21 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() fork() dup2(r0, r0) fork() r1 = fork() ptrace$setopts(0x4206, r1, 0x4, 0x0) tkill(r1, 0x12) tkill(r1, 0x16) tkill(r1, 0x12) wait4(r1, &(0x7f0000000200), 0x80000000, 0x0) tkill(r1, 0x32) 21:24:21 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r5, 0x1}, 0x14}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 654.109534] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 21:24:21 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 654.273804] cgroup: fork rejected by pids controller in /syz5 21:24:22 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:24:22 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:24:22 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:24:22 executing program 2: syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r0, r1, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:24:23 executing program 2: syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r0, r1, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:24:23 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() fork() dup2(r0, r0) fork() r1 = fork() ptrace$setopts(0x4206, r1, 0x4, 0x0) tkill(r1, 0x12) tkill(r1, 0x16) tkill(r1, 0x12) wait4(r1, &(0x7f0000000200), 0x80000000, 0x0) tkill(r1, 0x32) 21:24:23 executing program 2: syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r0, r1, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:24:39 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:24:39 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:24:39 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:24:39 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x1}, 0x14}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:24:39 executing program 1: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() fork() dup2(r0, r0) fork() r1 = fork() ptrace$setopts(0x4206, r1, 0x4, 0x0) tkill(r1, 0x12) tkill(r1, 0x16) tkill(r1, 0x12) wait4(r1, &(0x7f0000000200), 0x80000000, 0x0) tkill(r1, 0x32) 21:24:39 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r5, 0x1}, 0x14}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:24:39 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x1}, 0x14}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) tkill(0x0, 0x12) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:24:39 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x1}, 0x14}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 671.825149] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 671.846538] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 671.855390] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 21:24:39 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:24:39 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:24:39 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:24:39 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:24:39 executing program 2: r0 = syz_io_uring_setup(0x44ae, 0x0, &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:24:40 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:24:40 executing program 2: r0 = syz_io_uring_setup(0x44ae, 0x0, &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:24:40 executing program 2: r0 = syz_io_uring_setup(0x44ae, 0x0, &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:24:54 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:24:54 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x1}, 0x14}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:24:54 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:24:54 executing program 1: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() fork() dup2(r0, r0) fork() r1 = fork() ptrace$setopts(0x4206, r1, 0x4, 0x0) tkill(r1, 0x12) tkill(r1, 0x16) tkill(r1, 0x12) wait4(r1, &(0x7f0000000200), 0x80000000, 0x0) tkill(r1, 0x32) 21:24:54 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x1}, 0x14}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:24:54 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r5, 0x1}, 0x14}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:24:54 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x1}, 0x14}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) tkill(0x0, 0x12) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:24:54 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, 0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 687.191534] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 687.199108] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 687.220147] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 687.256765] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 21:24:54 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, 0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:24:55 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, 0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:24:55 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:24:55 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:24:55 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:24:55 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:24:55 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:24:55 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:25:14 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:25:14 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:25:14 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:25:14 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:25:14 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x1}, 0x14}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) tkill(0x0, 0x12) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:25:14 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:25:14 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x1}, 0x14}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:25:14 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r5, 0x1}, 0x14}}, 0x0) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 706.859525] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 21:25:14 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 706.924201] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 706.929090] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 21:25:14 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:25:14 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:25:15 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:25:15 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:25:15 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:25:15 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:25:15 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:25:29 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:25:29 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:25:29 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:25:29 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, 0x0, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:25:29 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r5, 0x1}, 0x14}}, 0x0) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:25:29 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r5, 0x1}, 0x14}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:25:29 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r5, 0x1}, 0x14}}, 0x0) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:25:29 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 721.568625] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 21:25:29 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 721.592403] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 721.622661] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 21:25:29 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, 0x0, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:25:29 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:25:29 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:25:29 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, 0x0, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:25:29 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:25:29 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:25:29 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:25:44 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:25:44 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:25:44 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:25:44 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:25:44 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:25:44 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r5, 0x1}, 0x14}}, 0x0) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:25:44 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r5, 0x1}, 0x14}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:25:44 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 736.674334] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 21:25:44 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) [ 736.737854] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 21:25:44 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:25:44 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:25:44 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:25:44 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:25:44 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:25:44 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:25:44 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:25:59 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:25:59 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:25:59 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:25:59 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:25:59 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:25:59 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:25:59 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:25:59 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r5, 0x1}, 0x14}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:25:59 executing program 0: r0 = syz_io_uring_setup(0x44ae, 0x0, &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:25:59 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 751.577546] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 21:25:59 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, 0x0, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:25:59 executing program 0: r0 = syz_io_uring_setup(0x44ae, 0x0, &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:25:59 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, 0x0, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:25:59 executing program 0: r0 = syz_io_uring_setup(0x44ae, 0x0, &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:25:59 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, 0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:25:59 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, 0x0, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:26:12 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x1}, 0x14}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:26:12 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, 0x0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:26:12 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r5, 0x1}, 0x14}}, 0x0) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:26:12 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:26:12 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, 0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:26:12 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:26:12 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:26:12 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 765.416722] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 21:26:13 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, 0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:26:13 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, 0x0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:26:13 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:26:13 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:26:13 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, 0x0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:26:13 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:26:13 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:26:13 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:26:27 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x1}, 0x14}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:26:27 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:26:27 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:26:27 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:26:27 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:26:27 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:26:27 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:26:27 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:26:27 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:26:27 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 780.365702] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 21:26:28 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:26:28 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:26:28 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:26:28 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:26:28 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:26:28 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:26:43 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:26:43 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:26:43 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:26:43 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:26:43 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x1}, 0x14}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:26:43 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:26:43 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:26:43 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 796.124355] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 21:26:43 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:26:43 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:26:43 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:26:43 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:26:43 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:26:44 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:26:44 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r3}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:26:44 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r3}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:26:56 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:26:56 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r3}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:26:56 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:26:56 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:26:56 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:26:56 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:26:56 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:26:56 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x1}, 0x14}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 809.283810] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 21:26:56 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r4}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:26:57 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, 0x0, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:26:57 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r4}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:26:57 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, 0x0, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:26:57 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:26:57 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r4}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:26:57 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, 0x0, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:26:57 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r3}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:27:11 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x1}, 0x14}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) tkill(0x0, 0x12) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:27:11 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:27:11 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r3}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:27:11 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:27:11 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:27:11 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:27:11 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:27:11 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 823.736271] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 21:27:11 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r3}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:27:11 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:27:11 executing program 7: syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r0, r1, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r0, 0x0, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r3}, 0x4, 0x8}, 0x6) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:27:11 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:27:11 executing program 7: syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r0, r1, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r0, 0x0, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r3}, 0x4, 0x8}, 0x6) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:27:11 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:27:12 executing program 7: syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r0, r1, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r0, 0x0, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r3}, 0x4, 0x8}, 0x6) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:27:12 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:27:26 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:27:26 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:27:26 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:27:26 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:27:26 executing program 7: r0 = syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:27:26 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r0, 0x0, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8}, 0x6) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:27:26 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x1}, 0x14}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) tkill(0x0, 0x12) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:27:26 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:27:26 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:27:26 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r0, 0x0, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8}, 0x6) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 838.669184] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 21:27:26 executing program 7: r0 = syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:27:26 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r0, 0x0, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8}, 0x6) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:27:26 executing program 7: r0 = syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:27:26 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:27:26 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:27:26 executing program 7: r0 = syz_io_uring_setup(0x44ae, 0x0, &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:27:40 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x1}, 0x14}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) tkill(0x0, 0x12) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:27:40 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:27:40 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:27:40 executing program 7: r0 = syz_io_uring_setup(0x44ae, 0x0, &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:27:40 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:27:40 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:27:40 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:27:40 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 852.688678] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 21:27:40 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:27:40 executing program 7: r0 = syz_io_uring_setup(0x44ae, 0x0, &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:27:40 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:27:40 executing program 4: r0 = syz_io_uring_setup(0x44ae, 0x0, &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:27:40 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, 0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:27:40 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:27:40 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, 0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:27:40 executing program 4: r0 = syz_io_uring_setup(0x44ae, 0x0, &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:27:54 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:27:54 executing program 4: r0 = syz_io_uring_setup(0x44ae, 0x0, &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:27:54 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:27:54 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:27:54 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:27:54 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, 0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:27:54 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:27:54 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:27:54 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:27:54 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, 0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:27:54 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r4}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:27:54 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r4}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:27:54 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, 0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:27:54 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x0) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:27:54 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r4}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:27:54 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x0) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:28:07 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:28:07 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:28:07 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, 0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:28:07 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:28:07 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:28:07 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:28:07 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:28:07 