BLOB="200000000066dd1d0001090002c473797a3100000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000340)='u', 0x1}], 0x1, 0x100009, 0x3, 0x2) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000002000210c00000000000000000200000008000000", @ANYRES32=0xee01, @ANYBLOB="0a0000440000750a8000001000217442c8bda83acfdc79e57b9f0ded04d87ae38777a9cd39f4abf03d1a10a91b642d20b3cc0e2768f342cbc446e5f3f9b336269f9f68ef1bbed406027ea88e72c87eb4380f00277aecb7f6f3bc9f85cdcf342db7fbc3fa2c77bcbfc3e3b38f2f00"/121], 0x24}}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) sendfile(0xffffffffffffffff, r3, &(0x7f0000000100)=0x1, 0x9e6) r4 = creat(&(0x7f0000000080)='./file1\x00', 0x72) pwrite64(r4, &(0x7f00000000c0)="04", 0x1, 0x3ff03) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000240)={0x0, 0x1, 0x0, 0xc1}) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 16:32:31 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x1000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE, 0x2) inotify_add_watch(r0, 0x0, 0x4000040) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x4b32, &(0x7f0000000000)) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x30000002) dup3(r1, r0, 0x0) [ 597.650816] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 597.667517] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 16:32:31 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x1000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE, 0x2) inotify_add_watch(r0, 0x0, 0x4000040) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x4b32, &(0x7f0000000000)) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x30000002) dup3(r1, r0, 0x0) 16:32:31 executing program 3: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=ANY=[@ANYBLOB="200000000066dd1d0001090002c473797a3100000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000340)='u', 0x1}], 0x1, 0x100009, 0x3, 0x2) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000002000210c00000000000000000200000008000000", @ANYRES32=0xee01, @ANYBLOB="0a0000440000750a8000001000217442c8bda83acfdc79e57b9f0ded04d87ae38777a9cd39f4abf03d1a10a91b642d20b3cc0e2768f342cbc446e5f3f9b336269f9f68ef1bbed406027ea88e72c87eb4380f00277aecb7f6f3bc9f85cdcf342db7fbc3fa2c77bcbfc3e3b38f2f00"/121], 0x24}}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) sendfile(0xffffffffffffffff, r3, &(0x7f0000000100)=0x1, 0x9e6) r4 = creat(&(0x7f0000000080)='./file1\x00', 0x72) pwrite64(r4, &(0x7f00000000c0)="04", 0x1, 0x3ff03) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000240)={0x0, 0x1, 0x0, 0xc1}) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 16:32:31 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x1000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE, 0x2) inotify_add_watch(r0, 0x0, 0x4000040) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x4b32, &(0x7f0000000000)) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x30000002) dup3(r1, r0, 0x0) 16:32:31 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0) add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x90) perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0xb600, 0x0, 0x7, 0x0, 0x8000000b7a, 0x1000000, 0x0, 0x0, 0x20}, 0x0, 0x5, 0xffffffffffffffff, 0xb) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f0000000140)={0x1, 0x4e37, 0x81}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xffffffffffffff94, 0x0}}], 0x200002dc) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) 16:32:31 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8}, 0x11010, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = pkey_alloc(0x0, 0x0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000200)=0x33e0, 0x4) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000001c0)=0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0xc8, 0x20, 0xc21, 0x1000, 0x0, {0x2}, [@nested={0x99, 0x96, 0x0, 0x1, [@typed={0x8, 0x22, 0x0, 0x0, @ipv4=@private=0xa010101}, @generic="39c2762ff9ba46040893b659739bb5f96c60227a0b25e7c1f111044109bafde0897a78eb44338c0cbc86bf56293ee55fc2e0bb0b43645d2456c612cc7191a1cd49d9", @generic="acd2b2c7e98b6167be6b59663e303cbc6ca0f888bb3730e2fda717c5c05458903eebf4f98129b521ac995853622f691db5a3bc250ecd3e8cadf086a4042a46", @typed={0xc, 0xff, 0x0, 0x0, @u64=0x99c8}]}, @nested={0x18, 0x3fff, 0x0, 0x1, [@typed={0xa, 0x15, 0x0, 0x0, @str=',\\(-\x97\x00'}, @typed={0x8, 0x2d, 0x0, 0x0, @uid}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000}, 0x20004004) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3c196920d8b85fc5, &(0x7f0000000140)=0x5, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, r0) sendfile(r2, r1, 0x0, 0x9bbb) [ 597.852169] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 16:32:32 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{0x6, 0x0, 0xf0}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 16:32:32 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x1000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE, 0x2) inotify_add_watch(r0, 0x0, 0x4000040) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x4b32, &(0x7f0000000000)) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x30000002) dup3(r1, r0, 0x0) 16:32:32 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x1000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE, 0x2) inotify_add_watch(r0, 0x0, 0x4000040) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x4b32, &(0x7f0000000000)) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x30000002) dup3(r1, r0, 0x0) 16:32:32 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8}, 0x11010, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = pkey_alloc(0x0, 0x0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000200)=0x33e0, 0x4) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000001c0)=0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0xc8, 0x20, 0xc21, 0x1000, 0x0, {0x2}, [@nested={0x99, 0x96, 0x0, 0x1, [@typed={0x8, 0x22, 0x0, 0x0, @ipv4=@private=0xa010101}, @generic="39c2762ff9ba46040893b659739bb5f96c60227a0b25e7c1f111044109bafde0897a78eb44338c0cbc86bf56293ee55fc2e0bb0b43645d2456c612cc7191a1cd49d9", @generic="acd2b2c7e98b6167be6b59663e303cbc6ca0f888bb3730e2fda717c5c05458903eebf4f98129b521ac995853622f691db5a3bc250ecd3e8cadf086a4042a46", @typed={0xc, 0xff, 0x0, 0x0, @u64=0x99c8}]}, @nested={0x18, 0x3fff, 0x0, 0x1, [@typed={0xa, 0x15, 0x0, 0x0, @str=',\\(-\x97\x00'}, @typed={0x8, 0x2d, 0x0, 0x0, @uid}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000}, 0x20004004) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3c196920d8b85fc5, &(0x7f0000000140)=0x5, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, r0) sendfile(r2, r1, 0x0, 0x9bbb) 16:32:32 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0) add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x90) perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0xb600, 0x0, 0x7, 0x0, 0x8000000b7a, 0x1000000, 0x0, 0x0, 0x20}, 0x0, 0x5, 0xffffffffffffffff, 0xb) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f0000000140)={0x1, 0x4e37, 0x81}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xffffffffffffff94, 0x0}}], 0x200002dc) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) 16:32:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x90, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000, 0x73f}, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) 16:32:32 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8}, 0x11010, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = pkey_alloc(0x0, 0x0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000200)=0x33e0, 0x4) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000001c0)=0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0xc8, 0x20, 0xc21, 0x1000, 0x0, {0x2}, [@nested={0x99, 0x96, 0x0, 0x1, [@typed={0x8, 0x22, 0x0, 0x0, @ipv4=@private=0xa010101}, @generic="39c2762ff9ba46040893b659739bb5f96c60227a0b25e7c1f111044109bafde0897a78eb44338c0cbc86bf56293ee55fc2e0bb0b43645d2456c612cc7191a1cd49d9", @generic="acd2b2c7e98b6167be6b59663e303cbc6ca0f888bb3730e2fda717c5c05458903eebf4f98129b521ac995853622f691db5a3bc250ecd3e8cadf086a4042a46", @typed={0xc, 0xff, 0x0, 0x0, @u64=0x99c8}]}, @nested={0x18, 0x3fff, 0x0, 0x1, [@typed={0xa, 0x15, 0x0, 0x0, @str=',\\(-\x97\x00'}, @typed={0x8, 0x2d, 0x0, 0x0, @uid}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000}, 0x20004004) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3c196920d8b85fc5, &(0x7f0000000140)=0x5, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, r0) sendfile(r2, r1, 0x0, 0x9bbb) [ 598.361991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:32 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) write(r2, &(0x7f0000000380)="071e9f7358ec922343d9786f7c2147c81e6890a8016fb53a5ffc4951d0a6a9f38dda8a9bae8f6f3750405ca0111cc8069cb8ebd8c8564cc6aff4e3631e4eb8ebf43b0e3a61bb5878257df934ab1c2df75a49f4d39cf7effe02c00c95f02860e708", 0x61) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r3, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') unshare(0x48020200) [ 598.415756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:32 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0) add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x90) perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0xb600, 0x0, 0x7, 0x0, 0x8000000b7a, 0x1000000, 0x0, 0x0, 0x20}, 0x0, 0x5, 0xffffffffffffffff, 0xb) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f0000000140)={0x1, 0x4e37, 0x81}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xffffffffffffff94, 0x0}}], 0x200002dc) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) 16:32:32 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x1000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE, 0x2) inotify_add_watch(r0, 0x0, 0x4000040) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x4b32, &(0x7f0000000000)) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x30000002) dup3(r1, r0, 0x0) 16:32:32 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x1000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE, 0x2) inotify_add_watch(r0, 0x0, 0x4000040) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x4b32, &(0x7f0000000000)) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x30000002) dup3(r1, r0, 0x0) [ 598.468247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:32 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8}, 0x11010, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = pkey_alloc(0x0, 0x0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000200)=0x33e0, 0x4) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000001c0)=0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0xc8, 0x20, 0xc21, 0x1000, 0x0, {0x2}, [@nested={0x99, 0x96, 0x0, 0x1, [@typed={0x8, 0x22, 0x0, 0x0, @ipv4=@private=0xa010101}, @generic="39c2762ff9ba46040893b659739bb5f96c60227a0b25e7c1f111044109bafde0897a78eb44338c0cbc86bf56293ee55fc2e0bb0b43645d2456c612cc7191a1cd49d9", @generic="acd2b2c7e98b6167be6b59663e303cbc6ca0f888bb3730e2fda717c5c05458903eebf4f98129b521ac995853622f691db5a3bc250ecd3e8cadf086a4042a46", @typed={0xc, 0xff, 0x0, 0x0, @u64=0x99c8}]}, @nested={0x18, 0x3fff, 0x0, 0x1, [@typed={0xa, 0x15, 0x0, 0x0, @str=',\\(-\x97\x00'}, @typed={0x8, 0x2d, 0x0, 0x0, @uid}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000}, 0x20004004) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3c196920d8b85fc5, &(0x7f0000000140)=0x5, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, r0) sendfile(r2, r1, 0x0, 0x9bbb) 16:32:33 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8}, 0x11010, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = pkey_alloc(0x0, 0x0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000200)=0x33e0, 0x4) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000001c0)=0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0xc8, 0x20, 0xc21, 0x1000, 0x0, {0x2}, [@nested={0x99, 0x96, 0x0, 0x1, [@typed={0x8, 0x22, 0x0, 0x0, @ipv4=@private=0xa010101}, @generic="39c2762ff9ba46040893b659739bb5f96c60227a0b25e7c1f111044109bafde0897a78eb44338c0cbc86bf56293ee55fc2e0bb0b43645d2456c612cc7191a1cd49d9", @generic="acd2b2c7e98b6167be6b59663e303cbc6ca0f888bb3730e2fda717c5c05458903eebf4f98129b521ac995853622f691db5a3bc250ecd3e8cadf086a4042a46", @typed={0xc, 0xff, 0x0, 0x0, @u64=0x99c8}]}, @nested={0x18, 0x3fff, 0x0, 0x1, [@typed={0xa, 0x15, 0x0, 0x0, @str=',\\(-\x97\x00'}, @typed={0x8, 0x2d, 0x0, 0x0, @uid}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000}, 0x20004004) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3c196920d8b85fc5, &(0x7f0000000140)=0x5, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, r0) sendfile(r2, r1, 0x0, 0x9bbb) 16:32:33 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) write(r2, &(0x7f0000000380)="071e9f7358ec922343d9786f7c2147c81e6890a8016fb53a5ffc4951d0a6a9f38dda8a9bae8f6f3750405ca0111cc8069cb8ebd8c8564cc6aff4e3631e4eb8ebf43b0e3a61bb5878257df934ab1c2df75a49f4d39cf7effe02c00c95f02860e708", 0x61) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r3, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') unshare(0x48020200) 16:32:33 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) write(r2, &(0x7f0000000380)="071e9f7358ec922343d9786f7c2147c81e6890a8016fb53a5ffc4951d0a6a9f38dda8a9bae8f6f3750405ca0111cc8069cb8ebd8c8564cc6aff4e3631e4eb8ebf43b0e3a61bb5878257df934ab1c2df75a49f4d39cf7effe02c00c95f02860e708", 0x61) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r3, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') unshare(0x48020200) 16:32:33 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x90, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000, 0x73f}, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) 16:32:33 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0) add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x90) perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0xb600, 0x0, 0x7, 0x0, 0x8000000b7a, 0x1000000, 0x0, 0x0, 0x20}, 0x0, 0x5, 0xffffffffffffffff, 0xb) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f0000000140)={0x1, 0x4e37, 0x81}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xffffffffffffff94, 0x0}}], 0x200002dc) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) 16:32:33 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8}, 0x11010, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = pkey_alloc(0x0, 0x0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000200)=0x33e0, 0x4) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000001c0)=0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0xc8, 0x20, 0xc21, 0x1000, 0x0, {0x2}, [@nested={0x99, 0x96, 0x0, 0x1, [@typed={0x8, 0x22, 0x0, 0x0, @ipv4=@private=0xa010101}, @generic="39c2762ff9ba46040893b659739bb5f96c60227a0b25e7c1f111044109bafde0897a78eb44338c0cbc86bf56293ee55fc2e0bb0b43645d2456c612cc7191a1cd49d9", @generic="acd2b2c7e98b6167be6b59663e303cbc6ca0f888bb3730e2fda717c5c05458903eebf4f98129b521ac995853622f691db5a3bc250ecd3e8cadf086a4042a46", @typed={0xc, 0xff, 0x0, 0x0, @u64=0x99c8}]}, @nested={0x18, 0x3fff, 0x0, 0x1, [@typed={0xa, 0x15, 0x0, 0x0, @str=',\\(-\x97\x00'}, @typed={0x8, 0x2d, 0x0, 0x0, @uid}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000}, 0x20004004) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3c196920d8b85fc5, &(0x7f0000000140)=0x5, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, r0) sendfile(r2, r1, 0x0, 0x9bbb) 16:32:33 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{0x6, 0x0, 0x300}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 16:32:33 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8}, 0x11010, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = pkey_alloc(0x0, 0x0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000200)=0x33e0, 0x4) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000001c0)=0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0xc8, 0x20, 0xc21, 0x1000, 0x0, {0x2}, [@nested={0x99, 0x96, 0x0, 0x1, [@typed={0x8, 0x22, 0x0, 0x0, @ipv4=@private=0xa010101}, @generic="39c2762ff9ba46040893b659739bb5f96c60227a0b25e7c1f111044109bafde0897a78eb44338c0cbc86bf56293ee55fc2e0bb0b43645d2456c612cc7191a1cd49d9", @generic="acd2b2c7e98b6167be6b59663e303cbc6ca0f888bb3730e2fda717c5c05458903eebf4f98129b521ac995853622f691db5a3bc250ecd3e8cadf086a4042a46", @typed={0xc, 0xff, 0x0, 0x0, @u64=0x99c8}]}, @nested={0x18, 0x3fff, 0x0, 0x1, [@typed={0xa, 0x15, 0x0, 0x0, @str=',\\(-\x97\x00'}, @typed={0x8, 0x2d, 0x0, 0x0, @uid}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000}, 0x20004004) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3c196920d8b85fc5, &(0x7f0000000140)=0x5, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, r0) sendfile(r2, r1, 0x0, 0x9bbb) [ 599.368995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:33 executing program 4: move_pages(0x0, 0x1, &(0x7f00000016c0)=[&(0x7f0000bf5000/0x4000)=nil], &(0x7f0000001700)=[0xaea], 0x0, 0x0) [ 599.432611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:33 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8}, 0x11010, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = pkey_alloc(0x0, 0x0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000200)=0x33e0, 0x4) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000001c0)=0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0xc8, 0x20, 0xc21, 0x1000, 0x0, {0x2}, [@nested={0x99, 0x96, 0x0, 0x1, [@typed={0x8, 0x22, 0x0, 0x0, @ipv4=@private=0xa010101}, @generic="39c2762ff9ba46040893b659739bb5f96c60227a0b25e7c1f111044109bafde0897a78eb44338c0cbc86bf56293ee55fc2e0bb0b43645d2456c612cc7191a1cd49d9", @generic="acd2b2c7e98b6167be6b59663e303cbc6ca0f888bb3730e2fda717c5c05458903eebf4f98129b521ac995853622f691db5a3bc250ecd3e8cadf086a4042a46", @typed={0xc, 0xff, 0x0, 0x0, @u64=0x99c8}]}, @nested={0x18, 0x3fff, 0x0, 0x1, [@typed={0xa, 0x15, 0x0, 0x0, @str=',\\(-\x97\x00'}, @typed={0x8, 0x2d, 0x0, 0x0, @uid}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000}, 0x20004004) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3c196920d8b85fc5, &(0x7f0000000140)=0x5, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, r0) sendfile(r2, r1, 0x0, 0x9bbb) [ 599.487483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:33 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)={{0x9, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 16:32:33 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8}, 0x11010, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = pkey_alloc(0x0, 0x0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000200)=0x33e0, 0x4) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000001c0)=0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0xc8, 0x20, 0xc21, 0x1000, 0x0, {0x2}, [@nested={0x99, 0x96, 0x0, 0x1, [@typed={0x8, 0x22, 0x0, 0x0, @ipv4=@private=0xa010101}, @generic="39c2762ff9ba46040893b659739bb5f96c60227a0b25e7c1f111044109bafde0897a78eb44338c0cbc86bf56293ee55fc2e0bb0b43645d2456c612cc7191a1cd49d9", @generic="acd2b2c7e98b6167be6b59663e303cbc6ca0f888bb3730e2fda717c5c05458903eebf4f98129b521ac995853622f691db5a3bc250ecd3e8cadf086a4042a46", @typed={0xc, 0xff, 0x0, 0x0, @u64=0x99c8}]}, @nested={0x18, 0x3fff, 0x0, 0x1, [@typed={0xa, 0x15, 0x0, 0x0, @str=',\\(-\x97\x00'}, @typed={0x8, 0x2d, 0x0, 0x0, @uid}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000}, 0x20004004) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3c196920d8b85fc5, &(0x7f0000000140)=0x5, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, r0) sendfile(r2, r1, 0x0, 0x9bbb) 16:32:33 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8}, 0x11010, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = pkey_alloc(0x0, 0x0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000200)=0x33e0, 0x4) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000001c0)=0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0xc8, 0x20, 0xc21, 0x1000, 0x0, {0x2}, [@nested={0x99, 0x96, 0x0, 0x1, [@typed={0x8, 0x22, 0x0, 0x0, @ipv4=@private=0xa010101}, @generic="39c2762ff9ba46040893b659739bb5f96c60227a0b25e7c1f111044109bafde0897a78eb44338c0cbc86bf56293ee55fc2e0bb0b43645d2456c612cc7191a1cd49d9", @generic="acd2b2c7e98b6167be6b59663e303cbc6ca0f888bb3730e2fda717c5c05458903eebf4f98129b521ac995853622f691db5a3bc250ecd3e8cadf086a4042a46", @typed={0xc, 0xff, 0x0, 0x0, @u64=0x99c8}]}, @nested={0x18, 0x3fff, 0x0, 0x1, [@typed={0xa, 0x15, 0x0, 0x0, @str=',\\(-\x97\x00'}, @typed={0x8, 0x2d, 0x0, 0x0, @uid}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000}, 0x20004004) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3c196920d8b85fc5, &(0x7f0000000140)=0x5, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, r0) sendfile(r2, r1, 0x0, 0x9bbb) 16:32:33 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)={{0x9, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 16:32:33 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8}, 0x11010, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = pkey_alloc(0x0, 0x0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000200)=0x33e0, 0x4) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000001c0)=0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0xc8, 0x20, 0xc21, 0x1000, 0x0, {0x2}, [@nested={0x99, 0x96, 0x0, 0x1, [@typed={0x8, 0x22, 0x0, 0x0, @ipv4=@private=0xa010101}, @generic="39c2762ff9ba46040893b659739bb5f96c60227a0b25e7c1f111044109bafde0897a78eb44338c0cbc86bf56293ee55fc2e0bb0b43645d2456c612cc7191a1cd49d9", @generic="acd2b2c7e98b6167be6b59663e303cbc6ca0f888bb3730e2fda717c5c05458903eebf4f98129b521ac995853622f691db5a3bc250ecd3e8cadf086a4042a46", @typed={0xc, 0xff, 0x0, 0x0, @u64=0x99c8}]}, @nested={0x18, 0x3fff, 0x0, 0x1, [@typed={0xa, 0x15, 0x0, 0x0, @str=',\\(-\x97\x00'}, @typed={0x8, 0x2d, 0x0, 0x0, @uid}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000}, 0x20004004) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3c196920d8b85fc5, &(0x7f0000000140)=0x5, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, r0) sendfile(r2, r1, 0x0, 0x9bbb) 16:32:33 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{0x6, 0x0, 0x500}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 16:32:33 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x90, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000, 0x73f}, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) 16:32:33 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) write(r2, &(0x7f0000000380)="071e9f7358ec922343d9786f7c2147c81e6890a8016fb53a5ffc4951d0a6a9f38dda8a9bae8f6f3750405ca0111cc8069cb8ebd8c8564cc6aff4e3631e4eb8ebf43b0e3a61bb5878257df934ab1c2df75a49f4d39cf7effe02c00c95f02860e708", 0x61) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r3, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') unshare(0x48020200) [ 600.221419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:33 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) write(r2, &(0x7f0000000380)="071e9f7358ec922343d9786f7c2147c81e6890a8016fb53a5ffc4951d0a6a9f38dda8a9bae8f6f3750405ca0111cc8069cb8ebd8c8564cc6aff4e3631e4eb8ebf43b0e3a61bb5878257df934ab1c2df75a49f4d39cf7effe02c00c95f02860e708", 0x61) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r3, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') unshare(0x48020200) 16:32:33 executing program 3: flock(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x101, 0x0, 0x0, 'queue0\x00'}) 16:32:33 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8}, 0x11010, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = pkey_alloc(0x0, 0x0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000200)=0x33e0, 0x4) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000001c0)=0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0xc8, 0x20, 0xc21, 0x1000, 0x0, {0x2}, [@nested={0x99, 0x96, 0x0, 0x1, [@typed={0x8, 0x22, 0x0, 0x0, @ipv4=@private=0xa010101}, @generic="39c2762ff9ba46040893b659739bb5f96c60227a0b25e7c1f111044109bafde0897a78eb44338c0cbc86bf56293ee55fc2e0bb0b43645d2456c612cc7191a1cd49d9", @generic="acd2b2c7e98b6167be6b59663e303cbc6ca0f888bb3730e2fda717c5c05458903eebf4f98129b521ac995853622f691db5a3bc250ecd3e8cadf086a4042a46", @typed={0xc, 0xff, 0x0, 0x0, @u64=0x99c8}]}, @nested={0x18, 0x3fff, 0x0, 0x1, [@typed={0xa, 0x15, 0x0, 0x0, @str=',\\(-\x97\x00'}, @typed={0x8, 0x2d, 0x0, 0x0, @uid}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000}, 0x20004004) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3c196920d8b85fc5, &(0x7f0000000140)=0x5, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, r0) sendfile(r2, r1, 0x0, 0x9bbb) [ 600.283459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:34 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)={{0x9, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 16:32:34 executing program 3: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0) add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r2 = fcntl$dupfd(r1, 0x0, r1) perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0xb600, 0x0, 0x7, 0x0, 0x8000000b7a, 0x1000000, 0x0, 0x0, 0x20}, 0x0, 0x5, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xffffffffffffff94, 0x0}}], 0x200002dc) r3 = add_key(&(0x7f0000000280)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="fa", 0x1, 0xfffffffffffffffe) keyctl$chown(0x4, r3, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, 0x0, r3, 0x0, 0x1) 16:32:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x843, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x900, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/cgroup.procs\x00', &(0x7f00000001c0)={0x200001, 0x160, 0x1e}, 0x18) openat(r3, &(0x7f0000000340)='./cgroup/cgroup.procs/file0\x00', 0x80800, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e21, 0x80, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}, 0x8000}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7, 0x400000}}, './cgroup/cgroup.procs\x00'}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r2, 0x0, 0x80464c453f) 16:32:34 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)={{0x9, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 16:32:34 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{0x6, 0x0, 0x600}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 16:32:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='-'}, @nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback}]}]}, 0x34}}, 0x0) 16:32:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0x4, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000880)={0x28, 0x1a, 0x69844ea0a6ddcd11, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @nested={0xc, 0xf, 0x0, 0x1, [@typed={0x8, 0x200, 0x0, 0x0, @fd}]}]}, 0x28}}, 0x0) [ 600.570002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:34 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = syz_io_uring_setup(0x1081, &(0x7f0000000280)={0x0, 0x0, 0x40}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0xc, 0x0, 0x0) [ 600.629989] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 600.631313] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 16:32:34 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) write(r2, &(0x7f0000000380)="071e9f7358ec922343d9786f7c2147c81e6890a8016fb53a5ffc4951d0a6a9f38dda8a9bae8f6f3750405ca0111cc8069cb8ebd8c8564cc6aff4e3631e4eb8ebf43b0e3a61bb5878257df934ab1c2df75a49f4d39cf7effe02c00c95f02860e708", 0x61) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r3, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') unshare(0x48020200) [ 600.635116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 600.689108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:34 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x5, 0x4) sendmmsg$inet(r0, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="a3e9dd52279e0d78b07f1f618d75e1bc64ad695b713f", 0x16}, {&(0x7f0000000580)="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", 0x583}], 0x2}}], 0x1, 0x4008000) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 16:32:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x843, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x900, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/cgroup.procs\x00', &(0x7f00000001c0)={0x200001, 0x160, 0x1e}, 0x18) openat(r3, &(0x7f0000000340)='./cgroup/cgroup.procs/file0\x00', 0x80800, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e21, 0x80, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}, 0x8000}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7, 0x400000}}, './cgroup/cgroup.procs\x00'}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r2, 0x0, 0x80464c453f) 16:32:34 executing program 5: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x127f, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200040c4}, 0x40) 16:32:34 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000000)="ff2380") 16:32:34 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = syz_io_uring_setup(0x1081, &(0x7f0000000280)={0x0, 0x0, 0x40}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0xc, 0x0, 0x0) 16:32:34 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x2) ftruncate(r0, 0x1000003) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa418b6d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/3\x00') read(r2, &(0x7f00000002c0)=""/225, 0xe1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = dup2(r1, r1) write$binfmt_elf64(r4, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x3c7) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x4a6c80) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r2, r3, r4, r1, r5, 0xffffffffffffffff, r6, r1], 0x8) fcntl$addseals(r2, 0x409, 0x8) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r7, 0x0, 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x6, 0x4, 0x4, 0x0, 0x0, 0x3d9, 0x70ca0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7ff80, 0x1, @perf_bp={&(0x7f0000000100), 0xc}, 0x41200, 0x9, 0x3, 0x5, 0x6, 0x7, 0xabb, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0x8, r0, 0x0) copy_file_range(r8, 0x0, r7, 0x0, 0x200f5ef, 0x0) 16:32:34 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{0x6, 0x0, 0x700}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 601.143259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:34 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = syz_io_uring_setup(0x1081, &(0x7f0000000280)={0x0, 0x0, 0x40}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0xc, 0x0, 0x0) [ 601.202789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:34 executing program 2: r0 = memfd_create(&(0x7f0000000340)='\x00', 0x0) ftruncate(r0, 0x2001000) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000009, 0x2011, r0, 0x0) sendfile(r0, r0, 0x0, 0x7) 16:32:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) open_by_handle_at(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="640000004f000000d199cf99708ab3b1852b8ec576d1f1e9d2fbfc6eb4e3844d2a5e66af0bc7e7726078578eacefcc28d9dce2a883acedd07091448ed8e5668c7bf46632e043d5fcdf36455826ae966522a2b8b2db14dc2eab04ec4035d98119060ee6622a38bbed2f960000733f3e1062b6b931e8b8a16a285069ae36ca13d1ef84b86c93caa6792a0e25a695abe4e8d725ab32adab65e3ad25b504f8e115427ca03b7d95c488b29708e1df90ab015812a9f98afedd9d7a3602e36dcd9275a8308d63d584321a1b5bc68f0cb3ff7ed554eb2d645860"], 0x200900) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(r1, 0x4, 0xc00) r2 = eventfd(0x0) io_setup(0x3, &(0x7f0000000700)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_submit(r3, 0x1, &(0x7f00000009c0)=[&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) r5 = eventfd(0x0) close_range(r4, r5, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x56, &(0x7f0000000080)=[{&(0x7f00000001c0)="cf", 0x1}, {&(0x7f00000000c0)="9a17e64cdc67bd627708c4", 0xb}, {&(0x7f0000000100)="11fa030674fe5d5c8842559152d3126c4249dfe24d8d98a6439e8cb160e171b641b5cd528f240594de4abf45957c095ea90b68d62f55fc64541601bff7e106fb023db64e8c15f6346c745da761ffee826727bd98b2bffae59c91c021ffc59f6081dbaa196e95a3b173cddce6b01c1e5bac179d6881414edcc12bf994d30576798a19d0f9db5d054e8fdf2821230a23ed81a02369234a399d7115", 0x9a}, {&(0x7f0000000380)="d21e0ed1ee27c972fd2bef67c6a077b239514e0a205b38c982a5a6ca75c562f403f161f541cbc23b2e120f45812688f0de482c2bf16064f11091e836607a0e0217e4ccf2cc1e962d"}], 0x3}, 0x38008004) dup2(r0, r1) [ 601.255510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x843, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x900, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/cgroup.procs\x00', &(0x7f00000001c0)={0x200001, 0x160, 0x1e}, 0x18) openat(r3, &(0x7f0000000340)='./cgroup/cgroup.procs/file0\x00', 0x80800, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e21, 0x80, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}, 0x8000}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7, 0x400000}}, './cgroup/cgroup.procs\x00'}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r2, 0x0, 0x80464c453f) 16:32:35 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x122902, 0x0) io_setup(0x7f, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000000a00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000000c0)='\b', 0x4}]) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:32:35 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = syz_io_uring_setup(0x1081, &(0x7f0000000280)={0x0, 0x0, 0x40}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0xc, 0x0, 0x0) 16:32:35 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0), 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 16:32:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)={0x14, 0x42, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x2, 0x0, 0x2}}, 0x14}}, 0x0) 16:32:35 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x2) ftruncate(r0, 0x1000003) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa418b6d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/3\x00') read(r2, &(0x7f00000002c0)=""/225, 0xe1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = dup2(r1, r1) write$binfmt_elf64(r4, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x3c7) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x4a6c80) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r2, r3, r4, r1, r5, 0xffffffffffffffff, r6, r1], 0x8) fcntl$addseals(r2, 0x409, 0x8) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r7, 0x0, 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x6, 0x4, 0x4, 0x0, 0x0, 0x3d9, 0x70ca0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7ff80, 0x1, @perf_bp={&(0x7f0000000100), 0xc}, 0x41200, 0x9, 0x3, 0x5, 0x6, 0x7, 0xabb, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0x8, r0, 0x0) copy_file_range(r8, 0x0, r7, 0x0, 0x200f5ef, 0x0) 16:32:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) open_by_handle_at(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="640000004f000000d199cf99708ab3b1852b8ec576d1f1e9d2fbfc6eb4e3844d2a5e66af0bc7e7726078578eacefcc28d9dce2a883acedd07091448ed8e5668c7bf46632e043d5fcdf36455826ae966522a2b8b2db14dc2eab04ec4035d98119060ee6622a38bbed2f960000733f3e1062b6b931e8b8a16a285069ae36ca13d1ef84b86c93caa6792a0e25a695abe4e8d725ab32adab65e3ad25b504f8e115427ca03b7d95c488b29708e1df90ab015812a9f98afedd9d7a3602e36dcd9275a8308d63d584321a1b5bc68f0cb3ff7ed554eb2d645860"], 0x200900) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(r1, 0x4, 0xc00) r2 = eventfd(0x0) io_setup(0x3, &(0x7f0000000700)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_submit(r3, 0x1, &(0x7f00000009c0)=[&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) r5 = eventfd(0x0) close_range(r4, r5, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x56, &(0x7f0000000080)=[{&(0x7f00000001c0)="cf", 0x1}, {&(0x7f00000000c0)="9a17e64cdc67bd627708c4", 0xb}, {&(0x7f0000000100)="11fa030674fe5d5c8842559152d3126c4249dfe24d8d98a6439e8cb160e171b641b5cd528f240594de4abf45957c095ea90b68d62f55fc64541601bff7e106fb023db64e8c15f6346c745da761ffee826727bd98b2bffae59c91c021ffc59f6081dbaa196e95a3b173cddce6b01c1e5bac179d6881414edcc12bf994d30576798a19d0f9db5d054e8fdf2821230a23ed81a02369234a399d7115", 0x9a}, {&(0x7f0000000380)="d21e0ed1ee27c972fd2bef67c6a077b239514e0a205b38c982a5a6ca75c562f403f161f541cbc23b2e120f45812688f0de482c2bf16064f11091e836607a0e0217e4ccf2cc1e962d"}], 0x3}, 0x38008004) dup2(r0, r1) 16:32:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) open_by_handle_at(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="640000004f000000d199cf99708ab3b1852b8ec576d1f1e9d2fbfc6eb4e3844d2a5e66af0bc7e7726078578eacefcc28d9dce2a883acedd07091448ed8e5668c7bf46632e043d5fcdf36455826ae966522a2b8b2db14dc2eab04ec4035d98119060ee6622a38bbed2f960000733f3e1062b6b931e8b8a16a285069ae36ca13d1ef84b86c93caa6792a0e25a695abe4e8d725ab32adab65e3ad25b504f8e115427ca03b7d95c488b29708e1df90ab015812a9f98afedd9d7a3602e36dcd9275a8308d63d584321a1b5bc68f0cb3ff7ed554eb2d645860"], 0x200900) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(r1, 0x4, 0xc00) r2 = eventfd(0x0) io_setup(0x3, &(0x7f0000000700)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_submit(r3, 0x1, &(0x7f00000009c0)=[&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) r5 = eventfd(0x0) close_range(r4, r5, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x56, &(0x7f0000000080)=[{&(0x7f00000001c0)="cf", 0x1}, {&(0x7f00000000c0)="9a17e64cdc67bd627708c4", 0xb}, {&(0x7f0000000100)="11fa030674fe5d5c8842559152d3126c4249dfe24d8d98a6439e8cb160e171b641b5cd528f240594de4abf45957c095ea90b68d62f55fc64541601bff7e106fb023db64e8c15f6346c745da761ffee826727bd98b2bffae59c91c021ffc59f6081dbaa196e95a3b173cddce6b01c1e5bac179d6881414edcc12bf994d30576798a19d0f9db5d054e8fdf2821230a23ed81a02369234a399d7115", 0x9a}, {&(0x7f0000000380)="d21e0ed1ee27c972fd2bef67c6a077b239514e0a205b38c982a5a6ca75c562f403f161f541cbc23b2e120f45812688f0de482c2bf16064f11091e836607a0e0217e4ccf2cc1e962d"}], 0x3}, 0x38008004) dup2(r0, r1) 16:32:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) open_by_handle_at(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="640000004f000000d199cf99708ab3b1852b8ec576d1f1e9d2fbfc6eb4e3844d2a5e66af0bc7e7726078578eacefcc28d9dce2a883acedd07091448ed8e5668c7bf46632e043d5fcdf36455826ae966522a2b8b2db14dc2eab04ec4035d98119060ee6622a38bbed2f960000733f3e1062b6b931e8b8a16a285069ae36ca13d1ef84b86c93caa6792a0e25a695abe4e8d725ab32adab65e3ad25b504f8e115427ca03b7d95c488b29708e1df90ab015812a9f98afedd9d7a3602e36dcd9275a8308d63d584321a1b5bc68f0cb3ff7ed554eb2d645860"], 0x200900) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(r1, 0x4, 0xc00) r2 = eventfd(0x0) io_setup(0x3, &(0x7f0000000700)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_submit(r3, 0x1, &(0x7f00000009c0)=[&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) r5 = eventfd(0x0) close_range(r4, r5, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x56, &(0x7f0000000080)=[{&(0x7f00000001c0)="cf", 0x1}, {&(0x7f00000000c0)="9a17e64cdc67bd627708c4", 0xb}, {&(0x7f0000000100)="11fa030674fe5d5c8842559152d3126c4249dfe24d8d98a6439e8cb160e171b641b5cd528f240594de4abf45957c095ea90b68d62f55fc64541601bff7e106fb023db64e8c15f6346c745da761ffee826727bd98b2bffae59c91c021ffc59f6081dbaa196e95a3b173cddce6b01c1e5bac179d6881414edcc12bf994d30576798a19d0f9db5d054e8fdf2821230a23ed81a02369234a399d7115", 0x9a}, {&(0x7f0000000380)="d21e0ed1ee27c972fd2bef67c6a077b239514e0a205b38c982a5a6ca75c562f403f161f541cbc23b2e120f45812688f0de482c2bf16064f11091e836607a0e0217e4ccf2cc1e962d"}], 0x3}, 0x38008004) dup2(r0, r1) 16:32:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) open_by_handle_at(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="640000004f000000d199cf99708ab3b1852b8ec576d1f1e9d2fbfc6eb4e3844d2a5e66af0bc7e7726078578eacefcc28d9dce2a883acedd07091448ed8e5668c7bf46632e043d5fcdf36455826ae966522a2b8b2db14dc2eab04ec4035d98119060ee6622a38bbed2f960000733f3e1062b6b931e8b8a16a285069ae36ca13d1ef84b86c93caa6792a0e25a695abe4e8d725ab32adab65e3ad25b504f8e115427ca03b7d95c488b29708e1df90ab015812a9f98afedd9d7a3602e36dcd9275a8308d63d584321a1b5bc68f0cb3ff7ed554eb2d645860"], 0x200900) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(r1, 0x4, 0xc00) r2 = eventfd(0x0) io_setup(0x3, &(0x7f0000000700)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_submit(r3, 0x1, &(0x7f00000009c0)=[&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) r5 = eventfd(0x0) close_range(r4, r5, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x56, &(0x7f0000000080)=[{&(0x7f00000001c0)="cf", 0x1}, {&(0x7f00000000c0)="9a17e64cdc67bd627708c4", 0xb}, {&(0x7f0000000100)="11fa030674fe5d5c8842559152d3126c4249dfe24d8d98a6439e8cb160e171b641b5cd528f240594de4abf45957c095ea90b68d62f55fc64541601bff7e106fb023db64e8c15f6346c745da761ffee826727bd98b2bffae59c91c021ffc59f6081dbaa196e95a3b173cddce6b01c1e5bac179d6881414edcc12bf994d30576798a19d0f9db5d054e8fdf2821230a23ed81a02369234a399d7115", 0x9a}, {&(0x7f0000000380)="d21e0ed1ee27c972fd2bef67c6a077b239514e0a205b38c982a5a6ca75c562f403f161f541cbc23b2e120f45812688f0de482c2bf16064f11091e836607a0e0217e4ccf2cc1e962d"}], 0x3}, 0x38008004) dup2(r0, r1) 16:32:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x843, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x900, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/cgroup.procs\x00', &(0x7f00000001c0)={0x200001, 0x160, 0x1e}, 0x18) openat(r3, &(0x7f0000000340)='./cgroup/cgroup.procs/file0\x00', 0x80800, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e21, 0x80, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}, 0x8000}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7, 0x400000}}, './cgroup/cgroup.procs\x00'}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r2, 0x0, 0x80464c453f) 16:32:35 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x2) ftruncate(r0, 0x1000003) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa418b6d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/3\x00') read(r2, &(0x7f00000002c0)=""/225, 0xe1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = dup2(r1, r1) write$binfmt_elf64(r4, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x3c7) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x4a6c80) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r2, r3, r4, r1, r5, 0xffffffffffffffff, r6, r1], 0x8) fcntl$addseals(r2, 0x409, 0x8) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r7, 0x0, 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x6, 0x4, 0x4, 0x0, 0x0, 0x3d9, 0x70ca0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7ff80, 0x1, @perf_bp={&(0x7f0000000100), 0xc}, 0x41200, 0x9, 0x3, 0x5, 0x6, 0x7, 0xabb, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0x8, r0, 0x0) copy_file_range(r8, 0x0, r7, 0x0, 0x200f5ef, 0x0) 16:32:35 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{0x6, 0x0, 0x900}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 601.688112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) open_by_handle_at(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="640000004f000000d199cf99708ab3b1852b8ec576d1f1e9d2fbfc6eb4e3844d2a5e66af0bc7e7726078578eacefcc28d9dce2a883acedd07091448ed8e5668c7bf46632e043d5fcdf36455826ae966522a2b8b2db14dc2eab04ec4035d98119060ee6622a38bbed2f960000733f3e1062b6b931e8b8a16a285069ae36ca13d1ef84b86c93caa6792a0e25a695abe4e8d725ab32adab65e3ad25b504f8e115427ca03b7d95c488b29708e1df90ab015812a9f98afedd9d7a3602e36dcd9275a8308d63d584321a1b5bc68f0cb3ff7ed554eb2d645860"], 0x200900) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(r1, 0x4, 0xc00) r2 = eventfd(0x0) io_setup(0x3, &(0x7f0000000700)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_submit(r3, 0x1, &(0x7f00000009c0)=[&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) r5 = eventfd(0x0) close_range(r4, r5, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x56, &(0x7f0000000080)=[{&(0x7f00000001c0)="cf", 0x1}, {&(0x7f00000000c0)="9a17e64cdc67bd627708c4", 0xb}, {&(0x7f0000000100)="11fa030674fe5d5c8842559152d3126c4249dfe24d8d98a6439e8cb160e171b641b5cd528f240594de4abf45957c095ea90b68d62f55fc64541601bff7e106fb023db64e8c15f6346c745da761ffee826727bd98b2bffae59c91c021ffc59f6081dbaa196e95a3b173cddce6b01c1e5bac179d6881414edcc12bf994d30576798a19d0f9db5d054e8fdf2821230a23ed81a02369234a399d7115", 0x9a}, {&(0x7f0000000380)="d21e0ed1ee27c972fd2bef67c6a077b239514e0a205b38c982a5a6ca75c562f403f161f541cbc23b2e120f45812688f0de482c2bf16064f11091e836607a0e0217e4ccf2cc1e962d"}], 0x3}, 0x38008004) dup2(r0, r1) 16:32:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) open_by_handle_at(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="640000004f000000d199cf99708ab3b1852b8ec576d1f1e9d2fbfc6eb4e3844d2a5e66af0bc7e7726078578eacefcc28d9dce2a883acedd07091448ed8e5668c7bf46632e043d5fcdf36455826ae966522a2b8b2db14dc2eab04ec4035d98119060ee6622a38bbed2f960000733f3e1062b6b931e8b8a16a285069ae36ca13d1ef84b86c93caa6792a0e25a695abe4e8d725ab32adab65e3ad25b504f8e115427ca03b7d95c488b29708e1df90ab015812a9f98afedd9d7a3602e36dcd9275a8308d63d584321a1b5bc68f0cb3ff7ed554eb2d645860"], 0x200900) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(r1, 0x4, 0xc00) r2 = eventfd(0x0) io_setup(0x3, &(0x7f0000000700)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_submit(r3, 0x1, &(0x7f00000009c0)=[&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) r5 = eventfd(0x0) close_range(r4, r5, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x56, &(0x7f0000000080)=[{&(0x7f00000001c0)="cf", 0x1}, {&(0x7f00000000c0)="9a17e64cdc67bd627708c4", 0xb}, {&(0x7f0000000100)="11fa030674fe5d5c8842559152d3126c4249dfe24d8d98a6439e8cb160e171b641b5cd528f240594de4abf45957c095ea90b68d62f55fc64541601bff7e106fb023db64e8c15f6346c745da761ffee826727bd98b2bffae59c91c021ffc59f6081dbaa196e95a3b173cddce6b01c1e5bac179d6881414edcc12bf994d30576798a19d0f9db5d054e8fdf2821230a23ed81a02369234a399d7115", 0x9a}, {&(0x7f0000000380)="d21e0ed1ee27c972fd2bef67c6a077b239514e0a205b38c982a5a6ca75c562f403f161f541cbc23b2e120f45812688f0de482c2bf16064f11091e836607a0e0217e4ccf2cc1e962d"}], 0x3}, 0x38008004) dup2(r0, r1) [ 601.745348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) open_by_handle_at(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="640000004f000000d199cf99708ab3b1852b8ec576d1f1e9d2fbfc6eb4e3844d2a5e66af0bc7e7726078578eacefcc28d9dce2a883acedd07091448ed8e5668c7bf46632e043d5fcdf36455826ae966522a2b8b2db14dc2eab04ec4035d98119060ee6622a38bbed2f960000733f3e1062b6b931e8b8a16a285069ae36ca13d1ef84b86c93caa6792a0e25a695abe4e8d725ab32adab65e3ad25b504f8e115427ca03b7d95c488b29708e1df90ab015812a9f98afedd9d7a3602e36dcd9275a8308d63d584321a1b5bc68f0cb3ff7ed554eb2d645860"], 0x200900) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(r1, 0x4, 0xc00) r2 = eventfd(0x0) io_setup(0x3, &(0x7f0000000700)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_submit(r3, 0x1, &(0x7f00000009c0)=[&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) r5 = eventfd(0x0) close_range(r4, r5, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x56, &(0x7f0000000080)=[{&(0x7f00000001c0)="cf", 0x1}, {&(0x7f00000000c0)="9a17e64cdc67bd627708c4", 0xb}, {&(0x7f0000000100)="11fa030674fe5d5c8842559152d3126c4249dfe24d8d98a6439e8cb160e171b641b5cd528f240594de4abf45957c095ea90b68d62f55fc64541601bff7e106fb023db64e8c15f6346c745da761ffee826727bd98b2bffae59c91c021ffc59f6081dbaa196e95a3b173cddce6b01c1e5bac179d6881414edcc12bf994d30576798a19d0f9db5d054e8fdf2821230a23ed81a02369234a399d7115", 0x9a}, {&(0x7f0000000380)="d21e0ed1ee27c972fd2bef67c6a077b239514e0a205b38c982a5a6ca75c562f403f161f541cbc23b2e120f45812688f0de482c2bf16064f11091e836607a0e0217e4ccf2cc1e962d"}], 0x3}, 0x38008004) dup2(r0, r1) 16:32:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) open_by_handle_at(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="640000004f000000d199cf99708ab3b1852b8ec576d1f1e9d2fbfc6eb4e3844d2a5e66af0bc7e7726078578eacefcc28d9dce2a883acedd07091448ed8e5668c7bf46632e043d5fcdf36455826ae966522a2b8b2db14dc2eab04ec4035d98119060ee6622a38bbed2f960000733f3e1062b6b931e8b8a16a285069ae36ca13d1ef84b86c93caa6792a0e25a695abe4e8d725ab32adab65e3ad25b504f8e115427ca03b7d95c488b29708e1df90ab015812a9f98afedd9d7a3602e36dcd9275a8308d63d584321a1b5bc68f0cb3ff7ed554eb2d645860"], 0x200900) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(r1, 0x4, 0xc00) r2 = eventfd(0x0) io_setup(0x3, &(0x7f0000000700)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_submit(r3, 0x1, &(0x7f00000009c0)=[&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) r5 = eventfd(0x0) close_range(r4, r5, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x56, &(0x7f0000000080)=[{&(0x7f00000001c0)="cf", 0x1}, {&(0x7f00000000c0)="9a17e64cdc67bd627708c4", 0xb}, {&(0x7f0000000100)="11fa030674fe5d5c8842559152d3126c4249dfe24d8d98a6439e8cb160e171b641b5cd528f240594de4abf45957c095ea90b68d62f55fc64541601bff7e106fb023db64e8c15f6346c745da761ffee826727bd98b2bffae59c91c021ffc59f6081dbaa196e95a3b173cddce6b01c1e5bac179d6881414edcc12bf994d30576798a19d0f9db5d054e8fdf2821230a23ed81a02369234a399d7115", 0x9a}, {&(0x7f0000000380)="d21e0ed1ee27c972fd2bef67c6a077b239514e0a205b38c982a5a6ca75c562f403f161f541cbc23b2e120f45812688f0de482c2bf16064f11091e836607a0e0217e4ccf2cc1e962d"}], 0x3}, 0x38008004) dup2(r0, r1) [ 601.797497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:35 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x2) ftruncate(r0, 0x1000003) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa418b6d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/3\x00') read(r2, &(0x7f00000002c0)=""/225, 0xe1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = dup2(r1, r1) write$binfmt_elf64(r4, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x3c7) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x4a6c80) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r2, r3, r4, r1, r5, 0xffffffffffffffff, r6, r1], 0x8) fcntl$addseals(r2, 0x409, 0x8) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r7, 0x0, 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x6, 0x4, 0x4, 0x0, 0x0, 0x3d9, 0x70ca0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7ff80, 0x1, @perf_bp={&(0x7f0000000100), 0xc}, 0x41200, 0x9, 0x3, 0x5, 0x6, 0x7, 0xabb, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0x8, r0, 0x0) copy_file_range(r8, 0x0, r7, 0x0, 0x200f5ef, 0x0) 16:32:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) open_by_handle_at(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="640000004f000000d199cf99708ab3b1852b8ec576d1f1e9d2fbfc6eb4e3844d2a5e66af0bc7e7726078578eacefcc28d9dce2a883acedd07091448ed8e5668c7bf46632e043d5fcdf36455826ae966522a2b8b2db14dc2eab04ec4035d98119060ee6622a38bbed2f960000733f3e1062b6b931e8b8a16a285069ae36ca13d1ef84b86c93caa6792a0e25a695abe4e8d725ab32adab65e3ad25b504f8e115427ca03b7d95c488b29708e1df90ab015812a9f98afedd9d7a3602e36dcd9275a8308d63d584321a1b5bc68f0cb3ff7ed554eb2d645860"], 0x200900) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(r1, 0x4, 0xc00) r2 = eventfd(0x0) io_setup(0x3, &(0x7f0000000700)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_submit(r3, 0x1, &(0x7f00000009c0)=[&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) r5 = eventfd(0x0) close_range(r4, r5, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x56, &(0x7f0000000080)=[{&(0x7f00000001c0)="cf", 0x1}, {&(0x7f00000000c0)="9a17e64cdc67bd627708c4", 0xb}, {&(0x7f0000000100)="11fa030674fe5d5c8842559152d3126c4249dfe24d8d98a6439e8cb160e171b641b5cd528f240594de4abf45957c095ea90b68d62f55fc64541601bff7e106fb023db64e8c15f6346c745da761ffee826727bd98b2bffae59c91c021ffc59f6081dbaa196e95a3b173cddce6b01c1e5bac179d6881414edcc12bf994d30576798a19d0f9db5d054e8fdf2821230a23ed81a02369234a399d7115", 0x9a}, {&(0x7f0000000380)="d21e0ed1ee27c972fd2bef67c6a077b239514e0a205b38c982a5a6ca75c562f403f161f541cbc23b2e120f45812688f0de482c2bf16064f11091e836607a0e0217e4ccf2cc1e962d"}], 0x3}, 0x38008004) dup2(r0, r1) 16:32:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) open_by_handle_at(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="640000004f000000d199cf99708ab3b1852b8ec576d1f1e9d2fbfc6eb4e3844d2a5e66af0bc7e7726078578eacefcc28d9dce2a883acedd07091448ed8e5668c7bf46632e043d5fcdf36455826ae966522a2b8b2db14dc2eab04ec4035d98119060ee6622a38bbed2f960000733f3e1062b6b931e8b8a16a285069ae36ca13d1ef84b86c93caa6792a0e25a695abe4e8d725ab32adab65e3ad25b504f8e115427ca03b7d95c488b29708e1df90ab015812a9f98afedd9d7a3602e36dcd9275a8308d63d584321a1b5bc68f0cb3ff7ed554eb2d645860"], 0x200900) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(r1, 0x4, 0xc00) r2 = eventfd(0x0) io_setup(0x3, &(0x7f0000000700)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_submit(r3, 0x1, &(0x7f00000009c0)=[&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) r5 = eventfd(0x0) close_range(r4, r5, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x56, &(0x7f0000000080)=[{&(0x7f00000001c0)="cf", 0x1}, {&(0x7f00000000c0)="9a17e64cdc67bd627708c4", 0xb}, {&(0x7f0000000100)="11fa030674fe5d5c8842559152d3126c4249dfe24d8d98a6439e8cb160e171b641b5cd528f240594de4abf45957c095ea90b68d62f55fc64541601bff7e106fb023db64e8c15f6346c745da761ffee826727bd98b2bffae59c91c021ffc59f6081dbaa196e95a3b173cddce6b01c1e5bac179d6881414edcc12bf994d30576798a19d0f9db5d054e8fdf2821230a23ed81a02369234a399d7115", 0x9a}, {&(0x7f0000000380)="d21e0ed1ee27c972fd2bef67c6a077b239514e0a205b38c982a5a6ca75c562f403f161f541cbc23b2e120f45812688f0de482c2bf16064f11091e836607a0e0217e4ccf2cc1e962d"}], 0x3}, 0x38008004) dup2(r0, r1) 16:32:35 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) 16:32:35 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x2) ftruncate(r0, 0x1000003) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa418b6d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/3\x00') read(r2, &(0x7f00000002c0)=""/225, 0xe1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = dup2(r1, r1) write$binfmt_elf64(r4, &(0x7f0000000800)=ANY=[@ANYBLOB="7f45ec8ab26827704b3500000001000003003e0000180000bd0300000000000040000000000000001e0300000000000006000000000238000100321f0008000100000070030000000500000000000000ff00000000000000a000000000000000010100000000000003000000000000001f000000000000005563cd9a58df47eb7fe1862c4d6716e03dda73ad79bdf1e9a003bcf3986c50d4e8aa28c957fb3d2f3a377ec19cccee4be2003b4f8551fca880d37a4b11600af6227109e9493fb7702e12a94b4c79f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dd2f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e100000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b384c5f2024997ba0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca824ebda0c84196749bba61a02d950ed03c31d36ce1ad9b4e7c056a3acd9feb813360802486d4efed4d530e585bc699f4d6b47ba7bc9a9c3d8c2e2fe03cb819116f5af1dca9ec7b1d75cfb61da8d2544524a9434a1c795c"], 0x3c7) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x4a6c80) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r2, r3, r4, r1, r5, 0xffffffffffffffff, r6, r1], 0x8) fcntl$addseals(r2, 0x409, 0x8) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r7, 0x0, 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x6, 0x4, 0x4, 0x0, 0x0, 0x3d9, 0x70ca0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7ff80, 0x1, @perf_bp={&(0x7f0000000100), 0xc}, 0x41200, 0x9, 0x3, 0x5, 0x6, 0x7, 0xabb, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0x8, r0, 0x0) copy_file_range(r8, 0x0, r7, 0x0, 0x200f5ef, 0x0) 16:32:35 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x2) ftruncate(r0, 0x1000003) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa418b6d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/3\x00') read(r2, &(0x7f00000002c0)=""/225, 0xe1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = dup2(r1, r1) write$binfmt_elf64(r4, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x3c7) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x4a6c80) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r2, r3, r4, r1, r5, 0xffffffffffffffff, r6, r1], 0x8) fcntl$addseals(r2, 0x409, 0x8) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r7, 0x0, 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x6, 0x4, 0x4, 0x0, 0x0, 0x3d9, 0x70ca0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7ff80, 0x1, @perf_bp={&(0x7f0000000100), 0xc}, 0x41200, 0x9, 0x3, 0x5, 0x6, 0x7, 0xabb, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0x8, r0, 0x0) copy_file_range(r8, 0x0, r7, 0x0, 0x200f5ef, 0x0) 16:32:35 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x2) ftruncate(r0, 0x1000003) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa418b6d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/3\x00') read(r2, &(0x7f00000002c0)=""/225, 0xe1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = dup2(r1, r1) write$binfmt_elf64(r4, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x3c7) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x4a6c80) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r2, r3, r4, r1, r5, 0xffffffffffffffff, r6, r1], 0x8) fcntl$addseals(r2, 0x409, 0x8) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r7, 0x0, 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x6, 0x4, 0x4, 0x0, 0x0, 0x3d9, 0x70ca0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7ff80, 0x1, @perf_bp={&(0x7f0000000100), 0xc}, 0x41200, 0x9, 0x3, 0x5, 0x6, 0x7, 0xabb, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0x8, r0, 0x0) copy_file_range(r8, 0x0, r7, 0x0, 0x200f5ef, 0x0) 16:32:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) open_by_handle_at(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="640000004f000000d199cf99708ab3b1852b8ec576d1f1e9d2fbfc6eb4e3844d2a5e66af0bc7e7726078578eacefcc28d9dce2a883acedd07091448ed8e5668c7bf46632e043d5fcdf36455826ae966522a2b8b2db14dc2eab04ec4035d98119060ee6622a38bbed2f960000733f3e1062b6b931e8b8a16a285069ae36ca13d1ef84b86c93caa6792a0e25a695abe4e8d725ab32adab65e3ad25b504f8e115427ca03b7d95c488b29708e1df90ab015812a9f98afedd9d7a3602e36dcd9275a8308d63d584321a1b5bc68f0cb3ff7ed554eb2d645860"], 0x200900) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(r1, 0x4, 0xc00) r2 = eventfd(0x0) io_setup(0x3, &(0x7f0000000700)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_submit(r3, 0x1, &(0x7f00000009c0)=[&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) r5 = eventfd(0x0) close_range(r4, r5, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x56, &(0x7f0000000080)=[{&(0x7f00000001c0)="cf", 0x1}, {&(0x7f00000000c0)="9a17e64cdc67bd627708c4", 0xb}, {&(0x7f0000000100)="11fa030674fe5d5c8842559152d3126c4249dfe24d8d98a6439e8cb160e171b641b5cd528f240594de4abf45957c095ea90b68d62f55fc64541601bff7e106fb023db64e8c15f6346c745da761ffee826727bd98b2bffae59c91c021ffc59f6081dbaa196e95a3b173cddce6b01c1e5bac179d6881414edcc12bf994d30576798a19d0f9db5d054e8fdf2821230a23ed81a02369234a399d7115", 0x9a}, {&(0x7f0000000380)="d21e0ed1ee27c972fd2bef67c6a077b239514e0a205b38c982a5a6ca75c562f403f161f541cbc23b2e120f45812688f0de482c2bf16064f11091e836607a0e0217e4ccf2cc1e962d"}], 0x3}, 0x38008004) dup2(r0, r1) 16:32:35 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{0x6, 0x0, 0xf00}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 16:32:35 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x40001a9, 0x810) 16:32:35 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000740), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, 0x0) 16:32:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) open_by_handle_at(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="640000004f000000d199cf99708ab3b1852b8ec576d1f1e9d2fbfc6eb4e3844d2a5e66af0bc7e7726078578eacefcc28d9dce2a883acedd07091448ed8e5668c7bf46632e043d5fcdf36455826ae966522a2b8b2db14dc2eab04ec4035d98119060ee6622a38bbed2f960000733f3e1062b6b931e8b8a16a285069ae36ca13d1ef84b86c93caa6792a0e25a695abe4e8d725ab32adab65e3ad25b504f8e115427ca03b7d95c488b29708e1df90ab015812a9f98afedd9d7a3602e36dcd9275a8308d63d584321a1b5bc68f0cb3ff7ed554eb2d645860"], 0x200900) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(r1, 0x4, 0xc00) r2 = eventfd(0x0) io_setup(0x3, &(0x7f0000000700)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_submit(r3, 0x1, &(0x7f00000009c0)=[&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) r5 = eventfd(0x0) close_range(r4, r5, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x56, &(0x7f0000000080)=[{&(0x7f00000001c0)="cf", 0x1}, {&(0x7f00000000c0)="9a17e64cdc67bd627708c4", 0xb}, {&(0x7f0000000100)="11fa030674fe5d5c8842559152d3126c4249dfe24d8d98a6439e8cb160e171b641b5cd528f240594de4abf45957c095ea90b68d62f55fc64541601bff7e106fb023db64e8c15f6346c745da761ffee826727bd98b2bffae59c91c021ffc59f6081dbaa196e95a3b173cddce6b01c1e5bac179d6881414edcc12bf994d30576798a19d0f9db5d054e8fdf2821230a23ed81a02369234a399d7115", 0x9a}, {&(0x7f0000000380)="d21e0ed1ee27c972fd2bef67c6a077b239514e0a205b38c982a5a6ca75c562f403f161f541cbc23b2e120f45812688f0de482c2bf16064f11091e836607a0e0217e4ccf2cc1e962d"}], 0x3}, 0x38008004) dup2(r0, r1) 16:32:35 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 16:32:35 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000100)=0x4, 0x4) write$vga_arbiter(r1, &(0x7f0000000180), 0xf) [ 602.243190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000016000b688f75bb4a810900000a0000000c000080080005"], 0x20}}, 0x0) 16:32:36 executing program 4: timer_create(0x0, &(0x7f0000009940)={0x0, 0x0, 0x0, @tid=0xffffffffffffffff}, 0x0) [ 602.309638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:36 executing program 4: r0 = syz_io_uring_setup(0x1432, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 602.364175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:36 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x18, 0x12, 0x101, 0x0, 0x0, {}, [@nested={0x4, 0x36}]}, 0x18}}, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000240)=""/72, 0x48) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'L+', 0x7fffffff}, 0x16, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0/file0\x00', 0x10000000000, 0x0, 0x0, 0xc0000, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000000c0)=""/149, 0x95) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000440)=ANY=[@ANYBLOB="001800001cf4d4447646b37bb9ab2b3b8d7d4ebbce54cdb6a46100008bfca0642cf5dc46f7ffffff55d874c740080d8836cc2100ada6b9397961091969756aef14a8673fa1ff20091748b7a93ee050ba01fce417472c6e66abb26a8cf4a3d10c128e096410313c9d9adcdce087d7a4bac9d20f094728a0e7e3421d17d84cadda33dcd71483e2f4a2ecd2b9070a70221820a47488219ba25005cde7e5e06d00"/182, @ANYRESOCT, @ANYRESHEX]) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1000ffff, 0x0, "0489fdc1843fc745ea52a5fff7962e807836db"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0xff) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x2, r2, 0x5, 0x80000}) open(&(0x7f0000000080)='./file0/file0\x00', 0x50000, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000200)=0x2, 0x100000001) unshare(0x48020200) 16:32:36 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x5, 0x0, 0x0) 16:32:36 executing program 1: unlinkat(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000080)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x8001) fsmount(r1, 0x0, 0xe0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_matches\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1a, 0x69844ea0a6ddcd11, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x1c}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 16:32:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x48, 0x0, 0x0, 0x401}, {0x6}]}, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x0, 0x4, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 16:32:36 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000240)) unshare(0x48020200) 16:32:36 executing program 1: r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x2000800) r1 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r1, &(0x7f0000000040)=""/55, 0x37, 0x0) [ 602.675554] kauditd_printk_skb: 168 callbacks suppressed [ 602.675567] audit: type=1400 audit(1714840356.445:889): avc: denied { watch_reads } for pid=113280 comm="syz-executor.1" path="/syzkaller-testdir462211986/syzkaller.NWS5QK/883/file0" dev="sda" ino=16154 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 16:32:36 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x18, 0x12, 0x101, 0x0, 0x0, {}, [@nested={0x4, 0x36}]}, 0x18}}, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000240)=""/72, 0x48) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'L+', 0x7fffffff}, 0x16, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0/file0\x00', 0x10000000000, 0x0, 0x0, 0xc0000, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000000c0)=""/149, 0x95) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000440)=ANY=[@ANYBLOB="001800001cf4d4447646b37bb9ab2b3b8d7d4ebbce54cdb6a46100008bfca0642cf5dc46f7ffffff55d874c740080d8836cc2100ada6b9397961091969756aef14a8673fa1ff20091748b7a93ee050ba01fce417472c6e66abb26a8cf4a3d10c128e096410313c9d9adcdce087d7a4bac9d20f094728a0e7e3421d17d84cadda33dcd71483e2f4a2ecd2b9070a70221820a47488219ba25005cde7e5e06d00"/182, @ANYRESOCT, @ANYRESHEX]) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1000ffff, 0x0, "0489fdc1843fc745ea52a5fff7962e807836db"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0xff) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x2, r2, 0x5, 0x80000}) open(&(0x7f0000000080)='./file0/file0\x00', 0x50000, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000200)=0x2, 0x100000001) unshare(0x48020200) 16:32:36 executing program 3: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x8c800, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqn(r0, 0x0, 0xc8, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x8001) 16:32:36 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x28, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x14, 0x11, 0x0, 0x1, [@generic="809801a7b0c7dba09475f251c743092f"]}]}, 0x28}}, 0x0) 16:32:36 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x2, &(0x7f00000000c0)=[{0x34, 0x0, 0x0, 0xffffffff}, {0x6, 0x0, 0x0, 0x7fffffff}]}) socket$inet_udplite(0x2, 0x2, 0x88) 16:32:36 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x810) 16:32:36 executing program 1: r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x2000800) r1 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r1, &(0x7f0000000040)=""/55, 0x37, 0x0) 16:32:36 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{0x6, 0x0, 0x12e6}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 16:32:36 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)={0x0, 0x2, '\x00', [@calipso={0x7, 0x8, {0x3}}, @enc_lim, @pad1]}, 0x18) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) 16:32:36 executing program 1: r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x2000800) r1 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r1, &(0x7f0000000040)=""/55, 0x37, 0x0) 16:32:36 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x2, &(0x7f00000000c0)=[{0x34, 0x0, 0x0, 0xffffffff}, {0x6, 0x0, 0x0, 0x7fffffff}]}) socket$inet_udplite(0x2, 0x2, 0x88) 16:32:36 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x2, &(0x7f00000000c0)=[{0x34, 0x0, 0x0, 0xffffffff}, {0x6, 0x0, 0x0, 0x7fffffff}]}) socket$inet_udplite(0x2, 0x2, 0x88) 16:32:36 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) 16:32:36 executing program 4: dup(0xffffffffffffffff) io_submit(0x0, 0x2, &(0x7f0000001680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x4, 0x0}) syz_open_dev$vcsu(&(0x7f00000001c0), 0x0, 0xb16e997e276653f2) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x5c, 0x0, 0x9, 0x0, 0x0, 0x42, 0x7, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x100000000, 0x6}, 0x0, 0x0, 0x2, 0x7, 0x3800000, 0x100, 0x7e6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x12) openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0xd4a40, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 16:32:36 executing program 1: r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x2000800) r1 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r1, &(0x7f0000000040)=""/55, 0x37, 0x0) 16:32:36 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x2, &(0x7f00000000c0)=[{0x34, 0x0, 0x0, 0xffffffff}, {0x6, 0x0, 0x0, 0x7fffffff}]}) socket$inet_udplite(0x2, 0x2, 0x88) 16:32:36 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{0x6, 0x0, 0x6000}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 603.214687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:37 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x2, &(0x7f00000000c0)=[{0x34, 0x0, 0x0, 0xffffffff}, {0x6, 0x0, 0x0, 0x7fffffff}]}) socket$inet_udplite(0x2, 0x2, 0x88) 16:32:37 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c2", 0x61, 0x400}, {&(0x7f0000000080)="00000000000000000000000016d7fb4ca540446e9e3afc5ae13256", 0x1b, 0x4e4}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000040)) 16:32:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xd, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "d1e3092eb94018fff573e4cfd2821799ea8563bd475102d18fe15fe2967de4e944721a6b45d580e0fcbc9405653f2d27857f300011e33cd1799fbb2952bb6f8fdd3d3fb79348bd9e7f136d4c15eea87a"}, 0xd8) [ 603.394653] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 603.395357] CPU: 1 PID: 114325 Comm: syz-executor.5 Not tainted 5.10.216 #1 [ 603.395924] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 603.396591] Call Trace: [ 603.396812] dump_stack+0x107/0x167 16:32:37 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x28, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x14, 0x11, 0x0, 0x1, [@generic="809801a7b0c7dba09475f251c743092f"]}]}, 0x28}}, 0x0) 16:32:37 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{0x6, 0x0, 0xe612}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 16:32:37 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x18, 0x12, 0x101, 0x0, 0x0, {}, [@nested={0x4, 0x36}]}, 0x18}}, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000240)=""/72, 0x48) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'L+', 0x7fffffff}, 0x16, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0/file0\x00', 0x10000000000, 0x0, 0x0, 0xc0000, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000000c0)=""/149, 0x95) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000440)=ANY=[@ANYBLOB="001800001cf4d4447646b37bb9ab2b3b8d7d4ebbce54cdb6a46100008bfca0642cf5dc46f7ffffff55d874c740080d8836cc2100ada6b9397961091969756aef14a8673fa1ff20091748b7a93ee050ba01fce417472c6e66abb26a8cf4a3d10c128e096410313c9d9adcdce087d7a4bac9d20f094728a0e7e3421d17d84cadda33dcd71483e2f4a2ecd2b9070a70221820a47488219ba25005cde7e5e06d00"/182, @ANYRESOCT, @ANYRESHEX]) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1000ffff, 0x0, "0489fdc1843fc745ea52a5fff7962e807836db"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0xff) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x2, r2, 0x5, 0x80000}) open(&(0x7f0000000080)='./file0/file0\x00', 0x50000, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000200)=0x2, 0x100000001) unshare(0x48020200) 16:32:37 executing program 4: dup(0xffffffffffffffff) io_submit(0x0, 0x2, &(0x7f0000001680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x4, 0x0}) syz_open_dev$vcsu(&(0x7f00000001c0), 0x0, 0xb16e997e276653f2) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x5c, 0x0, 0x9, 0x0, 0x0, 0x42, 0x7, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x100000000, 0x6}, 0x0, 0x0, 0x2, 0x7, 0x3800000, 0x100, 0x7e6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x12) openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0xd4a40, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 16:32:37 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x2, &(0x7f00000000c0)=[{0x34, 0x0, 0x0, 0xffffffff}, {0x6, 0x0, 0x0, 0x7fffffff}]}) socket$inet_udplite(0x2, 0x2, 0x88) [ 603.397159] sysfs_warn_dup.cold+0x1c/0x29 [ 603.397655] sysfs_do_create_link_sd+0x122/0x140 [ 603.398075] sysfs_create_link+0x5f/0xc0 [ 603.398416] device_add+0x703/0x1c50 [ 603.398726] ? devlink_add_symlinks+0x970/0x970 [ 603.399111] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 603.399543] wiphy_register+0x1da6/0x2850 [ 603.399895] ? wiphy_unregister+0xb90/0xb90 [ 603.400255] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 603.400693] ieee80211_register_hw+0x23c5/0x38b0 [ 603.401095] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 603.401488] ? net_generic+0xdb/0x2b0 [ 603.401812] ? lockdep_init_map_type+0x2c7/0x780 [ 603.402207] ? memset+0x20/0x50 [ 603.402483] ? __hrtimer_init+0x12c/0x270 [ 603.402830] mac80211_hwsim_new_radio+0x1ce0/0x4250 [ 603.403252] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 603.403635] ? hwsim_new_radio_nl+0x967/0x1080 [ 603.404012] ? memcpy+0x39/0x60 [ 603.404289] hwsim_new_radio_nl+0x991/0x1080 [ 603.404652] ? mac80211_hwsim_new_radio+0x4250/0x4250 [ 603.405087] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 603.405623] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 603.406155] genl_family_rcv_msg_doit+0x22d/0x330 [ 603.406553] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 603.407089] ? cap_capable+0x1cd/0x230 [ 603.407435] ? ns_capable+0xe2/0x110 [ 603.407744] genl_rcv_msg+0x33c/0x5a0 [ 603.408063] ? genl_get_cmd+0x480/0x480 [ 603.408389] ? mac80211_hwsim_new_radio+0x4250/0x4250 [ 603.408814] ? lock_release+0x680/0x680 [ 603.409141] ? __lockdep_reset_lock+0x180/0x180 [ 603.409527] netlink_rcv_skb+0x14b/0x430 [ 603.409865] ? genl_get_cmd+0x480/0x480 [ 603.410191] ? netlink_ack+0xab0/0xab0 [ 603.410517] ? netlink_deliver_tap+0x1c4/0xcc0 [ 603.410889] ? is_vmalloc_addr+0x7b/0xb0 [ 603.411228] genl_rcv+0x24/0x40 [ 603.411498] netlink_unicast+0x549/0x7f0 [ 603.411840] ? netlink_attachskb+0x870/0x870 [ 603.412210] netlink_sendmsg+0x90f/0xdf0 [ 603.412548] ? netlink_unicast+0x7f0/0x7f0 [ 603.412904] ? netlink_unicast+0x7f0/0x7f0 [ 603.413250] __sock_sendmsg+0x154/0x190 [ 603.413581] ____sys_sendmsg+0x70d/0x870 [ 603.413915] ? sock_write_iter+0x3d0/0x3d0 [ 603.414264] ? do_recvmmsg+0x6d0/0x6d0 [ 603.414585] ? perf_trace_lock+0xac/0x490 [ 603.414928] ? __lockdep_reset_lock+0x180/0x180 [ 603.415318] ? __lock_acquire+0xbb1/0x5b00 [ 603.415665] ___sys_sendmsg+0xf3/0x170 [ 603.415986] ? sendmsg_copy_msghdr+0x160/0x160 [ 603.416371] ? lock_downgrade+0x6d0/0x6d0 [ 603.416716] ? __lockdep_reset_lock+0x180/0x180 [ 603.417092] ? futex_exit_release+0x220/0x220 [ 603.417461] ? __fget_files+0x296/0x4c0 [ 603.417795] ? __fget_light+0xea/0x290 [ 603.418121] __sys_sendmsg+0xe5/0x1b0 [ 603.418433] ? __sys_sendmsg_sock+0x40/0x40 [ 603.418789] ? __do_sys_futex+0x2bb/0x480 [ 603.419138] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 603.419573] ? syscall_enter_from_user_mode+0x1d/0x50 [ 603.419995] ? trace_hardirqs_on+0x5b/0x180 [ 603.420352] do_syscall_64+0x33/0x40 [ 603.420657] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 603.421077] RIP: 0033:0x7f7392e54b19 [ 603.421386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 603.422867] RSP: 002b:00007f73903ca188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 603.423496] RAX: ffffffffffffffda RBX: 00007f7392f67f60 RCX: 00007f7392e54b19 [ 603.424071] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 603.424655] RBP: 00007f7392eaef6d R08: 0000000000000000 R09: 0000000000000000 [ 603.425238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 603.425823] R13: 00007ffd2e7a815f R14: 00007f73903ca300 R15: 0000000000022000 16:32:37 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0xfdef) fallocate(r0, 0x3, 0x0, 0x8000) 16:32:37 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x2, &(0x7f00000000c0)=[{0x34, 0x0, 0x0, 0xffffffff}, {0x6, 0x0, 0x0, 0x7fffffff}]}) socket$inet_udplite(0x2, 0x2, 0x88) 16:32:37 executing program 2: bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) 16:32:37 executing program 7: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000b5a4514b4ac7a413760025000004285d75"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x110, 0xffffffffffffffff, 0x818d6000) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) 16:32:37 executing program 4: dup(0xffffffffffffffff) io_submit(0x0, 0x2, &(0x7f0000001680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x4, 0x0}) syz_open_dev$vcsu(&(0x7f00000001c0), 0x0, 0xb16e997e276653f2) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x5c, 0x0, 0x9, 0x0, 0x0, 0x42, 0x7, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x100000000, 0x6}, 0x0, 0x0, 0x2, 0x7, 0x3800000, 0x100, 0x7e6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x12) openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0xd4a40, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 16:32:37 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x18, 0x12, 0x101, 0x0, 0x0, {}, [@nested={0x4, 0x36}]}, 0x18}}, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000240)=""/72, 0x48) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'L+', 0x7fffffff}, 0x16, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0/file0\x00', 0x10000000000, 0x0, 0x0, 0xc0000, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000000c0)=""/149, 0x95) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000440)=ANY=[@ANYBLOB="001800001cf4d4447646b37bb9ab2b3b8d7d4ebbce54cdb6a46100008bfca0642cf5dc46f7ffffff55d874c740080d8836cc2100ada6b9397961091969756aef14a8673fa1ff20091748b7a93ee050ba01fce417472c6e66abb26a8cf4a3d10c128e096410313c9d9adcdce087d7a4bac9d20f094728a0e7e3421d17d84cadda33dcd71483e2f4a2ecd2b9070a70221820a47488219ba25005cde7e5e06d00"/182, @ANYRESOCT, @ANYRESHEX]) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1000ffff, 0x0, "0489fdc1843fc745ea52a5fff7962e807836db"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0xff) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x2, r2, 0x5, 0x80000}) open(&(0x7f0000000080)='./file0/file0\x00', 0x50000, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000200)=0x2, 0x100000001) unshare(0x48020200) 16:32:37 executing program 1: semctl$GETZCNT(0x0, 0x0, 0xf, 0x0) 16:32:37 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x400009, 0x0, 0x8000}) 16:32:37 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{0x6, 0x0, 0xf000}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 16:32:37 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x28, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x14, 0x11, 0x0, 0x1, [@generic="809801a7b0c7dba09475f251c743092f"]}]}, 0x28}}, 0x0) 16:32:37 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_mmap}, {@cache_loose}], [{@fsname={'fsname', 0x3d, 'cache=mmap'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@obj_role={'obj_role', 0x3d, '!'}}, {@obj_type={'obj_type', 0x3d, 'cache=loose'}}]}}) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000200)={0x2, 0x2, 0x10}) 16:32:37 executing program 7: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000b5a4514b4ac7a413760025000004285d75"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x110, 0xffffffffffffffff, 0x818d6000) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) 16:32:37 executing program 4: dup(0xffffffffffffffff) io_submit(0x0, 0x2, &(0x7f0000001680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x4, 0x0}) syz_open_dev$vcsu(&(0x7f00000001c0), 0x0, 0xb16e997e276653f2) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x5c, 0x0, 0x9, 0x0, 0x0, 0x42, 0x7, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x100000000, 0x6}, 0x0, 0x0, 0x2, 0x7, 0x3800000, 0x100, 0x7e6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x12) openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0xd4a40, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 16:32:37 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0xffffffffffffffff) creat(&(0x7f00000000c0)='./file1\x00', 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x0) 16:32:37 executing program 3: r0 = syz_io_uring_setup(0x4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r3, 0x0, {}, 0x0, 0x19}, 0x0) io_uring_enter(r0, 0x58ae, 0x0, 0x0, 0x0, 0x0) [ 603.933992] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 603.934973] CPU: 0 PID: 114853 Comm: syz-executor.5 Not tainted 5.10.216 #1 [ 603.935756] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 603.936655] Call Trace: [ 603.936963] dump_stack+0x107/0x167 [ 603.937390] sysfs_warn_dup.cold+0x1c/0x29 [ 603.937870] sysfs_do_create_link_sd+0x122/0x140 [ 603.938407] sysfs_create_link+0x5f/0xc0 [ 603.938867] device_add+0x703/0x1c50 [ 603.939304] ? devlink_add_symlinks+0x970/0x970 [ 603.939840] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 603.940449] wiphy_register+0x1da6/0x2850 [ 603.940945] ? wiphy_unregister+0xb90/0xb90 [ 603.941455] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 603.941813] 9pnet: Insufficient options for proto=fd [ 603.942060] ieee80211_register_hw+0x23c5/0x38b0 [ 603.943038] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 603.943543] ? net_generic+0xdb/0x2b0 [ 603.943980] ? lockdep_init_map_type+0x2c7/0x780 [ 603.944511] ? memset+0x20/0x50 [ 603.944879] ? __hrtimer_init+0x12c/0x270 [ 603.945351] mac80211_hwsim_new_radio+0x1ce0/0x4250 [ 603.945928] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 603.946433] ? hwsim_new_radio_nl+0x967/0x1080 [ 603.946934] ? memcpy+0x39/0x60 [ 603.947317] hwsim_new_radio_nl+0x991/0x1080 [ 603.947805] ? mac80211_hwsim_new_radio+0x4250/0x4250 [ 603.948394] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 603.949122] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 603.949839] genl_family_rcv_msg_doit+0x22d/0x330 [ 603.950375] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 603.951089] ? cap_capable+0x1cd/0x230 [ 603.951554] ? ns_capable+0xe2/0x110 [ 603.951974] genl_rcv_msg+0x33c/0x5a0 [ 603.952407] ? genl_get_cmd+0x480/0x480 [ 603.952846] ? mac80211_hwsim_new_radio+0x4250/0x4250 [ 603.953425] ? lock_release+0x680/0x680 [ 603.953863] ? __lockdep_reset_lock+0x180/0x180 [ 603.954394] netlink_rcv_skb+0x14b/0x430 [ 603.954844] ? genl_get_cmd+0x480/0x480 [ 603.955295] ? netlink_ack+0xab0/0xab0 [ 603.955742] ? netlink_deliver_tap+0x1c4/0xcc0 [ 603.956244] ? is_vmalloc_addr+0x7b/0xb0 [ 603.956701] genl_rcv+0x24/0x40 [ 603.957065] netlink_unicast+0x549/0x7f0 [ 603.957521] ? netlink_attachskb+0x870/0x870 [ 603.958021] netlink_sendmsg+0x90f/0xdf0 [ 603.958478] ? netlink_unicast+0x7f0/0x7f0 [ 603.958964] ? netlink_unicast+0x7f0/0x7f0 [ 603.959440] __sock_sendmsg+0x154/0x190 [ 603.959875] ____sys_sendmsg+0x70d/0x870 [ 603.960324] ? sock_write_iter+0x3d0/0x3d0 [ 603.960780] ? do_recvmmsg+0x6d0/0x6d0 [ 603.961203] ? perf_trace_lock+0x2bd/0x490 [ 603.961681] ? __lockdep_reset_lock+0x180/0x180 [ 603.962184] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 603.962737] ___sys_sendmsg+0xf3/0x170 [ 603.963174] ? sendmsg_copy_msghdr+0x160/0x160 [ 603.963687] ? lock_downgrade+0x6d0/0x6d0 [ 603.964150] ? __lockdep_reset_lock+0x180/0x180 [ 603.964656] ? futex_exit_release+0x220/0x220 [ 603.965153] ? __fget_files+0x296/0x4c0 [ 603.965605] ? __fget_light+0xea/0x290 [ 603.966046] __sys_sendmsg+0xe5/0x1b0 [ 603.966462] ? __sys_sendmsg_sock+0x40/0x40 [ 603.966929] ? __do_sys_futex+0x2bb/0x480 [ 603.967421] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 603.967991] ? syscall_enter_from_user_mode+0x1d/0x50 [ 603.968556] ? trace_hardirqs_on+0x5b/0x180 [ 603.969031] do_syscall_64+0x33/0x40 [ 603.969436] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 603.969992] RIP: 0033:0x7f7392e54b19 [ 603.970399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 603.972342] RSP: 002b:00007f73903ca188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 603.973153] RAX: ffffffffffffffda RBX: 00007f7392f67f60 RCX: 00007f7392e54b19 [ 603.973907] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 603.974669] RBP: 00007f7392eaef6d R08: 0000000000000000 R09: 0000000000000000 [ 603.975431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 603.976188] R13: 00007ffd2e7a815f R14: 00007f73903ca300 R15: 0000000000022000 16:32:37 executing program 2: syz_mount_image$iso9660(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, &(0x7f0000000b00), 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB='map=acorn']) 16:32:37 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000740)={0x38, 0x2, 0x1, 0x301, 0x0, 0x0, {}, [@CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private1}]}, @CTA_LABELS={0x4}, @CTA_ZONE={0x6}]}, 0x38}}, 0x0) 16:32:37 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4006, 0x5, 0x0, 0x0, 0x0, 0xfffffffd, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x5, 0x6, 0x5, 0x0, 0x800, 0x208, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x7, 0x9d}, 0x4ac05, 0x2e73, 0x8000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x9}, 0x0, 0x7, 0xffffffffffffffff, 0xa) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') read(r0, 0x0, 0x25) rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r2, 0x0) pread64(r1, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$hwrng(0xffffffffffffff9c, 0x0, 0x474400, 0x0) syz_io_uring_complete(0x0) 16:32:37 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x3b, 0x0, 0xe090, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000001500), 0x4) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) fsync(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_mmap}, {@version_L}]}}) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, r1) [ 604.096344] 9pnet: Insufficient options for proto=fd 16:32:37 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x8917, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891c, &(0x7f00000001c0)={'syz_tun\x00', {0x2, 0x0, @empty}}) 16:32:37 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000480)={0x0, 0x0, {0x2}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 16:32:37 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4006, 0x5, 0x0, 0x0, 0x0, 0xfffffffd, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x5, 0x6, 0x5, 0x0, 0x800, 0x208, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x7, 0x9d}, 0x4ac05, 0x2e73, 0x8000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x9}, 0x0, 0x7, 0xffffffffffffffff, 0xa) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') read(r0, 0x0, 0x25) rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r2, 0x0) pread64(r1, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$hwrng(0xffffffffffffff9c, 0x0, 0x474400, 0x0) syz_io_uring_complete(0x0) 16:32:37 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{0x6, 0x0, 0xffff}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 16:32:37 executing program 7: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000b5a4514b4ac7a413760025000004285d75"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x110, 0xffffffffffffffff, 0x818d6000) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) [ 604.202867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 604.260378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 604.312385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:38 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x3, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 16:32:38 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmmsg$sock(r0, &(0x7f0000008280)=[{{&(0x7f0000000000)=@can={0x1d, r2}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)="afcf2d9b98197e6fca0bae4648cb", 0xe}], 0x1, &(0x7f0000000180)=[@mark={{0x14}}], 0x18}}], 0x1, 0x0) 16:32:38 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000480)={0x0, 0x0, {0x2}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 16:32:38 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0xffffffffffffffff) creat(&(0x7f00000000c0)='./file1\x00', 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x0) 16:32:38 executing program 7: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000b5a4514b4ac7a413760025000004285d75"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x110, 0xffffffffffffffff, 0x818d6000) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) 16:32:38 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4006, 0x5, 0x0, 0x0, 0x0, 0xfffffffd, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x5, 0x6, 0x5, 0x0, 0x800, 0x208, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x7, 0x9d}, 0x4ac05, 0x2e73, 0x8000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x9}, 0x0, 0x7, 0xffffffffffffffff, 0xa) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') read(r0, 0x0, 0x25) rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r2, 0x0) pread64(r1, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$hwrng(0xffffffffffffff9c, 0x0, 0x474400, 0x0) syz_io_uring_complete(0x0) 16:32:38 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x28, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x14, 0x11, 0x0, 0x1, [@generic="809801a7b0c7dba09475f251c743092f"]}]}, 0x28}}, 0x0) 16:32:38 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x3b, 0x0, 0xe090, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000001500), 0x4) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) fsync(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_mmap}, {@version_L}]}}) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, r1) [ 604.847820] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.6'. [ 604.864476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 604.872721] 9pnet: Insufficient options for proto=fd [ 604.881750] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 604.882712] CPU: 1 PID: 115703 Comm: syz-executor.5 Not tainted 5.10.216 #1 [ 604.883482] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 604.884320] Call Trace: [ 604.884614] dump_stack+0x107/0x167 [ 604.885014] sysfs_warn_dup.cold+0x1c/0x29 [ 604.885471] sysfs_do_create_link_sd+0x122/0x140 [ 604.885984] sysfs_create_link+0x5f/0xc0 [ 604.886430] device_add+0x703/0x1c50 [ 604.886843] ? devlink_add_symlinks+0x970/0x970 [ 604.887356] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 604.887924] wiphy_register+0x1da6/0x2850 [ 604.888384] ? wiphy_unregister+0xb90/0xb90 [ 604.888864] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 604.889405] ieee80211_register_hw+0x23c5/0x38b0 [ 604.889931] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 604.890453] ? net_generic+0xdb/0x2b0 [ 604.890881] ? lockdep_init_map_type+0x2c7/0x780 [ 604.891408] ? memset+0x20/0x50 [ 604.891770] ? __hrtimer_init+0x12c/0x270 [ 604.892232] mac80211_hwsim_new_radio+0x1ce0/0x4250 [ 604.892777] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 604.893280] ? hwsim_new_radio_nl+0x967/0x1080 [ 604.893790] ? memcpy+0x39/0x60 [ 604.894158] hwsim_new_radio_nl+0x991/0x1080 [ 604.894642] ? mac80211_hwsim_new_radio+0x4250/0x4250 [ 604.895229] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 604.895944] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 604.896647] genl_family_rcv_msg_doit+0x22d/0x330 [ 604.897172] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 604.897877] ? cap_capable+0x1cd/0x230 [ 604.898312] ? ns_capable+0xe2/0x110 [ 604.898731] genl_rcv_msg+0x33c/0x5a0 [ 604.899149] ? genl_get_cmd+0x480/0x480 [ 604.899586] ? mac80211_hwsim_new_radio+0x4250/0x4250 [ 604.900148] ? lock_release+0x680/0x680 [ 604.900575] ? __lockdep_reset_lock+0x180/0x180 [ 604.901080] netlink_rcv_skb+0x14b/0x430 [ 604.901520] ? genl_get_cmd+0x480/0x480 [ 604.901946] ? netlink_ack+0xab0/0xab0 [ 604.902374] ? netlink_deliver_tap+0x1c4/0xcc0 [ 604.902866] ? is_vmalloc_addr+0x7b/0xb0 [ 604.903326] genl_rcv+0x24/0x40 [ 604.903695] netlink_unicast+0x549/0x7f0 [ 604.904140] ? netlink_attachskb+0x870/0x870 [ 604.904632] netlink_sendmsg+0x90f/0xdf0 [ 604.905078] ? netlink_unicast+0x7f0/0x7f0 [ 604.905551] ? netlink_unicast+0x7f0/0x7f0 [ 604.906009] __sock_sendmsg+0x154/0x190 [ 604.906443] ____sys_sendmsg+0x70d/0x870 [ 604.906881] ? sock_write_iter+0x3d0/0x3d0 [ 604.907349] ? do_recvmmsg+0x6d0/0x6d0 [ 604.907772] ? perf_trace_lock+0xac/0x490 [ 604.908227] ? __lockdep_reset_lock+0x180/0x180 [ 604.908734] ? __lock_acquire+0xbb1/0x5b00 [ 604.909198] ___sys_sendmsg+0xf3/0x170 [ 604.909622] ? sendmsg_copy_msghdr+0x160/0x160 [ 604.910119] ? lock_downgrade+0x6d0/0x6d0 [ 604.910572] ? __lockdep_reset_lock+0x180/0x180 [ 604.911080] ? futex_exit_release+0x220/0x220 [ 604.911579] ? __fget_files+0x296/0x4c0 [ 604.912021] ? __fget_light+0xea/0x290 [ 604.912451] __sys_sendmsg+0xe5/0x1b0 [ 604.912865] ? __sys_sendmsg_sock+0x40/0x40 [ 604.913330] ? __do_sys_futex+0x2bb/0x480 [ 604.913771] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 604.914341] ? syscall_enter_from_user_mode+0x1d/0x50 [ 604.914891] ? trace_hardirqs_on+0x5b/0x180 [ 604.915368] do_syscall_64+0x33/0x40 [ 604.915770] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 604.916323] RIP: 0033:0x7f7392e54b19 [ 604.916722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 604.918679] RSP: 002b:00007f73903ca188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 604.919501] RAX: ffffffffffffffda RBX: 00007f7392f67f60 RCX: 00007f7392e54b19 [ 604.920258] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 604.920974] RBP: 00007f7392eaef6d R08: 0000000000000000 R09: 0000000000000000 [ 604.921680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 604.922385] R13: 00007ffd2e7a815f R14: 00007f73903ca300 R15: 0000000000022000 16:32:38 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x3b, 0x0, 0xe090, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000001500), 0x4) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) fsync(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_mmap}, {@version_L}]}}) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, r1) [ 605.032218] 9pnet: Insufficient options for proto=fd 16:32:38 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/schedstat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x9e'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 16:32:38 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4006, 0x5, 0x0, 0x0, 0x0, 0xfffffffd, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x5, 0x6, 0x5, 0x0, 0x800, 0x208, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x7, 0x9d}, 0x4ac05, 0x2e73, 0x8000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x9}, 0x0, 0x7, 0xffffffffffffffff, 0xa) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') read(r0, 0x0, 0x25) rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r2, 0x0) pread64(r1, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$hwrng(0xffffffffffffff9c, 0x0, 0x474400, 0x0) syz_io_uring_complete(0x0) 16:32:38 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x3b, 0x0, 0xe090, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000001500), 0x4) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) fsync(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_mmap}, {@version_L}]}}) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, r1) 16:32:38 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000480)={0x0, 0x0, {0x2}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 16:32:38 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x10, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 605.186120] 9pnet: Insufficient options for proto=fd [ 605.219761] netlink: 'syz-executor.6': attribute type 3 has an invalid length. [ 605.238813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:39 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/schedstat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x9e'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 16:32:39 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0xe60, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 16:32:39 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000480)={0x0, 0x0, {0x2}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 16:32:39 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/schedstat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x9e'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 16:32:39 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) lseek(r0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:32:39 executing program 5: perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffff80, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:32:39 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0xffffffffffffffff) creat(&(0x7f00000000c0)='./file1\x00', 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x0) 16:32:39 executing program 7: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000100)={0x24, @short}, 0x14) [ 605.755597] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.6'. [ 605.777871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:39 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/schedstat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x9e'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 16:32:39 executing program 7: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000100)={0x24, @short}, 0x14) 16:32:39 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={[], [{@context={'context', 0x3d, 'root'}}]}) 16:32:39 executing program 5: perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffff80, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 605.868660] SELinux: security_context_str_to_sid(root) failed for (dev tmpfs, type tmpfs) errno=-22 [ 605.918055] SELinux: security_context_str_to_sid(root) failed for (dev tmpfs, type tmpfs) errno=-22 16:32:39 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x541b) 16:32:39 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0xe68, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 16:32:39 executing program 5: perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffff80, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:32:39 executing program 7: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000100)={0x24, @short}, 0x14) [ 606.003794] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.6'. 16:32:39 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) [ 606.016628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:39 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) syz_open_procfs(0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffff8) r0 = syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000240)='./mnt\x00', 0x0, 0x1) stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) listen(0xffffffffffffffff, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/fib_trie\x00') preadv(r1, &(0x7f0000000580)=[{&(0x7f0000001380)=""/213, 0xd5}, {0x0}], 0x2, 0x5545, 0x0) 16:32:39 executing program 7: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000100)={0x24, @short}, 0x14) [ 606.076792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:39 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) 16:32:39 executing program 5: perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffff80, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 606.129010] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:39 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffffa}]}) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000900)='./file1\x00') 16:32:40 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0xffffffffffffffff) creat(&(0x7f00000000c0)='./file1\x00', 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x0) 16:32:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002780)={0x18, 0x6a, 0xc21, 0x0, 0x0, {}, [@typed={0x4}]}, 0x18}}, 0x0) 16:32:40 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000004ec0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, 0xc) 16:32:40 executing program 7: io_setup(0x5, &(0x7f0000000000)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8004}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) io_submit(r0, 0x1, &(0x7f0000000800)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000340)="d0", 0x1, 0x8000}]) 16:32:40 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x5) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000007780)={0x0, 0x0, 0x0}, 0x0) 16:32:40 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd, 0x4d, 0x2, 0x23a, 0x4, 0x0, {0x3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x4, 0x8010, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) 16:32:40 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c801}, 0x4004) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x24, 0x2a, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@typed={0x4}, @nested={0x9, 0x0, 0x0, 0x1, [@generic="999e00009c"]}]}, 0x24}}, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/29, 0x1d}], 0x1) syz_io_uring_setup(0x203, &(0x7f0000000080)={0x0, 0x400, 0x2, 0x200000, 0x6}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) socketpair$unix(0x1, 0x2, 0x0, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x810, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x87) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in6, @in=@private}}, {{@in=@multicast1}, 0x0, @in6=@initdev}}, &(0x7f0000000040)=0xe8) socket$packet(0x11, 0x2, 0x300) 16:32:40 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0xe70, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 606.692141] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.6'. [ 606.700854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:40 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_complete(0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x160, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x17, 0x0, &(0x7f0000000280)) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd, 0xffffffffffff56c0, 0x0, 0x1f}, 0x0) creat(0x0, 0x32) stat(0x0, 0x0) [ 606.756207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:40 executing program 5: fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000001c0)={'syz_tun\x00', &(0x7f0000000200)=@ethtool_sfeatures}) dup3(r2, r0, 0x0) r3 = dup(r1) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) sendto$unix(0xffffffffffffffff, &(0x7f00000002c0)="d1594de4bc5d9adff4018397e2838a5beb8a9007f81dc6a9ca7807b5d5db2fa4722c542b0f731164f563876f4bc09d61989c30971fe3ac1cee855f1e03d11c47883c546296c48d0296eb24658d3c4de9d15aaefea0a382a843bbd59cc1b54b8b488b20e3c3e4103c85d8545053cc6067903672a1327226a62e3cd5e6d733e6d525964d80f5f1bb5ac42a7575abe9b3158826498fef3ea3687c917f122213d8be72ef3577cf04c5ecba8d5700ba7d35627889242771ede05e91f9e5f87ea0e8c39fd25d4cd7a81bf6808ad5eb39b3dd4da7091966919da2d88637", 0xda, 0x2404c040, &(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) openat$snapshot(0xffffffffffffff9c, 0x0, 0x274b01, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001340), 0xc, &(0x7f00000013c0)={&(0x7f0000000240)=ANY=[@ANYRES16, @ANYBLOB="010025bd7000fddbdf2508000000050038000100000008000b00030000000500290001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4051}, 0x4824) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000000000}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r3, &(0x7f0000007940)=[{{0x0, 0x200000, 0x0}}], 0x500, 0x20000022, 0x0) [ 606.809693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:40 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000700)={'ip6tnl0\x00', 0x0}) 16:32:40 executing program 3: r0 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x2, 0x0) 16:32:40 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x5) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000007780)={0x0, 0x0, 0x0}, 0x0) 16:32:40 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c801}, 0x4004) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x24, 0x2a, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@typed={0x4}, @nested={0x9, 0x0, 0x0, 0x1, [@generic="999e00009c"]}]}, 0x24}}, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/29, 0x1d}], 0x1) syz_io_uring_setup(0x203, &(0x7f0000000080)={0x0, 0x400, 0x2, 0x200000, 0x6}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) socketpair$unix(0x1, 0x2, 0x0, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x810, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x87) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in6, @in=@private}}, {{@in=@multicast1}, 0x0, @in6=@initdev}}, &(0x7f0000000040)=0xe8) socket$packet(0x11, 0x2, 0x300) 16:32:40 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRESHEX]) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000080)='trans=fd,', &(0x7f00000000c0)='cache=loose', 0x0], &(0x7f00000003c0)=[&(0x7f0000000380)='h\x00'], 0x400) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') 16:32:40 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) prlimit64(0x0, 0x0, 0x0, 0x0) [ 607.113603] audit: type=1326 audit(1714840360.883:890): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=117702 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7392e54b19 code=0x7ffc0000 [ 607.118263] audit: type=1326 audit(1714840360.888:891): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=117702 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7392e54b19 code=0x7ffc0000 [ 607.121925] audit: type=1326 audit(1714840360.889:892): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=117702 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f7392e54b19 code=0x7ffc0000 [ 607.140164] audit: type=1326 audit(1714840360.889:893): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=117702 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7392e54b19 code=0x7ffc0000 [ 607.178050] audit: type=1326 audit(1714840360.889:894): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=117702 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7392e54b19 code=0x7ffc0000 [ 607.187088] audit: type=1326 audit(1714840360.892:895): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=117702 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f7392e54b19 code=0x7ffc0000 [ 607.195470] audit: type=1326 audit(1714840360.899:896): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=117702 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7392e54b19 code=0x7ffc0000 [ 607.205057] audit: type=1326 audit(1714840360.899:897): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=117702 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7392e54b19 code=0x7ffc0000 16:32:41 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0xe90, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 16:32:41 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd, 0x4d, 0x2, 0x23a, 0x4, 0x0, {0x3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x4, 0x8010, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) 16:32:41 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd, 0x4d, 0x2, 0x23a, 0x4, 0x0, {0x3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x4, 0x8010, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) 16:32:41 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c801}, 0x4004) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x24, 0x2a, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@typed={0x4}, @nested={0x9, 0x0, 0x0, 0x1, [@generic="999e00009c"]}]}, 0x24}}, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/29, 0x1d}], 0x1) syz_io_uring_setup(0x203, &(0x7f0000000080)={0x0, 0x400, 0x2, 0x200000, 0x6}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) socketpair$unix(0x1, 0x2, 0x0, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x810, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x87) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in6, @in=@private}}, {{@in=@multicast1}, 0x0, @in6=@initdev}}, &(0x7f0000000040)=0xe8) socket$packet(0x11, 0x2, 0x300) 16:32:41 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x5) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000007780)={0x0, 0x0, 0x0}, 0x0) 16:32:41 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRESHEX]) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000080)='trans=fd,', &(0x7f00000000c0)='cache=loose', 0x0], &(0x7f00000003c0)=[&(0x7f0000000380)='h\x00'], 0x400) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') 16:32:41 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) prlimit64(0x0, 0x0, 0x0, 0x0) [ 607.681129] audit: type=1326 audit(1714840361.451:898): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=117913 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7392e54b19 code=0x7ffc0000 [ 607.684514] audit: type=1326 audit(1714840361.451:899): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=117913 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7392e54b19 code=0x7ffc0000 [ 607.689483] audit: type=1326 audit(1714840361.451:900): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=117913 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f7392e54b19 code=0x7ffc0000 16:32:41 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) [ 607.707757] audit: type=1326 audit(1714840361.451:901): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=117913 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7392e54b19 code=0x7ffc0000 [ 607.716150] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.6'. 16:32:41 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRESHEX]) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000080)='trans=fd,', &(0x7f00000000c0)='cache=loose', 0x0], &(0x7f00000003c0)=[&(0x7f0000000380)='h\x00'], 0x400) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') [ 607.724695] audit: type=1326 audit(1714840361.451:902): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=117913 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7392e54b19 code=0x7ffc0000 [ 607.733029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 607.786466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:41 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) prlimit64(0x0, 0x0, 0x0, 0x0) 16:32:41 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x5) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000007780)={0x0, 0x0, 0x0}, 0x0) 16:32:41 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c801}, 0x4004) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x24, 0x2a, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@typed={0x4}, @nested={0x9, 0x0, 0x0, 0x1, [@generic="999e00009c"]}]}, 0x24}}, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/29, 0x1d}], 0x1) syz_io_uring_setup(0x203, &(0x7f0000000080)={0x0, 0x400, 0x2, 0x200000, 0x6}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) socketpair$unix(0x1, 0x2, 0x0, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x810, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x87) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in6, @in=@private}}, {{@in=@multicast1}, 0x0, @in6=@initdev}}, &(0x7f0000000040)=0xe8) socket$packet(0x11, 0x2, 0x300) 16:32:41 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRESHEX]) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000080)='trans=fd,', &(0x7f00000000c0)='cache=loose', 0x0], &(0x7f00000003c0)=[&(0x7f0000000380)='h\x00'], 0x400) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') 16:32:41 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd, 0x4d, 0x2, 0x23a, 0x4, 0x0, {0x3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x4, 0x8010, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) 16:32:41 executing program 0: syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x28052, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x3000, 0xc59f771273dd298a, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x6000) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000) shmctl$SHM_INFO(r0, 0xe, &(0x7f00000002c0)=""/4096) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000001300)=""/174) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f00000000c0)=""/22) 16:32:41 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0xe98, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 16:32:41 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd, 0x4d, 0x2, 0x23a, 0x4, 0x0, {0x3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x4, 0x8010, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) [ 608.031015] audit: type=1326 audit(1714840361.801:903): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=118128 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7392e54b19 code=0x7ffc0000 [ 608.032939] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.6'. [ 608.034448] audit: type=1326 audit(1714840361.801:904): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=118128 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7392e54b19 code=0x7ffc0000 [ 608.046524] audit: type=1326 audit(1714840361.801:905): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=118128 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f7392e54b19 code=0x7ffc0000 [ 608.053108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 608.066894] audit: type=1326 audit(1714840361.801:906): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=118128 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7392e54b19 code=0x7ffc0000 [ 608.081881] audit: type=1326 audit(1714840361.812:907): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=118128 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7392e54b19 code=0x7ffc0000 16:32:41 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) prlimit64(0x0, 0x0, 0x0, 0x0) [ 608.121780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 608.175569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:41 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14, 0x80000) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0xffffffffffffffff) 16:32:42 executing program 0: syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x28052, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x3000, 0xc59f771273dd298a, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x6000) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000) shmctl$SHM_INFO(r0, 0xe, &(0x7f00000002c0)=""/4096) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000001300)=""/174) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f00000000c0)=""/22) 16:32:42 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14, 0x80000) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0xffffffffffffffff) 16:32:42 executing program 1: syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x28052, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x3000, 0xc59f771273dd298a, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x6000) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000) shmctl$SHM_INFO(r0, 0xe, &(0x7f00000002c0)=""/4096) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000001300)=""/174) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f00000000c0)=""/22) 16:32:42 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd, 0x4d, 0x2, 0x23a, 0x4, 0x0, {0x3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x4, 0x8010, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) 16:32:42 executing program 2: syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x28052, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x3000, 0xc59f771273dd298a, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x6000) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000) shmctl$SHM_INFO(r0, 0xe, &(0x7f00000002c0)=""/4096) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000001300)=""/174) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f00000000c0)=""/22) 16:32:42 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14, 0x80000) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0xffffffffffffffff) 16:32:42 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd, 0x4d, 0x2, 0x23a, 0x4, 0x0, {0x3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x4, 0x8010, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) 16:32:42 executing program 0: syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x28052, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x3000, 0xc59f771273dd298a, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x6000) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000) shmctl$SHM_INFO(r0, 0xe, &(0x7f00000002c0)=""/4096) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000001300)=""/174) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f00000000c0)=""/22) 16:32:42 executing program 5: syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x28052, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x3000, 0xc59f771273dd298a, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x6000) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000) shmctl$SHM_INFO(r0, 0xe, &(0x7f00000002c0)=""/4096) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000001300)=""/174) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f00000000c0)=""/22) 16:32:42 executing program 2: syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x28052, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x3000, 0xc59f771273dd298a, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x6000) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000) shmctl$SHM_INFO(r0, 0xe, &(0x7f00000002c0)=""/4096) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000001300)=""/174) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f00000000c0)=""/22) 16:32:42 executing program 1: syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x28052, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x3000, 0xc59f771273dd298a, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x6000) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000) shmctl$SHM_INFO(r0, 0xe, &(0x7f00000002c0)=""/4096) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000001300)=""/174) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f00000000c0)=""/22) [ 608.638260] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.6'. 16:32:42 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14, 0x80000) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0xffffffffffffffff) 16:32:42 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0xeac, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 16:32:42 executing program 5: syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x28052, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x3000, 0xc59f771273dd298a, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x6000) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000) shmctl$SHM_INFO(r0, 0xe, &(0x7f00000002c0)=""/4096) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000001300)=""/174) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f00000000c0)=""/22) 16:32:42 executing program 0: syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x28052, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x3000, 0xc59f771273dd298a, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x6000) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000) shmctl$SHM_INFO(r0, 0xe, &(0x7f00000002c0)=""/4096) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000001300)=""/174) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f00000000c0)=""/22) [ 608.652609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:42 executing program 2: syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x28052, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x3000, 0xc59f771273dd298a, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x6000) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000) shmctl$SHM_INFO(r0, 0xe, &(0x7f00000002c0)=""/4096) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000001300)=""/174) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f00000000c0)=""/22) [ 608.719857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:42 executing program 5: syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x28052, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x3000, 0xc59f771273dd298a, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x6000) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000) shmctl$SHM_INFO(r0, 0xe, &(0x7f00000002c0)=""/4096) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000001300)=""/174) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f00000000c0)=""/22) 16:32:42 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00000004c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x11, r0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) 16:32:42 executing program 1: syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x28052, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x3000, 0xc59f771273dd298a, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x6000) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000) shmctl$SHM_INFO(r0, 0xe, &(0x7f00000002c0)=""/4096) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000001300)=""/174) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f00000000c0)=""/22) [ 608.772376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r1, 0x3ddc8cfb493e3995, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5}]}, 0x28}}, 0x0) 16:32:42 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f00000016c0)={{0x3, 0xee00, 0x0, 0x0, 0xffffffffffffffff}}) 16:32:42 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) write$bt_hci(r0, &(0x7f0000002d00)=ANY=[@ANYRES64=r2], 0x6) 16:32:42 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x402}]}, 0x34}}, 0x0) 16:32:42 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffe, r1, 0x0) 16:32:42 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x2, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 16:32:42 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x29a982, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x1e8, 0x12, 0x101, 0x0, 0x0, {}, [@nested={0x1d2, 0x0, 0x0, 0x1, [@typed={0x8, 0x38, 0x0, 0x0, @fd=r2}, @generic="be5cc1fb8139e8bea2b6d36b367955071e48d6592bbe29141536586c51c1e61a0ecc6448543b7fc6429a2435f87b1464b01f1f4516eef98e5692719693ca7a5f01e5bfc67109a829cfd5621ae52c935e30054cdd7346d9747e91db7c7495ff4520cc23baa00e200a915073a764843fa2f5295732bffb7ad8636b25aec6f5f380e786e0d38089da4b", @generic="c0afc9a2cd41a13ae1c9f97cc2b272b9c50e2546ae946aa766f768ced0ef8fc2e4a0932355d0c92cb44cd2d8cbe36d73a8929d30a82577d9c031e5c32dd66e7ce26040908ad30d5e241e99c8e8948ce73adbc248126b76662e9c8e7b13f6fd4d4f67303ecb4a1d100843fe6436239364cceb619bebf26acc981eae4cd37435952ae969cdf999fd31ffeb63afa41e0eda2de8b18f", @generic="908bcb4e97757c2145faa1b9218c3f10a64230d0b45bd620db208cc4004ddf3a1578558669dd1d51c034fa5191f968d8fbf5d3a922a5609bd3983b6c2bc9c7efbdc2def2f3aac8c5d76bda9877cd9e3deea2a95337fffb67fa4b8f281cbf0daf0e6b43b9c90db14cac77358e0ac87d06321354cab84cd9840b5e54e881274b01cba669081d2f861d15e1547293", @generic="a0b801f71f1cd6cbc93cd70e836df17c71f52ee3e7483692d47f0f2e09"]}]}, 0x1e8}}, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000540)=ANY=[@ANYRESOCT, @ANYRESHEX]) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0}, './file0/../file0\x00'}) unshare(0x48020200) [ 609.199586] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.1'. [ 609.200970] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.1'. 