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x0) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:28:07 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:28:07 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:28:07 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(0x0, &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:28:07 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:28:07 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(0x0, &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:28:07 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:28:08 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(0x0, &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:28:08 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:28:09 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:28:21 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), 0x0, &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:28:21 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:28:21 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:28:21 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:28:21 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() ptrace$setopts(0x4206, 0x0, 0x4, 0x0) tkill(0x0, 0x12) tkill(0x0, 0x16) tkill(0x0, 0x12) wait4(0x0, &(0x7f0000000200), 0x80000000, 0x0) tkill(0x0, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:28:21 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:28:21 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:28:21 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r0, 0x0, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:28:21 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:28:21 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), 0x0, &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:28:21 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:28:22 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:28:22 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r0, 0x0, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:28:22 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), 0x0, &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:28:22 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r4}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:28:22 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:28:22 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:28:22 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r0, 0x0, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:28:35 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:28:35 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r4}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:28:35 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() ptrace$setopts(0x4206, 0x0, 0x4, 0x0) tkill(0x0, 0x12) tkill(0x0, 0x16) tkill(0x0, 0x12) wait4(0x0, &(0x7f0000000200), 0x80000000, 0x0) tkill(0x0, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:28:35 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:28:35 executing program 6: r0 = syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:28:35 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:28:35 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:28:35 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:28:35 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:28:35 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r4}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:28:35 executing program 6: r0 = syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:28:35 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, 0x0, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r4}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:28:35 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:28:35 executing program 6: r0 = syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:28:35 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, 0x0, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r4}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:28:51 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:28:51 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:28:51 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:28:51 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() ptrace$setopts(0x4206, 0x0, 0x4, 0x0) tkill(0x0, 0x12) tkill(0x0, 0x16) tkill(0x0, 0x12) wait4(0x0, &(0x7f0000000200), 0x80000000, 0x0) tkill(0x0, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:28:51 executing program 6: r0 = syz_io_uring_setup(0x44ae, 0x0, &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:28:51 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, 0x0, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r4}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:28:51 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:28:51 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:28:51 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:28:51 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:28:51 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:28:52 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 21:28:52 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:28:52 executing program 6: r0 = syz_io_uring_setup(0x44ae, 0x0, &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:28:52 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 21:28:52 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:29:08 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:29:08 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:29:08 executing program 6: r0 = syz_io_uring_setup(0x44ae, 0x0, &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:29:08 executing program 0: syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r0, r1, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:29:08 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r4}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:29:08 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 21:29:08 executing program 5: creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() fork() fork() r1 = fork() ptrace$setopts(0x4206, r1, 0x4, 0x0) tkill(r1, 0x12) tkill(r1, 0x16) tkill(r1, 0x12) wait4(r1, &(0x7f0000000200), 0x80000000, 0x0) tkill(r1, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x2) 21:29:08 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:29:08 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:29:08 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:29:08 executing program 0: syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r0, r1, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:29:08 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r4}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:29:08 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:29:08 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r4}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:29:08 executing program 0: syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r0, r1, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:29:08 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:29:08 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, 0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:29:22 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:29:22 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:29:22 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:29:22 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:29:22 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:29:22 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, 0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:29:22 executing program 5: creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() fork() fork() r1 = fork() ptrace$setopts(0x4206, r1, 0x4, 0x0) tkill(r1, 0x12) tkill(r1, 0x16) tkill(r1, 0x12) wait4(r1, &(0x7f0000000200), 0x80000000, 0x0) tkill(r1, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x2) 21:29:22 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:29:22 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:29:22 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:29:22 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:29:22 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:29:22 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:29:22 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, 0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:29:22 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:29:22 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:29:25 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x1}, 0x14}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) tkill(0x0, 0x12) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:29:25 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, 0x0, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r4}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 957.959956] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 21:29:25 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:29:25 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r7, 0x1}, 0x14}}, 0x0) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r8, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:29:25 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:29:25 executing program 5: creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() fork() fork() r1 = fork() ptrace$setopts(0x4206, r1, 0x4, 0x0) tkill(r1, 0x12) tkill(r1, 0x16) tkill(r1, 0x12) wait4(r1, &(0x7f0000000200), 0x80000000, 0x0) tkill(r1, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x2) 21:29:25 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, 0x0, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r4}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 958.197446] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 21:29:25 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, 0x0, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r4}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:29:25 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r4}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:29:25 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:29:26 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r4}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:29:26 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r4}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:29:40 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:29:40 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r7, 0x1}, 0x14}}, 0x0) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r8, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:29:40 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:29:40 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:29:40 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r4}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:29:40 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:29:40 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:29:40 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x1}, 0x14}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) tkill(0x0, 0x12) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 972.614819] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 21:29:40 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r4}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:29:40 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r4}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:29:40 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:29:40 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r4}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:29:40 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r4}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:29:41 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r4}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:29:41 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r4}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:29:41 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r4}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:29:55 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:29:55 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:29:55 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:29:55 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r4}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:29:55 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:29:55 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:29:55 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:29:55 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:29:55 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r3}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:29:55 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r3}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:29:56 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r3}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:29:56 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, 0x0, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:29:56 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, 0x0, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:29:56 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, 0x0, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:29:56 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {0x0, r4}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:29:56 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {0x0, r4}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:30:10 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:30:10 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {0x0, r4}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:30:10 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:30:10 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:30:10 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:30:10 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:30:10 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:30:10 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, 0x0) 21:30:10 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:30:10 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:30:11 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:30:11 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:30:11 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() r1 = dup2(r0, r0) fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x4, 0x0) tkill(r2, 0x12) tkill(r2, 0x16) tkill(r2, 0x12) wait4(r2, &(0x7f0000000200), 0x80000000, 0x0) tkill(r2, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, 0x0, 0xd, r1, 0x2) 21:30:11 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:30:11 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:30:11 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:30:27 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:30:27 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() r1 = dup2(r0, r0) fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x4, 0x0) tkill(r2, 0x12) tkill(r2, 0x16) tkill(r2, 0x12) wait4(r2, &(0x7f0000000200), 0x80000000, 0x0) tkill(r2, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, 0x0, 0xd, r1, 0x2) 21:30:27 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, 0x0) 21:30:27 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:30:27 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:30:27 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:30:27 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:30:27 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:30:27 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:30:27 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:30:27 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:30:27 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:30:27 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:30:27 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:30:28 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:30:28 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 21:30:45 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, 0x0) 21:30:45 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:30:45 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 21:30:45 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:30:45 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() r1 = dup2(r0, r0) fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x4, 0x0) tkill(r2, 0x12) tkill(r2, 0x16) tkill(r2, 0x12) wait4(r2, &(0x7f0000000200), 0x80000000, 0x0) tkill(r2, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, 0x0, 0xd, r1, 0x2) 21:30:45 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:30:45 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:30:45 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:30:45 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 21:30:45 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x1}, 0x14}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 1038.421388] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 21:30:47 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:30:47 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:30:47 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:30:48 executing program 5: r0 = creat(0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:30:48 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:30:48 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:31:02 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x1}, 0x14}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) tkill(0x0, 0x12) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:31:02 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:31:02 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r7, 0x1}, 0x14}}, 0x0) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r8, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:31:02 executing program 5: r0 = creat(0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:31:02 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:31:02 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:31:02 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:31:02 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, 0x0) [ 1054.683565] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1054.723187] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 21:31:02 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:31:02 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:31:02 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:31:02 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:31:02 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:31:02 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:31:02 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:31:03 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:31:18 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:31:18 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x1}, 0x14}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) tkill(0x0, 0x12) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:31:18 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x1}, 0x14}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) tkill(0x0, 0x12) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:31:18 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:31:18 executing program 3: r0 = syz_io_uring_setup(0x44ae, 0x0, &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:31:18 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:31:18 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:31:18 executing program 5: r0 = creat(0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) [ 1070.590363] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1070.608422] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 21:31:18 executing program 3: r0 = syz_io_uring_setup(0x44ae, 0x0, &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:31:18 executing program 3: r0 = syz_io_uring_setup(0x44ae, 0x0, &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:31:18 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, 0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:31:18 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, 0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:31:18 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, 0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:31:19 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:31:19 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:31:19 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:31:34 executing program 5: setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() fork() r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x4, 0x0) tkill(r2, 0x12) tkill(r2, 0x16) tkill(r2, 0x12) wait4(r2, &(0x7f0000000200), 0x80000000, 0x0) tkill(r2, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r0, 0xd, r1, 0x2) 21:31:34 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:31:34 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x1}, 0x14}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {0x0, r5}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) tkill(0x0, 0x12) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:31:34 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:31:34 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:31:34 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 21:31:34 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:31:34 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 1086.487990] FAULT_INJECTION: forcing a failure. [ 1086.487990] name failslab, interval 1, probability 0, space 0, times 1 [ 1086.489434] CPU: 1 PID: 13172 Comm: syz-executor.2 Not tainted 5.10.148 #1 [ 1086.490191] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1086.491092] Call Trace: [ 1086.491387] dump_stack+0x107/0x167 [ 1086.491780] should_fail.cold+0x5/0xa [ 1086.492193] should_failslab+0x5/0x20 [ 1086.492610] kmem_cache_alloc_bulk+0x4b/0x320 [ 1086.493098] io_submit_sqes+0x11c6/0x2310 [ 1086.493558] ? io_queue_sqe+0x1020/0x1020 [ 1086.494018] ? __do_sys_io_uring_enter+0x107f/0x1910 [ 1086.494577] ? mutex_lock_io_nested+0x1110/0x1110 [ 1086.495092] ? xa_load+0x158/0x290 [ 1086.495484] ? xas_find_conflict+0x9f0/0x9f0 [ 1086.495972] __do_sys_io_uring_enter+0x108a/0x1910 [ 1086.496499] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1086.497019] ? io_sq_thread+0x1640/0x1640 [ 1086.497461] ? wait_for_completion+0x270/0x270 [ 1086.497964] ? rcu_read_lock_any_held+0x75/0xa0 [ 1086.498474] ? vfs_write+0x354/0xa30 [ 1086.498883] ? fput_many+0x2f/0x1a0 [ 1086.499286] ? ksys_write+0x1a9/0x260 [ 1086.499707] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1086.500281] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1086.500841] do_syscall_64+0x33/0x40 [ 1086.501250] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1086.501826] RIP: 0033:0x7f2226c16b19 [ 1086.502233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1086.504213] RSP: 002b:00007f222418c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1086.505040] RAX: ffffffffffffffda RBX: 00007f2226d29f60 RCX: 00007f2226c16b19 [ 1086.505824] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1086.506595] RBP: 00007f222418c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1086.507365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1086.508140] R13: 00007fff527f7cbf R14: 00007f222418c300 R15: 0000000000022000 [ 1086.512333] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1086.531747] FAULT_INJECTION: forcing a failure. [ 1086.531747] name failslab, interval 1, probability 0, space 0, times 0 [ 1086.533033] CPU: 1 PID: 13177 Comm: syz-executor.0 Not tainted 5.10.148 #1 [ 1086.533847] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1086.533864] Call Trace: [ 1086.533877] dump_stack+0x107/0x167 [ 1086.533889] should_fail.cold+0x5/0xa [ 1086.533902] should_failslab+0x5/0x20 [ 1086.533913] kmem_cache_alloc_bulk+0x4b/0x320 [ 1086.533926] io_submit_sqes+0x11c6/0x2310 [ 1086.533940] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1086.533956] ? io_queue_sqe+0x1020/0x1020 21:31:34 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:31:34 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) [ 1086.533965] ? __do_sys_io_uring_enter+0x107f/0x1910 [ 1086.533978] ? mutex_lock_io_nested+0x1110/0x1110 [ 1086.533990] ? percpu_ref_tryget_many+0x167/0x290 [ 1086.534014] __do_sys_io_uring_enter+0x108a/0x1910 [ 1086.534028] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1086.534039] ? io_sq_thread+0x1640/0x1640 [ 1086.534046] ? wait_for_completion+0x270/0x270 [ 1086.534058] ? rcu_read_lock_any_held+0x75/0xa0 [ 1086.534067] ? vfs_write+0x354/0xa30 [ 1086.534079] ? fput_many+0x2f/0x1a0 [ 1086.534089] ? ksys_write+0x1a9/0x260 [ 1086.534104] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1086.534115] ? syscall_enter_from_user_mode+0x1d/0x50 21:31:34 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) [ 1086.534127] do_syscall_64+0x33/0x40 [ 1086.534137] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1086.534143] RIP: 0033:0x7fdd935e5b19 [ 1086.534153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1086.534159] RSP: 002b:00007fdd90b5b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1086.534169] RAX: ffffffffffffffda RBX: 00007fdd936f8f60 RCX: 00007fdd935e5b19 [ 1086.534175] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1086.534181] RBP: 00007fdd90b5b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1086.534186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 21:31:34 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) [ 1086.534192] R13: 00007ffcf1400f8f R14: 00007fdd90b5b300 R15: 0000000000022000 [ 1086.720834] FAULT_INJECTION: forcing a failure. [ 1086.720834] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1086.721044] CPU: 1 PID: 13203 Comm: syz-executor.2 Not tainted 5.10.148 #1 [ 1086.721049] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1086.721053] Call Trace: [ 1086.721068] dump_stack+0x107/0x167 [ 1086.721081] should_fail.cold+0x5/0xa [ 1086.721098] __alloc_pages_nodemask+0x182/0x680 [ 1086.721113] ? __alloc_pages_slowpath.constprop.0+0x2220/0x2220 [ 1086.721134] alloc_pages_current+0x187/0x280 [ 1086.721146] allocate_slab+0x26f/0x380 [ 1086.721159] ___slab_alloc+0x470/0x700 [ 1086.721171] ? io_submit_sqes+0x11c6/0x2310 [ 1086.721183] ? lock_downgrade+0x6d0/0x6d0 [ 1086.721200] ? kmem_cache_alloc_bulk+0x1ec/0x320 [ 1086.721210] kmem_cache_alloc_bulk+0x1ec/0x320 [ 1086.721222] io_submit_sqes+0x11c6/0x2310 [ 1086.721242] ? io_queue_sqe+0x1020/0x1020 [ 1086.721251] ? __do_sys_io_uring_enter+0x107f/0x1910 [ 1086.721265] ? mutex_lock_io_nested+0x1110/0x1110 [ 1086.721274] ? xa_load+0x158/0x290 [ 1086.721283] ? xas_find_conflict+0x9f0/0x9f0 [ 1086.721306] __do_sys_io_uring_enter+0x108a/0x1910 21:31:34 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) [ 1086.721320] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1086.721330] ? io_sq_thread+0x1640/0x1640 [ 1086.721338] ? wait_for_completion+0x270/0x270 [ 1086.721350] ? rcu_read_lock_any_held+0x75/0xa0 [ 1086.721360] ? vfs_write+0x354/0xa30 [ 1086.721372] ? fput_many+0x2f/0x1a0 [ 1086.721383] ? ksys_write+0x1a9/0x260 [ 1086.721397] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1086.721408] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1086.721420] do_syscall_64+0x33/0x40 [ 1086.721431] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1086.721438] RIP: 0033:0x7f2226c16b19 [ 1086.721448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1086.721454] RSP: 002b:00007f222418c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1086.721465] RAX: ffffffffffffffda RBX: 00007f2226d29f60 RCX: 00007f2226c16b19 [ 1086.721471] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1086.721477] RBP: 00007f222418c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1086.721482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1086.721488] R13: 00007fff527f7cbf R14: 00007f222418c300 R15: 0000000000022000 [ 1086.835013] FAULT_INJECTION: forcing a failure. [ 1086.835013] name failslab, interval 1, probability 0, space 0, times 0 [ 1086.835028] CPU: 0 PID: 13214 Comm: syz-executor.2 Not tainted 5.10.148 #1 [ 1086.835034] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1086.835038] Call Trace: [ 1086.835057] dump_stack+0x107/0x167 [ 1086.835070] should_fail.cold+0x5/0xa [ 1086.835084] ? create_object.isra.0+0x3a/0xa20 [ 1086.835096] should_failslab+0x5/0x20 [ 1086.835108] kmem_cache_alloc+0x5b/0x360 [ 1086.835120] ? mark_held_locks+0x9e/0xe0 [ 1086.835131] create_object.isra.0+0x3a/0xa20 [ 1086.835141] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1086.835154] kmem_cache_alloc_bulk+0x168/0x320 [ 1086.835168] io_submit_sqes+0x11c6/0x2310 [ 1086.835188] ? io_queue_sqe+0x1020/0x1020 21:31:34 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) [ 1086.835198] ? __do_sys_io_uring_enter+0x107f/0x1910 [ 1086.835214] ? xas_find_conflict+0x9f0/0x9f0 [ 1086.835237] __do_sys_io_uring_enter+0x108a/0x1910 [ 1086.835252] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1086.835263] ? io_sq_thread+0x1640/0x1640 [ 1086.835270] ? wait_for_completion+0x270/0x270 [ 1086.835283] ? rcu_read_lock_any_held+0x75/0xa0 [ 1086.835292] ? vfs_write+0x354/0xa30 [ 1086.835304] ? fput_many+0x2f/0x1a0 [ 1086.835314] ? ksys_write+0x1a9/0x260 [ 1086.835328] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1086.835342] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1086.835355] do_syscall_64+0x33/0x40 [ 1086.835371] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1086.835381] RIP: 0033:0x7f2226c16b19 [ 1086.835392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1086.835398] RSP: 002b:00007f222418c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1086.835411] RAX: ffffffffffffffda RBX: 00007f2226d29f60 RCX: 00007f2226c16b19 [ 1086.835417] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1086.835425] RBP: 00007f222418c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1086.835432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1086.835439] R13: 00007fff527f7cbf R14: 00007f222418c300 R15: 0000000000022000 [ 1086.972452] FAULT_INJECTION: forcing a failure. [ 1086.972452] name failslab, interval 1, probability 0, space 0, times 0 [ 1086.972465] CPU: 1 PID: 13221 Comm: syz-executor.2 Not tainted 5.10.148 #1 21:31:34 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) [ 1086.972472] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1086.972475] Call Trace: [ 1086.972492] dump_stack+0x107/0x167 [ 1086.972506] should_fail.cold+0x5/0xa [ 1086.972519] ? create_object.isra.0+0x3a/0xa20 [ 1086.972531] should_failslab+0x5/0x20 [ 1086.972542] kmem_cache_alloc+0x5b/0x360 [ 1086.972554] ? mark_held_locks+0x9e/0xe0 [ 1086.972566] create_object.isra.0+0x3a/0xa20 [ 1086.972576] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1086.972589] kmem_cache_alloc_bulk+0x168/0x320 [ 1086.972603] io_submit_sqes+0x11c6/0x2310 [ 1086.972623] ? io_queue_sqe+0x1020/0x1020 [ 1086.972633] ? __do_sys_io_uring_enter+0x107f/0x1910 [ 1086.972649] ? xas_find_conflict+0x9f0/0x9f0 [ 1086.972672] __do_sys_io_uring_enter+0x108a/0x1910 [ 1086.972688] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1086.972699] ? io_sq_thread+0x1640/0x1640 [ 1086.972707] ? wait_for_completion+0x270/0x270 [ 1086.972720] ? rcu_read_lock_any_held+0x75/0xa0 [ 1086.972729] ? vfs_write+0x354/0xa30 [ 1086.972741] ? fput_many+0x2f/0x1a0 [ 1086.972751] ? ksys_write+0x1a9/0x260 [ 1086.972766] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 21:31:34 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 1086.972783] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1086.972803] do_syscall_64+0x33/0x40 [ 1086.972828] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1086.972842] RIP: 0033:0x7f2226c16b19 [ 1086.972863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1086.972875] RSP: 002b:00007f222418c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1086.972892] RAX: ffffffffffffffda RBX: 00007f2226d29f60 RCX: 00007f2226c16b19 [ 1086.972900] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1086.972909] RBP: 00007f222418c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1086.972919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1086.972927] R13: 00007fff527f7cbf R14: 00007f222418c300 R15: 0000000000022000 [ 1087.120762] FAULT_INJECTION: forcing a failure. [ 1087.120762] name failslab, interval 1, probability 0, space 0, times 0 [ 1087.120775] CPU: 1 PID: 13314 Comm: syz-executor.2 Not tainted 5.10.148 #1 [ 1087.120782] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1087.120785] Call Trace: [ 1087.120802] dump_stack+0x107/0x167 [ 1087.120816] should_fail.cold+0x5/0xa [ 1087.120833] ? create_object.isra.0+0x3a/0xa20 [ 1087.120845] should_failslab+0x5/0x20 [ 1087.120857] kmem_cache_alloc+0x5b/0x360 [ 1087.120868] ? mark_held_locks+0x9e/0xe0 [ 1087.120880] create_object.isra.0+0x3a/0xa20 [ 1087.120890] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1087.120903] kmem_cache_alloc_bulk+0x168/0x320 [ 1087.120917] io_submit_sqes+0x11c6/0x2310 [ 1087.120937] ? io_queue_sqe+0x1020/0x1020 [ 1087.120947] ? __do_sys_io_uring_enter+0x107f/0x1910 [ 1087.120963] ? xas_find_conflict+0x9f0/0x9f0 [ 1087.120986] __do_sys_io_uring_enter+0x108a/0x1910 [ 1087.121001] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1087.121012] ? io_sq_thread+0x1640/0x1640 [ 1087.121020] ? wait_for_completion+0x270/0x270 [ 1087.121033] ? rcu_read_lock_any_held+0x75/0xa0 [ 1087.121042] ? vfs_write+0x354/0xa30 [ 1087.121054] ? fput_many+0x2f/0x1a0 [ 1087.121064] ? ksys_write+0x1a9/0x260 [ 1087.121080] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1087.121091] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1087.121103] do_syscall_64+0x33/0x40 [ 1087.121114] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1087.121121] RIP: 0033:0x7f2226c16b19 [ 1087.121132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1087.121137] RSP: 002b:00007f222418c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1087.121149] RAX: ffffffffffffffda RBX: 00007f2226d29f60 RCX: 00007f2226c16b19 [ 1087.121155] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1087.121161] RBP: 00007f222418c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1087.121167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1087.121172] R13: 00007fff527f7cbf R14: 00007f222418c300 R15: 0000000000022000 [ 1087.241057] FAULT_INJECTION: forcing a failure. [ 1087.241057] name failslab, interval 1, probability 0, space 0, times 0 [ 1087.241070] CPU: 1 PID: 13335 Comm: syz-executor.2 Not tainted 5.10.148 #1 [ 1087.241076] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1087.241080] Call Trace: [ 1087.241097] dump_stack+0x107/0x167 [ 1087.241110] should_fail.cold+0x5/0xa [ 1087.241122] ? create_object.isra.0+0x3a/0xa20 [ 1087.241135] should_failslab+0x5/0x20 [ 1087.241146] kmem_cache_alloc+0x5b/0x360 [ 1087.241158] ? mark_held_locks+0x9e/0xe0 [ 1087.241170] create_object.isra.0+0x3a/0xa20 [ 1087.241180] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1087.241193] kmem_cache_alloc_bulk+0x168/0x320 [ 1087.241207] io_submit_sqes+0x11c6/0x2310 [ 1087.241227] ? io_queue_sqe+0x1020/0x1020 [ 1087.241237] ? __do_sys_io_uring_enter+0x107f/0x1910 [ 1087.241253] ? xas_find_conflict+0x9f0/0x9f0 [ 1087.241276] __do_sys_io_uring_enter+0x108a/0x1910 [ 1087.241291] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1087.241302] ? io_sq_thread+0x1640/0x1640 [ 1087.241310] ? wait_for_completion+0x270/0x270 [ 1087.241322] ? rcu_read_lock_any_held+0x75/0xa0 [ 1087.241332] ? vfs_write+0x354/0xa30 [ 1087.241344] ? fput_many+0x2f/0x1a0 [ 1087.241354] ? ksys_write+0x1a9/0x260 [ 1087.241369] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1087.241380] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1087.241392] do_syscall_64+0x33/0x40 [ 1087.241403] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1087.241411] RIP: 0033:0x7f2226c16b19 [ 1087.241421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1087.241427] RSP: 002b:00007f222418c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1087.241438] RAX: ffffffffffffffda RBX: 00007f2226d29f60 RCX: 00007f2226c16b19 [ 1087.241444] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1087.241450] RBP: 00007f222418c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1087.241456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1087.241462] R13: 00007fff527f7cbf R14: 00007f222418c300 R15: 0000000000022000 [ 1087.355622] FAULT_INJECTION: forcing a failure. [ 1087.355622] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1087.355677] CPU: 1 PID: 13341 Comm: syz-executor.2 Not tainted 5.10.148 #1 [ 1087.355683] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1087.355687] Call Trace: [ 1087.355705] dump_stack+0x107/0x167 [ 1087.355718] should_fail.cold+0x5/0xa [ 1087.355733] _copy_to_user+0x2e/0x180 [ 1087.355748] simple_read_from_buffer+0xcc/0x160 [ 1087.355762] proc_fail_nth_read+0x198/0x230 [ 1087.355773] ? proc_sessionid_read+0x230/0x230 [ 1087.355784] ? security_file_permission+0x24e/0x570 [ 1087.355794] ? perf_trace_initcall_start+0x101/0x380 [ 1087.355809] ? proc_sessionid_read+0x230/0x230 [ 1087.355820] vfs_read+0x228/0x580 [ 1087.355837] ksys_read+0x12d/0x260 [ 1087.355847] ? __ia32_sys_pwrite64+0x230/0x230 [ 1087.355862] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1087.355874] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1087.355887] do_syscall_64+0x33/0x40 [ 1087.355898] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1087.355905] RIP: 0033:0x7f2226bc969c [ 1087.355915] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1087.355921] RSP: 002b:00007f222418c170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1087.355932] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f2226bc969c [ 1087.355938] RDX: 000000000000000f RSI: 00007f222418c1e0 RDI: 0000000000000006 [ 1087.355944] RBP: 00007f222418c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1087.355950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1087.355955] R13: 00007fff527f7cbf R14: 00007f222418c300 R15: 0000000000022000 21:31:47 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:31:47 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:31:47 executing program 5: setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() fork() r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x4, 0x0) tkill(r2, 0x12) tkill(r2, 0x16) tkill(r2, 0x12) wait4(r2, &(0x7f0000000200), 0x80000000, 0x0) tkill(r2, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r0, 0xd, r1, 0x2) 21:31:47 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:31:47 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x5, 0x0, 0x0, 0x0, 0x0) 21:31:47 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:31:47 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:31:47 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) [ 1100.333737] FAULT_INJECTION: forcing a failure. [ 1100.333737] name failslab, interval 1, probability 0, space 0, times 0 [ 1100.336343] CPU: 1 PID: 13367 Comm: syz-executor.7 Not tainted 5.10.148 #1 [ 1100.336354] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1100.336359] Call Trace: [ 1100.336386] dump_stack+0x107/0x167 [ 1100.336409] should_fail.cold+0x5/0xa [ 1100.336437] should_failslab+0x5/0x20 21:31:47 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) [ 1100.336456] kmem_cache_alloc_bulk+0x4b/0x320 [ 1100.336480] io_submit_sqes+0x11c6/0x2310 [ 1100.336517] ? io_queue_sqe+0x1020/0x1020 [ 1100.336535] ? __do_sys_io_uring_enter+0x107f/0x1910 [ 1100.336560] ? mutex_lock_io_nested+0x1110/0x1110 [ 1100.336575] ? xa_load+0x158/0x290 [ 1100.336591] ? xas_find_conflict+0x9f0/0x9f0 [ 1100.336634] __do_sys_io_uring_enter+0x108a/0x1910 [ 1100.336660] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1100.336679] ? io_sq_thread+0x1640/0x1640 [ 1100.336694] ? wait_for_completion+0x270/0x270 [ 1100.336716] ? rcu_read_lock_any_held+0x75/0xa0 [ 1100.336734] ? vfs_write+0x354/0xa30 [ 1100.336756] ? fput_many+0x2f/0x1a0 [ 1100.336775] ? ksys_write+0x1a9/0x260 [ 1100.336803] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1100.336828] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1100.336850] do_syscall_64+0x33/0x40 21:31:48 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 1100.336870] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1100.336882] RIP: 0033:0x7f7f05be1b19 [ 1100.336901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1100.336911] RSP: 002b:00007f7f03157188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1100.336931] RAX: ffffffffffffffda RBX: 00007f7f05cf4f60 RCX: 00007f7f05be1b19 [ 1100.336943] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1100.336953] RBP: 00007f7f031571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1100.336964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1100.336975] R13: 00007ffcbc09102f R14: 00007f7f03157300 R15: 0000000000022000 21:31:48 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 21:31:48 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x6, 0x0, 0x0, 0x0) [ 1100.750078] FAULT_INJECTION: forcing a failure. [ 1100.750078] name failslab, interval 1, probability 0, space 0, times 0 [ 1100.752419] CPU: 1 PID: 13524 Comm: syz-executor.7 Not tainted 5.10.148 #1 [ 1100.753831] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1100.755550] Call Trace: [ 1100.756110] dump_stack+0x107/0x167 [ 1100.756873] should_fail.cold+0x5/0xa [ 1100.757670] ? create_object.isra.0+0x3a/0xa20 [ 1100.758627] should_failslab+0x5/0x20 [ 1100.759431] kmem_cache_alloc+0x5b/0x360 [ 1100.760295] create_object.isra.0+0x3a/0xa20 [ 1100.761285] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1100.762441] kmem_cache_alloc_bulk+0x168/0x320 [ 1100.763460] io_submit_sqes+0x11c6/0x2310 [ 1100.764395] ? io_queue_sqe+0x1020/0x1020 [ 1100.765310] ? __do_sys_io_uring_enter+0x107f/0x1910 [ 1100.766411] ? xas_find_conflict+0x9f0/0x9f0 [ 1100.767429] __do_sys_io_uring_enter+0x108a/0x1910 [ 1100.768513] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1100.769575] ? io_sq_thread+0x1640/0x1640 [ 1100.770461] ? wait_for_completion+0x270/0x270 [ 1100.771431] ? rcu_read_lock_any_held+0x75/0xa0 [ 1100.772412] ? vfs_write+0x354/0xa30 [ 1100.773202] ? fput_many+0x2f/0x1a0 [ 1100.773978] ? ksys_write+0x1a9/0x260 [ 1100.774788] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1100.775876] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1100.776956] do_syscall_64+0x33/0x40 [ 1100.777750] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1100.778832] RIP: 0033:0x7f7f05be1b19 [ 1100.779617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1100.783468] RSP: 002b:00007f7f03157188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1100.785070] RAX: ffffffffffffffda RBX: 00007f7f05cf4f60 RCX: 00007f7f05be1b19 [ 1100.786584] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1100.788081] RBP: 00007f7f031571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1100.789581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1100.791079] R13: 00007ffcbc09102f R14: 00007f7f03157300 R15: 0000000000022000 21:31:48 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:31:48 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) 21:31:48 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0xc, 0x0, 0x0, 0x0) [ 1101.081590] FAULT_INJECTION: forcing a failure. [ 1101.081590] name failslab, interval 1, probability 0, space 0, times 0 [ 1101.084033] CPU: 1 PID: 13548 Comm: syz-executor.7 Not tainted 5.10.148 #1 [ 1101.085436] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1101.087100] Call Trace: [ 1101.087643] dump_stack+0x107/0x167 [ 1101.088381] should_fail.cold+0x5/0xa [ 1101.089144] ? create_object.isra.0+0x3a/0xa20 [ 1101.090066] should_failslab+0x5/0x20 [ 1101.090831] kmem_cache_alloc+0x5b/0x360 [ 1101.091648] ? mark_held_locks+0x9e/0xe0 [ 1101.092463] create_object.isra.0+0x3a/0xa20 [ 1101.093345] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1101.094383] kmem_cache_alloc_bulk+0x168/0x320 [ 1101.095302] io_submit_sqes+0x11c6/0x2310 [ 1101.096151] ? io_queue_sqe+0x1020/0x1020 [ 1101.096981] ? __do_sys_io_uring_enter+0x107f/0x1910 [ 1101.098008] ? xas_find_conflict+0x9f0/0x9f0 [ 1101.098913] __do_sys_io_uring_enter+0x108a/0x1910 [ 1101.099901] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1101.100866] ? io_sq_thread+0x1640/0x1640 [ 1101.101692] ? wait_for_completion+0x270/0x270 [ 1101.102628] ? rcu_read_lock_any_held+0x75/0xa0 [ 1101.103559] ? vfs_write+0x354/0xa30 [ 1101.104312] ? fput_many+0x2f/0x1a0 [ 1101.105042] ? ksys_write+0x1a9/0x260 [ 1101.105813] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1101.106877] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1101.107918] do_syscall_64+0x33/0x40 [ 1101.108669] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1101.109693] RIP: 0033:0x7f7f05be1b19 [ 1101.110448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1101.114135] RSP: 002b:00007f7f03157188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1101.115835] RAX: ffffffffffffffda RBX: 00007f7f05cf4f60 RCX: 00007f7f05be1b19 [ 1101.117501] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1101.118898] RBP: 00007f7f031571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1101.120260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1101.121627] R13: 00007ffcbc09102f R14: 00007f7f03157300 R15: 0000000000022000 21:31:48 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x12, 0x0, 0x0, 0x0) 21:32:05 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) 21:32:05 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:32:05 executing program 5: setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() fork() r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x4, 0x0) tkill(r2, 0x12) tkill(r2, 0x16) tkill(r2, 0x12) wait4(r2, &(0x7f0000000200), 0x80000000, 0x0) tkill(r2, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r0, 0xd, r1, 0x2) 21:32:05 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:32:05 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x18, 0x0, 0x0, 0x0) 21:32:06 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:32:06 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:32:06 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 