16:32:42 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xfffffdec, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x18, 0x109, 0x0, 0x0, {0xa, 0x2}, [@typed={0x8, 0x600, 0x0, 0x0, @u32}, @typed={0x8, 0x4, 0x0, 0x0, @u32=0x4}]}, 0x24}}, 0x0) [ 609.236593] IPv6: Can't replace route, no match found 16:32:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x410}]}, 0x24}}, 0x0) [ 609.251951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:43 executing program 7: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x800000, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f00000001c0)="201900d07642da921fd6ff11430c6c6b8c0ac5060048065e24ecf3bb8ce311427ac446646b66cda5c391a00fbccd665cde721d7307fdcb6b969016edfcfc7632c1f3819bab23a38c40d2318820e65ef0262cc5dd8b5bc96f21bc84022b67785d6741984f29f705f842bd5a0870925cdb5d80eb689f80ea6ff07d3876a48c6519dad01907103c1df3928cb15b27437eb6e994a4bed70de6", 0x97, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(0xffffffffffffffff, 0x8001) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$sock(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000380)="ce1485ad9db45c", 0x7}, {&(0x7f00000004c0)="7b757c489c6c3cad5da7a60478df485cdcd345b260249817ae42f6ba9cc240406119ee7883627db6a52e271ed734c31346b38ea2da2fa7c852eae71c8b5794b860f48282cd44f67b00826ed843ce9d08c8efb395f5bcc05d8d5006569fb860a4aea71bc065ce7b8ea823706d661e21893a640df716aa6e22207a10007d612cd07dc6465b33efd92417d8cba30ffa86febaf70604c3f4602d3a1c463bb5716ede18fc0992fbab7f3a13e7ae34923f62", 0xaf}, {&(0x7f0000000580)="3f140f5bc4589b95e58290ecfabe6cacf2fc43f0515c45eb71b18dacc14093a7a9ddda078543b29ef508323f655ca5c49f63e16aa51ecd5fc4b13356b9c92dc644af3b3d16378e2a559c22b97ce3c469f46ba389457995ed858f905ceb982fb20385b8eb9d792938cc89020c877500af043d999a1aff7cc7c9bb43dbaff627bf2d9090a541cbe58b00b90bbecadc9eed513dc213c45b1bb9677bf6f93eafc1777ddca7bb7a67c48aa3572d211069a6480c6f3115159f5c9cb0127877a16f7a895cbff1f8713e3875fef636e8bfdd36", 0xcf}, {&(0x7f0000000680)="393591397f713923e005274cfd0896df741d1417f13c05d96d376ca2ae4a12175a8aae8d70e7d16525c9f368085c6fd3274133df6a9043a402dd456e8feb62ec25b75a2472d9bd9ec1a8f7b1d7e5c023a7af627467155385ef39c074ee8067fb5c30b32979da87e532f46a0fd4da6d12d56f261b3053d8476b71810579d629d55ac0ef6e40d7df429f13770d3bcaa26444bd79bf566324f09232dcaff35b076e9e9909520523a740d6c10870569d075e799241f6ea44ebc0e43805fc403c9de1d6af53bfb638944e5fb9d2dd8dbad7b34590274a09b86ec3b657a9ba253ebf1949e4", 0xe2}, {&(0x7f00000003c0)="6a8f1b37767eec3decfb6d94ca2d", 0xe}], 0x5, &(0x7f0000000800)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0xfffffffa}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x7f}}], 0x60}, 0x4000001) syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) kcmp(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) 16:32:43 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x2, &(0x7f0000000000)) [ 609.309047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:43 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0xda, 0x0, 0x0, 0x100000, r1}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r4, 0x1, 0x2f, 0x0, &(0x7f0000000180)) dup2(r4, r2) fallocate(r3, 0x3, 0x0, 0x30000000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000040)={0x2, 0x401, 0x1, 0x0, 0x0, [{{r2}, 0x4}]}) write$bt_hci(r3, &(0x7f0000000580)={0x1, @user_passkey_reply={{0x42e, 0xa}, {@none}}}, 0xe) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0xe8089, 0x0) [ 609.361520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:43 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) getsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, &(0x7f00000016c0)) 16:32:43 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffe, r1, 0x0) 16:32:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x410}]}, 0x24}}, 0x0) 16:32:43 executing program 7: openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4a890, 0x0, 0x0, 0x8, 0x4000004}, 0x0, 0x0, 0xffffffffffffffff, 0x2) fstat(r1, &(0x7f0000000600)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = fcntl$dupfd(r0, 0x0, r2) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c4", 0x48}], 0x2) 16:32:43 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x2, &(0x7f0000000000)) 16:32:43 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0xda, 0x0, 0x0, 0x100000, r1}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r4, 0x1, 0x2f, 0x0, &(0x7f0000000180)) dup2(r4, r2) fallocate(r3, 0x3, 0x0, 0x30000000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000040)={0x2, 0x401, 0x1, 0x0, 0x0, [{{r2}, 0x4}]}) write$bt_hci(r3, &(0x7f0000000580)={0x1, @user_passkey_reply={{0x42e, 0xa}, {@none}}}, 0xe) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0xe8089, 0x0) 16:32:43 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x4, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 16:32:43 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x29a982, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x1e8, 0x12, 0x101, 0x0, 0x0, {}, [@nested={0x1d2, 0x0, 0x0, 0x1, [@typed={0x8, 0x38, 0x0, 0x0, @fd=r2}, @generic="be5cc1fb8139e8bea2b6d36b367955071e48d6592bbe29141536586c51c1e61a0ecc6448543b7fc6429a2435f87b1464b01f1f4516eef98e5692719693ca7a5f01e5bfc67109a829cfd5621ae52c935e30054cdd7346d9747e91db7c7495ff4520cc23baa00e200a915073a764843fa2f5295732bffb7ad8636b25aec6f5f380e786e0d38089da4b", @generic="c0afc9a2cd41a13ae1c9f97cc2b272b9c50e2546ae946aa766f768ced0ef8fc2e4a0932355d0c92cb44cd2d8cbe36d73a8929d30a82577d9c031e5c32dd66e7ce26040908ad30d5e241e99c8e8948ce73adbc248126b76662e9c8e7b13f6fd4d4f67303ecb4a1d100843fe6436239364cceb619bebf26acc981eae4cd37435952ae969cdf999fd31ffeb63afa41e0eda2de8b18f", @generic="908bcb4e97757c2145faa1b9218c3f10a64230d0b45bd620db208cc4004ddf3a1578558669dd1d51c034fa5191f968d8fbf5d3a922a5609bd3983b6c2bc9c7efbdc2def2f3aac8c5d76bda9877cd9e3deea2a95337fffb67fa4b8f281cbf0daf0e6b43b9c90db14cac77358e0ac87d06321354cab84cd9840b5e54e881274b01cba669081d2f861d15e1547293", @generic="a0b801f71f1cd6cbc93cd70e836df17c71f52ee3e7483692d47f0f2e09"]}]}, 0x1e8}}, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000540)=ANY=[@ANYRESOCT, @ANYRESHEX]) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0}, './file0/../file0\x00'}) unshare(0x48020200) [ 609.787536] sg_write: data in/out 33555249/24 bytes for SCSI command 0xfd-- guessing data in; [ 609.787536] program syz-executor.7 not setting count and/or reply_len properly [ 609.797123] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.1'. [ 609.871302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 609.930902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 609.984066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:44 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x2, &(0x7f0000000000)) 16:32:44 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffe, r1, 0x0) 16:32:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x410}]}, 0x24}}, 0x0) 16:32:44 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0xda, 0x0, 0x0, 0x100000, r1}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r4, 0x1, 0x2f, 0x0, &(0x7f0000000180)) dup2(r4, r2) fallocate(r3, 0x3, 0x0, 0x30000000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000040)={0x2, 0x401, 0x1, 0x0, 0x0, [{{r2}, 0x4}]}) write$bt_hci(r3, &(0x7f0000000580)={0x1, @user_passkey_reply={{0x42e, 0xa}, {@none}}}, 0xe) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0xe8089, 0x0) 16:32:44 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r0, &(0x7f0000000880)=""/4096, 0x1000) 16:32:44 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x5, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 16:32:44 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x29a982, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x1e8, 0x12, 0x101, 0x0, 0x0, {}, [@nested={0x1d2, 0x0, 0x0, 0x1, [@typed={0x8, 0x38, 0x0, 0x0, @fd=r2}, @generic="be5cc1fb8139e8bea2b6d36b367955071e48d6592bbe29141536586c51c1e61a0ecc6448543b7fc6429a2435f87b1464b01f1f4516eef98e5692719693ca7a5f01e5bfc67109a829cfd5621ae52c935e30054cdd7346d9747e91db7c7495ff4520cc23baa00e200a915073a764843fa2f5295732bffb7ad8636b25aec6f5f380e786e0d38089da4b", @generic="c0afc9a2cd41a13ae1c9f97cc2b272b9c50e2546ae946aa766f768ced0ef8fc2e4a0932355d0c92cb44cd2d8cbe36d73a8929d30a82577d9c031e5c32dd66e7ce26040908ad30d5e241e99c8e8948ce73adbc248126b76662e9c8e7b13f6fd4d4f67303ecb4a1d100843fe6436239364cceb619bebf26acc981eae4cd37435952ae969cdf999fd31ffeb63afa41e0eda2de8b18f", @generic="908bcb4e97757c2145faa1b9218c3f10a64230d0b45bd620db208cc4004ddf3a1578558669dd1d51c034fa5191f968d8fbf5d3a922a5609bd3983b6c2bc9c7efbdc2def2f3aac8c5d76bda9877cd9e3deea2a95337fffb67fa4b8f281cbf0daf0e6b43b9c90db14cac77358e0ac87d06321354cab84cd9840b5e54e881274b01cba669081d2f861d15e1547293", @generic="a0b801f71f1cd6cbc93cd70e836df17c71f52ee3e7483692d47f0f2e09"]}]}, 0x1e8}}, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000540)=ANY=[@ANYRESOCT, @ANYRESHEX]) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0}, './file0/../file0\x00'}) unshare(0x48020200) 16:32:44 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) [ 610.423263] __nla_validate_parse: 1 callbacks suppressed [ 610.424679] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.1'. [ 610.437773] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.1'. [ 610.480778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:44 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffe, r1, 0x0) 16:32:44 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x2, &(0x7f0000000000)) 16:32:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x410}]}, 0x24}}, 0x0) [ 610.550681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:44 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0xda, 0x0, 0x0, 0x100000, r1}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r4, 0x1, 0x2f, 0x0, &(0x7f0000000180)) dup2(r4, r2) fallocate(r3, 0x3, 0x0, 0x30000000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000040)={0x2, 0x401, 0x1, 0x0, 0x0, [{{r2}, 0x4}]}) write$bt_hci(r3, &(0x7f0000000580)={0x1, @user_passkey_reply={{0x42e, 0xa}, {@none}}}, 0xe) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0xe8089, 0x0) 16:32:44 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/ipc\x00') setns(r0, 0x0) 16:32:44 executing program 7: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:32:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x19, 0x1, 0x0, 0x0, {0xa, 0xfc}}, 0x14}}, 0x0) r1 = dup(r0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x5d010, r1, 0x8000000) r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0xffc, &(0x7f00000002c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000200)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, {0x0, r6}}, 0x1cfd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x0, @fd=r1, 0x932, 0x0, 0x0, 0x1, 0x0, {0x2, r6}}, 0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000007940)=[{{0x0, 0x0, 0x0}}], 0x500, 0x20000022, 0x0) 16:32:44 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000400)=@known='system.posix_acl_access\x00') 16:32:44 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x6, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 610.906739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.963108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 611.018552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:45 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='pagemap\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd/3\x00') 16:32:45 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x35}, {0x6}]}) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) 16:32:45 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x78ce4000) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000240)={0x0, 0x3ff, 0x6, 0x0, 0x0, [{{}, 0x8}, {{}, 0x8}, {}, {{}, 0x8}, {}, {{}, 0x9}]}) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000940)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x3) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = open_tree(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(r4, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f", 0x16}], 0x1}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) 16:32:45 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x29a982, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x1e8, 0x12, 0x101, 0x0, 0x0, {}, [@nested={0x1d2, 0x0, 0x0, 0x1, [@typed={0x8, 0x38, 0x0, 0x0, @fd=r2}, @generic="be5cc1fb8139e8bea2b6d36b367955071e48d6592bbe29141536586c51c1e61a0ecc6448543b7fc6429a2435f87b1464b01f1f4516eef98e5692719693ca7a5f01e5bfc67109a829cfd5621ae52c935e30054cdd7346d9747e91db7c7495ff4520cc23baa00e200a915073a764843fa2f5295732bffb7ad8636b25aec6f5f380e786e0d38089da4b", @generic="c0afc9a2cd41a13ae1c9f97cc2b272b9c50e2546ae946aa766f768ced0ef8fc2e4a0932355d0c92cb44cd2d8cbe36d73a8929d30a82577d9c031e5c32dd66e7ce26040908ad30d5e241e99c8e8948ce73adbc248126b76662e9c8e7b13f6fd4d4f67303ecb4a1d100843fe6436239364cceb619bebf26acc981eae4cd37435952ae969cdf999fd31ffeb63afa41e0eda2de8b18f", @generic="908bcb4e97757c2145faa1b9218c3f10a64230d0b45bd620db208cc4004ddf3a1578558669dd1d51c034fa5191f968d8fbf5d3a922a5609bd3983b6c2bc9c7efbdc2def2f3aac8c5d76bda9877cd9e3deea2a95337fffb67fa4b8f281cbf0daf0e6b43b9c90db14cac77358e0ac87d06321354cab84cd9840b5e54e881274b01cba669081d2f861d15e1547293", @generic="a0b801f71f1cd6cbc93cd70e836df17c71f52ee3e7483692d47f0f2e09"]}]}, 0x1e8}}, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000540)=ANY=[@ANYRESOCT, @ANYRESHEX]) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0}, './file0/../file0\x00'}) unshare(0x48020200) 16:32:45 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x2001, 0x0) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="a0d8da", 0x3}, {&(0x7f0000000380)}, {&(0x7f0000000440)='9', 0x1}], 0x3) close(r0) 16:32:45 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @fixed, 0x200}, 0xe) 16:32:45 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x7, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 16:32:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x19, 0x1, 0x0, 0x0, {0xa, 0xfc}}, 0x14}}, 0x0) r1 = dup(r0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x5d010, r1, 0x8000000) r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0xffc, &(0x7f00000002c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000200)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, {0x0, r6}}, 0x1cfd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x0, @fd=r1, 0x932, 0x0, 0x0, 0x1, 0x0, {0x2, r6}}, 0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000007940)=[{{0x0, 0x0, 0x0}}], 0x500, 0x20000022, 0x0) [ 611.446663] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.1'. [ 611.460570] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.1'. [ 611.501200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:45 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @fixed, 0x200}, 0xe) [ 611.568209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 611.621547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:45 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x2001, 0x0) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="a0d8da", 0x3}, {&(0x7f0000000380)}, {&(0x7f0000000440)='9', 0x1}], 0x3) close(r0) 16:32:45 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @fixed, 0x200}, 0xe) 16:32:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x19, 0x1, 0x0, 0x0, {0xa, 0xfc}}, 0x14}}, 0x0) r1 = dup(r0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x5d010, r1, 0x8000000) r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0xffc, &(0x7f00000002c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000200)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, {0x0, r6}}, 0x1cfd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x0, @fd=r1, 0x932, 0x0, 0x0, 0x1, 0x0, {0x2, r6}}, 0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000007940)=[{{0x0, 0x0, 0x0}}], 0x500, 0x20000022, 0x0) 16:32:45 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x78ce4000) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000240)={0x0, 0x3ff, 0x6, 0x0, 0x0, [{{}, 0x8}, {{}, 0x8}, {}, {{}, 0x8}, {}, {{}, 0x9}]}) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000940)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x3) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = open_tree(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(r4, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f", 0x16}], 0x1}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) 16:32:45 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x2001, 0x0) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="a0d8da", 0x3}, {&(0x7f0000000380)}, {&(0x7f0000000440)='9', 0x1}], 0x3) close(r0) 16:32:45 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @fixed, 0x200}, 0xe) 16:32:45 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x2001, 0x0) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="a0d8da", 0x3}, {&(0x7f0000000380)}, {&(0x7f0000000440)='9', 0x1}], 0x3) close(r0) 16:32:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x19, 0x1, 0x0, 0x0, {0xa, 0xfc}}, 0x14}}, 0x0) r1 = dup(r0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x5d010, r1, 0x8000000) r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0xffc, &(0x7f00000002c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000200)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, {0x0, r6}}, 0x1cfd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x0, @fd=r1, 0x932, 0x0, 0x0, 0x1, 0x0, {0x2, r6}}, 0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000007940)=[{{0x0, 0x0, 0x0}}], 0x500, 0x20000022, 0x0) 16:32:46 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x35}, {0x6}]}) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) 16:32:46 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, 0x0) 16:32:46 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x2001, 0x0) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="a0d8da", 0x3}, {&(0x7f0000000380)}, {&(0x7f0000000440)='9', 0x1}], 0x3) close(r0) 16:32:46 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x2001, 0x0) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="a0d8da", 0x3}, {&(0x7f0000000380)}, {&(0x7f0000000440)='9', 0x1}], 0x3) close(r0) 16:32:46 executing program 7: mknod$loop(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='stack\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) io_destroy(0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 16:32:46 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x8, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 16:32:46 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x78ce4000) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000240)={0x0, 0x3ff, 0x6, 0x0, 0x0, [{{}, 0x8}, {{}, 0x8}, {}, {{}, 0x8}, {}, {{}, 0x9}]}) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000940)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x3) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = open_tree(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(r4, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f", 0x16}], 0x1}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) [ 612.372832] netlink: 'syz-executor.6': attribute type 8 has an invalid length. [ 612.385660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:46 executing program 5: prlimit64(0x0, 0x2, &(0x7f0000000180), 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x644e2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0xc000)=nil, 0xc000, 0x2000002, 0xf154c79f1722d852, r0, 0x10000000) [ 612.446166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:46 executing program 0: setns(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic='\x00\x00\x00\x00\x00\x00']}, 0x1c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = dup2(r1, r1) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@empty, @in6=@empty}}, {{@in=@multicast2}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}}}, 0xe8) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@empty, @in6=@empty}}, {{@in=@multicast2}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}}}, 0xe8) setsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f0000000040)={@empty}, 0x14) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000001980)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x6e6ef6f2ecc7bf83}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0xbc, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x8}, @ETHTOOL_A_EEE_MODES_OURS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x1}, @ETHTOOL_A_EEE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_EEE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x9}, @ETHTOOL_A_EEE_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40}, 0x4) 16:32:46 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x2001, 0x0) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="a0d8da", 0x3}, {&(0x7f0000000380)}, {&(0x7f0000000440)='9', 0x1}], 0x3) close(r0) 16:32:46 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x78ce4000) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000240)={0x0, 0x3ff, 0x6, 0x0, 0x0, [{{}, 0x8}, {{}, 0x8}, {}, {{}, 0x8}, {}, {{}, 0x9}]}) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000940)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x3) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = open_tree(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(r4, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f", 0x16}], 0x1}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) [ 612.499601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:46 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}) 16:32:46 executing program 7: mkdir(&(0x7f0000000480)='./file0\x00', 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) chroot(&(0x7f0000000240)='./file0\x00') [ 612.582098] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=120814 comm=syz-executor.0 16:32:46 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') pread64(r0, &(0x7f0000000040)=""/20, 0x14, 0x0) [ 612.635885] SELinux: duplicate or incompatible mount options [ 612.645724] SELinux: duplicate or incompatible mount options 16:32:47 executing program 0: setns(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic='\x00\x00\x00\x00\x00\x00']}, 0x1c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = dup2(r1, r1) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@empty, @in6=@empty}}, {{@in=@multicast2}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}}}, 0xe8) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@empty, @in6=@empty}}, {{@in=@multicast2}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}}}, 0xe8) setsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f0000000040)={@empty}, 0x14) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000001980)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x6e6ef6f2ecc7bf83}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0xbc, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x8}, @ETHTOOL_A_EEE_MODES_OURS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x1}, @ETHTOOL_A_EEE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_EEE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x9}, @ETHTOOL_A_EEE_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40}, 0x4) 16:32:47 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)=0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @remote, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r3, 0x0) fork() 16:32:47 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r0 = syz_io_uring_setup(0x5, &(0x7f0000000080), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000540)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000500)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x4eae, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0xf6b, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0) 16:32:47 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) read$ptp(r0, 0x0, 0x0) 16:32:47 executing program 7: keyctl$clear(0x10, 0xfffffffffffffffb) keyctl$assume_authority(0x10, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) request_key(&(0x7f00000003c0)='user\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)='rxrpc_s\x00', 0x0) 16:32:47 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x9, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 16:32:47 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x35}, {0x6}]}) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) 16:32:47 executing program 4: r0 = epoll_create(0xcdd6) sync_file_range(r0, 0x9, 0xfffffffffffffffa, 0x0) [ 613.333630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 613.347916] kauditd_printk_skb: 10 callbacks suppressed [ 613.347935] audit: type=1326 audit(1714840367.118:918): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=121268 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74d4618b19 code=0x0 [ 613.369779] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=121250 comm=syz-executor.0 16:32:47 executing program 1: syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="0171c200000000000000000096dd6096033f81082df4aeea003a00fc020000000000000000000000000000ff1200000000000000000000000000010200010000000000600009e60000000000000000000000000000ffffac1e0001fe00000000bb"], 0x0) syz_emit_ethernet(0xf, &(0x7f0000000480)=ANY=[@ANYRESOCT], &(0x7f0000000180)={0x1, 0x4, [0x108, 0x409, 0xd85, 0xf2f]}) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() setpgid(0x0, r1) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8, 0x7f, 0x1, 0x7a, 0x0, 0x4, 0x1, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f00000001c0), 0x2}, 0xc300, 0x4, 0x1ff, 0x4, 0xfffffffffffffff9, 0x4, 0x7fff, 0x0, 0xffff0001, 0x0, 0x2f}, r1, 0x4, r0, 0x2) ptrace(0x8, r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x412100, 0x0) pidfd_open(0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, 0x50111, 0xffffffffffffffff, 0x3) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0x8020}) 16:32:47 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') getdents64(r0, &(0x7f0000000240)=""/4096, 0x1000) getdents64(r0, 0x0, 0x0) 16:32:47 executing program 7: syz_open_dev$rtc(&(0x7f0000000580), 0x9, 0x0) 16:32:47 executing program 0: setns(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic='\x00\x00\x00\x00\x00\x00']}, 0x1c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = dup2(r1, r1) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@empty, @in6=@empty}}, {{@in=@multicast2}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}}}, 0xe8) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@empty, @in6=@empty}}, {{@in=@multicast2}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}}}, 0xe8) setsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f0000000040)={@empty}, 0x14) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000001980)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x6e6ef6f2ecc7bf83}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0xbc, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x8}, @ETHTOOL_A_EEE_MODES_OURS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x1}, @ETHTOOL_A_EEE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_EEE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x9}, @ETHTOOL_A_EEE_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40}, 0x4) 16:32:47 executing program 5: rt_sigaction(0x37, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8, &(0x7f00000001c0)) 16:32:47 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0xa, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 613.636015] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=121664 comm=syz-executor.0 16:32:47 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x103100) dup3(r0, r1, 0x0) 16:32:47 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x55db, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000280)) flistxattr(r0, 0x0, 0x0) 16:32:47 executing program 0: setns(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic='\x00\x00\x00\x00\x00\x00']}, 0x1c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = dup2(r1, r1) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@empty, @in6=@empty}}, {{@in=@multicast2}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}}}, 0xe8) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@empty, @in6=@empty}}, {{@in=@multicast2}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}}}, 0xe8) setsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f0000000040)={@empty}, 0x14) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000001980)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x6e6ef6f2ecc7bf83}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0xbc, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x8}, @ETHTOOL_A_EEE_MODES_OURS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x1}, @ETHTOOL_A_EEE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_EEE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x9}, @ETHTOOL_A_EEE_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40}, 0x4) [ 613.728938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:47 executing program 1: syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="0171c200000000000000000096dd6096033f81082df4aeea003a00fc020000000000000000000000000000ff1200000000000000000000000000010200010000000000600009e60000000000000000000000000000ffffac1e0001fe00000000bb"], 0x0) syz_emit_ethernet(0xf, &(0x7f0000000480)=ANY=[@ANYRESOCT], &(0x7f0000000180)={0x1, 0x4, [0x108, 0x409, 0xd85, 0xf2f]}) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() setpgid(0x0, r1) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8, 0x7f, 0x1, 0x7a, 0x0, 0x4, 0x1, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f00000001c0), 0x2}, 0xc300, 0x4, 0x1ff, 0x4, 0xfffffffffffffff9, 0x4, 0x7fff, 0x0, 0xffff0001, 0x0, 0x2f}, r1, 0x4, r0, 0x2) ptrace(0x8, r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x412100, 0x0) pidfd_open(0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, 0x50111, 0xffffffffffffffff, 0x3) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0x8020}) 16:32:47 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)=0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @remote, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r3, 0x0) fork() [ 613.788121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 613.854212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=121903 comm=syz-executor.0 16:32:47 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) 16:32:47 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x103100) dup3(r0, r1, 0x0) 16:32:47 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000c40), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x24}}, 0x0) 16:32:47 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0xb, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 16:32:47 executing program 1: syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="0171c200000000000000000096dd6096033f81082df4aeea003a00fc020000000000000000000000000000ff1200000000000000000000000000010200010000000000600009e60000000000000000000000000000ffffac1e0001fe00000000bb"], 0x0) syz_emit_ethernet(0xf, &(0x7f0000000480)=ANY=[@ANYRESOCT], &(0x7f0000000180)={0x1, 0x4, [0x108, 0x409, 0xd85, 0xf2f]}) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() setpgid(0x0, r1) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8, 0x7f, 0x1, 0x7a, 0x0, 0x4, 0x1, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f00000001c0), 0x2}, 0xc300, 0x4, 0x1ff, 0x4, 0xfffffffffffffff9, 0x4, 0x7fff, 0x0, 0xffff0001, 0x0, 0x2f}, r1, 0x4, r0, 0x2) ptrace(0x8, r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x412100, 0x0) pidfd_open(0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, 0x50111, 0xffffffffffffffff, 0x3) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0x8020}) 16:32:47 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='setgroups\x00') write$P9_RAUTH(r0, &(0x7f0000000000)={0x14}, 0x14) 16:32:47 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x35}, {0x6}]}) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) 16:32:47 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)=0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @remote, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r3, 0x0) fork() [ 614.246839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 614.265761] audit: type=1326 audit(1714840368.036:919): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=122288 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74d4618b19 code=0x0 16:32:48 executing program 0: socket$inet6_icmp(0xa, 0x2, 0x3a) 16:32:48 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x103100) dup3(r0, r1, 0x0) [ 614.301406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 614.354906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:48 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89b1, &(0x7f0000000480)={'sit0\x00', 0x0}) 16:32:48 executing program 5: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x62) r1 = creat(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/96, 0x60}, {&(0x7f00000002c0)=""/77, 0x4d}, {&(0x7f0000000240)=""/103, 0x67}, {&(0x7f0000000380)=""/168, 0xa8}], 0x4, 0x2, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18}, './file1\x00'}) lseek(r1, 0x0, 0x3) r2 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) dup2(r2, 0xffffffffffffffff) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x101}, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) open(0x0, 0x40800, 0x84) sendfile(r0, r3, 0x0, 0x100000001) 16:32:48 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000c40), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x24}}, 0x0) 16:32:48 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x103100) dup3(r0, r1, 0x0) 16:32:48 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)=0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @remote, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r3, 0x0) fork() 16:32:48 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000c40), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x24}}, 0x0) 16:32:48 executing program 1: syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="0171c200000000000000000096dd6096033f81082df4aeea003a00fc020000000000000000000000000000ff1200000000000000000000000000010200010000000000600009e60000000000000000000000000000ffffac1e0001fe00000000bb"], 0x0) syz_emit_ethernet(0xf, &(0x7f0000000480)=ANY=[@ANYRESOCT], &(0x7f0000000180)={0x1, 0x4, [0x108, 0x409, 0xd85, 0xf2f]}) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() setpgid(0x0, r1) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8, 0x7f, 0x1, 0x7a, 0x0, 0x4, 0x1, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f00000001c0), 0x2}, 0xc300, 0x4, 0x1ff, 0x4, 0xfffffffffffffff9, 0x4, 0x7fff, 0x0, 0xffff0001, 0x0, 0x2f}, r1, 0x4, r0, 0x2) ptrace(0x8, r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x412100, 0x0) pidfd_open(0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, 0x50111, 0xffffffffffffffff, 0x3) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0x8020}) 16:32:48 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000001000028020000028400001b", 0x65, 0x400}, {&(0x7f0000010300)="02000000030000000400000032000f000300040000000000000000000f002f7c", 0x20, 0x1000}, {&(0x7f0000010400)="ff3f000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff01", 0x1003, 0x2000}, {&(0x7f0000012500)="ed41000000100000d4f4655fd4f4655fd4f4655f000000000000040008000000000000000500000006", 0x29, 0x4100}, {0x0, 0x0, 0x44a80}, {&(0x7f0000012f00)="020000000c0001022e00000002002e00000b", 0x12, 0x6000}], 0x0, &(0x7f0000013800)) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 16:32:48 executing program 5: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x62) r1 = creat(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/96, 0x60}, {&(0x7f00000002c0)=""/77, 0x4d}, {&(0x7f0000000240)=""/103, 0x67}, {&(0x7f0000000380)=""/168, 0xa8}], 0x4, 0x2, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18}, './file1\x00'}) lseek(r1, 0x0, 0x3) r2 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) dup2(r2, 0xffffffffffffffff) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x101}, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) open(0x0, 0x40800, 0x84) sendfile(r0, r3, 0x0, 0x100000001) 16:32:48 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0xc, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 16:32:48 executing program 3: r0 = syz_io_uring_complete(0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0xc2d0) r1 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x34, &(0x7f0000001f00)=ANY=[], 0x0) recvmmsg(r1, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x22, 0x0) pipe2(&(0x7f0000000000), 0x0) socket$packet(0x11, 0x2, 0x300) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) 16:32:48 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) fchdir(r0) setxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) [ 615.202337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:49 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000c40), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x24}}, 0x0) 16:32:49 executing program 7: r0 = timerfd_create(0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) timerfd_settime(r2, 0x0, &(0x7f0000000240)={{0x77359400}, {0x77359400}}, 0x0) recvmsg$unix(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/234, 0xea}, {&(0x7f0000000200)=""/236, 0xec}], 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00100020"], 0x58}, 0x41) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000000040)=0xb, 0x80000001) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f00000000c0), 0x4) dup2(r6, r7) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000480)={{0x0, 0x0, 0x8001, 0xe8f, 0x800, 0x6, 0x79a5, 0x5, 0x0, 0x90, 0x6e, 0x7fff, 0x1, 0x7fffffff, 0x4}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0x0, 0xff, 0x7f, 0x1f, 0x0, 0x3, 0x1000, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x100, 0x822}, 0x10020, 0x0, 0xdb3, 0x1, 0x9, 0x7, 0x69e, 0x0, 0x20, 0x0, 0x8}, 0xffffffffffffffff, 0xe, r2, 0x2) ioctl$EXT4_IOC_GROUP_ADD(r7, 0x40286608, &(0x7f0000000000)={0x3f, 0x2, 0x1, 0x5, 0x8, 0x401}) 16:32:49 executing program 3: r0 = syz_io_uring_complete(0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0xc2d0) r1 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x34, &(0x7f0000001f00)=ANY=[], 0x0) recvmmsg(r1, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x22, 0x0) pipe2(&(0x7f0000000000), 0x0) socket$packet(0x11, 0x2, 0x300) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) 16:32:49 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0xf, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 16:32:49 executing program 0: ftruncate(0xffffffffffffffff, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000640), &(0x7f0000000680)=@v1={0x1000000, [{0x5}]}, 0xc, 0x1) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f00000004c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r1}}, {@posixacl}, {@loose}, {@version_u}, {@dfltgid={'dfltgid', 0x3d, r2}}, {@version_9p2000}], [{@fowner_eq={'fowner', 0x3d, r3}}, {@dont_hash}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@measure}, {@smackfshat={'smackfshat', 0x3d, '\',\'A'}}, {@seclabel}, {@pcr={'pcr', 0x3d, 0x33}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@appraise}]}}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0xc, &(0x7f0000000100)=0x3f, 0x4) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001c80)={0x20, 0x12, 0x1, 0x0, 0x0, {}, [@generic="8cbb4f357ef3cdd1d4"]}, 0x20}}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f00000006c0)='./file1\x00', &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) [ 615.535559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:49 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2154d4, 0x0) chdir(&(0x7f0000000100)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x18) [ 615.593522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.648236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:49 executing program 3: r0 = syz_io_uring_complete(0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0xc2d0) r1 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x34, &(0x7f0000001f00)=ANY=[], 0x0) recvmmsg(r1, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x22, 0x0) pipe2(&(0x7f0000000000), 0x0) socket$packet(0x11, 0x2, 0x300) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) 16:32:49 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000400000004f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xfffffffffffffffa}], 0x0, &(0x7f0000000040)={[{@fat=@tz_utc}]}) openat(r0, &(0x7f0000000080)='./file0\x00', 0x800c0, 0x0) 16:32:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) creat(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000040)='\x00', 0x1}]) 16:32:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) io_setup(0x9, &(0x7f00000008c0)=0x0) io_submit(r2, 0x2, &(0x7f0000001940)=[&(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, r0, 0x0}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0x0, r1, 0x0, 0x0, 0x3}]) 16:32:49 executing program 7: socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1}, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)=""/107, 0x6b}, {&(0x7f0000000380)=""/75, 0x4b}], 0x2) r2 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x9}, 0x18) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e21, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'macsec0\x00'}) dup3(r1, r0, 0x0) preadv(r0, &(0x7f00000013c0)=[{&(0x7f00000011c0)=""/119, 0x77}], 0x1, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r3 = fork() ptrace(0x10, r3) ptrace$getenv(0x4201, r3, 0xba, &(0x7f0000000200)) 16:32:49 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') name_to_handle_at(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) 16:32:49 executing program 5: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x62) r1 = creat(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/96, 0x60}, {&(0x7f00000002c0)=""/77, 0x4d}, {&(0x7f0000000240)=""/103, 0x67}, {&(0x7f0000000380)=""/168, 0xa8}], 0x4, 0x2, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18}, './file1\x00'}) lseek(r1, 0x0, 0x3) r2 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) dup2(r2, 0xffffffffffffffff) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x101}, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) open(0x0, 0x40800, 0x84) sendfile(r0, r3, 0x0, 0x100000001) 16:32:49 executing program 3: r0 = syz_io_uring_complete(0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0xc2d0) r1 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x34, &(0x7f0000001f00)=ANY=[], 0x0) recvmmsg(r1, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x22, 0x0) pipe2(&(0x7f0000000000), 0x0) socket$packet(0x11, 0x2, 0x300) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) 16:32:49 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000440)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) 16:32:49 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2000}, 0x4) 16:32:49 executing program 1: kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00'}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5452, &(0x7f0000000000)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)) 16:32:49 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) connect$inet6(r0, 0x0, 0x0) r2 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000018c0)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x13, r1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x2, 0x8000}, 0x4) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername(r0, &(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000180)=0x80) bind$packet(r4, &(0x7f0000000480)={0x11, 0xf7, r6, 0x1, 0x81, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, 0x14) syz_io_uring_submit(r3, 0x0, &(0x7f0000000240)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x7, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, r5, r0, 0xffffffffffffffff, r2], 0x6, 0x0, 0x1}, 0x2c81) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r7, 0x0) fcntl$dupfd(r7, 0x406, r4) [ 616.256329] Bluetooth: hci4: command 0x0405 tx timeout 16:32:50 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x10, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 16:32:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x8) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200600, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r1, &(0x7f0000000100)={0x24, @none={0x4}}, 0x14) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x13, r0, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x30, 0x81, 0x0) write$binfmt_elf64(r3, &(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRES64=r0], 0xfdef) syz_io_uring_complete(r2) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000380)=ANY=[]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x81) [ 616.496382] netlink: 'syz-executor.6': attribute type 16 has an invalid length. 16:32:50 executing program 7: socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1}, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)=""/107, 0x6b}, {&(0x7f0000000380)=""/75, 0x4b}], 0x2) r2 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x9}, 0x18) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e21, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'macsec0\x00'}) dup3(r1, r0, 0x0) preadv(r0, &(0x7f00000013c0)=[{&(0x7f00000011c0)=""/119, 0x77}], 0x1, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r3 = fork() ptrace(0x10, r3) ptrace$getenv(0x4201, r3, 0xba, &(0x7f0000000200)) 16:32:50 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000440)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) [ 616.501385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:50 executing program 0: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0xc0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x7af) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000001c40)={0x0, 0x6}, 0x4) sendfile(r1, r0, 0x0, 0x500000001) 16:32:50 executing program 5: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x62) r1 = creat(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/96, 0x60}, {&(0x7f00000002c0)=""/77, 0x4d}, {&(0x7f0000000240)=""/103, 0x67}, {&(0x7f0000000380)=""/168, 0xa8}], 0x4, 0x2, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18}, './file1\x00'}) lseek(r1, 0x0, 0x3) r2 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) dup2(r2, 0xffffffffffffffff) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x101}, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) open(0x0, 0x40800, 0x84) sendfile(r0, r3, 0x0, 0x100000001) 16:32:50 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, 0x0, 0xffffffffffffff9c) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x2c}}, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x3, 0x8, 0x6, 0x6, 0x0, 0x3, 0x14406, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x20, 0x1000}, 0x8001, 0x400000000000ff, 0x0, 0x0, 0x0, 0x8, 0x91c, 0x0, 0xfffffff8, 0x0, 0x7df}, 0xffffffffffffffff, 0x80000000000005, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000003, 0x1f012, r4, 0x0) creat(&(0x7f0000000040)='./file1\x00', 0x64) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x100000f, 0x1f012, r0, 0x0) 16:32:50 executing program 3: syz_emit_ethernet(0x26, &(0x7f0000000000)={@remote, @broadcast, @void, {@generic={0x4305, "1c760ef5daa2ceaf9267fdd565635be83058a1885051e130"}}}, 0x0) [ 616.556601] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.557092] print_req_error: 2900 callbacks suppressed [ 616.557105] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 616.558579] buffer_io_error: 2966 callbacks suppressed [ 616.558586] Buffer I/O error on dev sr0, logical block 0, async page read [ 616.559741] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.560203] blk_update_request: I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 616.561055] Buffer I/O error on dev sr0, logical block 1, async page read [ 616.561817] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.562419] blk_update_request: I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 616.563235] Buffer I/O error on dev sr0, logical block 2, async page read [ 616.564005] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.564498] blk_update_request: I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 616.565336] Buffer I/O error on dev sr0, logical block 3, async page read [ 616.565993] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.566538] blk_update_request: I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 616.567597] Buffer I/O error on dev sr0, logical block 4, async page read [ 616.568288] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.568744] blk_update_request: I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 616.569598] Buffer I/O error on dev sr0, logical block 5, async page read [ 616.570288] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.570745] blk_update_request: I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 616.571704] Buffer I/O error on dev sr0, logical block 6, async page read [ 616.572385] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.572862] blk_update_request: I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 616.573737] Buffer I/O error on dev sr0, logical block 7, async page read [ 616.574600] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.575183] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 616.576166] Buffer I/O error on dev sr0, logical block 0, async page read [ 616.576861] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.577342] blk_update_request: I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 616.578160] Buffer I/O error on dev sr0, logical block 1, async page read [ 616.578840] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.579403] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.580089] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.580644] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.581315] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.581860] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.582637] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.583169] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.583757] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.584392] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.584934] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.585490] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.586045] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.586618] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.587377] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.588075] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.588658] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.589171] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.589824] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.590404] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.590956] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.591512] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.592230] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.592960] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.593669] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.594191] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.594785] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.595487] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.596040] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.596731] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.597371] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.597887] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.598493] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.599009] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.599580] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.600088] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.600680] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.601197] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.601807] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.602341] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.602975] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.603678] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.604219] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.604766] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.605367] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.605876] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.606506] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.607050] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.607711] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.608220] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.608766] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.609353] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.609858] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.610841] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.611444] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.611973] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.612516] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.613054] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.613627] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.614153] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.614684] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.615339] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.615893] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.616453] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.616998] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.617577] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.618086] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.618651] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.619156] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.619747] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.620288] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.620882] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.621455] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.621993] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.622555] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.623090] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.623666] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.624198] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.624794] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.625390] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.626151] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.626729] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.627230] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.627822] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 16:32:50 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000440)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) 16:32:50 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x2, 0x0, 0x3f, 0x0, 0x101, 0x6068e, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000040), 0x8}, 0x3c2, 0x4, 0xfc7c, 0x4, 0x3, 0x3, 0x6, 0x0, 0x6, 0x0, 0x8}, r1, 0x4, r0, 0x3) r2 = syz_io_uring_setup(0x55db, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x2}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r5, r4, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r2, 0x1c6, 0xffcd, 0x0, 0x0, 0x0) [ 616.632853] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.633635] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.634567] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.635559] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.636432] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.637195] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.638096] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.638990] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.639797] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.640585] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.641693] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.642518] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.643119] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.643961] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.644785] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.645875] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.646690] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.647651] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.648558] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.651200] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.651967] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.652796] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.653645] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.654796] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.655744] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.662790] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.663689] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.666541] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.667731] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.670809] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.674288] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.676056] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.678569] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.679695] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.682635] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.689073] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.691597] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.692624] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.694615] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.695742] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.697614] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.699029] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.699850] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.704998] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.706911] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.709535] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.711011] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.714872] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.718814] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.723965] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.734914] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.735610] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.736466] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.737110] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.737698] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.738607] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.742580] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.743223] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.743902] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.744563] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.745366] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.746017] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.746575] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.747090] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.747763] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.748556] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.749140] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.749965] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.750654] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.751476] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.752123] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.752808] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.754658] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.757516] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.758080] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.758863] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.761468] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.762108] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.762667] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.763401] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.764312] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.765396] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.767158] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.770496] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.771160] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.771961] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.772616] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.773323] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.773839] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.774400] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.775086] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.778317] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.778946] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.780092] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.782732] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.785381] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.785896] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.786465] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.787085] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.787641] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.788144] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.788685] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.789196] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.789714] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.790223] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.790759] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.791344] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.791902] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.792440] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.792984] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.793515] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.794005] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.794631] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.795138] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.795762] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.796366] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.796900] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.797429] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.798076] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.798844] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.799493] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.800015] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.800705] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.801225] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.801775] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.803369] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.803904] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.804604] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.805130] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.805696] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.808402] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.808907] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.809567] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.810241] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.810872] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.811419] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.811973] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.812551] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.813155] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.813690] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.814418] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.815161] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.815970] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.816649] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.817328] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.817836] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.818495] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.818995] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.819584] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.820092] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.820806] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.821336] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.821901] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.822452] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.823044] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.823580] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.824243] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.824797] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.825377] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.826041] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.826671] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.827172] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.827813] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.828380] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 16:32:50 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x2, 0x0, 0x3f, 0x0, 0x101, 0x6068e, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000040), 0x8}, 0x3c2, 0x4, 0xfc7c, 0x4, 0x3, 0x3, 0x6, 0x0, 0x6, 0x0, 0x8}, r1, 0x4, r0, 0x3) r2 = syz_io_uring_setup(0x55db, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x2}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r5, r4, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r2, 0x1c6, 0xffcd, 0x0, 0x0, 0x0) 16:32:50 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000440)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) [ 616.829373] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.829884] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.830491] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.830992] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.831592] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.832106] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.832757] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.833284] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.833842] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.834392] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.834945] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.835483] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.836043] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.836736] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.837369] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.837986] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.838661] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.839368] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.839927] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.840491] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.841054] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.841590] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.842188] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.842740] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.843338] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.843839] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.847377] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.847898] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.848483] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.848988] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.849865] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.850400] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.850956] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.851838] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.852400] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.852905] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.853586] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.854093] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.854702] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.855206] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.856017] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.856716] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.857407] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.857911] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.858529] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.859028] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.859669] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.860170] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.860737] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.861239] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.861830] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.862361] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 16:32:50 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x11, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 616.863127] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.863728] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.864338] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.864837] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.865416] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.865917] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.866491] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.866993] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.867605] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.868098] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.868712] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.869222] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.869805] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.870335] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.870891] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.871512] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.872223] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.872758] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.873406] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.873900] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.874457] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.874963] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.875669] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.876161] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.876734] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.877232] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.877869] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.878397] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.878934] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.879504] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.880057] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.880616] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.881171] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.881736] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.882349] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.882852] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.883550] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.884195] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.884813] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.885382] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.885925] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.886512] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.887094] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.887656] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.888196] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.888724] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.889312] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.889819] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.890382] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.890894] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.891549] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.892048] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.892613] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.893115] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.893714] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.894218] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.894794] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.895370] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.895958] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.896493] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.897045] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.897598] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.898150] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.898694] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.899248] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.899818] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.926259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.991942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 617.043786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x8) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200600, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r1, &(0x7f0000000100)={0x24, @none={0x4}}, 0x14) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x13, r0, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x30, 0x81, 0x0) write$binfmt_elf64(r3, &(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRES64=r0], 