1118.471237] FAULT_INJECTION: forcing a failure. [ 1118.471237] name failslab, interval 1, probability 0, space 0, times 0 [ 1118.472912] CPU: 0 PID: 13596 Comm: syz-executor.7 Not tainted 5.10.148 #1 [ 1118.473934] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1118.475155] Call Trace: [ 1118.475542] dump_stack+0x107/0x167 [ 1118.476079] should_fail.cold+0x5/0xa [ 1118.476640] ? create_object.isra.0+0x3a/0xa20 [ 1118.477304] should_failslab+0x5/0x20 [ 1118.477847] kmem_cache_alloc+0x5b/0x360 [ 1118.478449] ? mark_held_locks+0x9e/0xe0 [ 1118.479048] create_object.isra.0+0x3a/0xa20 [ 1118.479681] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1118.480435] kmem_cache_alloc_bulk+0x168/0x320 [ 1118.481121] io_submit_sqes+0x11c6/0x2310 [ 1118.481755] ? io_queue_sqe+0x1020/0x1020 [ 1118.482431] ? __do_sys_io_uring_enter+0x107f/0x1910 [ 1118.483198] ? xas_find_conflict+0x9f0/0x9f0 [ 1118.483866] __do_sys_io_uring_enter+0x108a/0x1910 [ 1118.484612] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1118.485329] ? io_sq_thread+0x1640/0x1640 [ 1118.485943] ? wait_for_completion+0x270/0x270 [ 1118.486641] ? rcu_read_lock_any_held+0x75/0xa0 [ 1118.487335] ? vfs_write+0x354/0xa30 [ 1118.487889] ? fput_many+0x2f/0x1a0 [ 1118.488434] ? ksys_write+0x1a9/0x260 [ 1118.489002] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1118.489784] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1118.490561] do_syscall_64+0x33/0x40 [ 1118.491120] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1118.491879] RIP: 0033:0x7f7f05be1b19 [ 1118.492428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1118.495172] RSP: 002b:00007f7f03157188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1118.496299] RAX: ffffffffffffffda RBX: 00007f7f05cf4f60 RCX: 00007f7f05be1b19 [ 1118.497362] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1118.498441] RBP: 00007f7f031571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1118.499499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1118.500558] R13: 00007ffcbc09102f R14: 00007f7f03157300 R15: 0000000000022000 21:32:06 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x1e, 0x0, 0x0, 0x0) 21:32:21 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x2, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:32:21 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) 21:32:21 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:32:21 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:32:21 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x24, 0x0, 0x0, 0x0) 21:32:21 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:32:21 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:32:21 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 1133.504176] FAULT_INJECTION: forcing a failure. [ 1133.504176] name failslab, interval 1, probability 0, space 0, times 0 [ 1133.505456] CPU: 1 PID: 13759 Comm: syz-executor.7 Not tainted 5.10.148 #1 [ 1133.506209] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1133.507113] Call Trace: [ 1133.507409] dump_stack+0x107/0x167 [ 1133.507809] should_fail.cold+0x5/0xa [ 1133.508229] ? create_object.isra.0+0x3a/0xa20 [ 1133.508733] should_failslab+0x5/0x20 [ 1133.509157] kmem_cache_alloc+0x5b/0x360 [ 1133.509594] ? mark_held_locks+0x9e/0xe0 [ 1133.510042] create_object.isra.0+0x3a/0xa20 [ 1133.510525] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1133.511080] kmem_cache_alloc_bulk+0x168/0x320 [ 1133.511597] io_submit_sqes+0x11c6/0x2310 [ 1133.512068] ? io_queue_sqe+0x1020/0x1020 [ 1133.512526] ? __do_sys_io_uring_enter+0x107f/0x1910 [ 1133.513079] ? xas_find_conflict+0x9f0/0x9f0 [ 1133.513613] __do_sys_io_uring_enter+0x108a/0x1910 [ 1133.514195] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1133.514760] ? io_sq_thread+0x1640/0x1640 [ 1133.515239] ? wait_for_completion+0x270/0x270 [ 1133.515733] ? rcu_read_lock_any_held+0x75/0xa0 [ 1133.516262] ? vfs_write+0x354/0xa30 [ 1133.516687] ? fput_many+0x2f/0x1a0 [ 1133.517111] ? ksys_write+0x1a9/0x260 [ 1133.517558] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1133.518174] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1133.518794] do_syscall_64+0x33/0x40 [ 1133.519239] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1133.519839] RIP: 0033:0x7f7f05be1b19 [ 1133.520266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1133.522255] RSP: 002b:00007f7f03157188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1133.523137] RAX: ffffffffffffffda RBX: 00007f7f05cf4f60 RCX: 00007f7f05be1b19 [ 1133.523961] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1133.524801] RBP: 00007f7f031571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1133.525619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1133.526456] R13: 00007ffcbc09102f R14: 00007f7f03157300 R15: 0000000000022000 21:32:21 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:32:21 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x2a, 0x0, 0x0, 0x0) 21:32:21 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) 21:32:21 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:32:21 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) [ 1133.772873] FAULT_INJECTION: forcing a failure. [ 1133.772873] name failslab, interval 1, probability 0, space 0, times 0 [ 1133.774123] CPU: 1 PID: 13927 Comm: syz-executor.7 Not tainted 5.10.148 #1 [ 1133.774868] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1133.775758] Call Trace: [ 1133.776051] dump_stack+0x107/0x167 [ 1133.776446] should_fail.cold+0x5/0xa [ 1133.776865] ? create_object.isra.0+0x3a/0xa20 [ 1133.777372] should_failslab+0x5/0x20 [ 1133.777783] kmem_cache_alloc+0x5b/0x360 [ 1133.778230] ? mark_held_locks+0x9e/0xe0 [ 1133.778681] create_object.isra.0+0x3a/0xa20 [ 1133.779171] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1133.779737] kmem_cache_alloc_bulk+0x168/0x320 [ 1133.780233] io_submit_sqes+0x11c6/0x2310 [ 1133.780696] ? io_queue_sqe+0x1020/0x1020 [ 1133.781142] ? __do_sys_io_uring_enter+0x107f/0x1910 [ 1133.781699] ? xas_find_conflict+0x9f0/0x9f0 [ 1133.782207] __do_sys_io_uring_enter+0x108a/0x1910 [ 1133.782772] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1133.783331] ? io_sq_thread+0x1640/0x1640 [ 1133.783800] ? wait_for_completion+0x270/0x270 [ 1133.784334] ? rcu_read_lock_any_held+0x75/0xa0 [ 1133.784830] ? vfs_write+0x354/0xa30 [ 1133.785264] ? fput_many+0x2f/0x1a0 [ 1133.785695] ? ksys_write+0x1a9/0x260 [ 1133.786148] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1133.786710] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1133.787303] do_syscall_64+0x33/0x40 [ 1133.787734] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1133.788323] RIP: 0033:0x7f7f05be1b19 [ 1133.788751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1133.790881] RSP: 002b:00007f7f03157188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1133.791758] RAX: ffffffffffffffda RBX: 00007f7f05cf4f60 RCX: 00007f7f05be1b19 [ 1133.792580] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1133.793421] RBP: 00007f7f031571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1133.794258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1133.795088] R13: 00007ffcbc09102f R14: 00007f7f03157300 R15: 0000000000022000 21:32:21 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x30, 0x0, 0x0, 0x0) 21:32:21 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:32:21 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) [ 1133.954430] FAULT_INJECTION: forcing a failure. [ 1133.954430] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1133.955919] CPU: 1 PID: 13989 Comm: syz-executor.7 Not tainted 5.10.148 #1 [ 1133.956683] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1133.957601] Call Trace: [ 1133.957895] dump_stack+0x107/0x167 [ 1133.958315] should_fail.cold+0x5/0xa [ 1133.958729] _copy_to_user+0x2e/0x180 [ 1133.959152] simple_read_from_buffer+0xcc/0x160 [ 1133.959668] proc_fail_nth_read+0x198/0x230 [ 1133.960154] ? proc_sessionid_read+0x230/0x230 [ 1133.960649] ? security_file_permission+0x24e/0x570 [ 1133.961179] ? perf_trace_initcall_start+0x101/0x380 [ 1133.961745] ? proc_sessionid_read+0x230/0x230 [ 1133.962236] vfs_read+0x228/0x580 [ 1133.962633] ksys_read+0x12d/0x260 [ 1133.963028] ? __ia32_sys_pwrite64+0x230/0x230 [ 1133.963521] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1133.964102] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1133.964706] do_syscall_64+0x33/0x40 [ 1133.965137] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1133.965721] RIP: 0033:0x7f7f05b9469c [ 1133.966153] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1133.968277] RSP: 002b:00007f7f03157170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1133.969142] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f7f05b9469c [ 1133.969946] RDX: 000000000000000f RSI: 00007f7f031571e0 RDI: 0000000000000006 [ 1133.970779] RBP: 00007f7f031571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1133.971601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1133.972406] R13: 00007ffcbc09102f R14: 00007f7f03157300 R15: 0000000000022000 21:32:37 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:32:37 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:32:37 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x36, 0x0, 0x0, 0x0) 21:32:37 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:32:37 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:32:37 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, 0x0, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:32:37 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x6, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:32:37 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:32:37 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:32:37 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x3c, 0x0, 0x0, 0x0) 21:32:37 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x5, 0x0, 0x0, 0x0, 0x0) 21:32:37 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:32:37 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:32:37 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:32:37 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:32:37 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x60, 0x0, 0x0, 0x0) 21:32:37 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:32:37 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x6, 0x0, 0x0, 0x0) 21:32:37 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x600, 0x0, 0x0, 0x0) 21:32:37 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:32:37 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0xc, 0x0, 0x0, 0x0) [ 1150.395617] perf: interrupt took too long (2516 > 2500), lowering kernel.perf_event_max_sample_rate to 79000 21:32:39 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0xc00, 0x0, 0x0, 0x0) 21:32:53 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0xc, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:32:53 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:32:53 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:32:53 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:32:53 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x12, 0x0, 0x0, 0x0) 21:32:53 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x1200, 0x0, 0x0, 0x0) 21:32:53 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, 0x0, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:32:53 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) [ 1166.028837] perf: interrupt took too long (3217 > 3145), lowering kernel.perf_event_max_sample_rate to 62000 [ 1166.093126] perf: interrupt took too long (4069 > 4021), lowering kernel.perf_event_max_sample_rate to 49000 21:32:53 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x18, 0x0, 0x0, 0x0) 21:32:53 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x1800, 0x0, 0x0, 0x0) 21:32:54 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:32:54 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x1e, 0x0, 0x0, 0x0) 21:32:54 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x1e00, 0x0, 0x0, 0x0) 21:32:54 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x24, 0x0, 0x0, 0x0) 21:32:54 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x2400, 0x0, 0x0, 0x0) 21:32:54 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:33:11 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:33:11 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x12, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:33:11 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:33:11 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x2a, 0x0, 0x0, 0x0) 21:33:11 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:33:11 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, 0x0, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:33:11 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:33:11 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x2a00, 0x0, 0x0, 0x0) 21:33:11 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x3000, 0x0, 0x0, 0x0) 21:33:11 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x30, 0x0, 0x0, 0x0) 21:33:11 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:33:11 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x36, 0x0, 0x0, 0x0) 21:33:12 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x3600, 0x0, 0x0, 0x0) 21:33:12 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x3c, 0x0, 0x0, 0x0) 21:33:12 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x3c00, 0x0, 0x0, 0x0) 21:33:12 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:33:14 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:33:30 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:33:30 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:33:30 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x4000, 0x0, 0x0, 0x0) 21:33:30 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x600, 0x0, 0x0, 0x0) 21:33:30 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:33:30 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:33:30 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:33:30 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x18, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:33:30 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0xc00, 0x0, 0x0, 0x0) 21:33:30 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x6000, 0x0, 0x0, 0x0) 21:33:30 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x1200, 0x0, 0x0, 0x0) 21:33:30 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x600000, 0x0, 0x0, 0x0) 21:33:30 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x1800, 0x0, 0x0, 0x0) 21:33:30 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x800000, 0x0, 0x0, 0x0) 21:33:30 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(0xffffffffffffffff, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:33:30 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x1e00, 0x0, 0x0, 0x0) 21:33:44 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x1e, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:33:44 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(0xffffffffffffffff, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:33:44 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:33:44 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x80ffff, 0x0, 0x0, 0x0) 21:33:44 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x2400, 0x0, 0x0, 0x0) 21:33:44 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:33:44 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:33:44 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:33:44 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:33:44 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x2a00, 0x0, 0x0, 0x0) 21:33:44 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x6000000, 0x0, 0x0, 0x0) 21:33:44 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:33:44 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:33:44 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0xc000000, 0x0, 0x0, 0x0) 21:33:44 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:33:44 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:33:58 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x12000000, 0x0, 0x0, 0x0) 21:33:58 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x3000, 0x0, 0x0, 0x0) 21:33:58 executing program 1: r0 = syz_io_uring_setup(0x44ae, 0x0, &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:33:58 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:33:58 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(0xffffffffffffffff, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:33:58 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:33:58 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:33:58 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x24, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:33:58 executing program 1: r0 = syz_io_uring_setup(0x44ae, 0x0, &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:33:58 executing program 1: r0 = syz_io_uring_setup(0x44ae, 0x0, &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:34:13 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x2a, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:34:13 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:34:13 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x3600, 0x0, 0x0, 0x0) 21:34:13 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, 0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:34:13 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, 0xffffffffffffffff) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:34:13 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:34:13 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:34:13 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x18000000, 0x0, 0x0, 0x0) 21:34:13 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:34:13 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:34:13 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x1e000000, 0x0, 0x0, 0x0) 21:34:13 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, 0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:34:13 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x3c00, 0x0, 0x0, 0x0) 21:34:13 executing program 3: syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r0, r1, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:34:14 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x24000000, 0x0, 0x0, 0x0) 21:34:14 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, 0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:34:27 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, 0x0, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:34:27 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x800000, 0x0, 0x0, 0x0) 21:34:27 executing program 3: syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r0, r1, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:34:27 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:34:27 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x2a000000, 0x0, 0x0, 0x0) 21:34:27 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, 0xffffffffffffffff) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:34:27 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x30, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:34:27 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:34:27 executing program 3: syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r0, r1, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:34:27 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:34:27 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x30000000, 0x0, 0x0, 0x0) 21:34:27 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:34:27 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x80ffff, 0x0, 0x0, 0x0) 21:34:27 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:34:27 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:34:27 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x36000000, 0x0, 0x0, 0x0) 21:34:28 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, 0x0, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:34:28 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x6000000, 0x0, 0x0, 0x0) 21:34:28 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:34:28 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:34:28 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x3c000000, 0x0, 0x0, 0x0) 21:34:28 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, 0xffffffffffffffff) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:34:44 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:34:44 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x36, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:34:44 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:34:44 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:34:44 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0xc000000, 0x0, 0x0, 0x0) 21:34:44 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x40000000, 0x0, 0x0, 0x0) 21:34:44 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, 0x0, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:34:44 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0xffffffffffffffff, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:34:44 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:34:44 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x12000000, 0x0, 0x0, 0x0) 21:34:44 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0xffff8000, 0x0, 0x0, 0x0) 21:34:44 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:34:45 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x18000000, 0x0, 0x0, 0x0) 21:34:45 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x6, 0x0, 0x0) 21:34:45 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0xffffffffffffffff, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:34:45 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0xc, 0x0, 0x0) 21:35:01 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x3c, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:35:01 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:35:01 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0xffffffffffffffff, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:35:01 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x1e000000, 0x0, 0x0, 0x0) 21:35:01 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x12, 0x0, 0x0) 21:35:01 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:35:01 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:35:01 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:35:01 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x24000000, 0x0, 0x0, 0x0) 21:35:01 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x18, 0x0, 0x0) 21:35:02 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x2a000000, 0x0, 0x0, 0x0) 21:35:02 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x1e, 0x0, 0x0) 21:35:02 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x24, 0x0, 0x0) 21:35:02 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x30000000, 0x0, 0x0, 0x0) 21:35:02 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x36000000, 0x0, 0x0, 0x0) 21:35:02 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x2a, 0x0, 