0xfdef) syz_io_uring_complete(r2) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000380)=ANY=[]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x81) 16:32:51 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x2, 0x0, 0x3f, 0x0, 0x101, 0x6068e, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000040), 0x8}, 0x3c2, 0x4, 0xfc7c, 0x4, 0x3, 0x3, 0x6, 0x0, 0x6, 0x0, 0x8}, r1, 0x4, r0, 0x3) r2 = syz_io_uring_setup(0x55db, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x2}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r5, r4, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r2, 0x1c6, 0xffcd, 0x0, 0x0, 0x0) 16:32:51 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r0, 0x0) 16:32:51 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000080)='./file0/file0\x00', 0x200) 16:32:51 executing program 5: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0xc0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x7af) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000001c40)={0x0, 0x6}, 0x4) sendfile(r1, r0, 0x0, 0x500000001) 16:32:51 executing program 7: socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1}, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)=""/107, 0x6b}, {&(0x7f0000000380)=""/75, 0x4b}], 0x2) r2 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x9}, 0x18) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e21, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'macsec0\x00'}) dup3(r1, r0, 0x0) preadv(r0, &(0x7f00000013c0)=[{&(0x7f00000011c0)=""/119, 0x77}], 0x1, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r3 = fork() ptrace(0x10, r3) ptrace$getenv(0x4201, r3, 0xba, &(0x7f0000000200)) [ 617.427555] audit: type=1326 audit(1714840371.191:920): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=124896 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eafae8b19 code=0x7ffc0000 [ 617.430012] audit: type=1326 audit(1714840371.198:921): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=124896 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eafae8b19 code=0x7ffc0000 [ 617.432175] audit: type=1326 audit(1714840371.198:922): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=124896 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f4eafae8b19 code=0x7ffc0000 [ 617.434226] audit: type=1326 audit(1714840371.198:923): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=124896 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eafae8b19 code=0x7ffc0000 16:32:51 executing program 0: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0xc0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x7af) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000001c40)={0x0, 0x6}, 0x4) sendfile(r1, r0, 0x0, 0x500000001) 16:32:51 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x117, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 617.444216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 617.445609] audit: type=1326 audit(1714840371.198:924): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=124896 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eafae8b19 code=0x7ffc0000 [ 617.454794] audit: type=1326 audit(1714840371.198:925): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=124896 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f4eafae8b19 code=0x7ffc0000 [ 617.465597] audit: type=1326 audit(1714840371.198:926): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=124896 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eafae8b19 code=0x7ffc0000 [ 617.476211] audit: type=1326 audit(1714840371.198:927): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=124896 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eafae8b19 code=0x7ffc0000 16:32:51 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x2, 0x0, 0x3f, 0x0, 0x101, 0x6068e, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000040), 0x8}, 0x3c2, 0x4, 0xfc7c, 0x4, 0x3, 0x3, 0x6, 0x0, 0x6, 0x0, 0x8}, r1, 0x4, r0, 0x3) r2 = syz_io_uring_setup(0x55db, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x2}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r5, r4, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r2, 0x1c6, 0xffcd, 0x0, 0x0, 0x0) [ 617.502059] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x8) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200600, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r1, &(0x7f0000000100)={0x24, @none={0x4}}, 0x14) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x13, r0, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x30, 0x81, 0x0) write$binfmt_elf64(r3, &(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRES64=r0], 0xfdef) syz_io_uring_complete(r2) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000380)=ANY=[]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x81) 16:32:51 executing program 4: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0xc0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x7af) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000001c40)={0x0, 0x6}, 0x4) sendfile(r1, r0, 0x0, 0x500000001) [ 617.554022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:51 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000080)='./file0/file0\x00', 0x200) 16:32:51 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000080)='./file0/file0\x00', 0x200) 16:32:51 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000", @ANYRES32=0x0, @ANYBLOB="0c00000000000000000000d95829e57cdc1b9b07850040f9fed65a9e45904238f86b5e869dfe9b8f38378e1dc8fedbc63cb6a46e2a4001c3aa12070000040000000000000031e33ec7d2cf64c3ff07cd27357ec106a0b763be3c8d39e45d3c090cee60a735297b72d3ea383effb8ef037ee653b725223ddb3652ab6684dfe91133cc9693afb1611614cd6d8753f2e75feac0b2247788e53abe91102bbe18bbc27b439bc31e7887bdf5774183b48c91bcaf316b8ec7c21bc5494c58437f7af94e682970699a503de0d5a624706d3a1dfd0f5d5e892a20bdb336db763c2889bbf3b3bf9b1340329ea2898abf"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000001200)=""/4081, 0x742) utime(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)) syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x5}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x1, 0x0, 0x0, 0x40, 0xc, 0x1, {0x0, 0x0, r1}}, 0x10000) 16:32:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x8) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200600, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r1, &(0x7f0000000100)={0x24, @none={0x4}}, 0x14) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x13, r0, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x30, 0x81, 0x0) write$binfmt_elf64(r3, &(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRES64=r0], 0xfdef) syz_io_uring_complete(r2) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000380)=ANY=[]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x81) [ 617.710677] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 16:32:51 executing program 7: socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1}, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)=""/107, 0x6b}, {&(0x7f0000000380)=""/75, 0x4b}], 0x2) r2 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x9}, 0x18) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e21, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'macsec0\x00'}) dup3(r1, r0, 0x0) preadv(r0, &(0x7f00000013c0)=[{&(0x7f00000011c0)=""/119, 0x77}], 0x1, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r3 = fork() ptrace(0x10, r3) ptrace$getenv(0x4201, r3, 0xba, &(0x7f0000000200)) [ 617.735585] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 16:32:51 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000080)='./file0/file0\x00', 0x200) 16:32:51 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000", @ANYRES32=0x0, @ANYBLOB="0c00000000000000000000d95829e57cdc1b9b07850040f9fed65a9e45904238f86b5e869dfe9b8f38378e1dc8fedbc63cb6a46e2a4001c3aa12070000040000000000000031e33ec7d2cf64c3ff07cd27357ec106a0b763be3c8d39e45d3c090cee60a735297b72d3ea383effb8ef037ee653b725223ddb3652ab6684dfe91133cc9693afb1611614cd6d8753f2e75feac0b2247788e53abe91102bbe18bbc27b439bc31e7887bdf5774183b48c91bcaf316b8ec7c21bc5494c58437f7af94e682970699a503de0d5a624706d3a1dfd0f5d5e892a20bdb336db763c2889bbf3b3bf9b1340329ea2898abf"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000001200)=""/4081, 0x742) utime(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)) syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x5}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x1, 0x0, 0x0, 0x40, 0xc, 0x1, {0x0, 0x0, r1}}, 0x10000) [ 617.835540] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 16:32:51 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000", @ANYRES32=0x0, @ANYBLOB="0c00000000000000000000d95829e57cdc1b9b07850040f9fed65a9e45904238f86b5e869dfe9b8f38378e1dc8fedbc63cb6a46e2a4001c3aa12070000040000000000000031e33ec7d2cf64c3ff07cd27357ec106a0b763be3c8d39e45d3c090cee60a735297b72d3ea383effb8ef037ee653b725223ddb3652ab6684dfe91133cc9693afb1611614cd6d8753f2e75feac0b2247788e53abe91102bbe18bbc27b439bc31e7887bdf5774183b48c91bcaf316b8ec7c21bc5494c58437f7af94e682970699a503de0d5a624706d3a1dfd0f5d5e892a20bdb336db763c2889bbf3b3bf9b1340329ea2898abf"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000001200)=""/4081, 0x742) utime(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)) syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x5}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x1, 0x0, 0x0, 0x40, 0xc, 0x1, {0x0, 0x0, r1}}, 0x10000) [ 617.895733] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 16:32:51 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000", @ANYRES32=0x0, @ANYBLOB="0c00000000000000000000d95829e57cdc1b9b07850040f9fed65a9e45904238f86b5e869dfe9b8f38378e1dc8fedbc63cb6a46e2a4001c3aa12070000040000000000000031e33ec7d2cf64c3ff07cd27357ec106a0b763be3c8d39e45d3c090cee60a735297b72d3ea383effb8ef037ee653b725223ddb3652ab6684dfe91133cc9693afb1611614cd6d8753f2e75feac0b2247788e53abe91102bbe18bbc27b439bc31e7887bdf5774183b48c91bcaf316b8ec7c21bc5494c58437f7af94e682970699a503de0d5a624706d3a1dfd0f5d5e892a20bdb336db763c2889bbf3b3bf9b1340329ea2898abf"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000001200)=""/4081, 0x742) utime(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)) syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x5}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x1, 0x0, 0x0, 0x40, 0xc, 0x1, {0x0, 0x0, r1}}, 0x10000) [ 617.988529] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 16:32:51 executing program 5: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0xc0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x7af) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000001c40)={0x0, 0x6}, 0x4) sendfile(r1, r0, 0x0, 0x500000001) 16:32:51 executing program 0: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0xc0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x7af) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000001c40)={0x0, 0x6}, 0x4) sendfile(r1, r0, 0x0, 0x500000001) 16:32:51 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000", @ANYRES32=0x0, @ANYBLOB="0c00000000000000000000d95829e57cdc1b9b07850040f9fed65a9e45904238f86b5e869dfe9b8f38378e1dc8fedbc63cb6a46e2a4001c3aa12070000040000000000000031e33ec7d2cf64c3ff07cd27357ec106a0b763be3c8d39e45d3c090cee60a735297b72d3ea383effb8ef037ee653b725223ddb3652ab6684dfe91133cc9693afb1611614cd6d8753f2e75feac0b2247788e53abe91102bbe18bbc27b439bc31e7887bdf5774183b48c91bcaf316b8ec7c21bc5494c58437f7af94e682970699a503de0d5a624706d3a1dfd0f5d5e892a20bdb336db763c2889bbf3b3bf9b1340329ea2898abf"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000001200)=""/4081, 0x742) utime(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)) syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x5}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x1, 0x0, 0x0, 0x40, 0xc, 0x1, {0x0, 0x0, r1}}, 0x10000) 16:32:51 executing program 4: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0xc0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x7af) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000001c40)={0x0, 0x6}, 0x4) sendfile(r1, r0, 0x0, 0x500000001) 16:32:51 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000", @ANYRES32=0x0, @ANYBLOB="0c00000000000000000000d95829e57cdc1b9b07850040f9fed65a9e45904238f86b5e869dfe9b8f38378e1dc8fedbc63cb6a46e2a4001c3aa12070000040000000000000031e33ec7d2cf64c3ff07cd27357ec106a0b763be3c8d39e45d3c090cee60a735297b72d3ea383effb8ef037ee653b725223ddb3652ab6684dfe91133cc9693afb1611614cd6d8753f2e75feac0b2247788e53abe91102bbe18bbc27b439bc31e7887bdf5774183b48c91bcaf316b8ec7c21bc5494c58437f7af94e682970699a503de0d5a624706d3a1dfd0f5d5e892a20bdb336db763c2889bbf3b3bf9b1340329ea2898abf"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000001200)=""/4081, 0x742) utime(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)) syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x5}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x1, 0x0, 0x0, 0x40, 0xc, 0x1, {0x0, 0x0, r1}}, 0x10000) 16:32:51 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x129, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 618.039538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 618.043045] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 618.045868] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 16:32:51 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000", @ANYRES32=0x0, @ANYBLOB="0c00000000000000000000d95829e57cdc1b9b07850040f9fed65a9e45904238f86b5e869dfe9b8f38378e1dc8fedbc63cb6a46e2a4001c3aa12070000040000000000000031e33ec7d2cf64c3ff07cd27357ec106a0b763be3c8d39e45d3c090cee60a735297b72d3ea383effb8ef037ee653b725223ddb3652ab6684dfe91133cc9693afb1611614cd6d8753f2e75feac0b2247788e53abe91102bbe18bbc27b439bc31e7887bdf5774183b48c91bcaf316b8ec7c21bc5494c58437f7af94e682970699a503de0d5a624706d3a1dfd0f5d5e892a20bdb336db763c2889bbf3b3bf9b1340329ea2898abf"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000001200)=""/4081, 0x742) utime(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)) syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x5}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x1, 0x0, 0x0, 0x40, 0xc, 0x1, {0x0, 0x0, r1}}, 0x10000) [ 618.138783] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 618.141944] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 16:32:51 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000", @ANYRES32=0x0, @ANYBLOB="0c00000000000000000000d95829e57cdc1b9b07850040f9fed65a9e45904238f86b5e869dfe9b8f38378e1dc8fedbc63cb6a46e2a4001c3aa12070000040000000000000031e33ec7d2cf64c3ff07cd27357ec106a0b763be3c8d39e45d3c090cee60a735297b72d3ea383effb8ef037ee653b725223ddb3652ab6684dfe91133cc9693afb1611614cd6d8753f2e75feac0b2247788e53abe91102bbe18bbc27b439bc31e7887bdf5774183b48c91bcaf316b8ec7c21bc5494c58437f7af94e682970699a503de0d5a624706d3a1dfd0f5d5e892a20bdb336db763c2889bbf3b3bf9b1340329ea2898abf"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000001200)=""/4081, 0x742) utime(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)) syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x5}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x1, 0x0, 0x0, 0x40, 0xc, 0x1, {0x0, 0x0, r1}}, 0x10000) 16:32:51 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3801, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 16:32:51 executing program 3: pipe2(&(0x7f0000000140), 0x0) io_setup(0x5, &(0x7f0000000700)=0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd/3\x00') io_submit(r0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 16:32:51 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000100)=ANY=[], 0x10) syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 16:32:51 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000", @ANYRES32=0x0, @ANYBLOB="0c00000000000000000000d95829e57cdc1b9b07850040f9fed65a9e45904238f86b5e869dfe9b8f38378e1dc8fedbc63cb6a46e2a4001c3aa12070000040000000000000031e33ec7d2cf64c3ff07cd27357ec106a0b763be3c8d39e45d3c090cee60a735297b72d3ea383effb8ef037ee653b725223ddb3652ab6684dfe91133cc9693afb1611614cd6d8753f2e75feac0b2247788e53abe91102bbe18bbc27b439bc31e7887bdf5774183b48c91bcaf316b8ec7c21bc5494c58437f7af94e682970699a503de0d5a624706d3a1dfd0f5d5e892a20bdb336db763c2889bbf3b3bf9b1340329ea2898abf"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000001200)=""/4081, 0x742) utime(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)) syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x5}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x1, 0x0, 0x0, 0x40, 0xc, 0x1, {0x0, 0x0, r1}}, 0x10000) [ 618.236371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:52 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getpid() socket$inet6_udplite(0xa, 0x2, 0x88) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x5) dup2(r0, r1) 16:32:52 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, &(0x7f0000000340)='./file1\x00', 0x8, 0x1) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', 0x181000, 0x0) syz_io_uring_setup(0x5c49, &(0x7f0000000240)={0x0, 0x1697, 0x23, 0x0, 0x27b}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, r4, 0x2, 0x5, 0x4, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="4c4ac5535b41197f579ff5284c7c62c3c216c1809f0efb59a1c16612c9404c88627341c5bc65da58b2", 0x29) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000005fb40)={0x4, [], 0x0, "83da7ce32c2bd4"}) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000140)=0x4, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bind$bt_hci(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x3}, 0x6) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) [ 618.291895] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 618.295839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:52 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r1 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) ioctl$FIOCLEX(r4, 0x5451) close(r4) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r4, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x203, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)="8ee2309c47995455ec7dced68eb160c46014b839663252e10fdc61f5e2e2fd88054934d706470c49e1ecb5911b279caf9597c38f7138e265a9c0895eb5c08249a2c2fffbb7cf7c5a067a39e016d7a7be11e2a0359da88dd80144d1175f50989065d52c715c0fec711859e0ef0d7a51407b3c7d181c7a613c92ee0fb23ccfcc9ad88560cba56f1d1efc1e673619d9a31f9815bd4010524cce05589faff0ede4bcae4f0a79b2c7bf7721c3abcb4c37089fe8606a8293f7106711070be0505b1fa4c390dd60589e10d91df26fd0e49770", 0xcf, 0x2001}, 0x2) syz_io_uring_submit(r2, r7, &(0x7f0000000440)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x6000, @fd, 0x6, &(0x7f0000000400)=[{&(0x7f0000000280)}, {&(0x7f0000000340)=""/153, 0x99}], 0x2, 0x4}, 0x9) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r8, 0x0, 0x0}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer, 0x7ff) syz_io_uring_submit(0x0, r7, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 618.347727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:52 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000", @ANYRES32=0x0, @ANYBLOB="0c00000000000000000000d95829e57cdc1b9b07850040f9fed65a9e45904238f86b5e869dfe9b8f38378e1dc8fedbc63cb6a46e2a4001c3aa12070000040000000000000031e33ec7d2cf64c3ff07cd27357ec106a0b763be3c8d39e45d3c090cee60a735297b72d3ea383effb8ef037ee653b725223ddb3652ab6684dfe91133cc9693afb1611614cd6d8753f2e75feac0b2247788e53abe91102bbe18bbc27b439bc31e7887bdf5774183b48c91bcaf316b8ec7c21bc5494c58437f7af94e682970699a503de0d5a624706d3a1dfd0f5d5e892a20bdb336db763c2889bbf3b3bf9b1340329ea2898abf"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000001200)=""/4081, 0x742) utime(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)) syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x5}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x1, 0x0, 0x0, 0x40, 0xc, 0x1, {0x0, 0x0, r1}}, 0x10000) 16:32:52 executing program 5: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0xc0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x7af) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000001c40)={0x0, 0x6}, 0x4) sendfile(r1, r0, 0x0, 0x500000001) 16:32:52 executing program 4: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0xc0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x7af) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000001c40)={0x0, 0x6}, 0x4) sendfile(r1, r0, 0x0, 0x500000001) 16:32:52 executing program 0: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0xc0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x7af) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000001c40)={0x0, 0x6}, 0x4) sendfile(r1, r0, 0x0, 0x500000001) 16:32:52 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getpid() socket$inet6_udplite(0xa, 0x2, 0x88) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x5) dup2(r0, r1) 16:32:52 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x3, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 16:32:52 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r1 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) ioctl$FIOCLEX(r4, 0x5451) close(r4) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r4, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x203, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)="8ee2309c47995455ec7dced68eb160c46014b839663252e10fdc61f5e2e2fd88054934d706470c49e1ecb5911b279caf9597c38f7138e265a9c0895eb5c08249a2c2fffbb7cf7c5a067a39e016d7a7be11e2a0359da88dd80144d1175f50989065d52c715c0fec711859e0ef0d7a51407b3c7d181c7a613c92ee0fb23ccfcc9ad88560cba56f1d1efc1e673619d9a31f9815bd4010524cce05589faff0ede4bcae4f0a79b2c7bf7721c3abcb4c37089fe8606a8293f7106711070be0505b1fa4c390dd60589e10d91df26fd0e49770", 0xcf, 0x2001}, 0x2) syz_io_uring_submit(r2, r7, &(0x7f0000000440)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x6000, @fd, 0x6, &(0x7f0000000400)=[{&(0x7f0000000280)}, {&(0x7f0000000340)=""/153, 0x99}], 0x2, 0x4}, 0x9) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r8, 0x0, 0x0}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer, 0x7ff) syz_io_uring_submit(0x0, r7, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 16:32:52 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, &(0x7f0000000340)='./file1\x00', 0x8, 0x1) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', 0x181000, 0x0) syz_io_uring_setup(0x5c49, &(0x7f0000000240)={0x0, 0x1697, 0x23, 0x0, 0x27b}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, r4, 0x2, 0x5, 0x4, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="4c4ac5535b41197f579ff5284c7c62c3c216c1809f0efb59a1c16612c9404c88627341c5bc65da58b2", 0x29) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000005fb40)={0x4, [], 0x0, "83da7ce32c2bd4"}) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000140)=0x4, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bind$bt_hci(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x3}, 0x6) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 16:32:52 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getpid() socket$inet6_udplite(0xa, 0x2, 0x88) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x5) dup2(r0, r1) [ 618.747448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:52 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getpid() socket$inet6_udplite(0xa, 0x2, 0x88) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x5) dup2(r0, r1) 16:32:52 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getpid() socket$inet6_udplite(0xa, 0x2, 0x88) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x5) dup2(r0, r1) [ 618.816898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:52 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getpid() socket$inet6_udplite(0xa, 0x2, 0x88) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x5) dup2(r0, r1) 16:32:52 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, &(0x7f0000000340)='./file1\x00', 0x8, 0x1) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', 0x181000, 0x0) syz_io_uring_setup(0x5c49, &(0x7f0000000240)={0x0, 0x1697, 0x23, 0x0, 0x27b}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, r4, 0x2, 0x5, 0x4, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="4c4ac5535b41197f579ff5284c7c62c3c216c1809f0efb59a1c16612c9404c88627341c5bc65da58b2", 0x29) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000005fb40)={0x4, [], 0x0, "83da7ce32c2bd4"}) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000140)=0x4, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bind$bt_hci(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x3}, 0x6) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 16:32:52 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getpid() socket$inet6_udplite(0xa, 0x2, 0x88) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x5) dup2(r0, r1) [ 618.868896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:52 executing program 2: r0 = syz_io_uring_setup(0x203, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) dup3(r4, r3, 0x0) io_uring_enter(r0, 0x2271, 0x0, 0x0, 0x0, 0x0) 16:32:52 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x24fe2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000080)) syz_open_dev$tty20(0xc, 0x4, 0x1) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000002, 0x12, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) dup2(r2, r1) 16:32:52 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, &(0x7f0000000340)='./file1\x00', 0x8, 0x1) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', 0x181000, 0x0) syz_io_uring_setup(0x5c49, &(0x7f0000000240)={0x0, 0x1697, 0x23, 0x0, 0x27b}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, r4, 0x2, 0x5, 0x4, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="4c4ac5535b41197f579ff5284c7c62c3c216c1809f0efb59a1c16612c9404c88627341c5bc65da58b2", 0x29) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000005fb40)={0x4, [], 0x0, "83da7ce32c2bd4"}) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000140)=0x4, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bind$bt_hci(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x3}, 0x6) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 16:32:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x24}}, 0x0) 16:32:52 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x24fe2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000080)) syz_open_dev$tty20(0xc, 0x4, 0x1) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000002, 0x12, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) dup2(r2, r1) 16:32:52 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r1 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) ioctl$FIOCLEX(r4, 0x5451) close(r4) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r4, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x203, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)="8ee2309c47995455ec7dced68eb160c46014b839663252e10fdc61f5e2e2fd88054934d706470c49e1ecb5911b279caf9597c38f7138e265a9c0895eb5c08249a2c2fffbb7cf7c5a067a39e016d7a7be11e2a0359da88dd80144d1175f50989065d52c715c0fec711859e0ef0d7a51407b3c7d181c7a613c92ee0fb23ccfcc9ad88560cba56f1d1efc1e673619d9a31f9815bd4010524cce05589faff0ede4bcae4f0a79b2c7bf7721c3abcb4c37089fe8606a8293f7106711070be0505b1fa4c390dd60589e10d91df26fd0e49770", 0xcf, 0x2001}, 0x2) syz_io_uring_submit(r2, r7, &(0x7f0000000440)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x6000, @fd, 0x6, &(0x7f0000000400)=[{&(0x7f0000000280)}, {&(0x7f0000000340)=""/153, 0x99}], 0x2, 0x4}, 0x9) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r8, 0x0, 0x0}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer, 0x7ff) syz_io_uring_submit(0x0, r7, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 619.239919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:53 executing program 3: syz_emit_ethernet(0xc2, &(0x7f0000000040)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x7, 0x2b, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @ni={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "60c1903e90f727f166b0a13c045729ab6358f0fcb3012539051f1e691b8db1f9fe4a0e817249dd361f21044890ff5736d99f0d83789e2ef178d4181a2e4d6176d4c501197699324a273d4a12ab18cd4473cb697ec0c4bb44fb2ebce2641386c1eb73891fd2a72f18dfc99d9124fa29fdd4816f5309e0ae7a9fb0df44"}}}}}}, 0x0) 16:32:53 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x10, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 16:32:53 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x24fe2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000080)) syz_open_dev$tty20(0xc, 0x4, 0x1) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000002, 0x12, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) dup2(r2, r1) 16:32:53 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000012c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0x13, r1, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000340)=ANY=[]) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 16:32:53 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x87) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x2, 0x0, &(0x7f0000004b80)) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x4}, 0x4) socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r3, 0x0, 0x8800) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x1100, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 16:32:53 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x7) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000100)={@remote, 0x7b}) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000140)=0x5, 0x4) dup2(r0, r1) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffe, @empty}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x644e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000001c0)=ANY=[]) 16:32:53 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x24fe2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000080)) syz_open_dev$tty20(0xc, 0x4, 0x1) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000002, 0x12, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) dup2(r2, r1) [ 619.312396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:53 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x24fe2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000080)) syz_open_dev$tty20(0xc, 0x4, 0x1) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000002, 0x12, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) dup2(r2, r1) [ 619.364371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:53 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x24fe2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000080)) syz_open_dev$tty20(0xc, 0x4, 0x1) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000002, 0x12, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) dup2(r2, r1) 16:32:53 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x7) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000100)={@remote, 0x7b}) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000140)=0x5, 0x4) dup2(r0, r1) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffe, @empty}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x644e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000001c0)=ANY=[]) 16:32:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000012c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0x13, r1, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000340)=ANY=[]) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 16:32:53 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000012c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0x13, r1, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000340)=ANY=[]) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 16:32:53 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r1 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) ioctl$FIOCLEX(r4, 0x5451) close(r4) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r4, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x203, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)="8ee2309c47995455ec7dced68eb160c46014b839663252e10fdc61f5e2e2fd88054934d706470c49e1ecb5911b279caf9597c38f7138e265a9c0895eb5c08249a2c2fffbb7cf7c5a067a39e016d7a7be11e2a0359da88dd80144d1175f50989065d52c715c0fec711859e0ef0d7a51407b3c7d181c7a613c92ee0fb23ccfcc9ad88560cba56f1d1efc1e673619d9a31f9815bd4010524cce05589faff0ede4bcae4f0a79b2c7bf7721c3abcb4c37089fe8606a8293f7106711070be0505b1fa4c390dd60589e10d91df26fd0e49770", 0xcf, 0x2001}, 0x2) syz_io_uring_submit(r2, r7, &(0x7f0000000440)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x6000, @fd, 0x6, &(0x7f0000000400)=[{&(0x7f0000000280)}, {&(0x7f0000000340)=""/153, 0x99}], 0x2, 0x4}, 0x9) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r8, 0x0, 0x0}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer, 0x7ff) syz_io_uring_submit(0x0, r7, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 16:32:53 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x24fe2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000080)) syz_open_dev$tty20(0xc, 0x4, 0x1) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000002, 0x12, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) dup2(r2, r1) 16:32:53 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0xe60, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 16:32:53 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x87) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x2, 0x0, &(0x7f0000004b80)) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x4}, 0x4) socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r3, 0x0, 0x8800) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x1100, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 619.756171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000012c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0x13, r1, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000340)=ANY=[]) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 16:32:53 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000012c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0x13, r1, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000340)=ANY=[]) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) [ 619.821525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 619.873467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:53 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x13, r0, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x61d69414, 0x100000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58af, 0x0, 0x2, 0x0, 0x0) 16:32:53 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x7) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000100)={@remote, 0x7b}) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000140)=0x5, 0x4) dup2(r0, r1) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffe, @empty}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x644e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000001c0)=ANY=[]) 16:32:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000012c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0x13, r1, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000340)=ANY=[]) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 16:32:53 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x40087101, &(0x7f0000000040)) 16:32:53 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000012c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0x13, r1, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000340)=ANY=[]) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 16:32:53 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0xe68, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 16:32:53 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x87) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x2, 0x0, &(0x7f0000004b80)) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x4}, 0x4) socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r3, 0x0, 0x8800) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x1100, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 16:32:54 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000030c0)='net/udp6\x00') preadv(r0, &(0x7f0000002400)=[{&(0x7f0000000140)=""/203, 0xcb}], 0x1, 0x0, 0x0) [ 620.286247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:54 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x7) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000100)={@remote, 0x7b}) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000140)=0x5, 0x4) dup2(r0, r1) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffe, @empty}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x644e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000001c0)=ANY=[]) 16:32:54 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x543, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 16:32:54 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') dup3(r1, r0, 0x0) openat(r1, &(0x7f0000000000)='./file1/file0\x00', 0x141e40, 0x182) 16:32:54 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000006900)={0x0, 0x0, &(0x7f00000068c0)={&(0x7f0000006880)={0x14, 0x1, 0x9, 0x101}, 0x14}}, 0x0) 16:32:54 executing program 2: mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x20031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) [ 620.473925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:54 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0xe70, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 16:32:54 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) mount$cgroup(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x300030, &(0x7f0000000380)={[{@name={'name', 0x3d, 'cgroup\x00'}}]}) [ 620.510769] option changes via remount are deprecated (pid=127343 comm=syz-executor.3) [ 620.511517] cgroup: option or name mismatch, new: 0x0 "cgroup", old: 0x0 "" [ 620.515756] option changes via remount are deprecated (pid=127343 comm=syz-executor.3) [ 620.516534] cgroup: option or name mismatch, new: 0x0 "cgroup", old: 0x0 "" [ 620.527602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 620.579639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:55 executing program 7: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 16:32:55 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r2, 0x9) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x0) 16:32:55 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) mount$cgroup(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x300030, &(0x7f0000000380)={[{@name={'name', 0x3d, 'cgroup\x00'}}]}) 16:32:55 executing program 2: mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x20031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) 16:32:55 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') dup3(r1, r0, 0x0) openat(r1, &(0x7f0000000000)='./file1/file0\x00', 0x141e40, 0x182) 16:32:55 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x87) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x2, 0x0, &(0x7f0000004b80)) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x4}, 0x4) socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r3, 0x0, 0x8800) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x1100, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 16:32:55 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0xe90, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 16:32:55 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x13, r0, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x61d69414, 0x100000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58af, 0x0, 0x2, 0x0, 0x0) [ 621.345820] option changes via remount are deprecated (pid=127958 comm=syz-executor.3) [ 621.347090] cgroup: option or name mismatch, new: 0x0 "cgroup", old: 0x0 "" [ 621.350935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:55 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) mount$cgroup(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x300030, &(0x7f0000000380)={[{@name={'name', 0x3d, 'cgroup\x00'}}]}) 16:32:55 executing program 2: mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x20031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) 16:32:55 executing program 7: creat(&(0x7f00000001c0)='./file0\x00', 0x0) writev(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x78, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext={0x3, 0x1}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, 0xfffffffffffffffe) dup3(r1, r0, 0x80000) r2 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r2) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000380)=""/164, 0xa4}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/4096, 0x1000}], 0x3, 0x7f, 0x7) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000100)={0x6, 0x8001, 0x1, 0x32b9}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff001, 0x0, @perf_config_ext, 0x800}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0xfffe, 0x40b, 0x7, 0x7f}) 16:32:55 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') dup3(r1, r0, 0x0) openat(r1, &(0x7f0000000000)='./file1/file0\x00', 0x141e40, 0x182) [ 621.532719] option changes via remount are deprecated (pid=128088 comm=syz-executor.3) [ 621.534063] cgroup: option or name mismatch, new: 0x0 "cgroup", old: 0x0 "" 16:32:55 executing program 2: mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x20031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) 16:32:55 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0xe98, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 16:32:55 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) mount$cgroup(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x300030, &(0x7f0000000380)={[{@name={'name', 0x3d, 'cgroup\x00'}}]}) 16:32:55 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r2, 0x9) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x0) [ 621.744195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 621.777368] option changes via remount are deprecated (pid=128320 comm=syz-executor.3) [ 621.778639] cgroup: option or name mismatch, new: 0x0 "cgroup", old: 0x0 "" [ 621.801614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 621.854920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:56 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r2, 0x9) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x0) 16:32:56 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0xeac, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 16:32:56 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$fscrypt_v1(&(0x7f0000001180), &(0x7f0000001300)={'fscrypt:', @desc2}, &(0x7f0000001340)={0x0, "9efd48cf39d5722d2525343efebd8efe723aed05f0ffafa2734185fda322e061c85fc337d6a171a22ac50d831b4ecc5b3e0ece1c147db224728e0107261333ce"}, 0x48, r0) request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='syz', r1) 16:32:56 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x13, r0, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x61d69414, 0x100000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58af, 0x0, 0x2, 0x0, 0x0) 16:32:56 executing program 3: setns(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic='\x00\x00\x00\x00\x00\x00']}, 0x1c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = dup2(r1, r1) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@empty, @in6=@empty}}, {{@in=@multicast2}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}}}, 0xe8) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@empty, @in6=@empty}}, {{@in=@multicast2}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}}}, 0xe8) setsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f0000000040)={@empty}, 0x14) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000001980)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x6e6ef6f2ecc7bf83}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0xbc, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x8}, @ETHTOOL_A_EEE_MODES_OURS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x1}, @ETHTOOL_A_EEE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_EEE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x9}, @ETHTOOL_A_EEE_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40}, 0x4) readv(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) 16:32:56 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') dup3(r1, r0, 0x0) openat(r1, &(0x7f0000000000)='./file1/file0\x00', 0x141e40, 0x182) [ 622.273426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 622.290072] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=128506 comm=syz-executor.3 [ 622.315369] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=128533 comm=syz-executor.3 [ 622.339701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:56 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r2, 0x9) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x0) 16:32:56 executing program 3: syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x28052, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000000}, 0x12a00, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) shmctl$IPC_RMID(0x0, 0x0) r0 = shmget$private(0x0, 0x3000, 0xc59f771273dd298a, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffa000/0x1000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x7000) shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_INFO(r0, 0xe, &(0x7f00000002c0)=""/4096) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$SHM_STAT(r1, 0xd, &(0x7f00000013c0)=""/198) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000001300)=""/174) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f00000000c0)=""/22) [ 622.393874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:56 executing program 5: setitimer(0x0, 0x0, 0xfffffffffffffffc) 16:32:56 executing program 2: r0 = getpid() r1 = getpgid(0x0) r2 = epoll_create(0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f00000000c0)) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r2, &(0x7f0000000040)={r2}) 16:32:56 executing program 7: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000001400)=""/53, 0x35) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000940)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_mmap}, {@cache_loose}]}}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x145003, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = pidfd_getfd(r2, r1, 0x0) tee(r3, r0, 0x4, 0x0) r4 = fcntl$dupfd(r0, 0x0, r2) r5 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) io_uring_enter(r5, 0x58af, 0x0, 0x2, 0x0, 0x0) fgetxattr(r5, &(0x7f0000000000)=@random={'btrfs.', '\',{[[(\x00'}, &(0x7f0000000380)=""/234, 0xea) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r4}}, './file1\x00'}) 16:32:56 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) pwrite64(r0, &(0x7f00000000c0)="a3", 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0)="a3", 0x1, 0x0) dup2(r3, r2) [ 622.520687] syz-executor.5 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 622.532044] 9pnet: Insufficient options for proto=fd 16:32:56 executing program 3: syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x28052, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000000}, 0x12a00, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) shmctl$IPC_RMID(0x0, 0x0) r0 = shmget$private(0x0, 0x3000, 0xc59f771273dd298a, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffa000/0x1000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x7000) shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_INFO(r0, 0xe, &(0x7f00000002c0)=""/4096) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$SHM_STAT(r1, 0xd, &(0x7f00000013c0)=""/198) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000001300)=""/174) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f00000000c0)=""/22) 16:32:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000080)=@buf) 16:32:56 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x0, &(0x7f0000000040), 0x4) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) dup(r0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 16:32:56 executing program 5: fallocate(0xffffffffffffffff, 0x3, 0x10000, 0x30000000000) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000340)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x4000, &(0x7f00000000c0)=ANY=[]) r0 = syz_mount_image$tmpfs(&(0x7f0000000280), &(0x7f0000000300)='./file1\x00', 0xfffffffffffffff8, 0x1, &(0x7f0000000480)=[{&(0x7f0000000380)="b45dbaa08bf09d2a0670b8837a8ba17c3523eb27e8741c29c308dc063ea06455bd4aaab6fe4b30a72337e09f5683487d2b21aae7175fc26ebbb591c35d4d962ef6a882e2b220a8691e4a9d0fca079d604cdcaac9977890a07e9f1447b9ed047e0c37e73095c1df520e0012cfb172974b532a95f584e4f8d2a5346aed82d12535fc270e4057277adb5a2cd2303d9e0b256b58bcf3bb5b9ab316dcda4abdb79b6dbc9fa29271bef3b7fca7708fbe6b79236215c3a6c3d23dd6f2d8392f857498ed6d45ea1d8a97b28ff089fbe3bddc0458d4b586d8ca70bd717ae5c55d05960f0ca9dff3d596a9d9a39b4f", 0xea, 0x1f}], 0x3a20004, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r1 = creat(0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000200)) read(0xffffffffffffffff, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0, 0x98) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa, 0x10010, r1, 0x10000000) syz_io_uring_setup(0x2a7b, &(0x7f00000004c0)={0x0, 0x3, 0x8, 0x0, 0x18c}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000480), &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_FILES_UPDATE={0x14, 0x3, 0x0, 0x0, 0x6, &(0x7f00000000c0)=[0xffffffffffffffff], 0x1, 0x0, 0x0, {0x0, r7}}, 0x6) syz_io_uring_submit(0x0, r5, &(0x7f0000000580)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}, 0x9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r4, 0x0, 0x80000001) 16:32:56 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2a, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e33313930313834363600"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000005566cbb705fc4d7ea1c5dfc95b00bfe3010000000c00000000000000d1f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="0100000000000500110000000000000000000000040000003c00000000000000", 0x20, 0x560}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="030000001300000023000000ce000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010500)="fffffffffcff0700000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x480, 0xc00}, {&(0x7f0000010a00)="0b0000000c0001022e00000002000000f40302022e2e00"/32, 0x20, 0x1400}, {&(0x7f0000010b00)="00000000000400"/32, 0x20, 0x1800}, {&(0x7f0000010c00)="00000000000400"/32, 0x20, 0x1c00}, {&(0x7f0000010d00)="00000000000400"/32, 0x20, 0x2000}, {&(0x7f0000010e00)="00000000000400"/32, 0x20, 0x2400}, {&(0x7f0000010f00)="00000000000400"/32, 0x20, 0x2800}, {&(0x7f0000011000)="00000000000400"/32, 0x20, 0x2c00}, {&(0x7f0000011100)="00000000000400"/32, 0x20, 0x3000}, {&(0x7f0000011200)="00000000000400"/32, 0x20, 0x3400}, {&(0x7f0000011300)="00000000000400"/32, 0x20, 0x3800}, {&(0x7f0000011400)="00000000000400"/32, 0x20, 0x3c00}, {&(0x7f0000011500)="00000000000400"/32, 0x20, 0x4000}, {&(0x7f0000011600)="504d4d00504d4dffd2f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033300075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x4400}, {&(0x7f0000011700)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x4800}, {&(0x7f0000011800)="ffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300"/1056, 0x420, 0x4c00}, {&(0x7f0000011d00)="0400"/32, 0x20, 0x5400}, {&(0x7f0000011e00)="0500"/32, 0x20, 0x5800}, {&(0x7f0000011f00)="00000000000000000100000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000007000"/96, 0x60, 0x5c00}, {&(0x7f0000012000)="0200"/32, 0x20, 0x6000}, {&(0x7f0000012100)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x6400}, {&(0x7f0000012200)="0300"/32, 0x20, 0x6800}, {&(0x7f0000012300)="0400"/32, 0x20, 0x6c00}, {&(0x7f0000012400)="0500"/32, 0x20, 0x7000}, {&(0x7f0000012500)="00000000000000000100000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000007000"/96, 0x60, 0x7400}, {&(0x7f0000012600)="0200"/32, 0x20, 0x7800}, {&(0x7f0000012700)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d803050766696c653100"/64, 0x40, 0x7c00}, {&(0x7f0000012800)="000002ea0100000001000000270f240c000000000000000000000000000000000601f8030000000006000000779b539778617474723100000601f00300000000060000007498539778617474723200"/96, 0x60, 0x8000}, {&(0x7f0000012900)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xattr2\x00\x00xattr1\x00\x00', 0x20, 0x83e0}, {&(0x7f0000012a00)="0000000000000000d1f4655fd1f4655fd1f4655f00"/32, 0x20, 0x8c00}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f00000000000004000200000000000800050000000af301000400000000000000000000000100000004000000", 0x40, 0x8c80}, {&(0x7f0000012c00)="8081000000180000d1f4655fd1f4655fd1f4655f00000000000001000c00000010000800000000000af303000400000000000000000000000100000012000000010000000100000018000000020000000400000014000000000000000000000000000000000000000000000000000000000000000000000000000000000000008081000000180000d1f4655fd1f4655fd1f4655f00000000000001000c00000010000800000000000af30300040000000000000000000000010000001900000001000000010000001e00000002000000040000001a00"/224, 0xe0, 0x8d00}, {&(0x7f0000012d00)="c041000000300000d1f4655fd1f4655fd1f4655f00000000000002001800000000000800000000000af301000400000000000000000000000c00000005000000", 0x40, 0x9100}, {&(0x7f0000012e00)="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"/768, 0x300, 0x9180}, {&(0x7f0000013100)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x9c00}, {&(0x7f0000013600)='syzkallers\x00'/32, 0x20, 0xa400}, {&(0x7f0000013700)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0xcc00}], 0x0, &(0x7f0000013800)) [ 622.900127] __nla_validate_parse: 9 callbacks suppressed [ 622.900137] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 16:32:56 executing program 3: syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x28052, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000000}, 0x12a00, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) shmctl$IPC_RMID(0x0, 0x0) r0 = shmget$private(0x0, 0x3000, 0xc59f771273dd298a, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffa000/0x1000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x7000) shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_INFO(r0, 0xe, &(0x7f00000002c0)=""/4096) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$SHM_STAT(r1, 0xd, &(0x7f00000013c0)=""/198) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000001300)=""/174) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f00000000c0)=""/22) 16:32:56 executing program 7: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000001400)=""/53, 0x35) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000940)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_mmap}, {@cache_loose}]}}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x145003, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = pidfd_getfd(r2, r1, 0x0) tee(r3, r0, 0x4, 0x0) r4 = fcntl$dupfd(r0, 0x0, r2) r5 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) io_uring_enter(r5, 0x58af, 0x0, 0x2, 0x0, 0x0) fgetxattr(r5, &(0x7f0000000000)=@random={'btrfs.', '\',{[[(\x00'}, &(0x7f0000000380)=""/234, 0xea) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r4}}, './file1\x00'}) 16:32:56 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000500), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) 16:32:56 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000080)) 16:32:56 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x0, &(0x7f0000000040), 0x4) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) dup(r0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 16:32:56 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) setns(0xffffffffffffffff, 0x10000000) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x2a0000, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f832650000000000f30ad022cea3b5906ed71efbac7160411494569681c28281208008c2fd0650ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5127467341e4376c1319a3cb91e308000000f3acaab637ceb7852dafdf71f385cfa97aa0b4888b849ea763a6372e3668ad38b4998b12b7f74f557998f5ab174fbc688112a84bc0"], 0x34}}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000016140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000016580)={0x0, 0x0, &(0x7f0000016540)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {0xf}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {0x4}, [@generic='\x00\x00\x00\x00\x00\x00']}, 0x1c}}, 0x20000000) 16:32:56 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x13, r0, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x61d69414, 0x100000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58af, 0x0, 0x2, 0x0, 0x0) 16:32:56 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x6, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 622.917086] 9pnet: Insufficient options for proto=fd [ 622.919345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:56 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.pending_reads\x00', 0x0, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0) openat(r0, &(0x7f0000000100)='./file0\x00', 0x270f01, 0x49) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x101, 0x5, 0x42, 0x7, 0x3f}) r3 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) close(r3) perf_event_open(0x0, 0x0, 0xc, r3, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x18000, 0x80) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000340)) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x0) 16:32:56 executing program 5: r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace(0x8, r0) rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000580)={0x0, 0x0, 0xffffffb1}) [ 622.982892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:56 executing program 3: syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x28052, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000000}, 0x12a00, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) shmctl$IPC_RMID(0x0, 0x0) r0 = shmget$private(0x0, 0x3000, 0xc59f771273dd298a, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffa000/0x1000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x7000) shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_INFO(r0, 0xe, &(0x7f00000002c0)=""/4096) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$SHM_STAT(r1, 0xd, &(0x7f00000013c0)=""/198) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000001300)=""/174) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f00000000c0)=""/22) 16:32:56 executing program 7: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000001400)=""/53, 0x35) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000940)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_mmap}, {@cache_loose}]}}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x145003, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = pidfd_getfd(r2, r1, 0x0) tee(r3, r0, 0x4, 0x0) r4 = fcntl$dupfd(r0, 0x0, r2) r5 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) io_uring_enter(r5, 0x58af, 0x0, 0x2, 0x0, 0x0) fgetxattr(r5, &(0x7f0000000000)=@random={'btrfs.', '\',{[[(\x00'}, &(0x7f0000000380)=""/234, 0xea) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r4}}, './file1\x00'}) [ 623.035591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:56 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x0, &(0x7f0000000040), 0x4) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) dup(r0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 16:32:56 executing program 0: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x6}, 0x4) dup2(r0, r1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 623.069244] 9pnet: Insufficient options for proto=fd 16:32:56 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.pending_reads\x00', 0x0, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0) openat(r0, &(0x7f0000000100)='./file0\x00', 0x270f01, 0x49) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x101, 0x5, 0x42, 0x7, 0x3f}) r3 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) close(r3) perf_event_open(0x0, 0x0, 0xc, r3, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x18000, 0x80) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000340)) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x0) 16:32:57 executing program 7: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000001400)=""/53, 0x35) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000940)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_mmap}, {@cache_loose}]}}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x145003, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = pidfd_getfd(r2, r1, 0x0) tee(r3, r0, 0x4, 0x0) r4 = fcntl$dupfd(r0, 0x0, r2) r5 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) io_uring_enter(r5, 0x58af, 0x0, 0x2, 0x0, 0x0) fgetxattr(r5, &(0x7f0000000000)=@random={'btrfs.', '\',{[[(\x00'}, &(0x7f0000000380)=""/234, 0xea) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r4}}, './file1\x00'}) 16:32:57 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x6}, 0x4) dup2(r0, r1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 16:32:57 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2) fcntl$dupfd(r1, 0x0, r1) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="fd72616e733d81642ce266646e6f3d", @ANYRESHEX, @ANYBLOB="2c84bffe1e2b35", @ANYRESHEX, @ANYBLOB="2c636169742d5f2a1816b2d3b064755b6368653d6d6d61702c63616368653d6c6f6f73652c000000000000ffff6163f3003d6d6d61702c667363006e746578743d737973613d212c6f626a5f747970653d63616368653d6c6f6f73652c00"/107]) execveat(r0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000080)='t\x82ans=?d,', &(0x7f00000000c0)='cwche=loosu', &(0x7f0000000200)='fs\xc11\x1aiext\x84\xba}\xbf\x95\xd6\x10\x04\x00\x00\x01c(tc\xa7\xd6:\xfe\x88\xfe\x96i/', &(0x7f0000000180)='cache=mmap', &(0x7f00000001c0)='$g\x00'], &(0x7f0000000740)=[&(0x7f0000000380)='h\x00', &(0x7f0000000700)='trans=fd,'], 0x400) r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0xffc0000000000000) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000004, 0x11, r2, 0x10000000) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000440)) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0xfffffffffffffff9) sendmmsg$inet6(r4, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000500)='K', 0x1}, {&(0x7f0000000780)="df2b82b3d6ab2a43373c5961ac37b525053bc3c108b0a45385be2d7fd0b3bb0cd333c5716ccdde5429313f13e44ee9a10d47275b7bc888b8574f9d8d02b7a1d88d30256d0d35b2088cef0f3cc48ed1e2dd57689966850076ebca2ede1aadda3919d17dd5f35d6abe5b3a3b64548574879f493d9c69a049ead37de34fc2c72dd9909779e924f2f5726dc55d0d8b7c802462350fd6145af030c59e6f4eb7d5edf9027329ab5f2c178b8cbff7fce4f92edffa280982bf7bbe86aaf4bb5488bf9f5d9546442da2afe01a346c1b00f9bd3dcb", 0xd0}], 0x2}, 0x200000}], 0x1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd=r4, 0x4, 0x0, 0x2, 0x6bd1a75ed489ac34}, 0x7fff) pread64(r2, &(0x7f0000000040)=""/55, 0x37, 0x0) llistxattr(&(0x7f0000000540)='./file1\x00', &(0x7f0000000580)=""/194, 0xc2) 16:32:57 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 16:32:57 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x0, &(0x7f0000000040), 0x4) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) dup(r0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 16:32:57 executing program 0: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x6}, 0x4) dup2(r0, r1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 16:32:57 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.pending_reads\x00', 0x0, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0) openat(r0, &(0x7f0000000100)='./file0\x00', 0x270f01, 0x49) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x101, 0x5, 0x42, 0x7, 0x3f}) r3 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) close(r3) perf_event_open(0x0, 0x0, 0xc, r3, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x18000, 0x80) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000340)) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x0) 16:32:57 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x25, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 623.420700] 9pnet: Insufficient options for proto=fd [ 623.436997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:57 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x6}, 0x4) dup2(r0, r1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 16:32:57 executing program 0: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x6}, 0x4) dup2(r0, r1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 16:32:57 executing program 3: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) [ 623.490421] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:57 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.pending_reads\x00', 0x0, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0) openat(r0, &(0x7f0000000100)='./file0\x00', 0x270f01, 0x49) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x101, 0x5, 0x42, 0x7, 0x3f}) r3 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) close(r3) perf_event_open(0x0, 0x0, 0xc, r3, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x18000, 0x80) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000340)) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x0) 16:32:57 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = signalfd4(r0, &(0x7f0000000080)={[0x4000000000000000]}, 0x8, 0x800) getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x28, 0x1e, 0xc0b12afe4b722e85, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0xc, 0x0, 0x0, @pid}, @generic="d8"]}, 0x28}, 0x1, 0x0, 0x0, 