0x0) 21:35:17 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x30, 0x0, 0x0) 21:35:17 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x42, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:35:17 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, 0x0, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:35:17 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x3c000000, 0x0, 0x0, 0x0) 21:35:17 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:35:17 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:35:17 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:35:17 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:35:35 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x600, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:35:35 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, 0x0) 21:35:35 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:35:35 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0xffff8000, 0x0, 0x0, 0x0) 21:35:35 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, 0x0, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:35:35 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:35:35 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:35:35 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x36, 0x0, 0x0) 21:35:35 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x3c, 0x0, 0x0) 21:35:35 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x6, 0x0, 0x0) 21:35:49 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, 0x0, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:35:49 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x60, 0x0, 0x0) 21:35:49 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0xc00, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:35:49 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, 0x0) 21:35:49 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:35:49 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:35:49 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:35:49 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0xc, 0x0, 0x0) 21:35:49 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x12, 0x0, 0x0) 21:35:50 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x600, 0x0, 0x0) 21:35:50 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x18, 0x0, 0x0) 21:35:50 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0xc00, 0x0, 0x0) 21:35:50 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:35:50 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x1e, 0x0, 0x0) 21:35:50 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x24, 0x0, 0x0) 21:35:50 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x1200, 0x0, 0x0) 21:36:05 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x1200, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:36:05 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:36:05 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:36:05 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x1800, 0x0, 0x0) 21:36:05 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:36:05 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, 0x0) 21:36:05 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:36:05 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x2a, 0x0, 0x0) 21:36:05 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x30, 0x0, 0x0) 21:36:05 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x1e00, 0x0, 0x0) 21:36:06 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x36, 0x0, 0x0) 21:36:06 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:36:06 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x2400, 0x0, 0x0) 21:36:06 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x3c, 0x0, 0x0) 21:36:06 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x2a00, 0x0, 0x0) 21:36:06 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x600, 0x0, 0x0) 21:36:21 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(0x0, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:36:21 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x3000, 0x0, 0x0) 21:36:21 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x1800, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:36:21 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:36:21 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:36:21 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:36:21 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, 0x0) 21:36:21 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0xc00, 0x0, 0x0) 21:36:21 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x3600, 0x0, 0x0) 21:36:21 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x1200, 0x0, 0x0) 21:36:22 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x3c00, 0x0, 0x0) 21:36:22 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x4000, 0x0, 0x0) 21:36:22 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x1800, 0x0, 0x0) 21:36:22 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(0x0, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:36:22 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x6000, 0x0, 0x0) 21:36:22 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x1e00, 0x0, 0x0) 21:36:37 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x1e00, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:36:37 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x600000, 0x0, 0x0) 21:36:37 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:36:37 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x2400, 0x0, 0x0) 21:36:37 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(0x0, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:36:37 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:36:37 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:36:37 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:36:37 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x2a00, 0x0, 0x0) 21:36:37 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:36:37 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x800000, 0x0, 0x0) 21:36:37 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x3000, 0x0, 0x0) 21:36:37 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:36:37 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x80ffff, 0x0, 0x0) 21:36:38 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 21:36:38 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x3600, 0x0, 0x0) 21:36:53 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x3c00, 0x0, 0x0) 21:36:53 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x6000000, 0x0, 0x0) 21:36:53 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x2400, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:36:53 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:36:53 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x0) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:36:53 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:36:53 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 21:36:53 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:36:53 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 21:36:53 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0xc000000, 0x0, 0x0) 21:36:53 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:36:53 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x800000, 0x0, 0x0) 21:36:53 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x12000000, 0x0, 0x0) 21:36:53 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x18000000, 0x0, 0x0) 21:36:53 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x80ffff, 0x0, 0x0) 21:36:53 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x1e000000, 0x0, 0x0) 21:36:53 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x0) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:37:07 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x2a00, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:37:07 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x6000000, 0x0, 0x0) 21:37:07 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0xc00, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:37:07 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:37:07 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x24000000, 0x0, 0x0) 21:37:07 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x0) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:37:07 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:37:07 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:37:07 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:37:07 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0xc000000, 0x0, 0x0) 21:37:07 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x2a000000, 0x0, 0x0) 21:37:07 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x12000000, 0x0, 0x0) 21:37:07 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:37:07 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(0x0, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:37:07 executing program 1: syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r0, r1, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:37:07 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x30000000, 0x0, 0x0) 21:37:21 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0xc00, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:37:21 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x3000, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:37:21 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x18000000, 0x0, 0x0) 21:37:21 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(0x0, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:37:21 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x36000000, 0x0, 0x0) 21:37:21 executing program 3: syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r0, r1, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:37:21 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) clone3(0x0, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:37:21 executing program 1: syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r0, r1, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:37:21 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x2a00, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:37:21 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x3c000000, 0x0, 0x0) 21:37:22 executing program 1: syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r0, r1, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:37:22 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x1e000000, 0x0, 0x0) 21:37:22 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:37:22 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x24000000, 0x0, 0x0) 21:37:22 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x40000000, 0x0, 0x0) 21:37:22 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(0x0, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:37:39 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0xffff8000, 0x0, 0x0) 21:37:39 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x2a000000, 0x0, 0x0) 21:37:39 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x3600, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:37:39 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x2400, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:37:39 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x0) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:37:39 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:37:39 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) clone3(0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:37:39 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:37:40 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:37:40 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x60000000000000, 0x0, 0x0) 21:37:40 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:37:40 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) clone3(0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:37:40 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x30000000, 0x0, 0x0) 21:37:40 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) clone3(0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:37:40 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:37:40 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x80000000000000, 0x0, 0x0) 21:37:58 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x3c00, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:37:58 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, 0x0) 21:37:58 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) clone3(0x0, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 21:37:58 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x0) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:37:58 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x36000000, 0x0, 0x0) 21:37:59 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x80ffff00000000, 0x0, 0x0) 21:37:59 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x600, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:37:59 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:37:59 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) clone3(0x0, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 21:37:59 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x3c000000, 0x0, 0x0) 21:37:59 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x600000000000000, 0x0, 0x0) 21:37:59 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) clone3(0x0, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 21:37:59 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0xffff8000, 0x0, 0x0) 21:37:59 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0xc00000000000000, 0x0, 0x0) 21:37:59 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:38:18 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x4000, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:38:18 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x1200000000000000, 0x0, 0x0) 21:38:18 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:38:18 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:38:18 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x1000000000000, 0x0, 0x0) 21:38:18 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x0) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:38:18 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:38:18 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:38:18 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x1800000000000000, 0x0, 0x0) 21:38:18 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x80000000000000, 0x0, 0x0) 21:38:18 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x1e00000000000000, 0x0, 0x0) 21:38:18 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x80ffff00000000, 0x0, 0x0) 21:38:18 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x2400000000000000, 0x0, 0x0) 21:38:18 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x600000000000000, 0x0, 0x0) 21:38:18 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x2a00000000000000, 0x0, 0x0) 21:38:18 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0xc00000000000000, 0x0, 0x0) 21:38:37 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x3000000000000000, 0x0, 0x0) 21:38:37 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x4200, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:38:37 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, 0x0) 21:38:37 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x600000000000000, 0x0, 0x0) 21:38:37 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x1200000000000000, 0x0, 0x0) 21:38:37 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(0x0, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:38:37 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:38:37 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:38:37 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:38:37 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x3600000000000000, 0x0, 0x0) 21:38:37 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x1800000000000000, 0x0, 0x0) 21:38:38 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x1e00000000000000, 0x0, 0x0) 21:38:38 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x3c00000000000000, 0x0, 0x0) 21:38:38 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x2400000000000000, 0x0, 0x0) 21:38:38 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x4000000000000000, 0x0, 0x0) 21:38:38 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x2a00000000000000, 0x0, 0x0) 21:38:56 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x800000, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:38:56 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x6) 21:38:56 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:38:56 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:38:56 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x3000000000000000, 0x0, 0x0) 21:38:56 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(0x0, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:38:56 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, 0x0, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:38:56 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, 0x0) 21:38:56 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0xc) 21:38:56 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x3600000000000000, 0x0, 0x0) 21:38:57 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x12) 21:38:57 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x3c00000000000000, 0x0, 0x0) 21:38:57 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x6) 21:38:57 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x18) 21:38:57 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x1e) 21:38:57 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0xc) 21:39:12 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x24) 21:39:12 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x1000000, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:39:12 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, 0x0) 21:39:12 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, 0x0) 21:39:12 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x12) 21:39:12 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(0x0, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:39:12 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x2a, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:39:12 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, 0x0) 21:39:13 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x2a) 21:39:13 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x18) 21:39:13 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x30) 21:39:13 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x36) 21:39:13 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x1e) 21:39:13 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x3c) 21:39:13 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x24) 21:39:13 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x60) 21:39:31 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x2000000, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:39:31 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x2a) 21:39:31 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, 0x0) 21:39:31 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x1e) 21:39:31 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x600) 21:39:31 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x0) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:39:31 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:39:31 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) clone3(&(0x7f0000001ec0)={0x40042100, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f00000001c0), {0x36}, &(0x7f0000001d80)=""/32, 0x20, &(0x7f0000001dc0)=""/184, &(0x7f0000001e80)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:39:31 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x1000000, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:39:31 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0xc00) 21:39:32 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x30) 21:39:32 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x36) 21:39:32 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x1200) 21:39:32 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x3c) 21:39:32 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x1800) 21:39:32 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x0) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:39:47 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x6000000, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:39:47 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:39:47 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x600) 21:39:47 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x1e00) 21:39:47 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x2a) 21:39:47 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x0) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:39:47 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x1e, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:39:47 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x1000000, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:39:47 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x4, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:39:47 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0xc00) 21:39:47 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x2400) 21:39:47 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x1200) 21:39:47 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x1800) 21:39:47 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x2a00) 21:39:47 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x1e00) 21:39:47 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x3000) 21:40:02 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x2400) 21:40:02 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:40:02 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:40:02 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0xc000000, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:40:02 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x3600) 21:40:02 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(0x0, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:40:02 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:40:02 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x1000000, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) [ 1594.735361] FAULT_INJECTION: forcing a failure. [ 1594.735361] name failslab, interval 1, probability 0, space 0, times 0 [ 1594.738487] CPU: 0 PID: 22036 Comm: syz-executor.4 Not tainted 5.10.148 #1 [ 1594.740203] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1594.742531] Call Trace: [ 1594.742570] dump_stack+0x107/0x167 [ 1594.742604] should_fail.cold+0x5/0xa [ 1594.744951] should_failslab+0x5/0x20 [ 1594.745871] kmem_cache_alloc_bulk+0x4b/0x320 [ 1594.746905] io_submit_sqes+0x11c6/0x2310 [ 1594.747882] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1594.749125] ? io_queue_sqe+0x1020/0x1020 [ 1594.750101] ? __do_sys_io_uring_enter+0x107f/0x1910 [ 1594.751286] ? mutex_lock_io_nested+0x1110/0x1110 [ 1594.752485] ? percpu_ref_tryget_many+0x167/0x290 [ 1594.753579] __do_sys_io_uring_enter+0x108a/0x1910 [ 1594.754876] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1594.755938] ? io_sq_thread+0x1640/0x1640 [ 1594.757039] ? wait_for_completion+0x270/0x270 [ 1594.758055] ? rcu_read_lock_any_held+0x75/0xa0 [ 1594.759281] ? vfs_write+0x354/0xa30 [ 1594.760135] ? fput_many+0x2f/0x1a0 [ 1594.761106] ? ksys_write+0x1a9/0x260 [ 1594.761957] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1594.763342] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1594.764495] do_syscall_64+0x33/0x40 [ 1594.765447] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1594.766683] RIP: 0033:0x7f05436cfb19 [ 1594.767555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1594.772410] RSP: 002b:00007f0540c45188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1594.774083] RAX: ffffffffffffffda RBX: 00007f05437e2f60 RCX: 00007f05436cfb19 [ 1594.775958] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1594.777610] RBP: 00007f0540c451d0 R08: 0000000000000000 R09: 0000000000000000 [ 1594.779457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1594.781350] R13: 00007ffe4f63409f R14: 00007f0540c45300 R15: 0000000000022000 21:40:02 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x3c00) 21:40:02 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x2a00) 21:40:02 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x4000) 21:40:02 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x3000) 21:40:02 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x6000) 21:40:02 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x600000) 21:40:02 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x3600) 21:40:02 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x800000) 21:40:20 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x12000000, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:40:20 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x3c00) 21:40:20 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 21:40:20 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x80ffff) 21:40:20 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(0x0, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:40:20 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x1000000, 0x0, 0x0, 0x0) 21:40:20 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:40:20 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) clone3(0x0, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) [ 1612.490525] FAULT_INJECTION: forcing a failure. [ 1612.490525] name failslab, interval 1, probability 0, space 0, times 0 [ 1612.493470] CPU: 0 PID: 22269 Comm: syz-executor.1 Not tainted 5.10.148 #1 [ 1612.495301] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1612.497439] Call Trace: [ 1612.498049] dump_stack+0x107/0x167 [ 1612.498883] should_fail.cold+0x5/0xa [ 1612.499757] should_failslab+0x5/0x20 [ 1612.500642] kmem_cache_alloc_bulk+0x4b/0x320 [ 1612.501667] io_submit_sqes+0x11c6/0x2310 [ 1612.502631] ? io_queue_sqe+0x1020/0x1020 [ 1612.503576] ? __do_sys_io_uring_enter+0x107f/0x1910 [ 1612.504758] ? mutex_lock_io_nested+0x1110/0x1110 [ 1612.505851] ? xa_load+0x158/0x290 [ 1612.506666] ? xas_find_conflict+0x9f0/0x9f0 [ 1612.507694] __do_sys_io_uring_enter+0x108a/0x1910 [ 1612.508849] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1612.509944] ? io_sq_thread+0x1640/0x1640 [ 1612.510893] ? wait_for_completion+0x270/0x270 [ 1612.511941] ? rcu_read_lock_any_held+0x75/0xa0 [ 1612.513013] ? vfs_write+0x354/0xa30 [ 1612.513868] ? fput_many+0x2f/0x1a0 [ 1612.514701] ? ksys_write+0x1a9/0x260 [ 1612.515577] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1612.516796] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1612.517969] do_syscall_64+0x33/0x40 [ 1612.518827] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1612.519993] RIP: 0033:0x7f0ee6e13b19 [ 1612.520855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1612.525038] RSP: 002b:00007f0ee4389188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1612.526779] RAX: ffffffffffffffda RBX: 00007f0ee6f26f60 RCX: 00007f0ee6e13b19 [ 1612.528412] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1612.530027] RBP: 00007f0ee43891d0 R08: 0000000000000000 R09: 0000000000000000 [ 1612.531649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1612.533291] R13: 00007ffcdd818a7f R14: 00007f0ee4389300 R15: 0000000000022000 [ 1612.563493] FAULT_INJECTION: forcing a failure. [ 1612.563493] name failslab, interval 1, probability 0, space 0, times 0 [ 1612.566266] CPU: 0 PID: 22278 Comm: syz-executor.6 Not tainted 5.10.148 #1 [ 1612.567846] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1612.569735] Call Trace: [ 1612.570349] dump_stack+0x107/0x167 [ 1612.571180] should_fail.cold+0x5/0xa [ 1612.572057] should_failslab+0x5/0x20 [ 1612.572953] kmem_cache_alloc_bulk+0x4b/0x320 [ 1612.573985] io_submit_sqes+0x11c6/0x2310 [ 1612.574935] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1612.576140] ? io_queue_sqe+0x1020/0x1020 [ 1612.577093] ? __do_sys_io_uring_enter+0x107f/0x1910 [ 1612.578257] ? mutex_lock_io_nested+0x1110/0x1110 [ 1612.579356] ? percpu_ref_tryget_many+0x167/0x290 [ 1612.580504] __do_sys_io_uring_enter+0x108a/0x1910 [ 1612.581626] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1612.582731] ? io_sq_thread+0x1640/0x1640 [ 1612.583667] ? wait_for_completion+0x270/0x270 [ 1612.584747] ? rcu_read_lock_any_held+0x75/0xa0 [ 1612.585801] ? vfs_write+0x354/0xa30 [ 1612.586661] ? fput_many+0x2f/0x1a0 [ 1612.587490] ? ksys_write+0x1a9/0x260 [ 1612.588374] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1612.589568] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1612.590753] do_syscall_64+0x33/0x40 [ 1612.591605] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1612.592781] RIP: 0033:0x7f8005e67b19 [ 1612.593631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1612.597827] RSP: 002b:00007f80033dd188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1612.599555] RAX: ffffffffffffffda RBX: 00007f8005f7af60 RCX: 00007f8005e67b19 [ 1612.601191] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1612.602806] RBP: 00007f80033dd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1612.604447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1612.604459] R13: 00007fff791f317f R14: 00007f80033dd300 R15: 0000000000022000 21:40:20 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x1000000, 0x0, 0x0, 0x0) 21:40:20 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x2000005, 0x13, r0, 0x8000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f00000000c0)={0x100, 0xe0}, &(0x7f00000001c0)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:40:20 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x6000000) 21:40:20 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x800000) 21:40:20 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0xc000000) 21:40:20 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x80ffff) 21:40:20 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(0x0, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:40:20 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x6000000) 21:40:37 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x18000000, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:40:37 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, 0x0, 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:40:37 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0xc000000) 21:40:37 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x12000000) 21:40:37 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x1000000, 0x0, 0x0, 0x0) 21:40:37 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, {}, 0x1}, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000300)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x4, 0x20, 0xc3, 0x3, 0x2d, @dev={0xfe, 0x80, '\x00', 0xd}, @dev={0xfe, 0x80, '\x00', 0x37}, 0x8, 0x8, 0x8}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {r6, 0xee00}}, './file0\x00'}) fcntl$setpipe(r8, 0x407, 0x8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000440)={@rand_addr, 0x0}, &(0x7f0000000480)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc4ac534329b241ed}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="94010000", @ANYRES16=r4, @ANYBLOB="08002cbd7000fcdbdf250200000008000100", @ANYRES32=r5, @ANYBLOB="7801028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYRES32=r7, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000008000008000600", @ANYRES32=0x0, @ANYBLOB="3800090024000100616374697665706f727400000000000000000000000df7232e000000000020000000000000008c4f2bea57c944b204dab396e93cbb", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="3c00010024007365725f6c696e6b75700000000000000000000000000000000000000000000500030006312b57fbbd46541cd14bab0ec360", @ANYRES32=0x0, @ANYBLOB], 0x194}, 0x1, 0x0, 0x0, 0x20000040}, 0x800) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:40:37 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:40:37 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) clone3(0x0, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:40:38 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x12000000) 21:40:38 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x18000000) 21:40:38 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x1e000000) 21:40:38 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x18000000) 21:40:38 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, 0x0, 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:40:38 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x24000000) 21:40:38 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x1e000000) 21:40:55 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x1e000000, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:40:55 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x24000000) 21:40:55 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = creat(&(0x7f0000000540)='./file0\x00', 0x80) pwrite64(r6, &(0x7f00000000c0), 0x17, 0x10001) io_uring_enter(r6, 0x51c8, 0x5259, 0x3, &(0x7f0000000240)={[0xfffffffffffeffff]}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r8, r9, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r10, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r4, r9, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000001c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x8) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:40:55 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) 21:40:55 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x2a000000) 21:40:55 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, 0x0, 0x80000000, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:40:55 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) clone3(0x0, 0x0) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) 21:40:55 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x1000000, 0x0, 0x0, 0x0) 21:40:55 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) clone3(0x0, 0x0) io_uring_enter(r0, 0x3, 0x0, 0x0, 0x0, 0x0) 21:40:55 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x30000000) 21:40:55 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x3, 0x0, 0x0, 0x0, 0x0) 21:40:55 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x2a000000) 21:40:55 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x36000000) 21:40:55 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x30000000) 21:40:55 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) clone3(0x0, 0x0) io_uring_enter(r0, 0x4, 0x0, 0x0, 0x0, 0x0) 21:40:55 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x4, 0x0, 0x0, 0x0, 0x0) [ 1654.915022] Bluetooth: hci3: command 0x0409 tx timeout [ 1656.962872] Bluetooth: hci3: command 0x041b tx timeout [ 1659.010891] Bluetooth: hci3: command 0x040f tx timeout [ 1659.855999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1659.857670] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1659.862512] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1659.899347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1659.901156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1659.903607] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1661.058925] Bluetooth: hci3: command 0x0419 tx timeout [ 1674.963058] kmemleak: 23 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 21:41:28 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x24000000, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:41:28 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x8000000) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:41:28 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) clone3(0x0, 0x0) io_uring_enter(r0, 0x5, 0x0, 0x0, 0x0, 0x0) 21:41:28 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x36000000) 21:41:28 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x5, 0x0, 0x0, 0x0, 0x0) 21:41:28 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x3c000000) 21:41:28 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x0, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:41:28 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x1000000, 0x0, 0x0, 0x0) 21:41:29 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x3c000000) 21:41:29 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) clone3(0x0, 0x0) io_uring_enter(r0, 0x6, 0x0, 0x0, 0x0, 0x0) 21:41:29 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x40000000) 21:41:29 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x6, 0x0, 0x0, 0x0, 0x0) 21:41:29 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0xffff8000) 21:41:29 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) clone3(0x0, 0x0) io_uring_enter(r0, 0x7, 0x0, 0x0, 0x0, 0x0) 21:41:29 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x7, 0x0, 0x0, 0x0, 0x0) 21:41:29 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0xffff8000) [ 1695.765565] kmemleak: 31 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 21:41:51 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) r5 = signalfd4(r0, &(0x7f00000000c0)={[0x63d6244c]}, 0x8, 0x800) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000002580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002540)={&(0x7f0000000200)=ANY=[@ANYBLOB=',#\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x232c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:41:51 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x60000000000000) 21:41:51 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x2a000000, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:41:51 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x0, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:41:51 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) clone3(0x0, 0x0) io_uring_enter(r0, 0x8, 0x0, 0x0, 0x0, 0x0) 21:41:51 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x1000000000000) 21:41:51 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x8, 0x0, 0x0, 0x0, 0x0) 21:41:51 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x1000000, 0x0, 0x0, 0x0) 21:41:51 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) clone3(0x0, 0x0) io_uring_enter(r0, 0x9, 0x0, 0x0, 0x0, 0x0) 21:41:51 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x80000000000000) 21:41:51 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x9, 0x0, 0x0, 0x0, 0x0) 21:41:51 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x80000000000000) 21:41:51 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) clone3(0x0, 0x0) io_uring_enter(r0, 0xa, 0x0, 0x0, 0x0, 0x0) 21:41:51 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x80ffff00000000) 21:41:51 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) clone3(0x0, 0x0) io_uring_enter(r0, 0xb, 0x0, 0x0, 0x0, 0x0) 21:41:51 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x80ffff00000000) [ 1718.028914] kmemleak: 23 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 21:42:13 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000002000/0x2000)=nil, &(0x7f000000a000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) io_uring_enter(r4, 0x1b22, 0xc57e, 0x0, &(0x7f00000001c0)={[0x9]}, 0x8) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:42:13 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x30000000, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:42:13 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x600000000000000) 21:42:13 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0xa, 0x0, 0x0, 0x0, 0x0) 21:42:13 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x600000000000000) 21:42:13 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) clone3(0x0, 0x0) io_uring_enter(r0, 0xc, 0x0, 0x0, 0x0, 0x0) 21:42:13 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x0, 0x0) tkill(r3, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:42:13 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD, 0x0) io_uring_enter(r0, 0x76d3, 0x1000000, 0x0, 0x0, 0x0) 21:42:13 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd=r3, 0x97, 0x0, 0xce9a}, 0x80000001) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:42:13 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) clone3(0x0, 0x0) io_uring_enter(r0, 0xd, 0x0, 0x0, 0x0, 0x0) 21:42:13 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD, 0x0) io_uring_enter(r0, 0x76d3, 0x1000000, 0x0, 0x0, 0x0) 21:42:13 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0xc00000000000000) 21:42:13 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0xc00000000000000) 21:42:13 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0xb, 0x0, 0x0, 0x0, 0x0) 21:42:13 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x1200000000000000) 21:42:13 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0xc, 0x0, 0x0, 0x0, 0x0) 21:42:13 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) clone3(0x0, 0x0) io_uring_enter(r0, 0xe, 0x0, 0x0, 0x0, 0x0) [ 1741.632182] kmemleak: 27 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 21:42:37 executing program 4: r0 = creat(&(0x7f0000000540)='./file0\x00', 0x80) pwrite64(r0, &(0x7f00000000c0), 0x17, 0x10001) r1 = syz_io_uring_setup(0x44ae, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, r0}, &(0x7f0000000000/0x12000)=nil, &(0x7f0000009000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = creat(&(0x7f0000000540)='./file0\x00', 0x80) pwrite64(r5, &(0x7f00000000c0), 0x17, 0x10001) io_uring_enter(r5, 0x6f73, 0x4c88, 0x2, &(0x7f00000002c0)={[0x4]}, 0x8) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r4, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x4f}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x40000) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) io_uring_enter(r1, 0x76d2, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:42:37 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0xd, 0x0, 0x0, 0x0, 0x0) 21:42:37 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD, 0x0) io_uring_enter(r0, 0x76d3, 0x1000000, 0x0, 0x0, 0x0) 21:42:37 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x1200000000000000) 21:42:37 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) clone3(0x0, 0x0) io_uring_enter(r0, 0xf, 0x0, 0x0, 0x0, 0x0) 21:42:37 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x1800000000000000) 21:42:37 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(0x0, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:42:37 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x36000000, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:42:37 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x1000000, 0x0, 0x0, 0x0) 21:42:37 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x1800000000000000) 21:42:37 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0xe, 0x0, 0x0, 0x0, 0x0) 21:42:37 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x1e00000000000000) 21:42:37 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) clone3(0x0, 0x0) io_uring_enter(r0, 0x10, 0x0, 0x0, 0x0, 0x0) 21:42:37 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x1000000, 0x0, 0x0, 0x0) 21:42:37 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x1e00000000000000) 21:42:37 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) clone3(0x0, 0x0) io_uring_enter(r0, 0x11, 0x0, 0x0, 0x0, 0x0) [ 1763.462303] kmemleak: 8 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 21:42:59 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x2400000000000000) 21:42:59 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x2400000000000000) 21:42:59 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x3c000000, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:42:59 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xb, 0x10, r0, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x10000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r7, 0x1}, 0x14}}, 0x0) r8 = syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0xa, 0x0, r9) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r6, 0x80, &(0x7f00000001c0)=@pptp={0x18, 0x2, {0x1, @local}}, 0x0, 0x0, 0x0, {0x0, r9}}, 0x3) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:42:59 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x1000000, 0x0, 0x0, 0x0) 21:42:59 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0xf, 0x0, 0x0, 0x0, 0x0) 21:42:59 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) clone3(0x0, 0x0) io_uring_enter(r0, 0x12, 0x0, 0x0, 0x0, 0x0) 21:42:59 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(0x0, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:42:59 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x1000000, 0x0, 0x0, 0x0) [ 1772.277014] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 21:42:59 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) clone3(0x0, 0x0) io_uring_enter(r0, 0x13, 0x0, 0x0, 0x0, 0x0) 21:42:59 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x1000000, 0x0, 0x0, 0x0) 21:42:59 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x2a00000000000000) 21:43:00 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x2a00000000000000) 21:43:00 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x10, 0x0, 0x0, 0x0, 0x0) 21:43:00 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) clone3(0x0, 0x0) io_uring_enter(r0, 0x14, 0x0, 0x0, 0x0, 0x0) 21:43:00 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x1000000, 0x0, 0x0, 0x0) 21:43:00 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x3000000000000000) 21:43:00 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x1000000, 0x0, 0x0, 0x0) [ 1773.085780] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1777.027906] Bluetooth: hci3: command 0x0406 tx timeout [ 1785.592073] kmemleak: 23 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 21:43:22 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x2000000, 0x11, r0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000000c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x2000, @fd_index=0x1, 0x80, 0x9, 0x2, 0x1c, 0x1, {0x1, r7}}, 0x4) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x4, 0x0, 0x100000, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617", 0x0, 0x4fbe}) 21:43:22 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) clone3(0x0, 