0x24040080}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00'}) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000240)='./file0\x00', 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) io_uring_enter(r1, 0x728b, 0xaadf, 0x3, &(0x7f00000002c0), 0x8) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1081030000000000) fgetxattr(r2, &(0x7f0000000100)=@random={'os2.', 'nl80211\x00'}, &(0x7f0000000300)=""/226, 0xe2) [ 623.542663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 623.561733] netlink: 'syz-executor.5': attribute type 12 has an invalid length. [ 623.562606] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:32:57 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x6}, 0x4) dup2(r0, r1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 16:32:57 executing program 0: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x6}, 0x4) dup2(r0, r1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 16:32:57 executing program 3: unshare(0x480) unshare(0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = getpid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r1, 0x1000003) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)={0xfffffffe, 0x0, 0x0, 0x0, 0x40000000}) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x5bc) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(r0, 0x0, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x40, 0x5, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000040), 0x8}, 0x10910, 0x3, 0x6, 0x2, 0x854a, 0x5, 0x0, 0x0, 0x7, 0x0, 0x8000}, 0xffffffffffffffff, 0x0, r2, 0x1) prlimit64(0x0, 0x0, &(0x7f0000000080)={0x7}, &(0x7f00000000c0)) r3 = getpgid(0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) ptrace$setopts(0x4206, r3, 0x0, 0x200001) 16:32:57 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r1, 0xd8499488957a772f}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="a492adf8f0921be5c84dcdaa", @ANYRES16=r2, @ANYBLOB="2f77000000000000000001000000"], 0x14}}, 0x20040000) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="00608516ac6c81d3df000000000000000000", @ANYRESDEC, @ANYBLOB="100028bd700008000100000000000c00060001000000010f00"/34], 0x28}}, 0x20002000) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="100027bd7000fddbdf251f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0006000000000000ff35"], 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, 0xe) r3 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r7, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r6}, 0x0) close(r6) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x125ce2, 0x0) syz_io_uring_submit(r8, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r3, 0x58ab, 0x6c25, 0x0, 0x0, 0x0) 16:32:57 executing program 2: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x77359400}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r1, &(0x7f0000000040)=""/55, 0x37, 0x0) 16:32:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}]}, 0x28}}, 0x0) 16:32:57 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r1, 0xd8499488957a772f}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="a492adf8f0921be5c84dcdaa", @ANYRES16=r2, @ANYBLOB="2f77000000000000000001000000"], 0x14}}, 0x20040000) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="00608516ac6c81d3df000000000000000000", @ANYRESDEC, @ANYBLOB="100028bd700008000100000000000c00060001000000010f00"/34], 0x28}}, 0x20002000) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="100027bd7000fddbdf251f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0006000000000000ff35"], 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, 0xe) r3 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r7, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r6}, 0x0) close(r6) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x125ce2, 0x0) syz_io_uring_submit(r8, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r3, 0x58ab, 0x6c25, 0x0, 0x0, 0x0) 16:32:57 executing program 2: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x77359400}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r1, &(0x7f0000000040)=""/55, 0x37, 0x0) 16:32:57 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000000)=0x80, 0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) syz_mount_image$msdos(0x0, &(0x7f0000001400)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYRES16=r2, @ANYRESDEC, @ANYBLOB="d2cc4c7927c428e32bd6fbffc51f173a91a59a045d062e7a1999a402000000001cc8c7cccdf691519db5ed7ff08ee809bb02809c8476c1916f5c7712d2280c2cf41442432f7ab601b0d59b0900c19af659e94f5fdf085f96ec86"]) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x46e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="c96f19de8c5d09002662090e02f6010ca2ecf8c44efb47a796d74f9d53502a56d410c7492a47e039fa8aaf04d1de88c2529cd64bce7706b565449daaa5d23d207e471fbadde1435500d083c6edad3927d1775624a43e07689f7bbd821174b429d5342d41e33fc112d74c3e764182076079a2acff4c925cb0226b60342c78ed0b70d0d4f855df68bdbbf88d82e7fb402597ac51c6a38eb00d27488eb840e0180918c5ffcd9033d31b4c9be2f636be2eb3c75bfa11f58d83003a61369e0000000000e5db78c606000001008a08f0db430b1ea94d5518f5e6e3786f427246c00688af3aa770851aba", @ANYRESHEX=r3, @ANYRESDEC, @ANYBLOB="a99c76d316149599336120081b4e5def127f6ae72dbce226cad6a9c0564ce5dbdba126b533307616c7bb70c85cfedb03a2cd0271fae7cee541"], 0xfdef) fcntl$setlease(r4, 0x400, 0x1) 16:32:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x16, 0x0, 0x0, @u32}]}]}, 0x28}}, 0x0) 16:32:57 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="041f0000000000000502fff80401030502000107c3"], 0x108) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) 16:32:57 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) lseek(r0, 0x9e46, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001180)='stat\x00') pread64(r1, &(0x7f0000000080)=""/4095, 0xfff, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_mmap}], [{@smackfsfloor={'smackfsfloor', 0x3d, ':'}}, {@seclabel}]}}) 16:32:57 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r1, 0xd8499488957a772f}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="a492adf8f0921be5c84dcdaa", @ANYRES16=r2, @ANYBLOB="2f77000000000000000001000000"], 0x14}}, 0x20040000) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="00608516ac6c81d3df000000000000000000", @ANYRESDEC, @ANYBLOB="100028bd700008000100000000000c00060001000000010f00"/34], 0x28}}, 0x20002000) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="100027bd7000fddbdf251f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0006000000000000ff35"], 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, 0xe) r3 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r7, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r6}, 0x0) close(r6) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x125ce2, 0x0) syz_io_uring_submit(r8, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r3, 0x58ab, 0x6c25, 0x0, 0x0, 0x0) 16:32:57 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x117, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 16:32:57 executing program 2: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x77359400}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r1, &(0x7f0000000040)=""/55, 0x37, 0x0) [ 623.989770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:57 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:32:57 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) lseek(r0, 0x9e46, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001180)='stat\x00') pread64(r1, &(0x7f0000000080)=""/4095, 0xfff, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_mmap}], [{@smackfsfloor={'smackfsfloor', 0x3d, ':'}}, {@seclabel}]}}) 16:32:57 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000000)=0x80, 0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) syz_mount_image$msdos(0x0, &(0x7f0000001400)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYRES16=r2, @ANYRESDEC, @ANYBLOB="d2cc4c7927c428e32bd6fbffc51f173a91a59a045d062e7a1999a402000000001cc8c7cccdf691519db5ed7ff08ee809bb02809c8476c1916f5c7712d2280c2cf41442432f7ab601b0d59b0900c19af659e94f5fdf085f96ec86"]) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x46e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="c96f19de8c5d09002662090e02f6010ca2ecf8c44efb47a796d74f9d53502a56d410c7492a47e039fa8aaf04d1de88c2529cd64bce7706b565449daaa5d23d207e471fbadde1435500d083c6edad3927d1775624a43e07689f7bbd821174b429d5342d41e33fc112d74c3e764182076079a2acff4c925cb0226b60342c78ed0b70d0d4f855df68bdbbf88d82e7fb402597ac51c6a38eb00d27488eb840e0180918c5ffcd9033d31b4c9be2f636be2eb3c75bfa11f58d83003a61369e0000000000e5db78c606000001008a08f0db430b1ea94d5518f5e6e3786f427246c00688af3aa770851aba", @ANYRESHEX=r3, @ANYRESDEC, @ANYBLOB="a99c76d316149599336120081b4e5def127f6ae72dbce226cad6a9c0564ce5dbdba126b533307616c7bb70c85cfedb03a2cd0271fae7cee541"], 0xfdef) fcntl$setlease(r4, 0x400, 0x1) 16:32:57 executing program 2: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x77359400}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r1, &(0x7f0000000040)=""/55, 0x37, 0x0) [ 624.046766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:57 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="041f0000000000000502fff80401030502000107c3"], 0x108) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) [ 624.098656] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:58 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000000)=0x80, 0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) syz_mount_image$msdos(0x0, &(0x7f0000001400)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYRES16=r2, @ANYRESDEC, @ANYBLOB="d2cc4c7927c428e32bd6fbffc51f173a91a59a045d062e7a1999a402000000001cc8c7cccdf691519db5ed7ff08ee809bb02809c8476c1916f5c7712d2280c2cf41442432f7ab601b0d59b0900c19af659e94f5fdf085f96ec86"]) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x46e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="c96f19de8c5d09002662090e02f6010ca2ecf8c44efb47a796d74f9d53502a56d410c7492a47e039fa8aaf04d1de88c2529cd64bce7706b565449daaa5d23d207e471fbadde1435500d083c6edad3927d1775624a43e07689f7bbd821174b429d5342d41e33fc112d74c3e764182076079a2acff4c925cb0226b60342c78ed0b70d0d4f855df68bdbbf88d82e7fb402597ac51c6a38eb00d27488eb840e0180918c5ffcd9033d31b4c9be2f636be2eb3c75bfa11f58d83003a61369e0000000000e5db78c606000001008a08f0db430b1ea94d5518f5e6e3786f427246c00688af3aa770851aba", @ANYRESHEX=r3, @ANYRESDEC, @ANYBLOB="a99c76d316149599336120081b4e5def127f6ae72dbce226cad6a9c0564ce5dbdba126b533307616c7bb70c85cfedb03a2cd0271fae7cee541"], 0xfdef) fcntl$setlease(r4, 0x400, 0x1) 16:32:58 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) lseek(r0, 0x9e46, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001180)='stat\x00') pread64(r1, &(0x7f0000000080)=""/4095, 0xfff, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_mmap}], [{@smackfsfloor={'smackfsfloor', 0x3d, ':'}}, {@seclabel}]}}) 16:32:58 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="041f0000000000000502fff80401030502000107c3"], 0x108) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) 16:32:58 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r1, 0xd8499488957a772f}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="a492adf8f0921be5c84dcdaa", @ANYRES16=r2, @ANYBLOB="2f77000000000000000001000000"], 0x14}}, 0x20040000) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="00608516ac6c81d3df000000000000000000", @ANYRESDEC, @ANYBLOB="100028bd700008000100000000000c00060001000000010f00"/34], 0x28}}, 0x20002000) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="100027bd7000fddbdf251f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0006000000000000ff35"], 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, 0xe) r3 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r7, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r6}, 0x0) close(r6) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x125ce2, 0x0) syz_io_uring_submit(r8, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r3, 0x58ab, 0x6c25, 0x0, 0x0, 0x0) 16:32:58 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r1, 0xd8499488957a772f}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="a492adf8f0921be5c84dcdaa", @ANYRES16=r2, @ANYBLOB="2f77000000000000000001000000"], 0x14}}, 0x20040000) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="00608516ac6c81d3df000000000000000000", @ANYRESDEC, @ANYBLOB="100028bd700008000100000000000c00060001000000010f00"/34], 0x28}}, 0x20002000) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="100027bd7000fddbdf251f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0006000000000000ff35"], 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, 0xe) r3 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r7, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r6}, 0x0) close(r6) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x125ce2, 0x0) syz_io_uring_submit(r8, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r3, 0x58ab, 0x6c25, 0x0, 0x0, 0x0) 16:32:58 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x129, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 16:32:58 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000000)=0x80, 0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) syz_mount_image$msdos(0x0, &(0x7f0000001400)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYRES16=r2, @ANYRESDEC, @ANYBLOB="d2cc4c7927c428e32bd6fbffc51f173a91a59a045d062e7a1999a402000000001cc8c7cccdf691519db5ed7ff08ee809bb02809c8476c1916f5c7712d2280c2cf41442432f7ab601b0d59b0900c19af659e94f5fdf085f96ec86"]) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x46e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="c96f19de8c5d09002662090e02f6010ca2ecf8c44efb47a796d74f9d53502a56d410c7492a47e039fa8aaf04d1de88c2529cd64bce7706b565449daaa5d23d207e471fbadde1435500d083c6edad3927d1775624a43e07689f7bbd821174b429d5342d41e33fc112d74c3e764182076079a2acff4c925cb0226b60342c78ed0b70d0d4f855df68bdbbf88d82e7fb402597ac51c6a38eb00d27488eb840e0180918c5ffcd9033d31b4c9be2f636be2eb3c75bfa11f58d83003a61369e0000000000e5db78c606000001008a08f0db430b1ea94d5518f5e6e3786f427246c00688af3aa770851aba", @ANYRESHEX=r3, @ANYRESDEC, @ANYBLOB="a99c76d316149599336120081b4e5def127f6ae72dbce226cad6a9c0564ce5dbdba126b533307616c7bb70c85cfedb03a2cd0271fae7cee541"], 0xfdef) fcntl$setlease(r4, 0x400, 0x1) 16:32:58 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000000)=0x80, 0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) syz_mount_image$msdos(0x0, &(0x7f0000001400)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYRES16=r2, @ANYRESDEC, @ANYBLOB="d2cc4c7927c428e32bd6fbffc51f173a91a59a045d062e7a1999a402000000001cc8c7cccdf691519db5ed7ff08ee809bb02809c8476c1916f5c7712d2280c2cf41442432f7ab601b0d59b0900c19af659e94f5fdf085f96ec86"]) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x46e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="c96f19de8c5d09002662090e02f6010ca2ecf8c44efb47a796d74f9d53502a56d410c7492a47e039fa8aaf04d1de88c2529cd64bce7706b565449daaa5d23d207e471fbadde1435500d083c6edad3927d1775624a43e07689f7bbd821174b429d5342d41e33fc112d74c3e764182076079a2acff4c925cb0226b60342c78ed0b70d0d4f855df68bdbbf88d82e7fb402597ac51c6a38eb00d27488eb840e0180918c5ffcd9033d31b4c9be2f636be2eb3c75bfa11f58d83003a61369e0000000000e5db78c606000001008a08f0db430b1ea94d5518f5e6e3786f427246c00688af3aa770851aba", @ANYRESHEX=r3, @ANYRESDEC, @ANYBLOB="a99c76d316149599336120081b4e5def127f6ae72dbce226cad6a9c0564ce5dbdba126b533307616c7bb70c85cfedb03a2cd0271fae7cee541"], 0xfdef) fcntl$setlease(r4, 0x400, 0x1) [ 624.575393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 624.627971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:58 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="041f0000000000000502fff80401030502000107c3"], 0x108) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) 16:32:58 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) lseek(r0, 0x9e46, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001180)='stat\x00') pread64(r1, &(0x7f0000000080)=""/4095, 0xfff, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_mmap}], [{@smackfsfloor={'smackfsfloor', 0x3d, ':'}}, {@seclabel}]}}) [ 624.686047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:58 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000000)=0x80, 0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) syz_mount_image$msdos(0x0, &(0x7f0000001400)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYRES16=r2, @ANYRESDEC, @ANYBLOB="d2cc4c7927c428e32bd6fbffc51f173a91a59a045d062e7a1999a402000000001cc8c7cccdf691519db5ed7ff08ee809bb02809c8476c1916f5c7712d2280c2cf41442432f7ab601b0d59b0900c19af659e94f5fdf085f96ec86"]) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x46e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="c96f19de8c5d09002662090e02f6010ca2ecf8c44efb47a796d74f9d53502a56d410c7492a47e039fa8aaf04d1de88c2529cd64bce7706b565449daaa5d23d207e471fbadde1435500d083c6edad3927d1775624a43e07689f7bbd821174b429d5342d41e33fc112d74c3e764182076079a2acff4c925cb0226b60342c78ed0b70d0d4f855df68bdbbf88d82e7fb402597ac51c6a38eb00d27488eb840e0180918c5ffcd9033d31b4c9be2f636be2eb3c75bfa11f58d83003a61369e0000000000e5db78c606000001008a08f0db430b1ea94d5518f5e6e3786f427246c00688af3aa770851aba", @ANYRESHEX=r3, @ANYRESDEC, @ANYBLOB="a99c76d316149599336120081b4e5def127f6ae72dbce226cad6a9c0564ce5dbdba126b533307616c7bb70c85cfedb03a2cd0271fae7cee541"], 0xfdef) fcntl$setlease(r4, 0x400, 0x1) 16:32:58 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000000)=0x80, 0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) syz_mount_image$msdos(0x0, &(0x7f0000001400)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYRES16=r2, @ANYRESDEC, @ANYBLOB="d2cc4c7927c428e32bd6fbffc51f173a91a59a045d062e7a1999a402000000001cc8c7cccdf691519db5ed7ff08ee809bb02809c8476c1916f5c7712d2280c2cf41442432f7ab601b0d59b0900c19af659e94f5fdf085f96ec86"]) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x46e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="c96f19de8c5d09002662090e02f6010ca2ecf8c44efb47a796d74f9d53502a56d410c7492a47e039fa8aaf04d1de88c2529cd64bce7706b565449daaa5d23d207e471fbadde1435500d083c6edad3927d1775624a43e07689f7bbd821174b429d5342d41e33fc112d74c3e764182076079a2acff4c925cb0226b60342c78ed0b70d0d4f855df68bdbbf88d82e7fb402597ac51c6a38eb00d27488eb840e0180918c5ffcd9033d31b4c9be2f636be2eb3c75bfa11f58d83003a61369e0000000000e5db78c606000001008a08f0db430b1ea94d5518f5e6e3786f427246c00688af3aa770851aba", @ANYRESHEX=r3, @ANYRESDEC, @ANYBLOB="a99c76d316149599336120081b4e5def127f6ae72dbce226cad6a9c0564ce5dbdba126b533307616c7bb70c85cfedb03a2cd0271fae7cee541"], 0xfdef) fcntl$setlease(r4, 0x400, 0x1) 16:32:58 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000000)=0x80, 0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) syz_mount_image$msdos(0x0, &(0x7f0000001400)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYRES16=r2, @ANYRESDEC, @ANYBLOB="d2cc4c7927c428e32bd6fbffc51f173a91a59a045d062e7a1999a402000000001cc8c7cccdf691519db5ed7ff08ee809bb02809c8476c1916f5c7712d2280c2cf41442432f7ab601b0d59b0900c19af659e94f5fdf085f96ec86"]) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x46e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="c96f19de8c5d09002662090e02f6010ca2ecf8c44efb47a796d74f9d53502a56d410c7492a47e039fa8aaf04d1de88c2529cd64bce7706b565449daaa5d23d207e471fbadde1435500d083c6edad3927d1775624a43e07689f7bbd821174b429d5342d41e33fc112d74c3e764182076079a2acff4c925cb0226b60342c78ed0b70d0d4f855df68bdbbf88d82e7fb402597ac51c6a38eb00d27488eb840e0180918c5ffcd9033d31b4c9be2f636be2eb3c75bfa11f58d83003a61369e0000000000e5db78c606000001008a08f0db430b1ea94d5518f5e6e3786f427246c00688af3aa770851aba", @ANYRESHEX=r3, @ANYRESDEC, @ANYBLOB="a99c76d316149599336120081b4e5def127f6ae72dbce226cad6a9c0564ce5dbdba126b533307616c7bb70c85cfedb03a2cd0271fae7cee541"], 0xfdef) fcntl$setlease(r4, 0x400, 0x1) 16:32:58 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r1, 0xd8499488957a772f}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="a492adf8f0921be5c84dcdaa", @ANYRES16=r2, @ANYBLOB="2f77000000000000000001000000"], 0x14}}, 0x20040000) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="00608516ac6c81d3df000000000000000000", @ANYRESDEC, @ANYBLOB="100028bd700008000100000000000c00060001000000010f00"/34], 0x28}}, 0x20002000) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="100027bd7000fddbdf251f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0006000000000000ff35"], 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, 0xe) r3 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r7, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r6}, 0x0) close(r6) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x125ce2, 0x0) syz_io_uring_submit(r8, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r3, 0x58ab, 0x6c25, 0x0, 0x0, 0x0) 16:32:58 executing program 4: syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000640)={[{@sbsector={'sbsector', 0x3d, 0x100000000000000}}]}) 16:32:58 executing program 0: msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) move_pages(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)=[0x0], 0x0, 0x4) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x4000) 16:32:58 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r1, 0xd8499488957a772f}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="a492adf8f0921be5c84dcdaa", @ANYRES16=r2, @ANYBLOB="2f77000000000000000001000000"], 0x14}}, 0x20040000) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="00608516ac6c81d3df000000000000000000", @ANYRESDEC, @ANYBLOB="100028bd700008000100000000000c00060001000000010f00"/34], 0x28}}, 0x20002000) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="100027bd7000fddbdf251f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0006000000000000ff35"], 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, 0xe) r3 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r7, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r6}, 0x0) close(r6) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x125ce2, 0x0) syz_io_uring_submit(r8, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r3, 0x58ab, 0x6c25, 0x0, 0x0, 0x0) 16:32:58 executing program 4: pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = io_uring_setup(0x6a35, &(0x7f0000000300)) dup3(r0, r1, 0x0) poll(0x0, 0x0, 0x65) 16:32:58 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000000)=0x80, 0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) syz_mount_image$msdos(0x0, &(0x7f0000001400)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYRES16=r2, @ANYRESDEC, @ANYBLOB="d2cc4c7927c428e32bd6fbffc51f173a91a59a045d062e7a1999a402000000001cc8c7cccdf691519db5ed7ff08ee809bb02809c8476c1916f5c7712d2280c2cf41442432f7ab601b0d59b0900c19af659e94f5fdf085f96ec86"]) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x46e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="c96f19de8c5d09002662090e02f6010ca2ecf8c44efb47a796d74f9d53502a56d410c7492a47e039fa8aaf04d1de88c2529cd64bce7706b565449daaa5d23d207e471fbadde1435500d083c6edad3927d1775624a43e07689f7bbd821174b429d5342d41e33fc112d74c3e764182076079a2acff4c925cb0226b60342c78ed0b70d0d4f855df68bdbbf88d82e7fb402597ac51c6a38eb00d27488eb840e0180918c5ffcd9033d31b4c9be2f636be2eb3c75bfa11f58d83003a61369e0000000000e5db78c606000001008a08f0db430b1ea94d5518f5e6e3786f427246c00688af3aa770851aba", @ANYRESHEX=r3, @ANYRESDEC, @ANYBLOB="a99c76d316149599336120081b4e5def127f6ae72dbce226cad6a9c0564ce5dbdba126b533307616c7bb70c85cfedb03a2cd0271fae7cee541"], 0xfdef) fcntl$setlease(r4, 0x400, 0x1) 16:32:58 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x14}, 0x14}}, 0x0) 16:32:58 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000000)=0x80, 0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) syz_mount_image$msdos(0x0, &(0x7f0000001400)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYRES16=r2, @ANYRESDEC, @ANYBLOB="d2cc4c7927c428e32bd6fbffc51f173a91a59a045d062e7a1999a402000000001cc8c7cccdf691519db5ed7ff08ee809bb02809c8476c1916f5c7712d2280c2cf41442432f7ab601b0d59b0900c19af659e94f5fdf085f96ec86"]) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x46e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="c96f19de8c5d09002662090e02f6010ca2ecf8c44efb47a796d74f9d53502a56d410c7492a47e039fa8aaf04d1de88c2529cd64bce7706b565449daaa5d23d207e471fbadde1435500d083c6edad3927d1775624a43e07689f7bbd821174b429d5342d41e33fc112d74c3e764182076079a2acff4c925cb0226b60342c78ed0b70d0d4f855df68bdbbf88d82e7fb402597ac51c6a38eb00d27488eb840e0180918c5ffcd9033d31b4c9be2f636be2eb3c75bfa11f58d83003a61369e0000000000e5db78c606000001008a08f0db430b1ea94d5518f5e6e3786f427246c00688af3aa770851aba", @ANYRESHEX=r3, @ANYRESDEC, @ANYBLOB="a99c76d316149599336120081b4e5def127f6ae72dbce226cad6a9c0564ce5dbdba126b533307616c7bb70c85cfedb03a2cd0271fae7cee541"], 0xfdef) fcntl$setlease(r4, 0x400, 0x1) 16:32:58 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) writev(r0, &(0x7f0000002200)=[{&(0x7f00000011c0)="fbecee8c3ba8dccfbf84ef1fade7d2e70762f742e324472c0ec4124499f145540989ca745899145f352c1c778bcfc4255d328042dba7c83bc6526de7930d2474c956e3a1b9c2ae49da334cb33a9dc60ce3b688ccabc5acc47bce6b1999cfe4bfdec9e11393f4c8c13d002b4c0124f131de96214b3206045cd345c741c3713f28cff1978607a6bf39962935f1b40a876bcae49c0be38f32bc37c7507600238b3ecfae2cec446858d38730538b71cda975dcbfb101a82e5c63d49138c2a6ff2fa26a6bb855c825f9790575f003412e683470528a4358b94a16b1b0e7926f85cbab7c070be5552beefd44842118d5f481d8e3d633d9e152a152e1c59c3882197dd05a47c60d47f17bbef8d98a79f9c38116ad9df3c80431847add10a214baad2301601cecbef20826974982e06fa6a27e49b720c9da4e2c2dc8b6db818dfec7f9c06e9102013c42ce3b0e8b179e159c25f991c0727f3a7ceb3bc190f2b93cc1394defd9b560660b559cb76d80a9ea6158a6d9bfccb79c95ca84f29333352475b51578760ebf17f74fbba15f9d53c17a66a71474f3c85463341044cbfc5be5f19dae8bb9f20f2bc4d987f3121496b296deefacf451eeda504c0c3316111dceb8794abf2f4ef7d1e33eb8a67d158338dabfc5160e92b5af00a6a592730e982fc946c66621702d06132660d9fda4d499d72eec5ba5c214a9ae2a6bf4912dcb45951335c22b3f5ca05723479c0c7cb5c28015a9063bce368acd7b5f4be8677651e8f5f66a7d50473a0b05ff3053471ef5710f5782d141bad537aa386778536ac7801a457d9b54626ddd4200740039c12b4e2a67ed68a14312fc6df194741d0895bc7020e67f4cad28164babbfb0b0a0a00fa940afe71b9885ae386461c9b11a9a2fb56130a3332551b1f5ffb10e0abf05e99a1247f8b9ea66e032160e0e463061e5ef2ffdf815ac8b03ac0f43907e37f8acfe806413869dd4d88955565e2bae659755bcb98e08e4e3a211890c5f621342bfe958e0e17a80fed64011fd6ebfd8f578028fb7ad959a5c6f3a3ccec765c2a2b73510aa032c53bc39cf5d272a74a4f72416fd9b8791067c0281b19c471d9e98ee0beff4742ce88afcbaf8d9d4ce22b4f1238014be90975b844780d43ceca8a4b91d6648f4c1a9018522b7af18e6b6a3c01d8c5f8eb696e6c434efbd8990295f4959fd1cb17436b40f3024c61138bbdaa81e85aeb376e8358dba66cb1eee16cb16d31ebdd94851deac9129bc62c56a4ec411095d9ba60ea1ab4582e6413857bc19796d81f97e82527f7aabdb329b0987ffa909a449faf52c351b41a125ad5ccc86de80f070775029773e6ea03649bbf932f9ed5a1974eca92a7540c2d708160fbd3e2f7b8646a47aad27041c40948788f7d462cfefa092774e92e1719bc280525b1f1703aa76e9fd917f7e08cb234bb34065c0ca9c13581796c0c3703cc0263bd514c2f2ed766b56c80fb5c7ad65eb561239ca1f426bfeccc9b46175ee5707fc74b7398fa77440970229d9f4e2d41b72eb7f8387b922c7bc27e5fbb554ec7f8ed1ad783121a26044102f2880ea54d6bf727e1c295c0d148dd856cc3043c6fa3cf05225c17dea01b6b0ec054e32953ffec00c3d9b0e20825ce4abc27d0380badc5e1c93da9e567b464be3adfa3aab00d8d75ff708d65bec5f957feeab14f3c757b2669672458d0cf19a27b0b6bf2e42193da6c4ff3c1d9f677422fd1f51d7eacaa273a8d576b2f99ae28ed60973f1a246c51f6ed3afac97556fadd81227009a7023091c5b88d90672aa64a0efb8cb2366418b1c10195701ecaaa1c30f86021cf7b1c1c9d4503ae831a1eb17229cea26be9192cd51fad2590e68511c142ac1a7aa406a19ab9ac36ad40cdbb2d034c74c7fff046ee72441d1b0d13ef8a15aa577d2a8fc2a87b40cdf008b850d2629f8e4a4a4cf4900c3271e63c6c2cb709e88ecc5ca6273905645981148d030a1ff657bec607067e351144585fd31c1413ada3af91b2655325cb721077e9c5bdb63ba247bf9ea7b2291343d3f7a3aa0368b630a4932d57ba87d0c10fb90b946ffe3d0ce707637154ae92ec29aac00f2cfa4d5f959ec5b639e478efc4bf99edf60e4bc25afdbacd0447b8554a4e064751742cbaebcc032a0675131fe16cf1a880bae3087991a2cad66557d063c8eeb06c69d1598a945c17b8d876a80782a1841fa5942fb4ef09f1be3483de412a6e1adee2ab2fae4fcc00e53979e4c06356c6e5ca9b2499e7fa33a094c2d3bb866ed4c4e92b519a89e1708195e0e3e632f5047c3c4a559b73769c7c69a0c2475c14ff54ae65034bab867c137762f7ee7727b8a79d589dffefe9581b6fb541162c6a9461ef90662f0a39aff0e5892ac48afd725a416564d25789fae0e54237348ed7a51afc7e248f629721c9cc4f1794d6fa3bb8a8a62237dc84efed8b6929ae8525ce989c5de0dbec39bf89234ebe47387b24f2464e4d3ba662af671becaeae1f7bb1be3e09e9884cb6f876f9bf6cb9f878d5fafc342a4861bb73b77c33e919396bec59dfe76883900b19ff3f4626fa1633ea1c5f4e02fd55009c1b8aa27d1f59b283792d1430c9ec19974929541d7c6a17deb21dfcdf9c0036a93bdff2ff4bbb40d7f965d44236ca89bfec2e3539fe51d07dd0519b61b5b33bb2721705ffae804f25fcec6e09c0b79013d1701823ec561d87192350d0fc54c85b8bc09d03de7398e90b43a7c34206918411c7965291d3d787a7be6468562f41281244f2a427e86a7787f4a8d28f522a227621b3424fecdfaa07ba8ac86ecc57273dfc3e35540103a1359137627eddf3bde541d4ea3e3b882fee8ef41ca6e2e2a7f4aa77a71e2a448f48aff9fddefe1bb5c5229e0d2687d53967f9d051a926e469118a4d83646da27c4ea13ce8cd65b975fb983d339214dddbda96ecde7ff7115fc8821b7fc1ba2550d469bee391b30b4a80946a772cb947b891b4ef7f2e84b92ddef17e9e5b82b16942eed8e89b9f2a4d2e5effe46c4d63d192ec6e4de3d9956025440ea8f2dd024cd7b1ab25f601dae48af8cf1d8250045ecb810c22e8dab94e48554e595e5a70ec69b44", 0x88a}], 0x1) 16:32:58 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 16:32:58 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0) 16:32:58 executing program 4: pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = io_uring_setup(0x6a35, &(0x7f0000000300)) dup3(r0, r1, 0x0) poll(0x0, 0x0, 0x65) [ 625.193529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:58 executing program 5: clock_adjtime(0xa, &(0x7f0000001100)) 16:32:58 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) mount$9p_unix(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x60, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=unix,no']) 16:32:59 executing program 5: getgroups(0x0, &(0x7f0000000180)) mount$tmpfs(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), r0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="28010000", @ANYRES16=r1, @ANYBLOB="020229bd8500fddbdf253a00000008000300", @ANYRES32=r3, @ANYBLOB="00006500fbff000006006500ff00000006006500010000003b005b0036bb1a6a06a95fe6cf645f9562206bfd49392e43ab875f3bc7dd35c80a7c3ca63afa659948effd32c65ea56353da57cb978d575c11882b0000005b007b7632985b2dfcc91cd241fa11de9cd60a474fbcad10bf4b86b4a1495fe864f5e3f8c1cf14deaa48fbbb35be3ca785fbab45e8f6839d4b65e7b5d1a67d3f005ad4fe78dde994e592194872ac3f000000"], 0x128}, 0x1, 0x0, 0x0, 0x4000001}, 0x4004840) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r7 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) r8 = fcntl$dupfd(r7, 0x406, r7) ioctl$VFAT_IOCTL_READDIR_SHORT(r8, 0x82307202, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r8) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r6, 0x301, 0x0, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 16:32:59 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@private}}}, [@sec_ctx={0xc, 0x8, {0x2}}]}, 0xcc}}, 0x0) 16:32:59 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x4, 0x0, 0x0, 0x0, 0x300}}) [ 625.281898] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 16:32:59 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) writev(r0, &(0x7f0000002200)=[{&(0x7f00000011c0)="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", 0x88a}], 0x1) 16:32:59 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x12, 0x0, &(0x7f0000000440)) 16:32:59 executing program 7: fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) clock_gettime(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000004580)='smaps\x00') 16:32:59 executing program 4: pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = io_uring_setup(0x6a35, &(0x7f0000000300)) dup3(r0, r1, 0x0) poll(0x0, 0x0, 0x65) 16:32:59 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 16:32:59 executing program 2: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000180)={0x1f, 0x0, {0x3, 0x0, 0xfffffffd, 0x3, 0xb0}, 0x7}) lstat(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=@sha1={0x1, "e8d5f13006fecffff8d402b3a3f8acc7d2fa74d0"}, 0x15, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) 16:32:59 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)=ANY=[], 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x40095505, 0xb000000) 16:32:59 executing program 3: sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4008094}, 0x4004) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd21}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x2, 0x2, &(0x7f0000000200)=[{&(0x7f0000000180)="c9014b2e619faa4fda04f312c1d281330f655b798c81a4584d", 0x19, 0x3}, {&(0x7f00000001c0)="3bb38ecbe8e1a6c1076edf5080567d5e157bea44f587c3d2ce87cb14b0e3b2a20a6f2f15259ab409b2264c604e7fcd85526841326f887b0952", 0x39, 0x7}], 0x10000, &(0x7f00000003c0)={[{'#.&/^'}, {'*.\x16!-'}, {}], [{@fsuuid={'fsuuid', 0x3d, {[0x62, 0x65, 0x31, 0x38, 0x30, 0x69, 0x66, 0x31], 0x2d, [0x65, 0x63], 0x2d, [0x35, 0x36, 0x35, 0x62], 0x2d, [0x0, 0x31, 0x32, 0x37], 0x2d, [0x34, 0x34, 0x65, 0x36, 0x5, 0x66, 0x36, 0x33]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}]}) 16:32:59 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) writev(r0, &(0x7f0000002200)=[{&(0x7f00000011c0)="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", 0x88a}], 0x1) 16:32:59 executing program 5: getgroups(0x0, &(0x7f0000000180)) mount$tmpfs(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), r0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="28010000", @ANYRES16=r1, @ANYBLOB="020229bd8500fddbdf253a00000008000300", @ANYRES32=r3, @ANYBLOB="00006500fbff000006006500ff00000006006500010000003b005b0036bb1a6a06a95fe6cf645f9562206bfd49392e43ab875f3bc7dd35c80a7c3ca63afa659948effd32c65ea56353da57cb978d575c11882b0000005b007b7632985b2dfcc91cd241fa11de9cd60a474fbcad10bf4b86b4a1495fe864f5e3f8c1cf14deaa48fbbb35be3ca785fbab45e8f6839d4b65e7b5d1a67d3f005ad4fe78dde994e592194872ac3f000000"], 0x128}, 0x1, 0x0, 0x0, 0x4000001}, 0x4004840) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r7 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) r8 = fcntl$dupfd(r7, 0x406, r7) ioctl$VFAT_IOCTL_READDIR_SHORT(r8, 0x82307202, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r8) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r6, 0x301, 0x0, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) [ 625.437009] udc-core: couldn't find an available UDC or it's busy [ 625.437644] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 16:32:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r2 = fcntl$dupfd(r1, 0x0, r0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, 0x12, 0xc21, 0x0, 0x0, {}, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x8000000000000}]}, 0x20}}, 0x0) 16:32:59 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) writev(r0, &(0x7f0000002200)=[{&(0x7f00000011c0)="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", 0x88a}], 0x1) 16:32:59 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = getpgrp(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="c46373e9"]) pidfd_open(r4, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 16:32:59 executing program 4: pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = io_uring_setup(0x6a35, &(0x7f0000000300)) dup3(r0, r1, 0x0) poll(0x0, 0x0, 0x65) 16:32:59 executing program 3: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x82802) 16:32:59 executing program 5: getgroups(0x0, &(0x7f0000000180)) mount$tmpfs(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), r0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="28010000", @ANYRES16=r1, @ANYBLOB="020229bd8500fddbdf253a00000008000300", @ANYRES32=r3, @ANYBLOB="00006500fbff000006006500ff00000006006500010000003b005b0036bb1a6a06a95fe6cf645f9562206bfd49392e43ab875f3bc7dd35c80a7c3ca63afa659948effd32c65ea56353da57cb978d575c11882b0000005b007b7632985b2dfcc91cd241fa11de9cd60a474fbcad10bf4b86b4a1495fe864f5e3f8c1cf14deaa48fbbb35be3ca785fbab45e8f6839d4b65e7b5d1a67d3f005ad4fe78dde994e592194872ac3f000000"], 0x128}, 0x1, 0x0, 0x0, 0x4000001}, 0x4004840) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r7 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) r8 = fcntl$dupfd(r7, 0x406, r7) ioctl$VFAT_IOCTL_READDIR_SHORT(r8, 0x82307202, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r8) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r6, 0x301, 0x0, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 16:32:59 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 16:32:59 executing program 3: syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x32, 0x0, @dev, @private=0xa010100, {[@lsrr={0x83, 0x5}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x7, 0x5}}}}}}, 0x0) 16:32:59 executing program 2: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000180)={0x1f, 0x0, {0x3, 0x0, 0xfffffffd, 0x3, 0xb0}, 0x7}) lstat(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=@sha1={0x1, "e8d5f13006fecffff8d402b3a3f8acc7d2fa74d0"}, 0x15, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) [ 625.628193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:32:59 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) [ 625.679819] udc-core: couldn't find an available UDC or it's busy [ 625.680684] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 625.682735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 625.684642] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 16:32:59 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000200)="5ac18ca924e42358b9d00675bd72ad87", 0x10}], 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_readv(0x0, &(0x7f00000000c0)=[{&(0x7f0000002840)=""/218, 0xda}], 0x3e, &(0x7f00000029c0), 0x2, 0x0) 16:32:59 executing program 5: getgroups(0x0, &(0x7f0000000180)) mount$tmpfs(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), r0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="28010000", @ANYRES16=r1, @ANYBLOB="020229bd8500fddbdf253a00000008000300", @ANYRES32=r3, @ANYBLOB="00006500fbff000006006500ff00000006006500010000003b005b0036bb1a6a06a95fe6cf645f9562206bfd49392e43ab875f3bc7dd35c80a7c3ca63afa659948effd32c65ea56353da57cb978d575c11882b0000005b007b7632985b2dfcc91cd241fa11de9cd60a474fbcad10bf4b86b4a1495fe864f5e3f8c1cf14deaa48fbbb35be3ca785fbab45e8f6839d4b65e7b5d1a67d3f005ad4fe78dde994e592194872ac3f000000"], 0x128}, 0x1, 0x0, 0x0, 0x4000001}, 0x4004840) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r7 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) r8 = fcntl$dupfd(r7, 0x406, r7) ioctl$VFAT_IOCTL_READDIR_SHORT(r8, 0x82307202, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r8) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r6, 0x301, 0x0, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) [ 625.734632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 625.764108] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 626.185503] udc-core: couldn't find an available UDC or it's busy [ 626.186695] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 16:32:59 executing program 2: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000180)={0x1f, 0x0, {0x3, 0x0, 0xfffffffd, 0x3, 0xb0}, 0x7}) lstat(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=@sha1={0x1, "e8d5f13006fecffff8d402b3a3f8acc7d2fa74d0"}, 0x15, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) 16:32:59 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000200)="5ac18ca924e42358b9d00675bd72ad87", 0x10}], 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_readv(0x0, &(0x7f00000000c0)=[{&(0x7f0000002840)=""/218, 0xda}], 0x3e, &(0x7f00000029c0), 0x2, 0x0) 16:32:59 executing program 5: r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000004280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r1, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f0000004380)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004580)=[@mark={{0x14}}], 0x18}}], 0x2, 0x0) close(0xffffffffffffffff) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000004280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r2, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f0000004380)=[{&(0x7f00000042c0)="0e", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004580)}}], 0x2, 0x0) fsetxattr$security_capability(r2, 0x0, &(0x7f0000000040)=@v1={0x1000000, [{0x8, 0x1ff}]}, 0xc, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xff}}, './file1\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x1, 0x0, r3, &(0x7f0000000140), &(0x7f0000000240)='./file1\x00', 0x8}, 0x10000) 16:32:59 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = getpgrp(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="c46373e9"]) pidfd_open(r4, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 16:32:59 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) creat(&(0x7f00000001c0)='./file0/file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x125063, 0x0) 16:32:59 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_adj\x00') pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="ab", 0x1}], 0x1, 0x0, 0x0, 0x5) 16:32:59 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 16:32:59 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x10000000) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000003, 0x1f012, r1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x100000f, 0x1f012, r0, 0x0) [ 626.278720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 626.286834] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.287387] print_req_error: 366 callbacks suppressed [ 626.287400] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 626.288896] buffer_io_error: 366 callbacks suppressed [ 626.288904] Buffer I/O error on dev sr0, logical block 0, async page read [ 626.290176] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.290706] blk_update_request: I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 626.291689] Buffer I/O error on dev sr0, logical block 1, async page read [ 626.292497] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.292980] blk_update_request: I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 626.293870] Buffer I/O error on dev sr0, logical block 2, async page read [ 626.294707] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.295191] blk_update_request: I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 626.296104] Buffer I/O error on dev sr0, logical block 3, async page read [ 626.296951] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.297464] blk_update_request: I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 626.298363] Buffer I/O error on dev sr0, logical block 4, async page read [ 626.299336] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.299830] blk_update_request: I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 626.300741] Buffer I/O error on dev sr0, logical block 5, async page read [ 626.301561] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.302056] blk_update_request: I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 626.302952] Buffer I/O error on dev sr0, logical block 6, async page read [ 626.303936] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.304469] blk_update_request: I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 626.305370] Buffer I/O error on dev sr0, logical block 7, async page read [ 626.306468] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.306958] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 626.307899] Buffer I/O error on dev sr0, logical block 0, async page read [ 626.308837] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.309370] blk_update_request: I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 626.310314] Buffer I/O error on dev sr0, logical block 1, async page read [ 626.311231] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.312042] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.312940] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.313724] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.314547] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.315366] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.316158] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.317068] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.319359] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.322882] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.323657] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.326493] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.327591] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.328292] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.329214] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.330068] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.330875] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.331862] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.332541] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.333742] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.334610] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.335614] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.336479] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.337574] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.338598] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.339603] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.340450] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.341105] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.342048] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.342720] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.343701] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.344314] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 16:33:00 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000200)="5ac18ca924e42358b9d00675bd72ad87", 0x10}], 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_readv(0x0, &(0x7f00000000c0)=[{&(0x7f0000002840)=""/218, 0xda}], 0x3e, &(0x7f00000029c0), 0x2, 0x0) [ 626.345721] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.346453] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.347197] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.347821] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.348505] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.349087] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.350118] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.350937] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.351899] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.353592] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.354897] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.355597] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.356231] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.357016] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.357636] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.358232] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.358945] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.359552] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.360141] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.360773] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.361387] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.361977] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.362817] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.363574] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.364229] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.364914] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.365608] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.366242] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.366923] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.367609] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.368201] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.368824] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.369426] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.370007] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.370602] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.371174] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.371779] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.372397] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.373184] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.374187] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.374881] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.375584] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.376220] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.376967] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.377623] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.378459] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.379040] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.379679] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.380227] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.381358] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.381941] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.382538] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.383109] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.383721] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.384533] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.385349] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.385993] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.386684] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.387466] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.388122] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.388770] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.390084] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.390896] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.391534] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.392095] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.392862] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.393543] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.394114] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.394694] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.395327] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.395946] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.396542] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.397113] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.397755] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.398351] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.398928] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.399558] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.400148] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.400957] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.401929] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.402767] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.403709] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.404507] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.405250] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.406081] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.406909] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.407642] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.408200] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.408789] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.409492] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.410067] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.410640] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.411217] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.412027] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.412808] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.414037] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.415173] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.415986] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.416873] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.417692] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.418614] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.419510] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.420211] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.420924] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.421491] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.422032] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.422635] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.423186] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.423770] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.424601] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.425363] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.426196] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.427537] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.428599] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.429812] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.430591] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.431381] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.432160] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.432928] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.433628] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.434165] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.434745] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.435845] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.436416] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.436958] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.437643] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.438564] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.439801] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.449627] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.450725] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.452066] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.455944] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.458045] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.460076] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.460866] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.461665] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.462224] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.462992] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.463572] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.464106] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.464689] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.465232] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 16:33:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0xfef3}]) [ 626.466199] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.468548] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.473653] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.479435] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.480983] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.487663] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.489679] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.491710] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.492489] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.493111] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.493658] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.494172] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.494733] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.495254] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.496173] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.496729] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.498522] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.499466] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.500234] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.501028] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.501844] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.506470] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.507230] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.508553] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.509246] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.509829] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.510372] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.510920] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.512219] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.512874] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.513421] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.513962] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.515593] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.516396] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.519483] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.520217] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.521473] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.522513] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.524515] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.525302] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.526024] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.526743] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.527282] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.527823] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.528393] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.528932] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.529490] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.530014] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.531024] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.531593] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.532116] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.532680] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.533189] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.533737] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.534356] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.534889] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.535627] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.536444] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.539251] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.540074] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.542481] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.543789] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.545557] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.546394] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.547182] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.547878] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.548425] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.548948] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.549491] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.550000] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.550550] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.551078] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.552511] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.554685] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.556683] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.561483] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.562214] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.563054] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.564717] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.565517] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.566227] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.567165] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.567728] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.568413] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.568945] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.569495] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.570000] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.571161] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.572579] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.574003] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 16:33:00 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$SO_COOKIE(r0, 0x1, 0x29, 0x0, &(0x7f0000000040)) [ 626.578487] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.581482] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.582783] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.583615] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.586759] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.589524] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.590339] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.590871] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.591414] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.591940] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.592938] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.593481] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.593995] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.594698] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.595546] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.596461] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.597627] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.598498] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.599215] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.600084] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 16:33:00 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 626.602498] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.603645] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.604665] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.605231] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.605801] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.606565] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.607116] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.607693] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.608231] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.608971] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.609717] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.610786] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.611632] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.612581] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.614584] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.616759] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 16:33:00 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000200)="5ac18ca924e42358b9d00675bd72ad87", 0x10}], 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_readv(0x0, &(0x7f00000000c0)=[{&(0x7f0000002840)=""/218, 0xda}], 0x3e, &(0x7f00000029c0), 0x2, 0x0) [ 626.618558] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.620696] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.621962] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.622540] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.623101] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.623783] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.624346] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.624884] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.625453] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.625990] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.626732] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.627745] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.628539] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.629954] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 16:33:00 executing program 0: syz_emit_ethernet(0x6a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}, {@broadcast}]}, @rr={0x7, 0x7, 0x0, [@multicast1]}]}}}}}}}, 0x0) [ 626.643545] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.644908] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.647508] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.648753] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.649474] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.650228] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.650969] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.651520] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.652024] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.652583] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.653089] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.653634] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.655539] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.656239] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.657009] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.657764] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.659516] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.661483] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.663483] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.665504] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.666187] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.666805] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.667348] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.667866] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.668417] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.668926] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.669468] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.669979] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 