0x0) io_uring_enter(r0, 0x15, 0x0, 0x0, 0x0, 0x0) 21:43:22 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x11, 0x0, 0x0, 0x0, 0x0) 21:43:22 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x40000000, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:43:22 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x3000000000000000) 21:43:22 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x1000000, 0x0, 0x0, 0x0) 21:43:22 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x3600000000000000) 21:43:22 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(0x0, 0x32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:43:22 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x1000000, 0x0, 0x0, 0x0) 21:43:22 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x3c00000000000000) 21:43:22 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) clone3(0x0, 0x0) io_uring_enter(r0, 0x16, 0x0, 0x0, 0x0, 0x0) 21:43:22 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x12, 0x0, 0x0, 0x0, 0x0) 21:43:22 executing program 2: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x0, {0x0, r4}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x3600000000000000) 21:43:22 executing program 3: r0 = syz_io_uring_setup(0x44ae, 0x0, &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x1000000, 0x0, 0x0, 0x0) 21:43:22 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000000200)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:43:22 executing program 3: r0 = syz_io_uring_setup(0x44ae, 0x0, &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x1000000, 0x0, 0x0, 0x0) 21:43:25 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) r5 = creat(&(0x7f0000000540)='./file0\x00', 0x80) pwrite64(r5, &(0x7f00000000c0), 0x17, 0x10001) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000200)={0x7, 0x5, 0x6, 0x3, 0x5, "542f6eb9b574b7ad12b149c097b2abad1fafad", 0xda}) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:43:25 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) clone3(0x0, 0x0) io_uring_enter(r0, 0x17, 0x0, 0x0, 0x0, 0x0) 21:43:25 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x13, 0x0, 0x0, 0x0, 0x0) 21:43:25 executing program 0: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x42000000, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:43:25 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) clone3(0x0, 0x0) io_uring_enter(r0, 0x18, 0x0, 0x0, 0x0, 0x0) 21:43:25 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x14, 0x0, 0x0, 0x0, 0x0) 21:43:25 executing program 7: ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000280)={0x2, 0x200, 0x9, 0x401, 0x5, 0x65bc}) r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) connect$unix(r4, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x4, {}, 0x0, 0x8, 0x0, {0x0, 0x0, r0}}, 0x6) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)) syz_open_dev$tty20(0xc, 0x4, 0x1) r5 = creat(&(0x7f0000000540)='./file0\x00', 0x80) pwrite64(r5, &(0x7f00000000c0), 0x17, 0x10001) connect$unix(r5, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 21:43:25 executing program 4: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) r4 = dup(r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000001900)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000018c0)={&(0x7f0000000200)={0x1688, r6, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9e}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x30, 0x11d, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xf53}]}]}, @NL80211_ATTR_TID_CONFIG={0x94, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xde}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x74}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x401}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9e}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}]}]}, @NL80211_ATTR_TID_CONFIG={0x978, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe8}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x58}]}, {0x3bc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x38c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9e, 0xfffb, 0x1000, 0x3, 0x7, 0x1, 0x3, 0x7]}}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x4, 0x30, 0x4, 0x4, 0x1, 0x4, 0x4, 0x24, 0x48, 0x12, 0x5, 0x2, 0xc, 0x4, 0x60, 0x9, 0x3, 0x16, 0xd, 0x5, 0x30, 0x1b, 0x16, 0xc]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x8, 0x6, 0x1, 0x6, 0x8, 0x5, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x5, 0x2, 0xc, 0x9, 0x30, 0x30, 0x3, 0x48, 0x36, 0x36, 0x4, 0x1b, 0x1b, 0x24, 0x3, 0x3, 0x5, 0x6, 0x12, 0x0, 0xc, 0x6c, 0x6c]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x8, 0x2, [{0x6, 0x9}, {0x6, 0x2}, {0x4, 0x5}, {0x1}]}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0x4, 0x3, 0x1000, 0x7f, 0x98, 0x20]}}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x1, 0x7}, {0x2, 0x4}, {0x3, 0xa}, {0x3, 0x2}, {0x3, 0x1}, {0x0, 0x4}, {0x1, 0x1}, {0x4, 0xa}, {0x2, 0x6}, {0x1, 0x4}, {0x5, 0x5}, {0x4, 0x9}, {0x4, 0x5}, {0x4, 0x7}, {0x3, 0xa}, {0x1, 0x1}, {0x0, 0xa}, {0x7, 0x9}, {0x4, 0x7}, {0x4, 0x1}, {0x3, 0x9}, {0x7}, {0x7, 0xa}, {0x5, 0x3}, {0x2, 0x1}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x6}, {0x1}, {0x4, 0x2}, {0x3, 0x4}, {0x0, 0xa}, {0x5, 0x5}, {0x6, 0x3}, {0x4}, {}, {0x4, 0x5}, {0x1, 0x9}, {0x1, 0x7}]}]}, @NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x78a, 0x5, 0x81, 0xfff, 0x7, 0x0, 0x883f, 0x3]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x18, 0x9, 0x12, 0x1b, 0x12, 0xb, 0x4, 0x0, 0xc, 0x6c, 0xc, 0x16, 0x18, 0x0, 0x60, 0x2, 0x9, 0x1, 0xb, 0x50, 0x6c, 0x24, 0x12, 0xc, 0x1b, 0xb, 0x18, 0x1]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x6, 0x7}, {0x4, 0x4}, {0x4}, {0x4, 0x7}, {0x7, 0x4}, {0x0, 0x5}, {0x2, 0x3}, {0x2, 0x2}, {0x4, 0x7}, {0x4, 0x1}, {0x5, 0x9}, {0x1, 0x9}, {0x0, 0x4}, {0x6, 0xa}, {0x2, 0x4}, {0x1, 0x5}, {0x0, 0x1}, {0x0, 0x6}, {0x6, 0x3}, {0x1, 0x8}, {0x1, 0x5}, {0x4, 0x9}, {0x7}]}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x5, 0x1}, {0x6, 0x5}, {0x7, 0x6}, {0x0, 0x1}, {0x4, 0x8}, {0x1, 0x2}, {0x0, 0x9}, {}, {0x0, 0x7}, {0x0, 0x6}, {0x4, 0x6}, {0x0, 0x4}, {0x4, 0x4}, {0x6, 0x8}, {0x5, 0x3}, {0x5, 0x6}, {0x1, 0x6}, {0x5, 0x7}, {0x6, 0x2}, {0x6, 0x4}, {0x6, 0xa}, {0x0, 0x3}, {0x0, 0x6}, {0x1, 0x8}, {0x1, 0x1}, {0x3, 0x8}, {0x4, 0x1}, {0x2, 0x2}, {0x6, 0x2}, {0x6, 0x2}, {0x3}, {0x1, 0x6}, {0x3, 0x7}]}]}, @NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x6, 0x6}, {0x6, 0x8}]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x0, 0x4}, {0x6, 0x2}, {0x1, 0x7}, {0x4, 0x5}, {0x0, 0x9}, {0x3, 0x4}, {0x5, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x2, 0x3}, {0x3, 0x2}, {0x6}, {0x1, 0x4}, {0x1, 0x3}, {0x3, 0x1}, {0x0, 0x2}, {0x2, 0x9}, {0x2, 0x9}, {0x0, 0x6}, {0x6, 0x4}, {0x3, 0x7}, {0x0, 0xa}, {0x4, 0x1}, {0x6, 0x3}, {0x0, 0x16}, {0x5, 0x2}]}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x5, 0x2}, {0x7, 0x6}, {0x2, 0x2}, {0x4, 0x7}, {0x0, 0x6}, {0x0, 0x4}, {0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x1, 0x3}, {0x4, 0x8}, {0x7}, {0x6, 0x9}, {0x1, 0x8}, {0x0, 0x1}, {0x0, 0x4}, {0x4, 0x2}, {0x0, 0x8}, {0x2, 0x1}, {}, {0x7, 0x3}, {0x3, 0x7}, {0x4, 0xa}, {0x5, 0x4}, {0x3, 0x5}, {0x0, 0x8}, {0x0, 0x7}, {0x0, 0x8}, {0x2}, {0x3, 0x4}, {0x0, 0x3}, {0x6, 0xa}, {0x0, 0xa}, {0x3, 0x6}, {0x4, 0x5}, {0x5, 0x4}, {0x4, 0x4}, {0x7, 0x2}, {0x7, 0x8}, {0x2, 0xa}, {0x7, 0x9}, {0x4, 0x5}, {0x0, 0x6}, {0x5, 0xa}, {0x5, 0xa}, {0x1, 0x3}, {0x4, 0x9}, {0x0, 0xa}, {0x0, 0x2}, {0x0, 0x5}, {0x6, 0x1}, {0x2, 0x2}, {0x1, 0x4}, {0x2, 0x9}, {0x1, 0x8}, {0x4}, {0x6, 0x6}, {0x0, 0x9}, {0x0, 0x7}, {0x6}, {0x1, 0x5}, {0x1}, {0x1}, {0x0, 0xa}, {0x2, 0x2}, {0x0, 0x3}, {0x4, 0x9}, {0x3, 0x9}, {0x1, 0x3}, {0x0, 0x6}, {0x0, 0x3}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x80, 0x8, 0x200, 0x1, 0x33, 0x8001, 0x2]}}]}, @NL80211_BAND_5GHZ={0x12c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x6, 0x8}, {0x4, 0x8}, {0x2, 0x7}, {0x7, 0x5}, {0x6, 0x6}, {0x3, 0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0xa}, {0x1, 0x1}, {0x5, 0x4}, {0x4, 0x1}, {0x3, 0x5}, {0x6, 0x9}, {0x7, 0x8}, {0x5, 0x2}, {0x7, 0x8}, {0x3, 0x2}, {0x2, 0x7}, {0x0, 0x9}, {0x6, 0x5}, {0x5, 0x7}, {0x2, 0x9}, {0x5, 0x5}, {0x4, 0x2}, {0x7, 0x2}, {0x7, 0x6}, {0x6, 0x3}, {0x1, 0x8}, {0x7, 0x7}, {0x2, 0x7}, {0x1, 0xa}, {0x3, 0x6}, {0x5, 0x4}, {0x0, 0x4}, {0x1, 0x5}, {0x5, 0x7}, {0x3, 0x8}, {}, {0x3, 0x7}, {0x4, 0x2}, {0x1, 0x4}, {0x4}, {0x2}, {0x5, 0xa}, {0x7}, {0x0, 0x9}, {0x5, 0x9}, {0x0, 0x1}, {0x0, 0x7}, {0x4, 0x7}, {0x0, 0x3}, {0x3, 0xa}, {0x5, 0x2}, {0x1, 0x6}, {0x4, 0x4}, {0x1, 0x8}, {0x2, 0x2}, {0x7, 0x6}, {0x5, 0x3}, {0x5, 0x1}, {0x6, 0x1}, {0x2, 0x8}, {0x5, 0x7}, {0x1}, {0x5, 0x6}, {0x1, 0x4}, {0x6, 0x1}, {0x7, 0x5}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0xc, 0x12, 0x1b, 0x6c, 0x18, 0x10, 0x12, 0x60, 0x36, 0x24, 0x24, 0x5, 0x16, 0x6, 0x18, 0x9, 0x3, 0x48, 0x36, 0xb]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x7, 0x6}, {0x1, 0x6}, {0x5, 0x1}, {0x1, 0x8}, {0x0, 0x8}, {0x2, 0x6}, {0x6}, {0x0, 0x5}, {0x2, 0x8}, {0x6}, {0x0, 0x2}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x1, 0x2}, {0x0, 0x7}, {0x3, 0x7}, {0x2, 0xa}, {0x0, 0x2}, {0x1}, {0x3}, {0x4, 0x7}, {0x7, 0x8}, {0x4, 0x6}, {0x4, 0x1}, {0x5, 0x2}, {0x0, 0x2}, {0x5, 0x2}, {0x7, 0xa}, {0x5, 0x6}]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x4, 0x1b, 0x18, 0x36, 0x9, 0xc, 0x18, 0xb, 0x60, 0x4, 0x16, 0x3, 0x30, 0xb, 0x4, 0x16, 0x18, 0xb, 0x1b]}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x7, 0x7}, {0x7, 0x6}, {0x1, 0x8}, {0x4, 0x2}, {0x4, 0x7}, {0x0, 0x2}, {0x5, 0xa}, {0x1, 0x2}, {0x5, 0x6}, {0x6}, {0x3, 0x5}, {0x2}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0x5}, {0x2, 0x9}, {0x3, 0x6}]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x5, 0x8}, {0x4, 0x4}, {0x2, 0x3}, {0x5, 0x1}, {0x5, 0x8}, {0x7}, {0x2}, {0x1, 0x6}, {0x1, 0x5}, {0x3}, {0x6, 0x5}, {0x7, 0x5}, {0x7, 0x4}, {0x6}, {0x7, 0x5}, {0x1, 0x7}, {0x7, 0x5}, {0x1, 0x5}, {0x6, 0x8}, {0x2, 0x1}, {0x6, 0xa}, {0x3, 0x8}, {0x0, 0x4}, {0x1, 0x7}, {0x6, 0x7}, {0x1, 0x3}, {0x0, 0x9}, {}, {0x4, 0x9}, {0x1, 0x1}, {0x3, 0x6}, {0x4, 0x4}, {0x0, 0x1}, {0x1, 0x7}, {0x3, 0x4}, {0x0, 0x2}, {0x7, 0x3}, {0x5, 0xa}, {0x0, 0x6}, {0x6, 0x4}, {0x0, 0x3}, {0x6, 0xa}, {0x2, 0x2}, {0x3, 0xa}, {0x6, 0x4}, {0x5, 0x4}, {0x7, 0x1}, {0x7, 0x4}, {0x5, 0x8}, {0x2, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x12, 0x9, 0x36]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x18, 0x16, 0x11, 0x9, 0x18, 0x5, 0x48, 0x6c, 0x24, 0x0, 0x4c, 0x3, 0xc, 0xb, 0x30, 0x16, 0x50, 0xb, 0x4, 0xc, 0xc, 0x36, 0x6c, 0x48, 0x18, 0x18]}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x10, 0x2, [{0x1, 0x1}, {0x0, 0x1}, {0x6, 0x8}, {0x7, 0x5}, {0x1, 0x8}, {0x0, 0x8}, {0x7, 0x7}, {0x3, 0xa}, {0x2, 0x7}, {0x6, 0x8}, {0x0, 0xa}, {}]}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x0, 0x8}, {0x4, 0x3}, {0x0, 0x1}, {0x1, 0x2}, {0x2}, {0x1, 0x9}, {0x3, 0x3}, {0x2, 0x8}, {0x2, 0x3}, {0x3, 0x7}, {0x5, 0x5}, {}, {0x1, 0x9}, {0x5, 0x7}, {0x3}, {0x1, 0x4}, {0x7, 0xa}, {0x0, 0x9}, {0x1}, {0x3, 0x4}, {0x7, 0x9}, {0x0, 0x6}, {0x0, 0x3}, {0x0, 0x6}, {0x4, 0x2}, {0x7, 0x9}, {0x1, 0x6}, {0x1, 0x1}, {0x1, 0x5}, {0x7, 0x8}, {0x1, 0x8}, {0x7, 0x6}, {0x1, 0x8}, {0x6, 0x2}, {0x5, 0xa}, {0x3, 0x6}, {0x1, 0x6}, {0x6, 0x3}, {0x2, 0x4}, {}, {0x2, 0x8}, {0x6, 0x4}, {0x0, 0x2}, {}, {0x2, 0x9}, {0x3, 0x1}, {0x2, 0x6}, {0x1, 0x6}, {0x6, 0x6}, {0x5, 0x8}, {0x7, 0x2}, {0x7, 0xa}, {0x3, 0x4}, {}, {0x4, 0x4}, {0x2, 0x5}, {0x6, 0x9}, {0x4, 0x8}, {0x6, 0xa}, {0x3, 0xa}, {0x5, 0x9}, {0x0, 0x2}, {0x1, 0x7}, {0x5, 0x8}, {0x6, 0x2}, {0x0, 0x4}, {0x7, 0x2}, {0x3, 0x1}, {0x2, 0x2}, {}, {0x5, 0x2}, {0x6, 0x1}, {0x5, 0x4}, {0x4, 0x7}, {0x7, 0x8}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x62}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x747}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xe36c22b}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x68}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7ff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x21}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0xdc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8c}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x30, 0x1b, 0x1b, 0x9, 0xb, 0x6c, 0xb, 0x36, 0x3, 0x0, 0x6c, 0x1b, 0x12, 0x4, 0x6, 0x2, 0x5, 0x48, 0x3, 0x1b, 0x60, 0x5, 0x6, 0x24, 0x1, 0x3, 0x3]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0xc, 0x6, 0x36]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x3]}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x6, 0x3}, {0x0, 0x5}, {0x1, 0xa}, {0x2, 0x2}, {0x1, 0xa}, {0x3, 0x3}, {0x6, 0x6}, {0x4, 0x6}, {0x1, 0x5}, {0x3, 0x3}, {0x5, 0x3}, {0x5, 0x8}, {0x1, 0x3}, {0x5, 0x2}, {0x1, 0x2}, {0x4, 0xa}, {0x0, 0x5}, {0x0, 0x8}, {0x7, 0x4}, {0x1, 0x4}, {0x0, 0x6}, {0x6, 0x8}, {0x6, 0x4}, {0x7, 0x6}, {0x4, 0x5}, {0x4}, {0x2, 0x5}, {0x6, 0x9}, {0x5, 0x9}, {0x4, 0x1}, {}, {0x5, 0x4}, {0x0, 0x5}, {0x0, 0x2}, {0x0, 0x1}, {0x0, 0x8}, {0x7, 0x5}, {0x1, 0x5}, {0x3, 0x1}, {0x6, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1fd, 0x9, 0x8, 0x3ff, 0x2, 0x1469, 0x1ff]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x1b, 0x24, 0x2, 0x36, 0x36, 0x4548baa553d80b82, 0x30, 0x18, 0x9, 0x16, 0x4]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x6c, 0x2, 0x30, 0x6, 0x6c, 0x5, 0x3b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xbff, 0x401, 0x4, 0x9, 0x6, 0x5, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb9}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}]}, {0x268, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x25c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x108, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{0x4, 0x2}, {0x2, 0xa}, {0x3, 0x1}, {0x3, 0xa}, {0x3}, {0x0, 0x1}, {0x2, 0xa}, {0x0, 0x9}, {0x5}, {0x1, 0x5}, {0x4, 0x3}, {0x0, 0x5}, {0x0, 0x9}, {0x4, 0x1}, {0x7, 0x7}, {0x0, 0x2}, {0x1, 0x9}, {0x1, 0x2}, {0x6, 0x2}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x2, 0xa}, {0x0, 0xa}, {0x6, 0x6}, {0x5, 0x7}, {0x6, 0x6}, {0x2, 0x5}, {0x4, 0x7}, {0x1, 0x8}, {0x1, 0x3}, {0x3, 0x6}, {0x6, 0x6}, {0x1, 0x6}, {0x3, 0x5}, {0x6, 0x6}, {0x7, 0x1}, {0x3, 0x9}, {0x1, 0x6}, {0x1, 0x2}, {0x4, 0x6}, {0x1, 0x2}, {0x0, 0x7}, {0x0, 0xa}, {0x5, 0x9}, {0x6, 0x5}, {0x4, 0x3}, {0x6, 0xa}, {0x0, 0x3}, {0x3, 0x6}, {0x3, 0x2}, {0x0, 0x8}, {0x5, 0x9}, {0x1, 0x8}, {0x1, 0x2}, {0x5, 0x5}, {}, {0x0, 0x4}, {0x2, 0x7}, {0x3, 0x6}, {0x0, 0x8}, {0x5, 0x2}, {0x4, 0x9}, {0x3, 0x4}, {0x1, 0x7}, {0x1, 0x1}, {0x4, 0x8}, {0x7, 0x4}, {0x6, 0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x4}, {0x1, 0x3}, {0x5, 0x3}, {0x7, 0x4}, {0x5, 0x1}, {0x2, 0x2}, {0x6, 0x8}, {0x3, 0x5}, {0x6, 0x5}, {0x6, 0x5}, {0x6, 0x5}, {0x0, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3c, 0x9, 0x7, 0x0, 0xff, 0x9, 0x7ff, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2f, 0x3, 0x400, 0x1b33, 0x80, 0xedc1, 0x8, 0x8]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x2, 0x48, 0x6c, 0x30, 0x24, 0x48, 0x3, 0x18, 0x9, 0x4, 0x30, 0x6c, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x7, 0x1, 0x26, 0x7, 0x99, 0x83, 0x4]}}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x7, 0x7}, {0x0, 0x3}, {0x4, 0x1}, {0x1, 0x7}, {0x7, 0x9}, {0x5, 0x9}, {0x2, 0x3}, {0x1, 0x9}, {0x0, 0x2}, {0x5, 0x7}, {0x1, 0x6}, {0x1, 0x9}, {0x6}, {0x7}, {0x3, 0x2}, {0x2, 0x2}, {0x0, 0x1}, {0x1, 0x6}, {0x7, 0x7}, {0x0, 0x9}, {0x6, 0xa}, {0x2, 0x8}, {0x7, 0x8}, {0x6, 0x7}, {0x1, 0x7}, {0x7, 0x9}, {0x0, 0x3}, {0x6, 0x9}, {0x5, 0x2}, {0x1, 0x5}, {0x5, 0x2}, {0x4, 0x4}, {0x0, 0x9}, {0x0, 0x7}, {0x1, 0x2}, {0x2, 0x6}, {0x7, 0x8}, {0x2, 0x9}, {0x1, 0x9}, {0x6, 0x7}, {0x5}, {0x4, 0xa}, {0x6, 0x9}, {0x3, 0x1}, {0x1, 0x4}, {0x6, 0x5}, {0x3, 0x4}, {0x7, 0x6}, {0x0, 0x9}, {0x0, 0x9}, {0x1, 0x8}, {0x7, 0x4}, {0x7, 0xa}, {0x4, 0x8}, {0x1, 0x6}, {0x3, 0xa}, {0x7, 0x3}, {0x1, 0x8}, {0x1, 0x2}, {0x1, 0x5}, {0x0, 0xa}, {0x6, 0x8}, {0x0, 0x3}, {0x0, 0x3}, {0x7, 0x2}, {0x6}, {0x3, 0x3}, {0x1, 0x8}, {0x3}, {0x3, 0x2}, {0x7, 0x4}, {0x3, 0xa}, {0x7, 0x9}]}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xecf, 0xffff, 0x0, 0x7, 0xff, 0x20, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x1, 0xfea418da884fc149, 0x18, 0xc, 0x13, 0x2, 0x6c, 0x36, 0xc, 0x5, 0x1, 0x24, 0x30, 0x16, 0x1, 0xc, 0x5, 0x48, 0x1b, 0x5, 0x48, 0x5, 0x6c, 0x1b, 0x12, 0x5, 0x6, 0xb, 0x0, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0xfff, 0x4, 0xdf26, 0x3178, 0x8, 0x20]}}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x30, 0x60, 0x24, 0x48, 0x16, 0x60, 0xc, 0x2, 0x6, 0xc, 0x18, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7ff, 0x6, 0x7, 0x4000, 0x2, 0x1f, 0x7]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0xb4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x1, 0x0, 0x4, 0x1ff, 0x9, 0x7f]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x2, 0x6bae, 0x8, 0x0, 0x1, 0x9c4, 0x4]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x36, 0xad3ca2e26d09915f, 0x24, 0x1b, 0x2, 0x3, 0x12, 0x4, 0x30, 0x48, 0x60, 0x5, 0x3, 0xc, 0x6, 0x16, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xffff, 0x4, 0x1ff, 0x7ff, 0x3ff, 0x80, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x82, 0x1, 0x1f, 0x0, 0xe9e2, 0x200, 0x0, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xc547, 0x2, 0x9, 0x40, 0xffe0, 0x2285, 0x5]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x5, 0x8}, {0x2, 0x8}, {0x6, 0x3}, {0x6, 0x1}, {0x7, 0x3}, {0x1, 0x9}, {0x2, 0x2}, {0x1, 0x2}, {0x3, 0x8}, {0x0, 0x2}, {0x4, 0x1}, {0x3, 0x4}, {0x7}, {0x6, 0xa}, {0x2, 0xa}, {0x5, 0x1}, {0x6}, {0x4, 0xa}, {0x6, 0x1}, {0x7, 0x6}, {0x2, 0x3}, {0x7, 0x6}, {0x4, 0x2}, {0x4, 0x6}, {0x5, 0x9}, {0x6, 0x5}, {0x3, 0x9}, {0x4, 0x7}, {0x5}, {0x5, 0x4}, {0x3, 0xa}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0xa}, {0x0, 0x4}, {0x5, 0x9}, {0x2, 0x9}]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x18c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x84, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5fd3, 0xbdfa, 0x9, 0x4, 0x3, 0x101, 0xfffc]}}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1c, 0x2, [{0x4, 0x2}, {0x0, 0x1}, {0x1}, {0x1, 0xa}, {0x3, 0xa}, {0x4, 0x2}, {0x5, 0x9}, {0x2, 0x1}, {0x5, 0x2}, {0x7, 0x7}, {0x5, 0x5}, {0x5, 0xa}, {0x7, 0x2}, {0x0, 0x4}, {0x0, 0xa}, {0x4, 0x8}, {0x4, 0x5}, {0x3, 0x6}, {0x6, 0x3}, {0x2, 0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x8}, {0x3, 0x1}]}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x0, 0x1}, {0x5, 0x2}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x1}, {0x7, 0x4}, {0x0, 0x4}, {0x2, 0x4}, {0x3, 0x8}, {0x6, 0x6}, {0x1, 0x8}, {0x7, 0x7}, {0x5, 0xa}, {0x2, 0x3}, {0x2, 0x7}, {0x4, 0x3}, {0x5}, {0x0, 0x5}, {0x5, 0x9}, {0x7, 0xa}, {0x5, 0x7}, {0x4}, {0x2}, {0x5, 0x4}, {0x1, 0xa}, {0x7, 0xa}, {0x2, 0x4}, {0x1, 0x8}, {0x4}, {0x1}, {0x1}, {0x7, 0xa}, {0x6, 0x7}, {0x6, 0x1}, {0x4, 0x6}, {0x2, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x5, 0x6, 0x9, 0x1b, 0x12, 0x3, 0x6c, 0x36]}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1800000000000000}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xd8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x10, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x2, 0x36, 0x2, 0x1b, 0x16, 0x24, 0x9, 0x1b]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xb8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7, 0x0, 0x1f, 0x6, 0x3, 0x1e, 0x2e]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x1b, 0x30, 0x1b, 0x5, 0x1b, 0x60, 0x4, 0x24, 0x24, 0x12, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x22, 0x0, 0x2, 0x3, 0x3, 0xa94, 0x4, 0xfffc]}}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x1, 0x3}, {0x4, 0x4}, {0x6, 0x6}, {0x0, 0x9}, {0x1, 0x1}, {0x7, 0x5}, {0x1, 0x3}, {0x0, 0x3}, {0x3, 0x2}, {0x3, 0x2}, {0x4, 0x3}, {0x2, 0x1}, {0x2, 0x6}, {0x1, 0x7}, {0x6, 0x2}, {0x5, 0x9}, {0x1, 0x1}, {0x7, 0x5}, {0x3, 0x8}, {0x4, 0x2}, {0x6, 0x9}, {0x1, 0x8}, {0x0, 0x2}, {0x6, 0x2}, {0x0, 0x9}, {0x5, 0x4}, {0x7}, {0x7, 0x6}, {0x4, 0x2}, {0x5}, {0x7, 0x4}, {0x1, 0x3}, {0x5, 0x5}, {0x7, 0x2}, {0x1, 0x4}, {0x0, 0x6}, {0x6, 0x4}, {0x0, 0x1}, {0x0, 0x7}, {0x4, 0x8}, {0x4, 0x7}, {0x5, 0xa}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x6}, {0x0, 0x7}, {0x6, 0x5}, {0x1, 0x7}, {0x4, 0xa}, {0x7, 0x1}, {0x4, 0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x6}, {0x7, 0x6}, {0x4, 0x1}, {0x4}, {0x3, 0x2}, {0x5, 0x6}, {0x7, 0x2}, {0x5, 0x4}, {0x6, 0x3}, {0x0, 0x8}, {0x4, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xff80, 0x1, 0x2, 0x1, 0x1, 0x9, 0xc286]}}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x3, 0x3}, {0x5, 0x6}, {}, {0x4, 0x8}, {0x2, 0x2}, {0x0, 0x6}, {0x2, 0x7}, {0x7, 0x4}, {0x3, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x4}, {0x6, 0x7}, {0x1, 0x7}, {0x2}, {0x0, 0x7}, {0x1, 0x6}, {0x0, 0x9}, {0x1, 0x7}, {0x5, 0x2}, {0x0, 0x3}, {0x7, 0x3}, {0x7, 0x1}, {}, {0x2, 0xa}, {0x3, 0x8}]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0xe4, 0x11d, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9d}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x71}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fff}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x60, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x97}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x35e}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x35}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x27a0}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x38}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0xb14, 0x11d, 0x0, 0x1, [{0x2e4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x2c0, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x94, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x27, 0x2, [{0x3, 0x7}, {0x3, 0x5}, {0x4, 0x2}, {0x0, 0x5}, {0x2, 0x5}, {0x7}, {0x1, 0x2}, {0x3, 0x4}, {0x5, 0x1}, {0x7, 0xa}, {0x1, 0x1}, {0x6, 0x7}, {0x7, 0x3}, {0x1, 0x9}, {0x3, 0x1}, {0x2, 0x2}, {0x0, 0xa}, {0x1, 0x4}, {0x4, 0x1}, {0x0, 0xa}, {0x3, 0x3}, {0x1, 0x6}, {0x6, 0x8}, {0x3, 0x8}, {0x5, 0x4}, {0x3, 0xa}, {0x1, 0xa}, {0x0, 0x4}, {0x5, 0x2}, {0x3, 0x2}, {0x0, 0x5}, {0x5, 0x8}, {0x1, 0x2}, {0x6, 0xa}, {0x5, 0x9}]}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x0, 0x1}, {0x7, 0x9}, {0x7, 0x6}, {0x1}, {0x3, 0x3}, {0x1, 0x8}, {0x7, 0xa}, {0x6, 0x1}, {0x1, 0x9}, {}, {0x3, 0x5}, {0x7, 0x4}, {0x3, 0x7}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x5}, {0x2, 0xa}, {0x0, 0x2}, {0x1, 0x8}, {0x2}, {0x5, 0x4}, {0x6, 0x8}, {0x2, 0xa}, {0x4, 0x6}, {0x7, 0x4}, {0x6, 0x4}, {0x3, 0x8}, {0x7}, {0x4, 0x9}, {0x1, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0xb, 0x9, 0x5, 0x0, 0x1, 0x1, 0x30, 0x2, 0x30, 0x6c, 0x2d, 0x12, 0x6, 0x3, 0x36, 0x2, 0x6c, 0x24]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x5, 0x24, 0x36, 0x3, 0x0, 0x12, 0xd4, 0x1b, 0x3, 0xb, 0x5, 0x12, 0x60, 0x13, 0x6009f57c82eca32, 0x36, 0x48, 0x30, 0x9, 0x18, 0x1b, 0x30, 0x36, 0x6c, 0x6, 0x5, 0xc, 0xb, 0x1b, 0x3, 0x0]}]}, @NL80211_BAND_5GHZ={0xc4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1b, 0x16, 0x24, 0x3, 0x1, 0x6, 0x4, 0x1b, 0x7]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffb, 0x7f, 0x1ff, 0x401, 0x53d, 0x1, 0x0, 0x5]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x16, 0x1, 0x12, 0xc, 0x30, 0x2, 0x5, 0x48, 0x6c, 0xc, 0x1b, 0x48, 0x60, 0x9, 0x12, 0x2, 0x9, 0x36, 0x24]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x7, 0x6}, {0x0, 0x7}, {0x2, 0xa}, {0x0, 0x1}, {0x7, 