16:33:00 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x5409, 0x0) [ 626.670798] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.671707] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.672519] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.673233] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.674016] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.675524] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.676231] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.677020] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.677869] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.678627] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.680456] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.681151] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.681886] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.682631] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.683397] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.684123] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.684999] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.686477] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.687185] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.687936] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.688688] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.689486] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.690186] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.691223] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.693371] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.693934] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.695188] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.695767] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.696374] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.696913] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.697476] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.698021] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.698690] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.699231] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.699811] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.700470] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.701016] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.701578] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.702112] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.702721] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.703466] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.704255] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.705388] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.706104] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.707113] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.707884] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.708765] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.709552] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.710481] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.711206] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.711986] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.712720] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.713524] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.714228] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.715002] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.715755] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.716465] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.717020] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.717691] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.718232] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.718806] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.719416] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.719959] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.720536] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.721916] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.722707] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.723874] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.724661] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.725736] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.726366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 626.726537] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.728011] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.728761] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.729693] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.730423] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.731158] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.731890] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.732684] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.733546] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.734304] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.735001] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.735912] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.736645] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.737458] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.738149] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.738941] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.739670] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.741538] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.742225] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.743135] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.743922] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.744794] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.745500] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.746239] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.746963] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 16:33:00 executing program 2: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000180)={0x1f, 0x0, {0x3, 0x0, 0xfffffffd, 0x3, 0xb0}, 0x7}) lstat(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=@sha1={0x1, "e8d5f13006fecffff8d402b3a3f8acc7d2fa74d0"}, 0x15, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) [ 626.748313] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.750463] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.751451] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.752141] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.752937] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.753895] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.754763] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.755801] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.756699] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.757784] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.758664] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.759675] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.760758] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.761572] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.762318] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 16:33:00 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000016c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="400000001f0020002cbd0000008000000001000004d20a00050000005ec72ab9e00000000000000000030000000000000000000062"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x240400c5) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=@updsa={0x178, 0x10, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x32}, @in6=@private0, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "0f24aa6b13c2e62f3556b1cbcfeac2a0"}}, @extra_flags={0x8, 0x18, 0xfd}, @address_filter={0x28, 0x1a, {@in=@multicast1, @in=@remote, 0xa, 0x8, 0x80}}]}, 0x178}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00') r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setown(r2, 0x8, 0x0) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000300)) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001ac0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) [ 626.763037] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.764159] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.764891] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.765809] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.766817] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.767895] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.768663] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.769521] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.770218] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.771044] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.771765] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.772623] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.773452] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 16:33:00 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000200)=@secondary) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000280)=@chain) [ 626.774149] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.774966] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.775715] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.776483] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.777186] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.777918] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.778772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 626.778779] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.778997] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.780820] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.781526] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.782226] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.782949] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.783705] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.784440] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.785309] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.785953] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.786694] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.787523] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.788223] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.788944] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.789703] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.790436] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.791286] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.791972] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.792712] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.793445] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.794156] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.794893] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.795665] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.796434] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.797324] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.797973] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.798709] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.799465] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.800164] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.800855] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.801607] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.802289] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.803126] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.803845] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.804597] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.805250] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.805993] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.806701] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.810576] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.811486] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.812612] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.814468] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.815140] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.815858] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.816653] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.817346] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.818040] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.818952] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.819885] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.820731] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.821455] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.822151] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.822857] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.823610] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.824301] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.824986] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.825817] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.826564] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.827254] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.827995] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.828799] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.830957] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.832081] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.836703] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 16:33:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x90, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r1 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./mnt\x00', 0x0, 0x16, 0x0, 0x2000008, &(0x7f00000003c0)=ANY=[]) r2 = openat(r1, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) write$P9_RWSTAT(r2, &(0x7f0000000280)={0x7}, 0x7) setsockopt$inet6_tcp_int(r2, 0x6, 0x10, &(0x7f0000000340)=0x1, 0x4) r3 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./mnt\x00', 0x0, 0x16, 0x0, 0x2000008, &(0x7f00000003c0)=ANY=[]) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x2) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000380)=0x1) r5 = openat(r3, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x2) ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f0000000500)={0x3, &(0x7f0000000480)=[{0x7fffffff, 0x4, &(0x7f00000003c0)="72be9f84", 0x0, 0x1}, {0x100, 0x1000, &(0x7f0000000700)="88b07cef0c39e18b8ab388ee759a51920b02088faa77c0ede335b7f51c822364015117ed4c81038704f7fca78a612bfe153bab6597b8e2fa45d5634d4e97fae59c73125a09a725fc0aec006e4f4bf14ed29562f9cd9723776d9f626f8993af4f498964c70e79a4ae21a402490ebf3dd516a7566acfe06198f4684e1a4d0439dedddb1b967cdead9cc728fff9dd64c8584061e218c7fc28879b8e1be2d6b84ffcdf25b42771ea49a4d568d72e92b5f7482f8fd5de2b3a7fa15f9202d3ad03e5a88ac60c6510f7d7ef0a0b031703f0f30ae4c8f0b50f72a0bab512a6abff81cbc797ac69fd158e8618d7d07623544138375958f5a20c2ded7cbd3ed2a0b5ee6b493636828863ac3f8243bda65ee02d71574da5c3f91587bdb853332f8249fd7b6b4f980c22db97b439cd3374977b4fde9c42e3acbf8e848f52f06ba4a239034add7c8686ed217650d8def54549d35b598849517f23ef348df9d4e6dd677c24ca21a2221e0cc199a1abaa72aaba5c7638dd124ca7ee5e8d1b7027cc51095e25f0b357fa4b6ca00520f40ca2a6fa539856bc0351a5a34899f5d33d7bc4800b8e8b12f2817180a3f631f5a7cab5cd79360212b3d54ecb71ba4f1503ac41879d0fe3d0cd8c5294ca2bdaa2c88b08bb198d2035a8885268ed1d16a64b4d168d99d5f9d807c9990b3046ed52e65b3f6f13a0b0dfc76fc017524dd1cf348046106e5fe63fac2603aef37410c03ee8ef5e9b102f3b57cd106d33ef776dc868848f79ecea59379d240d68621b18928f8fa5c7ce9dfc4eedde7f136b594d85a0e76887b01d896ed8c8691ebae53c69f5de6342be912db9d9740f0aa205619ed2b71d343ad8e139c5408c5dd0bf18ac5dd55301cdb7d623abb1c884828785e06168c73d7fda3a2f2a3af370611420682473db6a892306ee0260e225820065ca6feff5924d7ef33015acaf4a6d9600bf3dea13ccfcdc5da8547a3e17c66e9f950a393e6129854c9b179d5d44166871b905f64f46dbe5fa7723f721752bc3cf0b17a556c0536bfe10c41fcf469bbadecf4a46f4f2612e3a39e9e1600758ce88e0023d1628639c90047b9732019bf1a7380cafd8c565a715cf81042fe973166f5340bc9d6180b8b901633320650ade8178cb80877f6df6ce2227523480091dd02b383a8f26939634a9b7eaf30d9a84311dfbc33ba9c0e777e2647ad5960c36a37b3c969351ae07c7633c61d8bb4a24491e4431974ba6912587fcbf56141b89134cdcdf1f507d39076f2fcd8d5f38bc54b855f9e3161b1c1c1ddbeac87800b3058b0cc6addeb467a08d75f08158755bde5a10b9c250ebd6c744af399be3d8666ae79da46638971d7f7fc6613cd7b971181140c595b59a0798994206fbea6086903d0b0e5474378e3cf4c29097279520d071b212f9ef17106e4fb66867683c6ef75993ca52827e7420bbaa6a8557394e765396cfb74d2b755066534608ec51b0f55379934de8a93574a12116cf5ac315dffb5bfcd62a81b5614254cc203e7cb12acf8e591a5d7945fd98bb33837b6d5b042c6aa84d30d7735da469ce3d41df6ab9b1640c329b8fff949de6126e4aa7cc758c6b9a32a381e95e9574aa94c733b7ecb2a3d3aa8335ffc9c2ab0a28b92f331ba2dc81a7edee7987f44dafe1f8b98541f5a0bd809434a58af4e64408825e3c1dfb6a6f096b70e221790284fb245ed7f9b1112dedfc29cc108d853c966ba3f013c7bcf0a634ef6d412a318ee5be5f3e527a7a07021590d436c3d336775dff80efb4b0e779dd983d7d3f55a5b61a27fbea3f60a7a4466d0a4083fb66b3d5ff3d2d3544a7974f5fdb1c7536e9814bc5d9e3808dd431e0d278116703b08b1f55c26afb49c8da28cda3ad9898438bfa1e9221f6a1b2bd29957fc626622313bbf85a807416824c7c8bb37fe7791c3bdb49f63b066981d1b0cc6778d93c9bd0d83286a2c5603cd29742a5ce15a215fce1601620b64908fbb35c3bebc2c8950f9fa6b430b8322a5318790421f115e08a31d6005e54dc6ba73a8423223fdf41bc7b7deaa33cb9dc67417bab87ee6fbcdb15b901b85992fdc0b77338465ddada404649a7f63ee2a979948e4f530c4cdb50b1f4b63cefa7dc41236df7dc71f8beee1e7ab4f7a7735d1d1e31adf211ad9caf7710050cfb7b5dc62d4538cbf230d6fd2b750655faf822f8901d344fefbd964a8b3b6a24cbdaaadf2e6dde5be3d773c13bbddeeb2345228acce76b12546eff9beba5e50075099d3d11b60a987029306a211bee03d3089aa1d43904cf7d8fca8c5029f0b4143f6805caf0ac6e2951fe74742abf49d1d621cefd261ccdcb1f4588218927d91b59ad257bcdb746ef2b7170bff740127bb21f327d69be7d3f8fe9d38b51d084bf124c88cc5e779cdd24985bf78cda2cc9fd2a9c7fade1c78c0d1c829ce5369b0749eb77f7400f486e01dd0682e22f8d23f4c4a042a1d2cdba076fa273fe365a99128c2cae945712ff1674957fe5105918714ec9309df5eb2a20d9b7a8a3bca99765f4f151c3bca2d956b61f0db42e01766a84c9361066b2cd772bfb5c036fb76728e61f215d2dc1d42b5301ed7c4f31e0bc80decf9bae098c72bc31207a1058652b48381ba01d2ee58ae55c9b6c9499b15d837ad64e334aed15df4a921c052e647aade10fde7a87cae3429f8b8d5725f8bbd6b865a50d21a512d34a394e0e3fd6a60802a1753884d07cab64dde4f42222e433d5f21f7a4fdf32b76c8e521837b32e7049c7fd30e5df62a2a4cce5d2459a425ec8137fdd5e16fa6074a4eec8e1964acedb68e626ba0428def5b42287fcfc441b82b99c0f25ea83fdbf679902e5d62bf077fd7d8c949650170e49282eee8cc465a5a6b3b64828dfa1a56b804464358419894e53c034ca6bdd55349247f86273cc356dfd4bab119531cbd90e6c8893732b3c3c6f57c38ca8b7724404f9ad9910a17aad71b03a0db07c05f6a4b83ed9bcfda44bc6781f014b61daacd471b7ccc348666ac8932fdc823a5d6ca17990140e23b1bf0e1a267ac4130bbf9872002686733dfe432e6945612dcedbf5b12200a29a04254400f0f918d30e0817393285f931d4ea0c878cf2d017960ac2e56a2cbf22448cfdb7eb790f9dd8877d56ec3f4dcf4482cbccad74a9eef2cebc99e684034728b9c0ee06af156ed59e643799b7b819cb0285b3f2da49b1007fdcfca355aa69965070e3ff515cf4bdb6a8ac7d98f65d6de0bbfacb237f24a2601aadee00d94c31031d50936dc13b993246ac0e61602098372f1b4d42e6ee793b6b2e4f414deac3767d46b9acef9cb4ad089c8f7c58146edd0f3d11cbfc4b2b707a5e93bf263d500e0583b0518245fbeb06fdd1af28862e4141b2a23fdb02097e687d081dc1b49a29266a6c8592a147119ba2effb99d859c126c0e79da6bf700e2e50da290da6959a2c05029599621b4a2a2792de81816aa0d34d8d63b54af38818709e5dcd324c74083a6d17d82cb3039f5c96c7af3af893c047a50158592ff58cabba67ed2fdf23fd539791b6497a8026e291a15bbcadcec7e294198360a823aca40e40bfbaba413a09846e85ae8ee473ff1e88887f5cb5cbc0c23208c8830fcfdf5fac083f256b10a1da2ec624f087326048305fa260b1e07b678ecd35e087fa274359303c897e5dea1f7520dca29cc3682b935dd0a36086a3313da9ae034eafed72ba6cd012eb69a3d362e20a94549f68ea5725cbe304c54eac90f228b17c2f6a3356c8b1d48102757d0e1c31379cc561e07ceaf6229774d27c01b75e7a557d23366327d615c918e94d8f5518037408dbeaeaca8854064b6713b3129e59c00368004fdc25cc3119f34fd9c490f7c8fad03d61a5349c14083717ef513599547c2f71a5ea60fa07ade6c16a146319c8678dd241da2a2e22516799f8bf84246f3149e2343c60e1f1cfb8dbaced9168bf5cdf2a087193a4c6c9c6fc54861cb851c9dd2bdeaacc0c5a6db639d2cfe14f0066bc1ead7c4dc2f138be15841db8f3ac2118e44c78875c209fe72b7dfca3d444bf93defb72fc3e0e324fc56927205b7f9866bdd5fdf320144386f48d316764acfa2d866918dab1cee535c75286856aaf018d69c4a456cf005558bc6dcb8b5af7293ecc947761e8049c4fb864fc966ca3cb14a32d66ad6d9fdd2e7e6c9e6b0c83f20d9f8e7895b424062ab54adb80887dd29b9b10281b97598afcb895f80e8a5fbed41828d60b670ee4bc322bdbcd0e604603edfe16405dc37f74bcaa91984734f66b2a0b7d442220c8948368298472471841b6dfe76fc55a2854fd325bdbcf4e97c42864b5a601b53e5d1b90f7e11a8130fa3cf73abd08ac0137ded581391f57ad60a4db19a260cca113b7922cffd6dcab20230cdc5b71bf45cf50cccd9738198eb3b93f08255623023301aedda4c681e9cdd49eb52c3d7918b7be4b17b505ce7eb7ee46555aa9ebd405b8fd55b476348b59d98ea83d46c26fc0638e77760d9d0f4abdc9660408af7cbce78aa3ac13541e6c97fcd000e046efbcc5d8409f322f0bf6a800fe0a0df4430e6b281aa2b9bc7064c70c5f8b801dc8d98d98546fd528e6bdf3c0dc0b1f5ca8368cabbda98abacaf22be1daab8c6a8361ca4f5c136ad4c1267fd8f538d8d295fc7673080ceec4572ccf52e1930d3b0a1524d8802df97b23022c80673b7610c13c080fd1b49bd2b79814058a82d81aa88e36df21eea915526d5ce22cd6d210e418272f0b1a8d9b871f058f3c14a90db3637dccf645c73d697d61fe370b7ec326dec80f51f1076a6371e7f6a0ea1625dcdde0ee404664226013d545315af30640150c4467cf06cfacaa95991361b416a10ed888dea5b4dcf0aa0755dc6a2f7e80844480476a232eb5f4963650c325a897a739e42d77f1d2e8fc6809f80f0f1296b525ecf99b1eca96c9cba6f41e1e517a379b9d8f7f4eb4eaf7cee0e710596653902c131dbf1fd6b550819817ac0c75b564a3583618a0b3f89686a242c3b029b93bc5c7e6c9b735e96554e58562d8b501136814df158fe0d1f7bb48e795b71365c05fff5909abcb17be13549cfe95000d7ad1001d5b1459a7cfc1ea10f190bcd7dbb912ad304fef18406b7222899a5285a0c2b8c8524f8407b22a82d35e3471a237cca651688cdf7f1f5d496efc65a617231023ea20409e2f8bd59c9ca19f5582f86ed8cf5ac7941d9d0b10033a07f43d1eea8d7d8727b42f5085af3b732e562959a00488b58160fd13b6e4b14d2a744ed05112187f84b1e16f349e5ba7e627dc98561789f3f9da9fbc9a1e36368828c954013ca1ff6a9d81850f20009d0af2573335f15106b4d90dc485761e2dd2c926b61ea3892b5d2f217319e89c1f5b88319cef4605496cbf20909357a32209a0e57e14056618f9c32b926652f093571cc46d3c83b699d1004599041bd368b380edf258b46f2e3191880a7ef05fbc5a3e3799258faaa715de4cd2b19b969c5c141da12b162517051116971860abfa5c2f4efb14cbc5b717a6b1d6040c15e0993f87c70f4cd34ae4afe2aca0c485e40d27e21f32e2d785f2f73743915f1e75bb47e4b8d78fc7796f19027a7f37e7d54aeb0d654df5a70b23aed334e0c1c3e580e1baa72596494ff3ebde5e12edef2f10505316e0a2041feae823c965d48872ccc304bc87965ded165aed7501cc78293dc83dd698690ca8ce1647171e2282b5b4ac002fbc139606e3a483151962e14dac534e6b37650ead591223b7a96aabc1c8f3306b801cbef61c54bc889a8b67b3359f550a6b0da185e38f8cf7385a710ee4d153600a", 0x1}, {0xae14, 0x46, &(0x7f0000000400)="c6154fe26911e0dd4dee766a7d9dc384b05e43b60ff4e05497e89e6c1eeca2cdf4ffffe7c669567f15fb6ef5003dc31be51aa2b4204f3debdf99c7f82ea151af3192229dcb85", 0x1}]}) getsockopt$inet6_tcp_buf(r5, 0x6, 0x0, &(0x7f0000000180)=""/34, &(0x7f0000000240)=0x22) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 626.842354] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.843128] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.848532] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.849477] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.852073] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.854949] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.862959] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.864418] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.866790] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.868895] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.870026] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.873199] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.875509] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.877853] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.878823] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.880566] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.883778] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.884886] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.886237] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.890849] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.893154] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.895205] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.896541] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.897403] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.901054] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.905212] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.905991] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.906786] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.907978] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.909048] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.909858] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.911765] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 626.920873] tmpfs: Unknown parameter 'r¾Ÿ„' [ 626.930657] tmpfs: Unknown parameter 'r¾Ÿ„' [ 626.934891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:33:00 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = getpgrp(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="c46373e9"]) pidfd_open(r4, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 16:33:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x10000000) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000003, 0x1f012, r1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x100000f, 0x1f012, r0, 0x0) 16:33:01 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0) 16:33:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) 16:33:01 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x809089, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2154d4, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x2) 16:33:01 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000016c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="400000001f0020002cbd0000008000000001000004d20a00050000005ec72ab9e00000000000000000030000000000000000000062"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x240400c5) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=@updsa={0x178, 0x10, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x32}, @in6=@private0, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "0f24aa6b13c2e62f3556b1cbcfeac2a0"}}, @extra_flags={0x8, 0x18, 0xfd}, @address_filter={0x28, 0x1a, {@in=@multicast1, @in=@remote, 0xa, 0x8, 0x80}}]}, 0x178}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00') r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setown(r2, 0x8, 0x0) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000300)) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001ac0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) 16:33:01 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000016c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="400000001f0020002cbd0000008000000001000004d20a00050000005ec72ab9e00000000000000000030000000000000000000062"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x240400c5) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=@updsa={0x178, 0x10, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x32}, @in6=@private0, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "0f24aa6b13c2e62f3556b1cbcfeac2a0"}}, @extra_flags={0x8, 0x18, 0xfd}, @address_filter={0x28, 0x1a, {@in=@multicast1, @in=@remote, 0xa, 0x8, 0x80}}]}, 0x178}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00') r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setown(r2, 0x8, 0x0) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000300)) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001ac0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) 16:33:01 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 16:33:01 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = getpgrp(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="c46373e9"]) pidfd_open(r4, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 627.329006] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.329677] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.330234] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.330875] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.331514] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.332121] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.332918] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.333548] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.334211] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.334854] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.335462] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.336056] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.336710] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.337336] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.337902] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.338542] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.339176] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.339784] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.340467] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.341049] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.341659] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.342249] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.342876] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.343495] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.344149] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.344791] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.345402] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.345997] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.346614] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.347212] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.347825] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.348482] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.349140] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 16:33:01 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x10000000) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xab9) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, 0x0, 0xffffffffffffff9c) faccessat(0xffffffffffffffff, &(0x7f0000000080)='./file1/file0\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000003, 0x1f012, r2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd_index=0x6, 0x6, {0x0, r0}, 0x1, 0x3}, 0x83e9) creat(&(0x7f0000000040)='./file1/file0\x00', 0x40) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x100000f, 0x1f012, r0, 0x0) [ 627.352412] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.353111] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.355457] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.356026] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.356644] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.359569] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.365634] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.375588] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.377671] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.378740] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.381902] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.382742] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.383494] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.384229] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.385547] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.386225] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.387052] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.387748] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.388523] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.389059] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.389655] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.390473] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.391094] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.391862] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.392733] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.395078] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.395838] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.396693] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.397441] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.398185] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.399587] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.400214] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.400876] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.401564] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.402456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 627.403383] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.403930] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.404692] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.405281] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.405852] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.407615] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.414789] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.424716] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.431452] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.432144] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.432773] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.434035] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.434631] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.435244] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.436273] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.436858] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 16:33:01 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x28, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x14, 0x11, 0x0, 0x1, [@generic="809801a7b0c7dba09475f251c743092f"]}]}, 0x28}}, 0x0) 16:33:01 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000016c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="400000001f0020002cbd0000008000000001000004d20a00050000005ec72ab9e00000000000000000030000000000000000000062"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x240400c5) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=@updsa={0x178, 0x10, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x32}, @in6=@private0, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "0f24aa6b13c2e62f3556b1cbcfeac2a0"}}, @extra_flags={0x8, 0x18, 0xfd}, @address_filter={0x28, 0x1a, {@in=@multicast1, @in=@remote, 0xa, 0x8, 0x80}}]}, 0x178}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00') r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setown(r2, 0x8, 0x0) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000300)) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001ac0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) [ 627.437444] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.439170] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.439761] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.440549] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.441064] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.441836] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.442456] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.442966] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.443555] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.444062] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.444634] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.445146] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.445723] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.447286] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.448015] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.448644] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.449249] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.449852] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.450668] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.451236] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.451904] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.452687] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.453330] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.453900] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.454522] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.455222] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.455963] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.456563] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.457297] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.458071] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.458856] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.459567] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.461288] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.465638] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.466620] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.467201] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.469061] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.469621] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.469808] debugfs: Directory '€˜§°ÇÛ ”uòQÇC !' with parent 'ieee80211' already present! 16:33:01 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000016c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="400000001f0020002cbd0000008000000001000004d20a00050000005ec72ab9e00000000000000000030000000000000000000062"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x240400c5) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=@updsa={0x178, 0x10, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x32}, @in6=@private0, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "0f24aa6b13c2e62f3556b1cbcfeac2a0"}}, @extra_flags={0x8, 0x18, 0xfd}, @address_filter={0x28, 0x1a, {@in=@multicast1, @in=@remote, 0xa, 0x8, 0x80}}]}, 0x178}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00') r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setown(r2, 0x8, 0x0) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000300)) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001ac0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) [ 627.470183] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.472103] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.472898] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.473478] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.473989] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.474621] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.475135] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.475779] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.476374] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.476919] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.477479] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.478019] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.478576] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.479114] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.479659] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.481695] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.482412] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.483387] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.486615] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.487692] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.488368] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.488972] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.490716] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.491415] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.492000] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.492837] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.493404] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.493955] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.494543] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.495109] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.495938] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.497621] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.498201] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.498909] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.499627] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.500994] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.501729] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.502490] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.505368] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.505942] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.506859] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.507659] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.508234] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.508786] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.509528] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.510051] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.510661] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.511737] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.512477] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.513157] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.514110] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.514825] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.515584] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.516251] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.520433] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.521030] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.521656] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.522841] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.523371] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.523931] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.524457] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.524976] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.525574] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.526785] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.527424] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.528041] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.528677] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.529310] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.529884] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.530556] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.531138] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.531736] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.532544] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.533105] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.533692] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.534210] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.535013] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.535584] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.536204] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.540466] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.541058] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.541847] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.542461] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.543056] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.544144] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.545177] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.547420] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.548093] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.548698] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.549284] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.550020] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.550720] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.551467] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.552037] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.552651] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.553334] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.553936] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.554530] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.555136] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.557419] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.558845] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.559876] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.560766] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.561604] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.562143] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.563077] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.563626] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.564133] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.564688] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.565200] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.565769] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.566343] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.566871] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.568593] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.569109] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.569710] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.570220] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.570768] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.571310] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.571946] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.572695] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.573292] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.574242] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.575456] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.576044] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.576668] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.577317] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.578033] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.578894] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.579662] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.580287] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.580902] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.581519] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.582123] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.583768] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.584371] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.584927] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.586027] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.586585] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.587093] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.587754] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.588300] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.588833] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.589516] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.590038] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.590632] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.591143] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.591698] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.592210] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.592770] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.593336] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.593962] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.597665] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.598230] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.598892] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.599508] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.600119] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.600744] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.601391] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.601975] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.602657] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.603173] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.603933] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.604491] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.605005] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.605760] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.606306] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.606907] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.607749] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.608353] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.608956] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.609818] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.610452] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.611019] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.611814] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.612412] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.612947] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.613719] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.614231] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.614823] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.615729] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.616322] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.616856] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.618002] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.618886] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.619492] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.620107] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.620710] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.621347] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.621918] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.622766] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.623386] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.623962] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.624895] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.625460] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.627387] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.627915] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.628486] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.629022] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.629991] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.631142] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.631745] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.633036] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.633663] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.634230] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.635008] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.635610] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.636189] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.639347] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.639890] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.640861] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.641422] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.641930] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.643166] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.643763] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.644420] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.645040] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.645669] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.646305] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.646896] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.647781] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.648397] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.649003] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.649639] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.650163] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.650716] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.651225] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.651770] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.652297] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.652812] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.653352] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.653993] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.654648] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.655211] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.657432] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.658005] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.658639] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.659201] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.660045] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.660635] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.661162] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.662100] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.662629] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.663137] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.663710] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.664221] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.665302] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.665927] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.666934] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.667537] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.668144] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.670072] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.670714] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.671365] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.671938] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.672623] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.673144] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.673709] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.674221] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.675127] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.675692] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.676198] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.676852] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.677518] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.678134] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.679121] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.679757] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.680374] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.680981] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.681569] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.682184] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.683098] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.683682] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.684195] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.686551] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.687098] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.687754] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.688320] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.688869] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.689591] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.692477] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.693069] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.693694] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.694348] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.694942] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.695545] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.696137] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.697382] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.697932] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.698692] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.699197] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.699778] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.701429] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.702134] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.703172] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.703780] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.704464] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.705040] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.705655] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.706223] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.706983] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.707580] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.708106] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.708775] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.709337] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.709996] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.710583] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.711083] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.711639] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.712233] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.712864] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.713474] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.714037] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.714684] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.715249] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.715871] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.716487] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.717511] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.718095] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.718785] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.719498] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.720108] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.720855] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.721588] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.722349] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.723034] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.723753] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.724571] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.725176] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.725901] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.726707] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.727427] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.727999] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.728829] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.729546] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.730245] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.731074] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.731826] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.732599] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.733349] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.734598] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.735296] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.736001] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.736825] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.737553] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.738122] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.739023] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.739744] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.740561] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.741480] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.742076] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.742982] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.743634] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.744223] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.745017] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.745653] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.746241] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.746983] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.747621] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.748219] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.748884] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.749536] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.750129] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.750780] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.751472] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.752152] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.752793] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.753437] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.754044] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.754714] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.755415] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.756031] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.756669] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.757461] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.758050] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.758692] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.759307] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.759940] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.760584] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.761174] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.761796] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.762560] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.763153] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.763808] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.764442] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.765034] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.765666] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.766304] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.766887] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.767630] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.768215] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.768873] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.769531] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.770116] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.770762] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.771589] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.772431] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.773133] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.773765] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.774459] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.775138] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.775817] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.776513] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.777092] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.777753] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 16:33:01 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000240)=0x1, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x14, 0x40, 0x800, 0x0, 0x25dfdbfb, {0x16}}, 0x14}, 0x1, 0x0, 0x0, 0x200040c2}, 0x4000800) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={0x24, @long={0x3, 0xfffc}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xfffffffffffe0306}}}, 0x14) bind$802154_dgram(r0, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x324, 0x0) 16:33:01 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 627.843001] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.843666] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.844240] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.844909] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.845520] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.846123] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.846804] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.847424] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.848100] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.848727] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.849335] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.849929] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.850542] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.851133] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.851733] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.852437] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.853100] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.853716] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.854298] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.854906] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.855497] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.855756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 