0x9}, {0x4, 0xa}, {0x4, 0x3}, {0x7, 0x7}, {0x7, 0x9}, {0x2, 0x4}, {0x6, 0x3}, {0x5, 0x9}, {0x1, 0x6}, {0x1, 0x5}, {0x1, 0x2}, {0x2, 0x1}, {0x3, 0x9}, {0x3, 0x7}, {0x2, 0x4}, {0x4}, {0x6, 0x9}, {0x0, 0x4}, {0x1, 0x7}, {0x7, 0x6}, {0x4, 0xa}, {0x1, 0x5}, {0x4, 0x8}, {0x7, 0x6}, {0x5, 0x2}, {0x7, 0x4}, {0x1, 0x3}, {0x0, 0x9}, {0x4, 0x9}, {0x3, 0x3}, {0x2, 0x9}, {0x6, 0x2}, {0x5, 0x4}, {0x3, 0x4}, {0x4, 0x4}, {0x4, 0xa}, {0x3, 0x3}, {0x3, 0x7}, {0x0, 0x9}, {0x6, 0x9}, {0x0, 0x5}, {0x6}, {0x5}, {0x2, 0x8}, {0x0, 0x7}, {0x2}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0xc, 0x0, 0x60, 0x24, 0x9, 0x1b, 0x18, 0x19, 0x67, 0x4, 0x60, 0x16, 0x48, 0x1b, 0x5, 0x30, 0x6c, 0x1b, 0x36, 0x36, 0x16, 0x16, 0x1, 0x18, 0xb, 0x1, 0x48, 0x5, 0x1b, 0xc, 0x16]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x6c, 0x5, 0x30, 0x16, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x1, 0x7ff, 0x52bd, 0x101, 0x7fff, 0x622b, 0x5]}}]}, @NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x10, 0x2, [{0x1, 0x3}, {0x2, 0x1}, {0x4, 0x2}, {0x6, 0x1}, {0x3, 0x8}, {0x3, 0x8}, {0x1}, {0x7, 0xa}, {0x1, 0x7}, {0x3, 0x9}, {0x1}, {0x1, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x100, 0xa60, 0x31fc, 0x3, 0x5, 0xb6, 0x8000]}}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x0, 0x4}, {0x0, 0x7}, {0x3, 0x5}, {0x0, 0x6}, {0x1, 0x3}, {0x1, 0x9}, {0x1, 0xa}, {0x2, 0x1}, {0x0, 0x8}, {0x2, 0x3}, {0x6, 0x9}, {0x1, 0x8}, {0x5}, {0x1, 0x6}, {0x2, 0x7}, {0x1, 0x1}, {0x7, 0x5}, {0x3}, {0x1, 0x1}, {0x1}, {0x6, 0x1}, {0x2, 0x3}, {0x2, 0x4}, {0x2, 0x7}, {0x7, 0x5}, {0x3, 0x5}, {0x4, 0x4}, {0x4, 0x8}, {0x3, 0x7}, {0x7}, {0x5, 0x6}, {0x7, 0x4}, {0x4, 0x1}, {0x7, 0x4}, {0x5, 0x2}, {0x1, 0x7}, {0x4, 0xa}, {0x5, 0x2}, {0x2, 0x6}, {0x4, 0x2}, {0x3, 0x1}, {0x7, 0x2}, {0x5, 0x8}, {0x1, 0x8}, {0x7, 0x2}, {0x2, 0xa}, {}, {0x7, 0x4}, {0x4, 0x2}, {0x6, 0x9}, {0x4}, {0x1, 0xa}, {0x0, 0x1}, {0x4, 0x9}, {0x2, 0x5}, {0x6, 0xa}, {0x6, 0x8}, {0x0, 0x2}, {0x0, 0x1}, {0x7, 0x9}, {0x0, 0x1}, {0x1, 0x8}, {0x0, 0x3}, {0x1, 0x4}, {0x6, 0x3}, {0x1, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0xd753, 0xfff, 0x100, 0x200, 0x0, 0xfffb]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xe, 0x2, [{0x6, 0x9}, {0x3, 0x3}, {0x5, 0x2}, {0x5, 0x8}, {0x4, 0x8}, {0x5, 0x3}, {0x1, 0x3}, {0x4, 0x5}, {0x0, 0x2}, {0x5, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x5412, 0x200, 0x3ff, 0xb023, 0x1000, 0x8001, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x1, 0x2, 0x1b, 0x60, 0x9, 0x2, 0xc, 0x4, 0x30, 0xc, 0x1, 0x1b, 0x9, 0x9, 0x1b, 0x7, 0x16, 0x16, 0x9, 0x4709c1f346c26b95, 0xb, 0x1, 0xb, 0x4, 0x60, 0x2, 0x60, 0x3, 0x36]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x1, 0x12, 0x18, 0x5, 0x9, 0x36, 0x5, 0x16, 0x4, 0x4, 0x1b, 0x1e, 0xc, 0x9, 0x1b, 0x4, 0x1, 0x36, 0x1b, 0x6c, 0x36, 0x18, 0x9, 0x30]}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x22, 0x2, [{0x1, 0x5}, {0x4, 0x1}, {0x0, 0xa}, {0x7, 0x2}, {0x5, 0x2}, {0x6, 0x8}, {0x1, 0x5}, {0x2, 0x9}, {0x0, 0x2}, {0x1, 0x9}, {0x1, 0xa}, {0x0, 0x1}, {0x6, 0x3}, {0x3, 0x4}, {0x3, 0x1}, {0x2, 0x3}, {0x4, 0x9}, {0x4, 0x6}, {0x6, 0x3}, {0x7}, {0x7, 0xa}, {0x3, 0x4}, {0x0, 0x8}, {0x2, 0x8}, {0x4, 0xa}, {0x3, 0x2}, {0x6, 0xa}, {0x7, 0x7}, {0x5, 0x2}, {0x1, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x200, 0x3ff, 0x20, 0xdaef, 0x401, 0x5]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x2, 0x3, 0x16, 0x29, 0x36, 0x1b, 0xb, 0x12, 0x1, 0x18, 0xb, 0x6, 0x2, 0x16, 0x36, 0xb, 0x2, 0x2, 0x9, 0x16, 0x24, 0x1, 0x16, 0x2]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x69}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x364, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xb0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x6c, 0x16]}]}, @NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x5, 0x48, 0x2, 0x12, 0x8, 0xc, 0x4, 0x2, 0x6c, 0x5, 0x6c, 0xc, 0xb, 0xc, 0xb, 0x2, 0x36, 0x3, 0xb, 0x6c, 0xb, 0x1, 0x2, 0x1b, 0x16]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x5, 0x4, 0xc, 0xc, 0x6, 0x16, 0x5, 0xc, 0x9, 0x1, 0x6, 0x48, 0x1b, 0x36, 0x60, 0x3]}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x4, 0x1}, {0x4, 0x8}, {0x6, 0x9}, {0x3, 0xa}, {}, {0x7, 0x6}, {0x7, 0x4}, {0x7, 0x9}, {0x1, 0x9}, {0x0, 0x4}, {0x5, 0x6}, {0x1, 0x7}, {0x4, 0x4}, {0x7, 0x2}, {0x4, 0x5}, {0x1, 0x2}, {}, {0x0, 0x8}, {0x5, 0x7}, {0x3, 0xa}, {0x2, 0x8}, {0x0, 0x1}, {0x4, 0x4}, {0x2, 0x1}, {0x6}, {0x3, 0x7}, {0x1, 0x6}, {0x6, 0x9}, {0x1, 0x4}, {0x5, 0x3}, {0x0, 0x1}, {0x2, 0x7}, {0x3, 0x1}, {0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x9, 0x8, 0x401, 0x0, 0x1f, 0x1, 0x1]}}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x4, 0x6}, {0x2}, {0x0, 0x1}, {0x5, 0x8}, {0x5, 0x2}, {0x6, 0x3}, {0x5, 0x2}, {0x6, 0x8}]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x36, 0x1, 0x3, 0xc]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x294, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1, 0x6, 0xb5, 0xb037, 0x2, 0x2, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x2f1, 0x7fff, 0x6941, 0x1, 0x3, 0xdb, 0x1]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x35, 0xb, 0x3, 0x36, 0x1, 0x1b, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1ff, 0x1, 0x7, 0x9a, 0x2f, 0x800, 0x5]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x4, 0x6}, {0x2, 0x4}, {0x3, 0xa}, {0x5, 0x4}, {0x4, 0x1}, {0x3, 0x8}, {0x5, 0x1}, {0x7, 0x8}, {0x1, 0x2}, {0x7, 0x3}, {0x4, 0xa}, {0x5, 0xa}, {0x6}, {0x6, 0x1}, {0x5, 0x5}, {0x7, 0x6}, {0x3, 0x4}, {0x4, 0x1}, {0x1, 0x6}, {0x4, 0x4}, {0x1, 0x7}, {0x6, 0xa}, {0x3, 0x5}, {0x1, 0x2}]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x12, 0x60]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1, 0x9, 0x24, 0xb, 0x12, 0x44, 0x1, 0x6, 0x36]}]}, @NL80211_BAND_60GHZ={0xe0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x24, 0x2, [{0x4, 0x5}, {0x1, 0x7}, {0x0, 0x4}, {0x0, 0x3}, {0x6, 0x6}, {0x1, 0x8}, {0x0, 0x8}, {0x3, 0x6}, {0x5, 0x4}, {0x4, 0x2}, {0x5, 0x4}, {0x6, 0x8}, {0x3}, {0x5, 0xa}, {0x1, 0x4}, {0x2, 0x1}, {0x7, 0x8}, {0x4, 0x7}, {0x2, 0x1}, {0x1, 0x9}, {0x7, 0x5}, {0x6, 0x8}, {0x7, 0x5}, {0x5, 0x7}, {0x0, 0x1}, {0x2, 0xa}, {0x0, 0x2}, {0x4, 0x7}, {0x3, 0x2}, {0x5, 0x9}, {0x1, 0x2}, {0x1, 0x5}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x33, 0x5, 0x4, 0x24, 0x22, 0x36, 0xb, 0x30, 0x3, 0x24, 0x18, 0x16, 0x48, 0xc, 0x18, 0x18, 0x1, 0xc, 0x9, 0x9, 0x18, 0x12, 0xc, 0x60, 0x36, 0x2, 0x2, 0x24, 0x2, 0x1, 0x12, 0x6c]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x0, 0x5}, {0x7, 0x2}, {0x0, 0x7}, {0x1}, {0x5, 0x6}, {0x0, 0x5}, {0x3, 0xa}, {0x2, 0x3}, {0x1, 0x2}, {0x4, 0x8}, {0x5, 0x7}, {}, {0x3, 0x2}, {0x1, 0x9}, {0x1, 0x9}, {0x4, 0x7}, {0x2, 0x3}, {0x5, 0x5}, {0x2, 0x1}, {0x0, 0x4}, {0x6, 0x5}, {0x0, 0x4}, {0x5, 0x5}, {0x5, 0x7}, {0x5}, {}, {0x5, 0x9}, {0x1, 0x8}, {0x1, 0x6}, {0x6, 0x2}, {0x5, 0x7}, {0x4}, {0x1, 0x6}, {0x0, 0x5}, {0x5, 0x9}, {0x5, 0x2}, {0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x6, 0x2}, {0x6, 0x9}, {0x1, 0x6}, {0x5}, {0x5}, {0x4, 0x4}, {0x5, 0x4}, {0x7, 0x1}, {0x3, 0x7}, {0x7, 0x3}, {0x3, 0x5}, {0x4, 0x4}, {0x6, 0x1}, {0x4, 0x8}]}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x7, 0x5}, {0x3, 0x5}, {0x6, 0xa}, {0x7, 0x2}, {0x4, 0xa}, {0x3, 0xa}, {0x5, 0x4}, {0x3, 0xa}, {0x6, 0x2}, {0x3, 0x4}, {0x5, 0x5}, {0x6, 0x4}, {0x2, 0x1}, {0x1, 0x5}, {0x0, 0xa}, {0x0, 0x7}, {0x1, 0x9}, {0x5, 0x8}, {0x1, 0x2}, {0x7, 0xa}, {0x3}, {0x1, 0x9}, {0x0, 0x7}, {0x6}, {0x3, 0x1}, {0x3, 0x2}, {0x4, 0x8}, {0x2, 0x8}, {0x0, 0x3}, {0x3, 0x5}, {0x3, 0x8}, {0x2, 0x9}, {0x5, 0x4}, {0x2, 0x6}, {0x5}, {0x6, 0x6}, {0x0, 0x6}, {0x0, 0x4}, {0x4, 0x8}, {0x1, 0x9}, {0x0, 0x2}, {0x4, 0x7}, {0x2, 0x5}, {0x1, 0x7}, {0x5, 0x5}, {0x1, 0x2}, {0x3, 0x9}, {0x7, 0x4}, {0x6, 0x3}, {0x2, 0x7}, {0x2, 0x2}, {0x7, 0xa}, {0x4, 0x6}, {0x6, 0x1}, {0x2, 0x2}, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0x9}, {0x0, 0x7}, {0x4, 0x7}, {0x7, 0x6}, {0x0, 0x4}, {0x1}, {0x7, 0x9}, {0x5, 0x5}, {0x0, 0x2}, {0x7, 0x3}, {0x5, 0xa}, {0x1, 0x4}, {0x6, 0xa}, {0x6, 0x1}, {0x1, 0x2}, {0x6, 0xa}, {0x5, 0x7}, {0x7, 0x4}]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x9, 0x3ff, 0x6, 0x8, 0x81, 0x1f, 0x4]}}]}, @NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x56, 0x18]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x4, 0x1}, {0x2, 0x9}, {0x4, 0x9}, {0x0, 0x4}, {0x0, 0x9}, {0x0, 0x2}, {0x6, 0x2}, {0x2, 0x6}, {0x0, 0x6}, {0x0, 0x5}, {0x1, 0x9}, {0x5, 0x1}, {0x6, 0x5}, {0x1, 0x5}, {0x3, 0x8}, {0x1, 0x6}, {0x6, 0x4}, {0x6, 0x3}, {0x1, 0x7}, {0x0, 0x8}, {0x7, 0x8}, {0x4, 0x1}, {0x0, 0xa}, {0x2, 0x6}, {0x6, 0x5}, {0x2, 0x8}, {0x0, 0x2}, {0x1, 0x2}, {0x1, 0x5}, {0x2, 0x1}, {0x7, 0x8}, {0x0, 0x8}, {0x2, 0x3}, {0x3, 0x7}, {0x7, 0xa}, {0x0, 0x2}, {0x5, 0x7}, {0x3, 0x2}, {0x2, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x4, 0x4c, 0x6, 0x6, 0x0, 0x428, 0x100]}}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x5, 0x8}, {0x7}, {0x5}, {0x1, 0x6}, {0x0, 0x9}, {0x0, 0x4}, {0x1, 0x7}, {0x5, 0x2}, {0x5, 0x6}, {0x1, 0x8}, {0x7, 0x3}, {0x6, 0xa}, {0x0, 0xa}, {0x6, 0x5}, {0x4, 0x8}, {0x5, 0x8}, {0x7, 0x2}, {0x3, 0x1}, {0x7, 0x5}, {0x2, 0x7}, {0x3, 0x7}, {0x7, 0x9}, {0x0, 0x4}, {0x3, 0x9}, {0x6, 0x6}, {0x5, 0x6}, {0x7, 0x1}, {0x3}, {0x0, 0x11}, {0x5, 0x7}, {0x3, 0x8}, {0x2, 0x5}, {0x1, 0x4}, {0x0, 0x7}, {0x1, 0x7}, {0x3, 0x2}, {0x4, 0x7}, {0x6, 0x8}, {0x0, 0xa}, {0x0, 0x9}, {0x0, 0x2}, {0x1, 0x5}, {0x4, 0x2}, {0x3, 0x3}, {0x4}, {0x4, 0x7}, {0x5}, {0x0, 0x4}, {0x2, 0x2}, {0x7, 0x1}, {0x0, 0x6}, {0x1, 0x3}, {0x0, 0x3}, {0x6, 0x6}, {0x6, 0xa}, {0x3, 0x9}, {0x7}, {0x7, 0x5}, {0x3, 0x8}, {0x2, 0xa}, {0x3, 0x6}, {0x6, 0x7}, {0x1, 0x3}, {0x1, 0x1}, {0x4, 0x4}]}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x3, 0x48, 0x6, 0x31, 0x3, 0x2, 0x30, 0xc, 0x6, 0x5, 0x16, 0xb, 0x16, 0x2, 0x4, 0x18, 0x12, 0xc, 0x36, 0x4e, 0x58, 0x0, 0x3]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x5, 0x5}, {0x3, 0x3}, {0x4, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x1cc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4d}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x68, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4a, 0x2, [{0x2}, {0x2, 0x3}, {0x4, 0x1}, {0x0, 0x2}, {0x4, 0xa}, {0x6, 0x4}, {0x7, 0x3}, {0x7, 0x6}, {0x7, 0xa}, {0x5, 0x2}, {0x7, 0x2}, {0x0, 0x2}, {0x6}, {0x6, 0x6}, {0x6}, {0x3, 0x4}, {0x6, 0x4}, {0x2, 0x2}, {0x1, 0x4}, {0x5}, {0x6}, {0x0, 0xa}, {0x6, 0x7}, {0x6, 0x8}, {0x7, 0x12}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x1, 0xa}, {0x3, 0x8}, {0x6}, {0x3, 0x2}, {0x4, 0x6}, {0x4, 0xa}, {0x2, 0x4}, {0x6, 0xa}, {0x3, 0x6}, {}, {0x5, 0x9}, {0x1, 0x1}, {0x1, 0xa}, {0x0, 0x4}, {0x0, 0x6}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0xa}, {0x6, 0x2}, {0x7, 0x9}, {0x4}, {0x1, 0x5}, {0x5, 0x6}, {0x2, 0x7}, {0x1, 0x5}, {0x6, 0x8}, {0x2, 0xa}, {0x3, 0x7}, {0x7}, {0x5, 0x6}, {0x0, 0x6}, {0x2, 0x3}, {0x0, 0x3}, {0x0, 0xa}, {0x5, 0x7}, {0x6, 0xa}, {0x4, 0x5}, {0x0, 0x1}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x1c0, 0xfbaf, 0x100, 0x489, 0x200, 0xe9, 0x8]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7c}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xc0, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x30, 0x60, 0x60, 0x6c, 0x3]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x30, 0x16, 0x60, 0x5, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x94, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x12, 0x48, 0x36, 0x5, 0x5, 0x60, 0x18, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xff, 0x3, 0x4, 0x6, 0x3, 0x7, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x1, 0x2, 0x4, 0xf8, 0x6, 0x400, 0x7fff]}}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x2, 0x5}, {0x5, 0x1}, {0x3, 0x9}, {0x2, 0x8}, {0x5, 0x8}, {0x6, 0x9}, {0x7}, {0x4, 0x3}, {0x1, 0xa}, {0x1, 0x9}, {0x4, 0x7}, {0x5, 0x6}, {0x2, 0x7}, {0x0, 0xa}, {0x0, 0x4}, {0x2, 0x1}, {0x3, 0x7}, {0x1, 0x4}, {0x1, 0x9}, {0x0, 0x1}, {0x4}, {0x3, 0x4}, {0x2, 0x6}, {0x7, 0x4}, {0x6, 0x6}, {0x7, 0x9}, {0x2, 0x6}, {0x7, 0x6}, {0x5, 0x3}, {0x0, 0x6}, {0x6, 0x8}, {0x1, 0x6}, {0x1, 0x6}, {0x5, 0x9}, {0x1, 0x3}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x6}, {0x0, 0x5}, {0x1, 0x6}, {0x1, 0x8}, {0x1, 0x4}, {0x1, 0xa}, {0x0, 0x4}, {0x2, 0x1}, {0x6, 0x9}, {0x7, 0x7}, {0x4}, {0x4, 0xa}, {0x3, 0xa}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x3}, {0x7, 0x4}, {0x3, 0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x8}, {0x2, 0x9}, {0x4, 0x3}, {0x5}]}]}, @NL80211_BAND_2GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x7c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x9, 0x9, 0x6, 0x18, 0x30, 0x16, 0x1b, 0x1b, 0x24, 0x62, 0x60, 0xc, 0x16, 0x2, 0x6c, 0x16, 0x16, 0x9, 0x6c, 0xb, 0x9, 0x36, 0x5, 0x6c, 0xc, 0x0, 0x18, 0x12, 0x12, 0x16]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x72ae, 0x80, 0x5, 0x1, 0x6, 0x34, 0x8000]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x0, 0x7}, {0x4, 0x4}, {0x4}, {0x1, 0x8}, {0x4}, {0x1, 0x7}, {0x0, 0x9}, {0x3, 0x2}, {0x5, 0x8}, {0x7, 0x8}, {0x1, 0x4}, {0x4, 0x7}, {0x3, 0x2}, {0x0, 0x7}, {0x7, 0x2}, {0x6, 0x4}, {0x1, 0x2}, {0x5, 0x3}, {0x5, 0x9}, {0x4, 0x7}, {0x7, 0x2}, {0x4, 0xa}, {0x3, 0x7}, {0x7, 0x6}, {0x7, 0x4}, {0x4, 0x8}, {0x4, 0x4}]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x9, 0x30, 0x6, 0x12, 0x20, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xaf}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x22}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffffffffffc1}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x280, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8a}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x10c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x30, 0x5, 0x2, 0xb, 0x9]}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x26, 0x4, 0x1b, 0x16, 0x24, 0x30, 0x2, 0x5, 0xb, 0x16, 0x1b, 0x1b, 0x3, 0x60, 0x48, 0xe49bc4e9b8b8c031, 0x60, 0x1, 0x1b, 0x48, 0x45, 0xb, 0xc, 0x1, 0x6c, 0x48, 0x9]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0xc, 0x9, 0x1, 0x30, 0x36, 0x16, 0xc, 0x1, 0x7e, 0x24, 0xb2d8f192fbf030b7, 0x6c]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x12, 0x24, 0x16, 0x6c, 0x6c, 0x47, 0x36, 0x4, 0x60, 0x2f, 0x12, 0x60, 0x24, 0x2]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x30, 0x6, 0x6c, 0x16, 0x7, 0x5, 0x18, 0x12, 0x48, 0x2, 0x5, 0x24, 0x3, 0x3, 0xb]}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x15, 0x2, [{0x5, 0xa}, {0x2, 0x2}, {0x1, 0x2}, {0x1, 0x9}, {0x0, 0x1}, {0x5}, {0x7, 0x9}, {0x1, 0x4}, {0x1, 0x2}, {0x2, 0x7}, {0x2, 0x3}, {0x6, 0x8}, {0x1, 0x9}, {0x0, 0x5}, {0x3, 0x5}, {0x7, 0x4}, {0x2, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x18, 0x24, 0x30, 0x48, 0x24, 0x1b, 0x1b, 0x48, 0x30, 0xc, 0x6, 0xc, 0x0, 0x5, 0x48, 0x6c, 0x30, 0xb, 0x24]}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x1, 0xa}, {0x4, 0x7}, {0x0, 0x6}, {0x1, 0x6}, {0x1}, {0x5, 0xa}, {0x6, 0x7}, {0x1}, {0x5, 0x9}, {0x5, 0x7}, {0x5, 0x1}, {0x4, 0x3}, {0x5, 0x7}, {0x3, 0x2}, {0x7}, {0x6, 0x1}, {0x1, 0x7}, {0x4, 0x1}, {0x7, 0x6}]}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x7, 0x2}, {0x3, 0x6}, {0x6, 0x4}, {0x2, 0x5}, {0x5, 0x1}, {0x4, 0x4}, {0x7, 0x8}, {0x7, 0x4}, {0x1, 0x4}, {0x4, 0x6}, {0x2, 0x6}, {0x0, 0x6}, {0x0, 0x6}, {0x4, 0x8}, {0x4, 0x6}, {0x4, 0x4}, {0x6, 0x2}, {0x6, 0x3}, {0x0, 0x3}, {0x7, 0x2}, {0x5, 0x3}, {0x5, 0x4}, {0x2, 0x6}, {0x0, 0x7}, {0x5, 0x1}, {0x3, 0x7}, {0x3, 0x2}, {0x7, 0x6}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2c}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x150, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x14, 0x2, [{0x2, 0x5}, {0x4, 0x2}, {0x6, 0x5}, {0x4, 0x3}, {0x7, 0x4}, {0x0, 0x5}, {0x7}, {0x4, 0x7}, {0x0, 0x3}, {0x0, 0x1}, {0x6, 0x3}, {0x0, 0x6}, {0x6, 0x8}, {0x3, 0x4}, {0x1, 0x8}, {0x4, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x48, 0x8, 0x3, 0x6, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x4, 0x7, 0x1000, 0x1, 0x8000, 0x6]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x1b, 0x1, 0xb, 0x5c, 0x6, 0x3, 0x48]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x9, 0x5, 0x5, 0xe5cf5ce7ff931697, 0x5, 0x6c, 0x24, 0x1b, 0x18, 0x16, 0x4, 0x4a, 0x16, 0x2, 0x48, 0x30, 0x24, 0x6, 0x60, 0x12, 0x1a]}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x60, 0x6, 0x81, 0x9, 0xfe00, 0x1e4, 0x4]}}]}, @NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xffff, 0xff, 0x3, 0x924, 0x200, 0x0, 0xfff]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x1, 0x2}, {0x3, 0x5}, {0x3, 0x4}, {0x4, 0x1}, {0x4, 0x8}, {0x5, 0x9}, {0x6, 0x1}, {0x5, 0x7}, {0x4, 0xa}, {0x4, 0x3}, {0x4, 0x6}, {0x5, 0x3}, {0x3, 0x2}, {0x4, 0x2}, {0x1, 0x9}, {0x4}, {0x0, 0x3}, {0x1, 0x3}, {0x3, 0x1}, {0x4}, {0x3, 0x4}, {0x6, 0x2}, {0x6}, {0x1, 0x5}, {0x7, 0x4}, {0x1, 0x6}, {0x4, 0x8}, {0x3}, {0x4, 0x3}, {0x3, 0x2}, {0x1, 0x4}, {0x1, 0x7}, {0x0, 0x4}, {0x0, 0x4}, {0x2, 0x8}, {0x4, 0x5}, {0x1, 0x3}, {0x4, 0x8}, {0x0, 0x2}, {0x3, 0x9}, {0x2, 0x9}, {0x2, 0x3}, {0x1, 0x9}, {0x1, 0x9}, {0x6, 0x5}, {0x5, 0x2}, {0x1, 0x7}, {0x0, 0x3}, {0x0, 0x7}, {0x1, 0x8}, {0x5, 0x9}, {0x3}, {0x6, 0xa}, {0x2, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0xf6, 0xf9dd, 0x1, 0x7ff, 0x4, 0x401]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x8000, 0x5, 0x3, 0xf801, 0x3, 0x8]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xb, 0x24, 0x4, 0x24, 0x24, 0x1f, 0xb, 0x48, 0x1, 0x12, 0x48, 0x2, 0xb, 0x5, 0xb, 0x18, 0x6c, 0x30, 0x6c, 0x36, 0xb, 0x6, 0x6c, 0xb, 0xa]}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x13, 0x2, [{0x1, 0x9}, {0x4, 0x4}, {0x6, 0x1}, {0x3, 0x3}, {0x1, 0x1}, {0x4, 0x2}, {0x6, 0x4}, {0x6, 0x2}, {0x0, 0xa}, {0x1, 0xa}, {0x7, 0x1}, {0x1, 0xa}, {0x4, 0x3}, {0x1, 0x6}, {0x3, 0x4}]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}]}]}, 0x1688}, 0x1, 0x0, 0x0, 0x80}, 0x841) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5cc341d1039b2ca8ef3ed13027ef6323c9a617"}) 21:43:25 executing program 3: r0 = syz_io_uring_setup(0x44ae, 0x0, &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x1000000, 0x0, 0x0, 0x0) 21:43:25 executing program 5: r0 = creat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() fork() r2 = dup2(r0, r0) fork() r3 = fork() ptrace$setopts(0x4206, r3, 0x4, 0x0) tkill(r3, 0x12) tkill(r3, 0x16) tkill(r3, 0x12) wait4(r3, &(0x7f0000000200), 0x80000000, 0x0) tkill(r3, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7c, 0xd1, 0x1, 0x4, 0x0, 0x93d, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9041, 0x80, 0x7fff, 0x4, 0x1, 0x975, 0x8001, 0x0, 0x7}, r1, 0xd, r2, 0x2) 21:43:25 executing program 3: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, 0x0, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(r0, 0x76d3, 0x1000000, 0x0, 0x0, 0x0) 21:43:25 executing program 6: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) clone3(0x0, 0x0) io_uring_enter(r0, 0x19, 0x0, 0x0, 0x0, 0x0) [ 1798.228785] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1799.050045] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1939.842948] INFO: task syz-executor.2:25136 blocked for more than 143 seconds. [ 1939.844829] Not tainted 5.10.148 #1 [ 1939.845913] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1939.848248] task:syz-executor.2 state:D stack:28512 pid:25136 ppid: 285 flags:0x00004004 [ 1939.850294] Call Trace: [ 1939.850973] __schedule+0x848/0x1e90 [ 1939.851914] ? io_schedule_timeout+0x140/0x140 [ 1939.853053] ? do_raw_spin_lock+0x121/0x260 [ 1939.853943] ? rwlock_bug.part.0+0x90/0x90 [ 1939.854792] schedule+0xcb/0x270 [ 1939.855499] io_uring_cancel_task_requests+0xbce/0x1210 [ 1939.856613] ? io_ring_exit_work+0x920/0x920 [ 1939.861161] ? xa_find+0x1cf/0x330 [ 1939.861920] ? wait_woken+0x250/0x250 [ 1939.862702] ? kcov_task_exit+0x93/0xd0 [ 1939.863549] ? lock_downgrade+0x6d0/0x6d0 [ 1939.864423] __io_uring_files_cancel+0x110/0x1c0 [ 1939.865406] ? __io_uring_free+0x1e0/0x1e0 [ 1939.866271] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1939.867345] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1939.868382] ? trace_hardirqs_on+0x5b/0x180 [ 1939.869293] do_exit+0x2f6/0x2740 [ 1939.870015] ? find_held_lock+0x2c/0x110 [ 1939.870856] ? mm_update_next_owner+0x7d0/0x7d0 [ 1939.871821] ? get_signal+0x399/0x2210 [ 1939.872647] ? lock_downgrade+0x6d0/0x6d0 [ 1939.873515] ? do_raw_spin_lock+0x121/0x260 [ 1939.874424] ? rwlock_bug.part.0+0x90/0x90 [ 1939.875318] do_group_exit+0x125/0x310 [ 1939.876125] get_signal+0x469/0x2210 [ 1939.876911] ? lock_downgrade+0x6d0/0x6d0 [ 1939.877752] arch_do_signal+0x8c/0x1c60 [ 1939.878583] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1939.879505] ? trace_hardirqs_on+0x5b/0x180 [ 1939.880401] ? finish_task_switch+0x1a4/0x5d0 [ 1939.881340] ? __switch_to+0x572/0xff0 [ 1939.882184] ? __switch_to_asm+0x3a/0x60 [ 1939.883060] ? __switch_to_asm+0x34/0x60 [ 1939.883923] ? restore_sigcontext+0x630/0x630 [ 1939.884908] ? __schedule+0x850/0x1e90 [ 1939.885700] ? io_schedule_timeout+0x140/0x140 [ 1939.886689] exit_to_user_mode_prepare+0xf7/0x160 [ 1939.887695] syscall_exit_to_user_mode+0x38/0x230 [ 1939.888695] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1939.893453] RIP: 0033:0x7f2226c16b19 [ 1939.894302] RSP: 002b:00007f222418c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1939.895886] RAX: fffffffffffffffc RBX: 00007f2226d29f60 RCX: 00007f2226c16b19 [ 1939.897383] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 0000000000000001 [ 1939.898880] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1939.900341] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 1939.901816] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffd000 [ 1939.903367] [ 1939.903367] Showing all locks held in the system: [ 1939.904675] 1 lock held by khungtaskd/22: [ 1939.905513] #0: ffffffff84ff80a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x269 [ 1939.907371] 3 locks held by kmemleak/71: [ 1939.908193] 1 lock held by in:imklog/177: [ 1939.909059] [ 1939.909391] ============================================= [ 1939.909391] VM DIAGNOSIS: 21:45:47 Registers: info registers vcpu 0 RAX=ffff888008e43300 RBX=0000000000000000 RCX=ffffffff811c0e87 RDX=1ffff11001109040 RSI=0000000000000286 RDI=ffff888008848200 RBP=ffffe8ffffd42000 RSP=ffff88800f7b7e00 R8 =0000000000000000 R9 =ffff888008848207 R10=ffffed1001109040 R11=0000000000000001 R12=ffffea0001f85c00 R13=ffffea0001f85bf9 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff816e7efd RFL=00000087 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffb3901e010 CR3=000000000ea02000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffffffffffffffffffff XMM01=30306234386136303638616663356134 XMM02=38303062343861363036386166633561 XMM03=2f6c616e72756f6a2f676f6c2f6e7572 XMM04=c51d5329e8e5f7c400000000000ee2c8 XMM05=b48e463df6a6743f00000000000ee198 XMM06=ac8bc31478ec851100000000000aef80 XMM07=00000000000000000000000000000000 XMM08=44495f474f4c5359530069253d595449 XMM09=00000000000000000000000000000000 XMM10=20000000000000002000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8229c5d1 RDI=ffffffff8791dfe0 RBP=ffffffff8791dfa0 RSP=ffff888008e0f910 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=0000000000000030 R13=0000000000000030 R14=ffffffff8791dfa0 R15=dffffc0000000000 RIP=ffffffff8229c628 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffb3901e010 CR3=0000000008d3c000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004131093800000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000