627.856085] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.857359] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.857927] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.858625] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.859184] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.859811] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.860438] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.861032] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.861630] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.862226] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.862844] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.863575] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.864154] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.864861] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.865680] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.866405] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.867915] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.868892] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.869530] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.870216] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.870848] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.871468] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.872076] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.872993] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.873613] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.876763] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.878533] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.879184] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.879804] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.880484] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.881078] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.881686] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.882580] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.883407] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.884247] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.885033] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.885769] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.886481] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.887151] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.887944] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.888706] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.889509] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.890197] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.891022] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.891866] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.892638] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.893686] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.894906] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.896015] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.897000] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.897869] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.898534] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.899179] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.900717] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.901237] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.901917] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.902450] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.902958] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.903644] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.904366] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.904993] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.905676] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.906287] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.906861] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.907541] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.908445] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.909031] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.909602] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.910136] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.910671] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.911188] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.911761] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.912317] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.912823] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 16:33:01 executing program 0: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000d40)=""/244, 0x7ffff000}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/netlink\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000, 0x6}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000240)}, {&(0x7f0000000500)=""/232, 0xe8}, {&(0x7f0000000600)=""/254, 0xfe}, {&(0x7f0000000700)=""/134, 0x86}, {&(0x7f00000007c0)=""/115, 0x73}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000000000)=""/62, 0x3e}, {&(0x7f0000000040)=""/224, 0xe0}], 0x8) 16:33:01 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000016c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="400000001f0020002cbd0000008000000001000004d20a00050000005ec72ab9e00000000000000000030000000000000000000062"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x240400c5) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=@updsa={0x178, 0x10, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x32}, @in6=@private0, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "0f24aa6b13c2e62f3556b1cbcfeac2a0"}}, @extra_flags={0x8, 0x18, 0xfd}, @address_filter={0x28, 0x1a, {@in=@multicast1, @in=@remote, 0xa, 0x8, 0x80}}]}, 0x178}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00') r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setown(r2, 0x8, 0x0) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000300)) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001ac0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) 16:33:01 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0xd7) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f00000000c0)={0x9, 0x204, 0x402}) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000e2f000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0)="f335696df529ad7377286868057c942ad8dbcdcc7308ca162703c62c724c4b9a15a354a40b42241830c4a0df612899488080f219e95dbf38cf8725db3bcbefe8afe95186719f193b09e6c19e21316486d9f43da98febf912fb56493497657931e71a57bf287bd82c5ea08808fe2b40fb88f5f675b3cd8ba4f559a91ed390be19c9f1895d82ca2e4deb3b17fd8c4577c6852ea31d5729a16c6238a2b25cc0311fe5e6c569c3810c5b814f9ff11523da0b62f3e75dc723d56eca01d2534a2af53d5e5b5577f2e0ed", 0xc7, r0}, 0x68) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f00000001c0)={0x1ff, 0x9, 0x52}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r2, 0x0, 0x10001, 0x0) shutdown(r1, 0x1) 16:33:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x10000000) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000003, 0x1f012, r1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x100000f, 0x1f012, r0, 0x0) 16:33:01 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000007240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000640)="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", 0x2a1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) 16:33:01 executing program 5: [ 627.913387] sr 1:0:0:0: [sr0] tag#0 unaligned transfer perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000016c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="400000001f0020002cbd0000008000000001000004d20a00050000005ec72ab9e00000000000000000030000000000000000000062"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x240400c5) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=@updsa={0x178, 0x10, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x32}, @in6=@private0, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "0f24aa6b13c2e62f3556b1cbcfeac2a0"}}, @extra_flags={0x8, 0x18, 0xfd}, @address_filter={0x28, 0x1a, {@in=@multicast1, @in=@remote, 0xa, 0x8, 0x80}}]}, 0x178}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00') r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setown(r2, 0x8, 0x0) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000300)) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001ac0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) [ 627.914184] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.914856] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.915492] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.916069] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.916683] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.917312] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.917899] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.918748] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.919423] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.920182] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.920826] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.921527] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.922132] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.922764] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.923534] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.924170] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.925238] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.926018] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.926768] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.927586] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.928293] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.928966] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.929822] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.930550] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.931185] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.931941] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.932953] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.933690] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.934333] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.935579] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.936363] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.936987] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.938008] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.938942] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.939803] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.940553] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.941440] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.942134] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.942857] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.943730] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.944393] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.945018] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.945792] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.946680] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.947382] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.947996] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.948568] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.949089] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.949756] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.950389] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.951018] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.951590] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.952149] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.952788] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.953378] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.953898] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.954903] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.956721] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.957467] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.958030] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.958648] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.959225] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.960061] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.960662] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.961402] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.961941] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.962547] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.963062] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.963718] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.964234] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.964824] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.965405] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.966025] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.966640] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.967223] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.968180] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.968785] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.969364] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.969943] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.970811] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.971411] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.971947] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.972823] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.973422] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.973977] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.974554] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.975104] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.975670] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.976551] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.978497] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.979574] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.980166] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.980843] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.981502] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.982111] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.982744] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.983390] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.984090] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.984660] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.985169] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.985746] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.986302] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.986839] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.987396] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.988039] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.988672] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.989305] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.989917] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.990566] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.991161] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.991809] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.992437] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.993024] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.993560] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.994098] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.994783] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.995376] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.996674] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.997204] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.997814] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.998538] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.999167] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 627.999826] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.000465] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.001046] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.001696] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.002311] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.003429] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.004037] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.004730] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.005243] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.005824] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.006382] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.006940] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.007553] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.008092] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.009597] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.022492] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.023117] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.023801] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.026028] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.026658] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.028017] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.028705] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.029289] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.029888] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.030570] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.031138] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.031685] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.032252] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.036364] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.038457] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.039087] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.039802] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.040528] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.042843] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.043773] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.044396] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.044972] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.045865] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.046494] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.047019] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.047621] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.048152] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.048738] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.049254] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.049846] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.050398] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.051036] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.051831] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.052451] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.053010] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.053643] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.054199] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.054803] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.055641] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.056191] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.056783] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.057316] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.057878] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.058417] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.058992] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.059553] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.060123] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.060798] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.061473] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.062033] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.062663] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.063244] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.064087] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.064688] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.065276] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.065937] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.066605] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.067953] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.068605] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.069173] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.069722] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.070377] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.070994] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.071785] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.072494] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.073088] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.073718] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.074305] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.074878] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.075542] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.076114] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.076723] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.077587] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.078107] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.078808] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.080203] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.080752] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.081537] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.082075] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.082769] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.083594] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.084156] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.084861] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.085467] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.086042] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.086663] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.087236] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.087981] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.088622] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.089213] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.089843] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.090449] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.091038] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.091685] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.092302] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.092848] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.093419] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.093989] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.095029] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.095624] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.096250] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.097338] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.097848] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.098568] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.099290] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.099994] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.100647] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.101209] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.101774] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.102471] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.103005] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.103683] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.104251] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.105085] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.105707] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.106377] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.106955] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.107602] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.108182] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.108871] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.109552] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.110080] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.110638] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.111160] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.111719] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.112243] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.112823] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.113473] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.114068] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.114692] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.115277] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.115891] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.116496] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.117094] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.117675] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.118254] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.118788] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.119487] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.119996] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.120561] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.121059] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.121635] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.122135] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.122875] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.123521] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.124115] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.124727] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.125347] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.125945] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.126572] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.127146] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.127788] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.128493] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.129017] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.129534] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.130045] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.130571] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.131060] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.131617] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.132209] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.132821] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.133473] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.134041] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.134708] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.135354] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.135975] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.136633] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.137210] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.137759] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.138444] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.138948] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.139525] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.140024] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.140626] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.141202] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.141846] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.142426] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.143008] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.143593] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.144177] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.144778] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.145434] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.145993] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.146602] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.147211] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.147762] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.148360] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.148889] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.149417] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.149941] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.150540] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.151120] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.151753] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.152463] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.153042] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.153673] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.154291] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.154856] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.155488] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.156040] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.157373] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.158012] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.158580] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.159102] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.159721] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.160214] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.160749] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.161365] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.161920] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.162550] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.163114] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.163760] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.164361] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.164958] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.165587] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.166589] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.167173] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.167866] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.168606] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.169520] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.170216] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.170958] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.171726] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.172535] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.173205] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.173932] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.174663] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.176615] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.177316] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.178036] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.178756] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.179676] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.180238] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.180940] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.182155] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.182786] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.183727] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.184657] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.185248] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.186037] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.186764] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.187802] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.188505] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.189209] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.189956] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.190701] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.191327] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.192119] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.192837] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.193702] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.194530] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.195130] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.195756] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.196504] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.197202] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.197997] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.198725] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.199531] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.200134] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.200941] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.201689] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.202433] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.203009] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.203803] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.204530] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.205241] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.206649] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.207216] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.207854] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.208565] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.209155] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.209908] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.210675] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.211491] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.212081] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.212804] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.213661] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.214231] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.215064] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.215968] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.216705] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.217455] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.218159] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.218881] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.219535] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.220219] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.221044] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.221879] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.222767] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.223597] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.224213] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.224903] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.225645] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.226617] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.227309] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.228414] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.229128] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.229997] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.230744] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.231501] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.232101] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.232873] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.233608] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.234451] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.235189] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.235966] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.236727] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.237613] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.238200] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.238888] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.239577] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.240596] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.241418] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.242135] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.242752] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.243502] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.244212] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.245088] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.245838] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.246591] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.247299] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.248055] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.248911] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.249677] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.250387] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.251116] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.252675] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.253569] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.254515] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.255238] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.255995] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.256958] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.257861] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.258485] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.259196] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.260114] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.260872] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.262301] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.262999] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.263845] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.264679] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.265408] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.266132] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.267010] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.267758] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.268815] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.269863] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.270709] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.271301] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.272003] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.272741] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.273686] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.274817] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.275423] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.276006] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.276707] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.277620] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.278190] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.279190] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 16:33:02 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000007240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000640)="e283ce16926f8d5f3af24c7fa910b94713b4308630175ba640d9d399afb40902e5065e421ca3aecc9780aa4cc32d30f0736500e356957d892536cb05fc4f65a10c448b8877c23b7aff89695d62e9c8626ae4bb5bf38fbf395ef07999e3c5b0d258e1fae781b97a489efd5324a4383df05d5839486ec69f51797614532fe9839141fddc527cbe8e0eebd221e5a42dd08656ff7efee6e121a233085741680cc29eaae52d5b22bbff03a4dd7c94fc42f082c053a35ed02040fb1a6953cb04bf0c1040c1457b9a52a858393de0809204b2cfb83d9fd77249b924327c20ceffa7d7b060deb197a8468d2eadfcc255b1b3a6c22290cccb9407cf8230fc689817a5819f9442da436f4c67fd35a0980b0938a106c7120dd8396b01f3d8d873c04eefee154f5edaf68e9eb4f22f644d20280012f99a5bf20be199de81e20d9a90b6133e236b8018c805ba42222b5d7efd851c61e74e3167ebe565895628deeea93a5e0535f116700851015182221713ade0f217338a54a09ad0268d893414e2b0986431528e7561460d82549dcb9a2b0d785e513b79583bf7fa99c10a4693f23f07092b60d844d9cbc0bf343f785b3e04516194407f60525c47e7008c4717d54e5ad43b7cf997fe092f40831ac2dd243c62e7d9b48c148a7cbeeb2671648ea1619536d9e2c5d8a2200d37ccac4e36a12995b99f1b5fdb797a2b2a6f7d7955b9196942623f7bc2eacd7399802cd122b38a2e539a8f4e46852a58cd3ab6f9f86110ef5d591245557ecf2787718a48b76e537e51ba087bb6b7c780ee7268fafe66981ad260136945423e800688c7107e09afe8af86cecefc097ba87ae4187a476fc2215444446a1c47f95b73c5c348755e98baf3a618ea229ca01faca7915cf5b0c261eaf5fd3ae896bc3d7ef3240ade61a6dec855a5b78f59b8db8a0b79d396a0275ddeff5e7f", 0x2a1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) 16:33:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0xfffffffa, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) 16:33:02 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 16:33:02 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000240)='./file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 16:33:02 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000002c0)=[{0x22, 0x0, 0x0, 0x0, @time, {}, {}, @addr}], 0x1c) 16:33:02 executing program 2: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x1) 16:33:02 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000240)=0x1, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x14, 0x40, 0x800, 0x0, 0x25dfdbfb, {0x16}}, 0x14}, 0x1, 0x0, 0x0, 0x200040c2}, 0x4000800) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={0x24, @long={0x3, 0xfffc}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xfffffffffffe0306}}}, 0x14) bind$802154_dgram(r0, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x324, 0x0) 16:33:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x10000000) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000003, 0x1f012, r1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x100000f, 0x1f012, r0, 0x0) [ 628.426503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:33:02 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000240)=0x1, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x14, 0x40, 0x800, 0x0, 0x25dfdbfb, {0x16}}, 0x14}, 0x1, 0x0, 0x0, 0x200040c2}, 0x4000800) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={0x24, @long={0x3, 0xfffc}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xfffffffffffe0306}}}, 0x14) bind$802154_dgram(r0, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x324, 0x0) [ 628.444809] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.445639] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.446401] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.447155] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.448166] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.448906] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.449733] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.450400] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.451410] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.452171] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.452925] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.453725] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.454476] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.455111] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.455825] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.456618] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.457471] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.458245] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.459081] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.459876] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.460643] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.461418] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.462002] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.462870] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.463740] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.464666] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.465448] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.466047] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.466772] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.467580] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.468188] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 16:33:02 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000007240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000640)="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", 0x2a1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) [ 628.469709] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.470568] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.471179] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.472902] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.473518] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 16:33:02 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000240)=0x1, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x14, 0x40, 0x800, 0x0, 0x25dfdbfb, {0x16}}, 0x14}, 0x1, 0x0, 0x0, 0x200040c2}, 0x4000800) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={0x24, @long={0x3, 0xfffc}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xfffffffffffe0306}}}, 0x14) bind$802154_dgram(r0, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x324, 0x0) [ 628.474544] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.475611] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.476652] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.477298] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.478239] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.479018] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.479078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 628.479777] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.481305] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.482203] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.483047] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.483674] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.484545] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.485280] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.485884] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.486821] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.487439] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.488201] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.489412] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.490115] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.491001] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.491728] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.493237] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.493862] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.494619] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.495229] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.495858] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.496597] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.497183] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.497789] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.498402] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.498954] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.499520] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.500066] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.500673] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.501209] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.501772] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.502679] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.503550] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.504331] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.504950] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.505704] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.506530] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.507290] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.508058] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.508855] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.509591] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.510121] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.510795] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.511339] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.512055] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.512707] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.513291] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.513988] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.514966] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.515914] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.516630] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.517418] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.518158] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.518989] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.519647] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.520472] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.521018] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.521572] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.522117] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.522773] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.523346] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.523906] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.524562] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.525486] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.526489] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.527220] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.528993] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.529598] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.530238] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.530983] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.531905] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.532634] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.533321] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.533968] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.534692] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.535407] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.541956] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.543114] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.544073] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.545717] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.547555] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.548505] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.549245] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.549968] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.551072] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 16:33:02 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000240)=0x1, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x14, 0x40, 0x800, 0x0, 0x25dfdbfb, {0x16}}, 0x14}, 0x1, 0x0, 0x0, 0x200040c2}, 0x4000800) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={0x24, @long={0x3, 0xfffc}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xfffffffffffe0306}}}, 0x14) bind$802154_dgram(r0, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x324, 0x0) 16:33:02 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000002c0)=[{0x22, 0x0, 0x0, 0x0, @time, {}, {}, @addr}], 0x1c) [ 628.552726] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.553505] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.554181] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.555038] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.555734] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.559520] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.560179] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.560880] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.561715] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.562421] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.563238] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.564595] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.565542] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.566714] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.567491] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.568199] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.569084] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.569829] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.570622] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.571292] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.571967] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.572791] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.573506] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.574154] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.574887] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.576233] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.577099] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.577932] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 16:33:02 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x15, 0x0, &(0x7f0000000040)) [ 628.579519] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.580657] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.581279] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.581869] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.582594] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.583360] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.584039] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.584677] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.585214] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.585884] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.586459] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.587095] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.587853] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.588542] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.589712] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.591539] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.592243] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.593094] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.593784] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.594408] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.595143] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.595888] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.596576] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.597119] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.597714] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.598279] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.598917] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.599552] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.600077] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.600637] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.601674] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.602533] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.603241] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.604081] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.604810] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.605730] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 16:33:02 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000007240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000640)="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", 0x2a1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) [ 628.606645] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.607469] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.615591] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.616115] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.623336] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.623866] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.624427] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.624937] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.625502] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.626007] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.626596] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.627110] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.628524] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.629027] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.629575] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.630078] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.630622] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.631124] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.631876] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.632558] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.633132] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.633828] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.634445] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.635043] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.635728] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.636410] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.637000] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.637781] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.638327] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.638866] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.639679] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.640222] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.640782] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.641471] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.642201] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.642856] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.643575] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.644174] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.644796] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.645503] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.646071] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.646699] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.647605] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.648160] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.648702] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.649231] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.650085] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.650652] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.651168] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.651948] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.652599] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.653214] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.653889] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.654497] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.655070] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.655683] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.656248] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.656884] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.657613] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.658156] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.658695] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.659737] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.660349] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.660855] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.661606] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.662110] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.662766] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.663471] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.664036] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.664644] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.665212] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.665809] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.666409] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.667007] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.667623] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.668152] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.668788] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.669321] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.669843] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.670996] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.671653] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.672171] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.672825] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.673451] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.674043] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.674627] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.675221] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.675846] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.676555] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.677122] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.677736] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.678677] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.679188] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.679744] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.680555] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.681065] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.681599] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.682107] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.682919] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.683570] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.684180] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.684878] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.685510] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.686081] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.686782] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.687398] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.687984] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.688550] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.689055] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.689894] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.690419] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.690929] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.691906] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.692441] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.693945] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.694561] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.695161] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.695909] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.696674] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.698687] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.699761] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 16:33:02 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 628.701572] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.702786] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.703348] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.703881] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.704785] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.705333] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.705842] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.706534] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.707047] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.709487] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.710209] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.711586] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.714497] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.718158] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.718753] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.725563] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.726136] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.726734] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.727279] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.727797] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.728861] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.730869] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.731415] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.731932] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.732461] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.733879] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.734516] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.735110] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.735709] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.736357] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.737055] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.737801] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.738530] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.739131] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.739693] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.740205] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.740808] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.741348] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.741852] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.743049] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.743717] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.744818] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.745420] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.746009] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.746596] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.747347] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.748045] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.748813] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.749519] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.750095] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.750646] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.751158] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.751731] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.752244] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.752785] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.753898] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.754688] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.755779] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.756380] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.756970] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.757697] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.758411] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.759127] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.763602] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.764335] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.765195] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.766057] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.780833] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.784078] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.784714] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 16:33:02 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000002c0)=[{0x22, 0x0, 0x0, 0x0, @time, {}, {}, @addr}], 0x1c) [ 628.787471] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.789432] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.790145] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.791316] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.791846] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.792677] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.793179] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.793710] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.794209] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.807367] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.807907] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.808613] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.809119] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.809656] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.810180] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.811113] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.811701] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.812214] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.812758] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.813907] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.814579] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.815811] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.816467] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.818498] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.819095] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.819780] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.820389] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.821038] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.821594] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.822111] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.822841] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.823383] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.823899] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.824697] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.825204] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 16:33:02 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000240)=0x1, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x14, 0x40, 0x800, 0x0, 0x25dfdbfb, {0x16}}, 0x14}, 0x1, 0x0, 0x0, 0x200040c2}, 0x4000800) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={0x24, @long={0x3, 0xfffc}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xfffffffffffe0306}}}, 0x14) bind$802154_dgram(r0, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x324, 0x0) [ 628.829511] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.830113] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.831066] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.831696] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.832489] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.836453] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.838499] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 16:33:02 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, 0x1c) [ 628.839083] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.840021] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.840611] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.841214] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.842047] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.842674] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.842937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 628.843215] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.844551] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.845071] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.846072] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.846695] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.847286] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.847883] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.848520] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.849120] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.849766] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.850442] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.851126] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.851779] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.852425] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.853015] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.853641] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.854224] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.854837] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.855514] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.856187] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.856824] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.857441] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.858032] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.858641] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.859230] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.859866] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.860739] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.861527] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.865231] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.866029] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.866651] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.870512] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.871080] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.871959] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.872640] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.873448] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.874086] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.874803] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.875577] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.876219] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.878556] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.879128] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.879813] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.880519] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.881110] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.882471] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.883048] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.883713] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.884297] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 16:33:02 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000002c0)=[{0x22, 0x0, 0x0, 0x0, @time, {}, {}, @addr}], 0x1c) [ 628.886905] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.887652] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.900744] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.901631] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.902231] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.902947] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.903576] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.904217] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.904823] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.905554] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.906869] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.907535] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.909448] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.910027] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.910706] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.911341] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.912022] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.912634] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.913647] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.916860] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.917521] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.918183] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.918796] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.919593] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.920685] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.921836] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.922523] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 16:33:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, 0x1e, 0xc21, 0x0, 0x0, {0x7}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="93"]}, 0x20}}, 0x0) 16:33:02 executing program 0: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) pivot_root(&(0x7f0000000080)='./file1\x00', &(0x7f0000000180)='./file0\x00') creat(&(0x7f00000002c0)='./file2\x00', 0x8) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) getsockname(r0, &(0x7f0000000100)=@alg, &(0x7f0000000000)=0x80) creat(&(0x7f00000001c0)='./file2\x00', 0xe2) r1 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e6661740002080100", 0x10}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat2(r1, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x40040, 0x82}, 0x18) getsockname(r2, 0x0, &(0x7f0000000280)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet6(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="3bb31d6a", 0x4}], 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1400000000000000290000007f3241a751f9f20b00000000000004000000ad"], 0x18}, 0x0) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000040)={@mcast1, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfab, 0x8, 0x3fd1, 0x100, 0x1d, 0x20}) pwrite64(r0, &(0x7f0000000340)="deb4d49813533bdb4a61f38571ec5f1ee3a320db42e46acdf9f3430896f75d1450320bcf128ed71546bb07ef234f0e9b70b04418e01fba27325e9811e1ec6e31449dfa92d621d1d184e212c48916702c401b023b97d0e319a21f9cd0f7a619ea1e", 0x61, 0xfff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'gre0\x00', &(0x7f0000001a40)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0xd79, 0x1, {{0xa, 0x4, 0x1, 0x0, 0x28, 0x0, 0x0, 0xc2, 0x29, 0x0, @local, @local, {[@timestamp={0x44, 0x10, 0xd5, 0x0, 0x8, [0x0, 0x206e34, 0xe40]}, @ra={0x94, 0x4, 0xfffd}]}}}}}) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup3(r0, r4, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000300)=0x6) [ 628.932877] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.934674] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.935391] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.936119] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.936741] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.938730] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.939425] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.940237] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.942562] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.944643] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.945792] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.948640] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.949686] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.951987] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.953280] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.954093] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.958095] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 628.962740] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.968619] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 628.968683] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.970377] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.970972] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.975036] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.975688] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.976437] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.977139] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.977933] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.980594] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 628.986697] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 629.009479] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 629.010080] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 629.010735] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 629.011369] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 16:33:03 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xd}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 16:33:03 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) pivot_root(&(0x7f0000000080)='./file1\x00', &(0x7f0000000180)='./file0\x00') creat(&(0x7f00000002c0)='./file2\x00', 0x8) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) getsockname(r0, &(0x7f0000000100)=@alg, &(0x7f0000000000)=0x80) creat(&(0x7f00000001c0)='./file2\x00', 0xe2) r1 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e6661740002080100", 0x10}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat2(r1, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x40040, 0x82}, 0x18) getsockname(r2, 0x0, &(0x7f0000000280)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet6(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="3bb31d6a", 0x4}], 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1400000000000000290000007f3241a751f9f20b00000000000004000000ad"], 0x18}, 0x0) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000040)={@mcast1, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfab, 0x8, 0x3fd1, 0x100, 0x1d, 0x20}) pwrite64(r0, &(0x7f0000000340)="deb4d49813533bdb4a61f38571ec5f1ee3a320db42e46acdf9f3430896f75d1450320bcf128ed71546bb07ef234f0e9b70b04418e01fba27325e9811e1ec6e31449dfa92d621d1d184e212c48916702c401b023b97d0e319a21f9cd0f7a619ea1e", 0x61, 0xfff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'gre0\x00', &(0x7f0000001a40)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0xd79, 0x1, {{0xa, 0x4, 0x1, 0x0, 0x28, 0x0, 0x0, 0xc2, 0x29, 0x0, @local, @local, {[@timestamp={0x44, 0x10, 0xd5, 0x0, 0x8, [0x0, 0x206e34, 0xe40]}, @ra={0x94, 0x4, 0xfffd}]}}}}}) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup3(r0, r4, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000300)=0x6) 16:33:03 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000240)=0x1, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x14, 0x40, 0x800, 0x0, 0x25dfdbfb, {0x16}}, 0x14}, 0x1, 0x0, 0x0, 0x200040c2}, 0x4000800) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={0x24, @long={0x3, 0xfffc}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xfffffffffffe0306}}}, 0x14) bind$802154_dgram(r0, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x324, 0x0) 16:33:03 executing program 0: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) pivot_root(&(0x7f0000000080)='./file1\x00', &(0x7f0000000180)='./file0\x00') creat(&(0x7f00000002c0)='./file2\x00', 0x8) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) getsockname(r0, &(0x7f0000000100)=@alg, &(0x7f0000000000)=0x80) creat(&(0x7f00000001c0)='./file2\x00', 0xe2) r1 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e6661740002080100", 0x10}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat2(r1, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x40040, 0x82}, 0x18) getsockname(r2, 0x0, &(0x7f0000000280)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet6(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="3bb31d6a", 0x4}], 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1400000000000000290000007f3241a751f9f20b00000000000004000000ad"], 0x18}, 0x0) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000040)={@mcast1, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfab, 0x8, 0x3fd1, 0x100, 0x1d, 0x20}) pwrite64(r0, &(0x7f0000000340)="deb4d49813533bdb4a61f38571ec5f1ee3a320db42e46acdf9f3430896f75d1450320bcf128ed71546bb07ef234f0e9b70b04418e01fba27325e9811e1ec6e31449dfa92d621d1d184e212c48916702c401b023b97d0e319a21f9cd0f7a619ea1e", 0x61, 0xfff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'gre0\x00', &(0x7f0000001a40)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0xd79, 0x1, {{0xa, 0x4, 0x1, 0x0, 0x28, 0x0, 0x0, 0xc2, 0x29, 0x0, @local, @local, {[@timestamp={0x44, 0x10, 0xd5, 0x0, 0x8, [0x0, 0x206e34, 0xe40]}, @ra={0x94, 0x4, 0xfffd}]}}}}}) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup3(r0, r4, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000300)=0x6) 16:33:03 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) pivot_root(&(0x7f0000000080)='./file1\x00', &(0x7f0000000180)='./file0\x00') creat(&(0x7f00000002c0)='./file2\x00', 0x8) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) getsockname(r0, &(0x7f0000000100)=@alg, &(0x7f0000000000)=0x80) creat(&(0x7f00000001c0)='./file2\x00', 0xe2) r1 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e6661740002080100", 0x10}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat2(r1, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x40040, 0x82}, 0x18) getsockname(r2, 0x0, &(0x7f0000000280)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet6(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="3bb31d6a", 0x4}], 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1400000000000000290000007f3241a751f9f20b00000000000004000000ad"], 0x18}, 0x0) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000040)={@mcast1, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfab, 0x8, 0x3fd1, 0x100, 0x1d, 0x20}) pwrite64(r0, &(0x7f0000000340)="deb4d49813533bdb4a61f38571ec5f1ee3a320db42e46acdf9f3430896f75d1450320bcf128ed71546bb07ef234f0e9b70b04418e01fba27325e9811e1ec6e31449dfa92d621d1d184e212c48916702c401b023b97d0e319a21f9cd0f7a619ea1e", 0x61, 0xfff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'gre0\x00', &(0x7f0000001a40)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0xd79, 0x1, {{0xa, 0x4, 0x1, 0x0, 0x28, 0x0, 0x0, 0xc2, 0x29, 0x0, @local, @local, {[@timestamp={0x44, 0x10, 0xd5, 0x0, 0x8, [0x0, 0x206e34, 0xe40]}, @ra={0x94, 0x4, 0xfffd}]}}}}}) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup3(r0, r4, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000300)=0x6) 16:33:03 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000240)=0x1, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x14, 0x40, 0x800, 0x0, 0x25dfdbfb, {0x16}}, 0x14}, 0x1, 0x0, 0x0, 0x200040c2}, 0x4000800) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={0x24, @long={0x3, 0xfffc}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xfffffffffffe0306}}}, 0x14) bind$802154_dgram(r0, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x324, 0x0) 16:33:03 executing program 5: ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f00000000c0)='/usr/lib/telepathy/mission-control-5\x00', 0x200000e5) dup2(r1, r0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10, 0x0, 0xfff80000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r2, &(0x7f0000000080)=""/4095, 0xfff, 0x303) syz_open_dev$evdev(&(0x7f0000001140), 0x1, 0x8000) fcntl$getown(r2, 0x9) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000001580)=0x1353) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f00000016c0)=0x2) 16:33:03 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r2, 0x325, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}}, 0x0) [ 629.740102] SELinux: Context /usr/lib/telepathy/mission-control-5 is not valid (left unmapped). [ 629.754437] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 629.761816] FAT-fs (loop0): bogus number of FAT structure [ 629.762591] FAT-fs (loop0): Can't find a valid FAT filesystem [ 629.806373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:33:03 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) pivot_root(&(0x7f0000000080)='./file1\x00', &(0x7f0000000180)='./file0\x00') creat(&(0x7f00000002c0)='./file2\x00', 0x8) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) getsockname(r0, &(0x7f0000000100)=@alg, &(0x7f0000000000)=0x80) creat(&(0x7f00000001c0)='./file2\x00', 0xe2) r1 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e6661740002080100", 0x10}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat2(r1, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x40040, 0x82}, 0x18) getsockname(r2, 0x0, &(0x7f0000000280)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet6(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="3bb31d6a", 0x4}], 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1400000000000000290000007f3241a751f9f20b00000000000004000000ad"], 0x18}, 0x0) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000040)={@mcast1, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfab, 0x8, 0x3fd1, 0x100, 0x1d, 0x20}) pwrite64(r0, &(0x7f0000000340)="deb4d49813533bdb4a61f38571ec5f1ee3a320db42e46acdf9f3430896f75d1450320bcf128ed71546bb07ef234f0e9b70b04418e01fba27325e9811e1ec6e31449dfa92d621d1d184e212c48916702c401b023b97d0e319a21f9cd0f7a619ea1e", 0x61, 0xfff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'gre0\x00', &(0x7f0000001a40)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0xd79, 0x1, {{0xa, 0x4, 0x1, 0x0, 0x28, 0x0, 0x0, 0xc2, 0x29, 0x0, @local, @local, {[@timestamp={0x44, 0x10, 0xd5, 0x0, 0x8, [0x0, 0x206e34, 0xe40]}, @ra={0x94, 0x4, 0xfffd}]}}}}}) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup3(r0, r4, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000300)=0x6) [ 629.858728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:33:03 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) pivot_root(&(0x7f0000000080)='./file1\x00', &(0x7f0000000180)='./file0\x00') creat(&(0x7f00000002c0)='./file2\x00', 0x8) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) getsockname(r0, &(0x7f0000000100)=@alg, &(0x7f0000000000)=0x80) creat(&(0x7f00000001c0)='./file2\x00', 0xe2) r1 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e6661740002080100", 0x10}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat2(r1, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x40040, 0x82}, 0x18) getsockname(r2, 0x0, &(0x7f0000000280)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet6(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="3bb31d6a", 0x4}], 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1400000000000000290000007f3241a751f9f20b00000000000004000000ad"], 0x18}, 0x0) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000040)={@mcast1, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfab, 0x8, 0x3fd1, 0x100, 0x1d, 0x20}) pwrite64(r0, &(0x7f0000000340)="deb4d49813533bdb4a61f38571ec5f1ee3a320db42e46acdf9f3430896f75d1450320bcf128ed71546bb07ef234f0e9b70b04418e01fba27325e9811e1ec6e31449dfa92d621d1d184e212c48916702c401b023b97d0e319a21f9cd0f7a619ea1e", 0x61, 0xfff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'gre0\x00', &(0x7f0000001a40)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0xd79, 0x1, {{0xa, 0x4, 0x1, 0x0, 0x28, 0x0, 0x0, 0xc2, 0x29, 0x0, @local, @local, {[@timestamp={0x44, 0x10, 0xd5, 0x0, 0x8, [0x0, 0x206e34, 0xe40]}, @ra={0x94, 0x4, 0xfffd}]}}}}}) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup3(r0, r4, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000300)=0x6) 16:33:03 executing program 0: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) pivot_root(&(0x7f0000000080)='./file1\x00', &(0x7f0000000180)='./file0\x00') creat(&(0x7f00000002c0)='./file2\x00', 0x8) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) getsockname(r0, &(0x7f0000000100)=@alg, &(0x7f0000000000)=0x80) creat(&(0x7f00000001c0)='./file2\x00', 0xe2) r1 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e6661740002080100", 0x10}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat2(r1, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x40040, 0x82}, 0x18) getsockname(r2, 0x0, &(0x7f0000000280)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet6(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="3bb31d6a", 0x4}], 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1400000000000000290000007f3241a751f9f20b00000000000004000000ad"], 0x18}, 0x0) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000040)={@mcast1, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfab, 0x8, 0x3fd1, 0x100, 0x1d, 0x20}) pwrite64(r0, &(0x7f0000000340)="deb4d49813533bdb4a61f38571ec5f1ee3a320db42e46acdf9f3430896f75d1450320bcf128ed71546bb07ef234f0e9b70b04418e01fba27325e9811e1ec6e31449dfa92d621d1d184e212c48916702c401b023b97d0e319a21f9cd0f7a619ea1e", 0x61, 0xfff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'gre0\x00', &(0x7f0000001a40)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0xd79, 0x1, {{0xa, 0x4, 0x1, 0x0, 0x28, 0x0, 0x0, 0xc2, 0x29, 0x0, @local, @local, {[@timestamp={0x44, 0x10, 0xd5, 0x0, 0x8, [0x0, 0x206e34, 0xe40]}, @ra={0x94, 0x4, 0xfffd}]}}}}}) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup3(r0, r4, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000300)=0x6) 16:33:03 executing program 5: ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f00000000c0)='/usr/lib/telepathy/mission-control-5\x00', 0x200000e5) dup2(r1, r0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10, 0x0, 0xfff80000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r2, &(0x7f0000000080)=""/4095, 0xfff, 0x303) syz_open_dev$evdev(&(0x7f0000001140), 0x1, 0x8000) fcntl$getown(r2, 0x9) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000001580)=0x1353) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f00000016c0)=0x2) 16:33:03 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) pivot_root(&(0x7f0000000080)='./file1\x00', &(0x7f0000000180)='./file0\x00') creat(&(0x7f00000002c0)='./file2\x00', 0x8) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) getsockname(r0, &(0x7f0000000100)=@alg, &(0x7f0000000000)=0x80) creat(&(0x7f00000001c0)='./file2\x00', 0xe2) r1 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e6661740002080100", 0x10}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat2(r1, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x40040, 0x82}, 0x18) getsockname(r2, 0x0, &(0x7f0000000280)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet6(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="3bb31d6a", 0x4}], 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1400000000000000290000007f3241a751f9f20b00000000000004000000ad"], 0x18}, 0x0) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000040)={@mcast1, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfab, 0x8, 0x3fd1, 0x100, 0x1d, 0x20}) pwrite64(r0, &(0x7f0000000340)="deb4d49813533bdb4a61f38571ec5f1ee3a320db42e46acdf9f3430896f75d1450320bcf128ed71546bb07ef234f0e9b70b04418e01fba27325e9811e1ec6e31449dfa92d621d1d184e212c48916702c401b023b97d0e319a21f9cd0f7a619ea1e", 0x61, 0xfff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'gre0\x00', &(0x7f0000001a40)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0xd79, 0x1, {{0xa, 0x4, 0x1, 0x0, 0x28, 0x0, 0x0, 0xc2, 0x29, 0x0, @local, @local, {[@timestamp={0x44, 0x10, 0xd5, 0x0, 0x8, [0x0, 0x206e34, 0xe40]}, @ra={0x94, 0x4, 0xfffd}]}}}}}) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup3(r0, r4, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000300)=0x6) 16:33:03 executing program 0: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) pivot_root(&(0x7f0000000080)='./file1\x00', &(0x7f0000000180)='./file0\x00') creat(&(0x7f00000002c0)='./file2\x00', 0x8) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) getsockname(r0, &(0x7f0000000100)=@alg, &(0x7f0000000000)=0x80) creat(&(0x7f00000001c0)='./file2\x00', 0xe2) r1 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e6661740002080100", 0x10}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat2(r1, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x40040, 0x82}, 0x18) getsockname(r2, 0x0, &(0x7f0000000280)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet6(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="3bb31d6a", 0x4}], 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1400000000000000290000007f3241a751f9f20b00000000000004000000ad"], 0x18}, 0x0) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000040)={@mcast1, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfab, 0x8, 0x3fd1, 0x100, 0x1d, 0x20}) pwrite64(r0, &(0x7f0000000340)="deb4d49813533bdb4a61f38571ec5f1ee3a320db42e46acdf9f3430896f75d1450320bcf128ed71546bb07ef234f0e9b70b04418e01fba27325e9811e1ec6e31449dfa92d621d1d184e212c48916702c401b023b97d0e319a21f9cd0f7a619ea1e", 0x61, 0xfff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'gre0\x00', &(0x7f0000001a40)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0xd79, 0x1, {{0xa, 0x4, 0x1, 0x0, 0x28, 0x0, 0x0, 0xc2, 0x29, 0x0, @local, @local, {[@timestamp={0x44, 0x10, 0xd5, 0x0, 0x8, [0x0, 0x206e34, 0xe40]}, @ra={0x94, 0x4, 0xfffd}]}}}}}) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup3(r0, r4, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000300)=0x6) [ 630.099657] FAT-fs (loop0): bogus number of FAT structure [ 630.100401] FAT-fs (loop0): Can't find a valid FAT filesystem 16:33:04 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) pivot_root(&(0x7f0000000080)='./file1\x00', &(0x7f0000000180)='./file0\x00') creat(&(0x7f00000002c0)='./file2\x00', 0x8) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) getsockname(r0, &(0x7f0000000100)=@alg, &(0x7f0000000000)=0x80) creat(&(0x7f00000001c0)='./file2\x00', 0xe2) r1 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e6661740002080100", 0x10}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat2(r1, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x40040, 0x82}, 0x18) getsockname(r2, 0x0, &(0x7f0000000280)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet6(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="3bb31d6a", 0x4}], 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1400000000000000290000007f3241a751f9f20b00000000000004000000ad"], 0x18}, 0x0) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000040)={@mcast1, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfab, 0x8, 0x3fd1, 0x100, 0x1d, 0x20}) pwrite64(r0, &(0x7f0000000340)="deb4d49813533bdb4a61f38571ec5f1ee3a320db42e46acdf9f3430896f75d1450320bcf128ed71546bb07ef234f0e9b70b04418e01fba27325e9811e1ec6e31449dfa92d621d1d184e212c48916702c401b023b97d0e319a21f9cd0f7a619ea1e", 0x61, 0xfff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'gre0\x00', &(0x7f0000001a40)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0xd79, 0x1, {{0xa, 0x4, 0x1, 0x0, 0x28, 0x0, 0x0, 0xc2, 0x29, 0x0, @local, @local, {[@timestamp={0x44, 0x10, 0xd5, 0x0, 0x8, [0x0, 0x206e34, 0xe40]}, @ra={0x94, 0x4, 0xfffd}]}}}}}) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup3(r0, r4, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000300)=0x6) 16:33:04 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) pivot_root(&(0x7f0000000080)='./file1\x00', &(0x7f0000000180)='./file0\x00') creat(&(0x7f00000002c0)='./file2\x00', 0x8) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) getsockname(r0, &(0x7f0000000100)=@alg, &(0x7f0000000000)=0x80) creat(&(0x7f00000001c0)='./file2\x00', 0xe2) r1 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e6661740002080100", 0x10}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat2(r1, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x40040, 0x82}, 0x18) getsockname(r2, 0x0, &(0x7f0000000280)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet6(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="3bb31d6a", 0x4}], 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1400000000000000290000007f3241a751f9f20b00000000000004000000ad"], 0x18}, 0x0) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000040)={@mcast1, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfab, 0x8, 0x3fd1, 0x100, 0x1d, 0x20}) pwrite64(r0, &(0x7f0000000340)="deb4d49813533bdb4a61f38571ec5f1ee3a320db42e46acdf9f3430896f75d1450320bcf128ed71546bb07ef234f0e9b70b04418e01fba27325e9811e1ec6e31449dfa92d621d1d184e212c48916702c401b023b97d0e319a21f9cd0f7a619ea1e", 0x61, 0xfff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'gre0\x00', &(0x7f0000001a40)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0xd79, 0x1, {{0xa, 0x4, 0x1, 0x0, 0x28, 0x0, 0x0, 0xc2, 0x29, 0x0, @local, @local, {[@timestamp={0x44, 0x10, 0xd5, 0x0, 0x8, [0x0, 0x206e34, 0xe40]}, @ra={0x94, 0x4, 0xfffd}]}}}}}) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup3(r0, r4, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000300)=0x6) 16:33:04 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000001e80)=""/165, 0xa5}], 0x1, 0x9af, 0x0) 16:33:04 executing program 5: ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f00000000c0)='/usr/lib/telepathy/mission-control-5\x00', 0x200000e5) dup2(r1, r0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10, 0x0, 0xfff80000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r2, &(0x7f0000000080)=""/4095, 0xfff, 0x303) syz_open_dev$evdev(&(0x7f0000001140), 0x1, 0x8000) fcntl$getown(r2, 0x9) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000001580)=0x1353) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f00000016c0)=0x2) 16:33:04 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) pivot_root(&(0x7f0000000080)='./file1\x00', &(0x7f0000000180)='./file0\x00') creat(&(0x7f00000002c0)='./file2\x00', 0x8) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) getsockname(r0, &(0x7f0000000100)=@alg, &(0x7f0000000000)=0x80) creat(&(0x7f00000001c0)='./file2\x00', 0xe2) r1 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e6661740002080100", 0x10}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat2(r1, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x40040, 0x82}, 0x18) getsockname(r2, 0x0, &(0x7f0000000280)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet6(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="3bb31d6a", 0x4}], 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1400000000000000290000007f3241a751f9f20b00000000000004000000ad"], 0x18}, 0x0) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000040)={@mcast1, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfab, 0x8, 0x3fd1, 0x100, 0x1d, 0x20}) pwrite64(r0, &(0x7f0000000340)="deb4d49813533bdb4a61f38571ec5f1ee3a320db42e46acdf9f3430896f75d1450320bcf128ed71546bb07ef234f0e9b70b04418e01fba27325e9811e1ec6e31449dfa92d621d1d184e212c48916702c401b023b97d0e319a21f9cd0f7a619ea1e", 0x61, 0xfff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'gre0\x00', &(0x7f0000001a40)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0xd79, 0x1, {{0xa, 0x4, 0x1, 0x0, 0x28, 0x0, 0x0, 0xc2, 0x29, 0x0, @local, @local, {[@timestamp={0x44, 0x10, 0xd5, 0x0, 0x8, [0x0, 0x206e34, 0xe40]}, @ra={0x94, 0x4, 0xfffd}]}}}}}) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup3(r0, r4, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000300)=0x6) 16:33:04 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000240)=0x1, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x14, 0x40, 0x800, 0x0, 0x25dfdbfb, {0x16}}, 0x14}, 0x1, 0x0, 0x0, 0x200040c2}, 0x4000800) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={0x24, @long={0x3, 0xfffc}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xfffffffffffe0306}}}, 0x14) bind$802154_dgram(r0, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x324, 0x0) 16:33:04 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000240)=0x1, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x14, 0x40, 0x800, 0x0, 0x25dfdbfb, {0x16}}, 0x14}, 0x1, 0x0, 0x0, 0x200040c2}, 0x4000800) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={0x24, @long={0x3, 0xfffc}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xfffffffffffe0306}}}, 0x14) bind$802154_dgram(r0, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x324, 0x0) 16:33:04 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x69}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 630.435609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:33:04 executing program 0: symlink(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file0\x00') lgetxattr(&(0x7f0000001640)='./file0\x00', &(0x7f0000001680)=@known='system.posix_acl_access\x00', 0x0, 0x0) 16:33:04 executing program 5: ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f00000000c0)='/usr/lib/telepathy/mission-control-5\x00', 0x200000e5) dup2(r1, r0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10, 0x0, 0xfff80000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r2, &(0x7f0000000080)=""/4095, 0xfff, 0x303) syz_open_dev$evdev(&(0x7f0000001140), 0x1, 0x8000) fcntl$getown(r2, 0x9) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000001580)=0x1353) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f00000016c0)=0x2) 16:33:04 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) pivot_root(&(0x7f0000000080)='./file1\x00', &(0x7f0000000180)='./file0\x00') creat(&(0x7f00000002c0)='./file2\x00', 0x8) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) getsockname(r0, &(0x7f0000000100)=@alg, &(0x7f0000000000)=0x80) creat(&(0x7f00000001c0)='./file2\x00', 0xe2) r1 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e6661740002080100", 0x10}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat2(r1, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x40040, 0x82}, 0x18) getsockname(r2, 0x0, &(0x7f0000000280)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet6(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="3bb31d6a", 0x4}], 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1400000000000000290000007f3241a751f9f20b00000000000004000000ad"], 0x18}, 0x0) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000040)={@mcast1, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfab, 0x8, 0x3fd1, 0x100, 0x1d, 0x20}) pwrite64(r0, &(0x7f0000000340)="deb4d49813533bdb4a61f38571ec5f1ee3a320db42e46acdf9f3430896f75d1450320bcf128ed71546bb07ef234f0e9b70b04418e01fba27325e9811e1ec6e31449dfa92d621d1d184e212c48916702c401b023b97d0e319a21f9cd0f7a619ea1e", 0x61, 0xfff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'gre0\x00', &(0x7f0000001a40)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0xd79, 0x1, {{0xa, 0x4, 0x1, 0x0, 0x28, 0x0, 0x0, 0xc2, 0x29, 0x0, @local, @local, {[@timestamp={0x44, 0x10, 0xd5, 0x0, 0x8, [0x0, 0x206e34, 0xe40]}, @ra={0x94, 0x4, 0xfffd}]}}}}}) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup3(r0, r4, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000300)=0x6) 16:33:04 executing program 3: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0/file0\x00', 0x0) rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00') 16:33:04 executing program 7: syz_emit_ethernet(0x36, &(0x7f0000000040)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x88, 0x0, @private=0xa010101, @local}, @timestamp_reply={0xe, 0x0, 0x0, 0x4, 0x7}}}}}, 0x0) 16:33:04 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x18, 0x1, 0x1, 0x301, 0x0, 0x0, {}, [@CTA_SEQ_ADJ_ORIG={0x4}]}, 0x18}}, 0x0) 16:33:04 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0xf}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 630.679796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 630.734494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 630.787197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:33:04 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000001880), &(0x7f00000018c0)=0x4) 16:33:04 executing program 7: perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x80, 0x2, 0x8, 0x9, 0x0, 0x8, 0x80002, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_config_ext={0xff, 0x6}, 0x50002, 0x0, 0x8, 0x4, 0x0, 0x8, 0xfff9, 0x0, 0xc2f3, 0x0, 0x7f}, 0xffffffffffffffff, 0xe, r0, 0xa) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = getpgrp(0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x2a, 0x6, 0x20, 0xdb, 0x0, 0x80000000, 0x8400, 0xb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_config_ext={0x4, 0x2}, 0x48000, 0x2c2, 0x5, 0x9, 0x8, 0x21, 0x1, 0x0, 0x6, 0x0, 0x7d2c}, r2, 0x8, r3, 0x8) mount$9p_unix(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000080), 0x3000800, 0x0) dup3(0xffffffffffffffff, r3, 0x80000) syz_open_procfs(0x0, &(0x7f0000000040)='net/udplite\x00') 16:33:04 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffffa}]}) getuid() [ 631.211071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:33:04 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x18, 0x1, 0x1, 0x301, 0x0, 0x0, {}, [@CTA_SEQ_ADJ_ORIG={0x4}]}, 0x18}}, 0x0) 16:33:04 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x48235, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) fork() 16:33:04 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x14}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 16:33:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$sock(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000005c0)="06", 0x1}], 0x1}}, {{&(0x7f0000000740)=@isdn, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000007c0)="1d", 0x1}], 0x1}}], 0x2, 0x0) 16:33:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x13, 0x32, 0x101, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}, 0x1c}}, 0x0) [ 631.246872] 9pnet_virtio: no channels available for device ./file0 16:33:05 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0xffff, @private}, 0x10) 16:33:05 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x18, 0x1, 0x1, 0x301, 0x0, 0x0, {}, [@CTA_SEQ_ADJ_ORIG={0x4}]}, 0x18}}, 0x0) 16:33:05 executing program 3: r0 = creat(&(0x7f0000000040)='./file2\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = io_uring_setup(0x57e2, &(0x7f0000000180)) close(r1) open$dir(&(0x7f00000000c0)='./file2\x00', 0x0, 0x0) close(r0) 16:33:05 executing program 1: r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000340)="c9", 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x1020) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 16:33:05 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0xc0}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 16:33:05 executing program 2: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6, "779b1e7567d62f09a2d166d436fc9990c772b9"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNATTACHFILTER(r0, 0x400454ca, &(0x7f0000000080)={0x0, 0x0}) [ 631.447920] ------------[ cut here ]------------ [ 631.449284] wlan1: Failed check-sdata-in-driver check, flags: 0x4 [ 631.450422] WARNING: CPU: 1 PID: 136367 at net/mac80211/driver-ops.h:172 drv_bss_info_changed+0x554/0x5f0 [ 631.451729] Modules linked in: [ 631.452182] CPU: 1 PID: 136367 Comm: syz-executor.6 Not tainted 5.10.216 #1 [ 631.453140] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 631.454300] RIP: 0010:drv_bss_info_changed+0x554/0x5f0 [ 631.455020] Code: 49 8b ac 24 a8 03 00 00 48 85 ed 74 3e e8 d4 a1 8d fd e8 cf a1 8d fd 8b 54 24 04 48 89 ee 48 c7 c7 20 8c 95 84 e8 c2 f5 24 00 <0f> 0b e9 c7 fd ff ff 4c 89 ff e8 2d 8e b9 fd e9 97 fb ff ff 4c 89 [ 631.457498] RSP: 0018:ffff88805ccef3f0 EFLAGS: 00010282 [ 631.458228] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 631.459211] RDX: 0000000000040000 RSI: ffffffff8129d163 RDI: ffffed100b99de70 16:33:05 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x2201, &(0x7f0000000440)=@disckey={0x2, 0x0, "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"}) 16:33:05 executing program 5: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ftruncate(r1, 0x800) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa, 0x12, r1, 0x0) syz_io_uring_submit(r2, r0, &(0x7f0000000080)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 631.460216] RBP: ffff88803b468000 R08: 0000000000000001 R09: ffff88806cf27fbb [ 631.461493] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88803b468bc0 [ 631.462473] R13: 0000000000400000 R14: ffff88803b469da0 R15: ffff88803b469d98 [ 631.463442] FS: 00007f3b1b64f700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 631.464550] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 631.465610] CR2: 00007f3b1b64e108 CR3: 0000000056ba2000 CR4: 0000000000350ee0 [ 631.470096] Call Trace: [ 631.470492] ? __warn+0xe2/0x1f0 [ 631.470960] ? irq_work_queue+0x44/0x50 [ 631.471527] ? drv_bss_info_changed+0x554/0x5f0 [ 631.472160] ? report_bug+0x1c1/0x210 [ 631.472712] ? handle_bug+0x41/0x90 [ 631.473198] ? exc_invalid_op+0x14/0x50 [ 631.473760] ? asm_exc_invalid_op+0x12/0x20 [ 631.474380] ? vprintk_func+0x93/0x140 [ 631.474910] ? drv_bss_info_changed+0x554/0x5f0 [ 631.475578] ieee80211_bss_info_change_notify+0x9a/0xc0 [ 631.476314] ieee80211_ocb_leave+0x1ed/0x340 [ 631.476906] ? nl80211_parse_mon_options+0x45c/0x690 [ 631.477615] __cfg80211_leave_ocb+0x1d6/0x570 [ 631.478222] cfg80211_leave_ocb+0x4e/0x70 [ 631.478812] cfg80211_change_iface+0x843/0xf90 [ 631.479460] nl80211_set_interface+0x67c/0x8f0 [ 631.480092] ? nl80211_notify_iface+0x180/0x180 [ 631.480757] ? nl80211_pre_doit+0xa2/0x630 [ 631.481367] genl_family_rcv_msg_doit+0x22d/0x330 [ 631.482012] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 631.482907] ? cap_capable+0x1cd/0x230 [ 631.483464] ? ns_capable+0xe2/0x110 [ 631.483974] genl_rcv_msg+0x33c/0x5a0 [ 631.484517] ? genl_get_cmd+0x480/0x480 [ 631.485056] ? nl80211_notify_iface+0x180/0x180 [ 631.485722] ? lock_release+0x680/0x680 [ 631.486258] ? __lockdep_reset_lock+0x180/0x180 [ 631.486908] netlink_rcv_skb+0x14b/0x430 [ 631.487475] ? genl_get_cmd+0x480/0x480 [ 631.488018] ? netlink_ack+0xab0/0xab0 [ 631.488571] ? netlink_deliver_tap+0x1c4/0xcc0 [ 631.489182] ? is_vmalloc_addr+0x7b/0xb0 [ 631.489749] genl_rcv+0x24/0x40 [ 631.490187] netlink_unicast+0x549/0x7f0 [ 631.490759] ? netlink_attachskb+0x870/0x870 [ 631.491395] netlink_sendmsg+0x90f/0xdf0 [ 631.491960] ? netlink_unicast+0x7f0/0x7f0 [ 631.492567] ? netlink_unicast+0x7f0/0x7f0 [ 631.493133] __sock_sendmsg+0x154/0x190 [ 631.493698] ____sys_sendmsg+0x70d/0x870 [ 631.494253] ? sock_write_iter+0x3d0/0x3d0 [ 631.494844] ? do_recvmmsg+0x6d0/0x6d0 [ 631.495393] ? perf_trace_lock+0xac/0x490 [ 631.495959] ? __lockdep_reset_lock+0x180/0x180 [ 631.496621] ___sys_sendmsg+0xf3/0x170 [ 631.497150] ? sendmsg_copy_msghdr+0x160/0x160 [ 631.497799] ? lock_downgrade+0x6d0/0x6d0 [ 631.498387] ? futex_exit_release+0x220/0x220 [ 631.498998] ? __fget_files+0x296/0x4c0 [ 631.499575] ? __fget_light+0xea/0x290 [ 631.500125] __sys_sendmsg+0xe5/0x1b0 [ 631.500655] ? __sys_sendmsg_sock+0x40/0x40 [ 631.501223] ? __do_sys_futex+0x2bb/0x480 [ 631.501821] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 631.502547] ? syscall_enter_from_user_mode+0x1d/0x50 [ 631.503221] ? trace_hardirqs_on+0x5b/0x180 [ 631.503824] do_syscall_64+0x33/0x40 [ 631.504350] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 631.505026] RIP: 0033:0x7f3b1e0d9b19 [ 631.505542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 631.507969] RSP: 002b:00007f3b1b64f188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 631.508996] RAX: ffffffffffffffda RBX: 00007f3b1e1ecf60 RCX: 00007f3b1e0d9b19 [ 631.509949] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 631.510901] RBP: 00007f3b1e133f6d R08: 0000000000000000 R09: 0000000000000000 [ 631.511865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 631.512818] R13: 00007ffe4bc0a09f R14: 00007f3b1b64f300 R15: 0000000000022000 [ 631.513804] irq event stamp: 2023 [ 631.514298] hardirqs last enabled at (2033): [] console_unlock+0x92d/0xb40 [ 631.515441] hardirqs last disabled at (2042): [] console_unlock+0x839/0xb40 [ 631.516590] softirqs last enabled at (1218): [] asm_call_irq_on_stack+0x12/0x20 [ 631.517781] softirqs last disabled at (1121): [] asm_call_irq_on_stack+0x12/0x20 [ 631.518977] ---[ end trace a76c69a7f33ef011 ]--- 16:33:05 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x18, 0x1, 0x1, 0x301, 0x0, 0x0, {}, [@CTA_SEQ_ADJ_ORIG={0x4}]}, 0x18}}, 0x0) 16:33:05 executing program 3: r0 = creat(&(0x7f0000000040)='./file2\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = io_uring_setup(0x57e2, &(0x7f0000000180)) close(r1) open$dir(&(0x7f00000000c0)='./file2\x00', 0x0, 0x0) close(r0) 16:33:05 executing program 5: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ftruncate(r1, 0x800) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa, 0x12, r1, 0x0) syz_io_uring_submit(r2, r0, &(0x7f0000000080)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 16:33:05 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x2201, &(0x7f0000000440)=@disckey={0x2, 0x0, "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"}) 16:33:06 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0xec0}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 16:33:06 executing program 5: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ftruncate(r1, 0x800) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa, 0x12, r1, 0x0) syz_io_uring_submit(r2, r0, &(0x7f0000000080)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 16:33:06 executing program 2: copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100), 0x4d76, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file1\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) sendto$unix(r2, &(0x7f0000000480)="d9325a0e15d4c4a0b53dc0332b9d22d050f88932b7a5f90ed244486fb03b9ff71658f0db895fe2ef740419d7cd0e14f48058f63b02e6f05ef8c4801469567176c0c840c37d58ec551d63bf2d499de71277d23824d0bde219eba33a0b0c39422190e3b0436423162bdbe8d99517bbc2d92674f79ab515c9bbb247a031f6cd375b8758b286296d6dc993521461595bbf81ae331c0bcfd40c6a03efa691efc3b90513fa89877e8579c62a6eaf0dfa8c3130d8e6f76bf7e4d4f22212c1de57dcd58eddec84dec8efe1fb2c1df98e1f36291c7c57338ee45921643c9569bc", 0x4995b5922abe4152, 0x840, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000002c0)={{0x3, 0xee01, 0x0, 0xffffffffffffffff, 0xee01, 0xc8}, 0x5, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x6}) lchown(&(0x7f0000000200)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101142, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x0, 0x5, 0x0, 0x2, 0x32, @loopback, @private1, 0x40, 0x8, 0x4001141, 0x1}}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x101040, 0x112, 0xa}, &(0x7f0000000280)='./file1\x00', 0x18, 0x0, 0x12345, {0x0, r6}}, 0xffffffff) stat(&(0x7f0000000380)='./file1\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000001180)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@local, 0x4e20, 0x7f, 0x4e22, 0x0, 0xa, 0x80, 0x20, 0x2b, r4, r7}, {0x3ff, 0x44, 0x0, 0x7e7, 0x4, 0x800, 0xfff, 0x5}, {0xfffffffffffff800, 0x81, 0x20, 0xa5}, 0xb41, 0x6e6bb4, 0x2, 0x0, 0x1, 0x2}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x3c}, 0xa, @in6=@mcast1, 0x0, 0x0, 0x4, 0x8, 0x7, 0x2, 0x8}}, 0xe8) fchown(r1, r7, 0x0) 16:33:06 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x2201, &(0x7f0000000440)=@disckey={0x2, 0x0, "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"}) 16:33:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x58, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[]) r0 = socket$unix(0x1, 0x0, 0x0) bind$unix(r0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x40086602, 0xfffffffffffffffd) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/4\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) lseek(r4, 0x0, 0x3) getsockopt$netlink(r3, 0x10e, 0xb, 0x0, &(0x7f0000001140)) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0xb) io_submit(0x0, 0x1, &(0x7f0000000480)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000400)="d9", 0x1}]) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) sendfile(r1, r5, 0x0, 0x100000001) 16:33:06 executing program 4: memfd_create(&(0x7f0000000340)='\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x5, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000540)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000500)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_NOP={0x0, 0x2}, 0x9) io_uring_enter(r0, 0x4eae, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0) 16:33:06 executing program 3: r0 = creat(&(0x7f0000000040)='./file2\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = io_uring_setup(0x57e2, &(0x7f0000000180)) close(r1) open$dir(&(0x7f00000000c0)='./file2\x00', 0x0, 0x0) close(r0) 16:33:06 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000200), 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="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", 0xff}, {&(0x7f0000000a00)="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", 0xe7a}], 0x2}, 0xc880) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="0e00a30abf9d45c9a467133f6d0fcd2e77ef8b0695a12d6bfaca2e584adb871a63029718ae627ad6156ee41ae39bb4bd57ba26c6207e626e0fe6c26c2240b8ed43a5ee12539e4258fcfafe8e212b76566e72cbde82124f7628b6a91d244f467bd296ca1a39a935f5bed640aa0be2cb3361f96e91627e35f101edd5779cbeafd41e6ddcade209dea1b79668aea42b196404398f9e3398c34139e41fccdd5f557bd82276b50c414c4df6b874e4f2dd68c818f118d6296252a2a32bd136f561e25c8ffb16fbd5", 0xc5}, {&(0x7f0000000240)="d0d3402286ab3b4dba2b3f070c4e872763c2112e8812fee996be529e36382e990caebeea356427f97d4f7146f30e4b4bdecfc439ce32e3211673e7420eb5d4bb7f01fc2ac92867e21eecea642d63173c1a92c7c7094589a5441d035fbc0e", 0x5e}, {&(0x7f0000000700)="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", 0x27a}], 0x3}, 0x10040095) sendmmsg$inet6(r1, &(0x7f0000000000), 0x0, 0x4040000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r2 = pidfd_open(0x0, 0x0) r3 = dup(r2) setns(r3, 0x2020000) accept$unix(r3, &(0x7f0000000540)=@abs, &(0x7f00000001c0)=0x6e) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) fork() [ 632.297367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:33:06 executing program 5: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ftruncate(r1, 0x800) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa, 0x12, r1, 0x0) syz_io_uring_submit(r2, r0, &(0x7f0000000080)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 16:33:06 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x2201, &(0x7f0000000440)=@disckey={0x2, 0x0, "82ada47325d97f4913eab67f45f8051b13c07023b811c48ee40657e81cfe62cb92e604e9bcd55086db0a1a2e7095bad10c02b2cc36a07c6373d96b8e942b81021f372d7c9361f3aeb0d5dc6b6451d1bb8fcea706d4a74088b40178f4057a239ac0502a37c2376962cda551df057a61c78a2fd44cb5fd30c40f247d680857a97031e4885cc086f74ffa1e55144d240dde2fbd35e099a6b3761f1cc4e577676efe5f13094991f1ea1d6dcc219f56815a02e3e6427dba1d7cd5ed838575f3e98f353699c52cc4fdd515f4224df8d49d5f67be0a6a7d3b83722e9449133c82b886f742588119d0dc3fe6d69466a03f95d342e31699a6157f9d51e1b9c6542d6c5d60f41aee52512f20b99eae0b38067b9902654f02a0606860ff744f2ccdd5a0ca7c4e231cb65bd4445f4f69cb5bda24a729cfa93270cac3903fff4f77b1cf85cfd044025f61568580c07745860dba20f80d92af0b8f0409c6c9886e12488c56d5411aa0f5e8f6d4c3c14b73afa6934d3ae019bfcebcbf7e293cb79a7dcb588795d496ad2f6cd0a8209904e2ec46d5401f87369780d40be7c370d44da03687716be6dda73c62eeefe6cbe5e381b9716ae6d3ee1af560151b8d341a5f1b8685fca41957a99889eb0f3bd0f7de0ffea71e32a11d703c4783c64c5371034149005de778560f257aca78ec573686447facb7ec185b860be18e41944d1490306df1c953c0a3ffc975b090f219da1084c908907918226cf134faad8a5defe3aa3825df1b24f31275a98d23862b167ab8dc2f2435a284cad8a20e7673d783ad860c3ce5b4fdcf938e12df69c6de088dfe3e98a8270ec8aeb74b0188a8fe22cf6715142bf57aba362230698353dab43eee58419272e8028ac3aefaba63a7c8a25ccba5f519cdc61da88a910f040547d2c9ed601259a1d748d295cf51eaf1ece671807207423ebe64141336ff957445b1b90588582cfab585ae10092e789acd5ed886349404a6241851b8977e7e5ad96c3e2001e7c32f482cf64d871cd44af474471856518f6486a5ccfdcd7a164771c7188e6e0e3b17358befbe217eef0b73fa6cbbe61bb64b2c64d09dd3795e0119353086ef4bcc36abe57d83932c66df9d608678b297c5b0b1e899b532d0c37e7f3cdc7fd68446da2f5d90b02c00511a7429b73b95b51b78fb06e3a97f4e5c4a6bea4ec5a10f279814693aa4917dbba798cee12cabf6091c29b701097b224146ac2e076e90ad2e5acabdd78399ca83c829e00bc4f90b0ec00b1e411e823e1ab31193fe37ef4d1fe977f98e724e224f0354be8398722fe39da436aad0ea8cd70000007c2ba06a63d5edcaf3181dfcc91ee258f9455b5d9a479aaa6da4e5cdf0c40e7c056bd46f741d65f2d51136c0bb35f5573797a896bb5add7798c6f6a7b5d82de1bb1c5976d8c6fb067ad7e590ebea9412fe9f00d9f418be72edddae0749d5eff4b3dd25ccefa46522c5e5b960ad796035bcb582946424e0446f6992cefc5ebdac5f2e97e539e220ee2f1c7c7f233582c186dcddbdfc9ce954d85a29195788a3b8a964f281ce77ff06e771ea139b71da9b583f8ff4d4cb97dddfea34839695b81d97eabc250e2c891aecfbb60580312a57662d4eabd2226c406665a61ff59942e2bd3be82fae938be4c04f95f5159e6098dc1400579153fd1c419a3eac4c5b82ac58928a2f52410e915796e51e0b10fb5d9c70d67d5cd0b03ad8cd459cd15e58675f4875b9676b48aa61ed3c3b3b0e7d67203bc50207be4498aa013892a357dda413013c28479e612d739cb4972a0f19b0d77a04319b4d1786f82dd4a99e6d82f70c27a21733c77be8722a7313bcb7da5c6437bb87e59f56bd9c46c3ad50d691f6856719f1d305c5b57fea18d43228d813f9d91825ca830d748f80a9ccfadccfa4baeb4914b4a60b22478a5b2b7fb1156072179b6233f53e964a8182d6c01422d01ecc7983006d06d63cb19486017ffdf19265f83a6ac3fa1d52f003a7a9996e8e3f9ef23f8188ae5e414a443c5f58b7aa9deb97bc9925727fa9124ab667634d64fdcf9ad9375e5ab09f3e85f0b0dbe39395271f38005d6894aa45e68e51ba137ddba579fb864d65a337f881d6b434ca81cc89703f1ac18b56b7c88e9fdcc94d27c73120841522c4c90298d671a2611e2836ada099e789959372e392746e540b1268c5fdebb19339334f57e647d90691c9111d206db0de1d36fe5458a0a024e89d889e3a3f46d28e221e2c58ed45c502c5d08d837d5aa7fa3a50cedf3193a416b6c10123ed14bf36eb9a5c6f4d321ca1b55d1b98c275ea63c0a4dcef800bc3217ef34114f920e0556d2d30ba65f6ae443e4c9eefae05c1f4e2b3faae316f5658571aabbd80db226c5f10d3bf7ba6af81e0795239631a1de0eded351e10d43c38a1df20822d75b6bd5c3ccf21773f8250491b024fcb038ec487fe4b11a75df141483ab51db87be21aa37dd9f37a19367b6313d0bb175c1eeca0c0dc437053ba40385de089c7d06dbfa89851073aeb384bfa805abc50d756305520987ef57db25d7bc4a7841df5b83acf6b40292f46cdad7371b03ab7521cdce4953c932283e784f8ea4ce223746e23b6e100000080f7018db08ada6387e434bb95bae0ef1855dfb39c4b92b418a8bf81327da288cf01270ec2e9a33a21dc3a1f5dc4d0830aeaf7fe1a95d61fa81440205dea9f9cd0e25518035a5a06cc25a60aec547a79eee39941d6df6485aba011e8cdcccee0594769513133d18803e997fc543bcbc267ee0a253f287849619ec2e99daab97a83b622b44c08debfa5e18b62526f15958550390965013992d113275ae2d4ad32ef877b75006d9480809c1400"}) 16:33:06 executing program 3: r0 = creat(&(0x7f0000000040)='./file2\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = io_uring_setup(0x57e2, &(0x7f0000000180)) close(r1) open$dir(&(0x7f00000000c0)='./file2\x00', 0x0, 0x0) close(r0) 16:33:06 executing program 4: memfd_create(&(0x7f0000000340)='\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x5, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000540)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000500)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_NOP={0x0, 0x2}, 0x9) io_uring_enter(r0, 0x4eae, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0) 16:33:06 executing program 2: copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100), 0x4d76, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file1\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) sendto$unix(r2, &(0x7f0000000480)="d9325a0e15d4c4a0b53dc0332b9d22d050f88932b7a5f90ed244486fb03b9ff71658f0db895fe2ef740419d7cd0e14f48058f63b02e6f05ef8c4801469567176c0c840c37d58ec551d63bf2d499de71277d23824d0bde219eba33a0b0c39422190e3b0436423162bdbe8d99517bbc2d92674f79ab515c9bbb247a031f6cd375b8758b286296d6dc993521461595bbf81ae331c0bcfd40c6a03efa691efc3b90513fa89877e8579c62a6eaf0dfa8c3130d8e6f76bf7e4d4f22212c1de57dcd58eddec84dec8efe1fb2c1df98e1f36291c7c57338ee45921643c9569bc", 0x4995b5922abe4152, 0x840, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000002c0)={{0x3, 0xee01, 0x0, 0xffffffffffffffff, 0xee01, 0xc8}, 0x5, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x6}) lchown(&(0x7f0000000200)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101142, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x0, 0x5, 0x0, 0x2, 0x32, @loopback, @private1, 0x40, 0x8, 0x4001141, 0x1}}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x101040, 0x112, 0xa}, &(0x7f0000000280)='./file1\x00', 0x18, 0x0, 0x12345, {0x0, r6}}, 0xffffffff) stat(&(0x7f0000000380)='./file1\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000001180)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@local, 0x4e20, 0x7f, 0x4e22, 0x0, 0xa, 0x80, 0x20, 0x2b, r4, r7}, {0x3ff, 0x44, 0x0, 0x7e7, 0x4, 0x800, 0xfff, 0x5}, {0xfffffffffffff800, 0x81, 0x20, 0xa5}, 0xb41, 0x6e6bb4, 0x2, 0x0, 0x1, 0x2}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x3c}, 0xa, @in6=@mcast1, 0x0, 0x0, 0x4, 0x8, 0x7, 0x2, 0x8}}, 0xe8) fchown(r1, r7, 0x0) 16:33:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x58, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[]) r0 = socket$unix(0x1, 0x0, 0x0) bind$unix(r0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x40086602, 0xfffffffffffffffd) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/4\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) lseek(r4, 0x0, 0x3) getsockopt$netlink(r3, 0x10e, 0xb, 0x0, &(0x7f0000001140)) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0xb) io_submit(0x0, 0x1, &(0x7f0000000480)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000400)="d9", 0x1}]) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) sendfile(r1, r5, 0x0, 0x100000001) 16:33:06 executing program 2: copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100), 0x4d76, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file1\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) sendto$unix(r2, &(0x7f0000000480)="d9325a0e15d4c4a0b53dc0332b9d22d050f88932b7a5f90ed244486fb03b9ff71658f0db895fe2ef740419d7cd0e14f48058f63b02e6f05ef8c4801469567176c0c840c37d58ec551d63bf2d499de71277d23824d0bde219eba33a0b0c39422190e3b0436423162bdbe8d99517bbc2d92674f79ab515c9bbb247a031f6cd375b8758b286296d6dc993521461595bbf81ae331c0bcfd40c6a03efa691efc3b90513fa89877e8579c62a6eaf0dfa8c3130d8e6f76bf7e4d4f22212c1de57dcd58eddec84dec8efe1fb2c1df98e1f36291c7c57338ee45921643c9569bc", 0x4995b5922abe4152, 0x840, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000002c0)={{0x3, 0xee01, 0x0, 0xffffffffffffffff, 0xee01, 0xc8}, 0x5, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x6}) lchown(&(0x7f0000000200)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101142, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x0, 0x5, 0x0, 0x2, 0x32, @loopback, @private1, 0x40, 0x8, 0x4001141, 0x1}}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x101040, 0x112, 0xa}, &(0x7f0000000280)='./file1\x00', 0x18, 0x0, 0x12345, {0x0, r6}}, 0xffffffff) stat(&(0x7f0000000380)='./file1\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000001180)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@local, 0x4e20, 0x7f, 0x4e22, 0x0, 0xa, 0x80, 0x20, 0x2b, r4, r7}, {0x3ff, 0x44, 0x0, 0x7e7, 0x4, 0x800, 0xfff, 0x5}, {0xfffffffffffff800, 0x81, 0x20, 0xa5}, 0xb41, 0x6e6bb4, 0x2, 0x0, 0x1, 0x2}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x3c}, 0xa, @in6=@mcast1, 0x0, 0x0, 0x4, 0x8, 0x7, 0x2, 0x8}}, 0xe8) fchown(r1, r7, 0x0) 16:33:06 executing program 4: memfd_create(&(0x7f0000000340)='\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x5, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000540)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000500)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_NOP={0x0, 0x2}, 0x9) io_uring_enter(r0, 0x4eae, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0) 16:33:06 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000200), 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="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", 0xff}, {&(0x7f0000000a00)="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", 0xe7a}], 0x2}, 0xc880) [ 632.669207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="0e00a30abf9d45c9a467133f6d0fcd2e77ef8b0695a12d6bfaca2e584adb871a63029718ae627ad6156ee41ae39bb4bd57ba26c6207e626e0fe6c26c2240b8ed43a5ee12539e4258fcfafe8e212b76566e72cbde82124f7628b6a91d244f467bd296ca1a39a935f5bed640aa0be2cb3361f96e91627e35f101edd5779cbeafd41e6ddcade209dea1b79668aea42b196404398f9e3398c34139e41fccdd5f557bd82276b50c414c4df6b874e4f2dd68c818f118d6296252a2a32bd136f561e25c8ffb16fbd5", 0xc5}, {&(0x7f0000000240)="d0d3402286ab3b4dba2b3f070c4e872763c2112e8812fee996be529e36382e990caebeea356427f97d4f7146f30e4b4bdecfc439ce32e3211673e7420eb5d4bb7f01fc2ac92867e21eecea642d63173c1a92c7c7094589a5441d035fbc0e", 0x5e}, {&(0x7f0000000700)="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", 0x27a}], 0x3}, 0x10040095) sendmmsg$inet6(r1, &(0x7f0000000000), 0x0, 0x4040000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r2 = pidfd_open(0x0, 0x0) r3 = dup(r2) setns(r3, 0x2020000) accept$unix(r3, &(0x7f0000000540)=@abs, &(0x7f00000001c0)=0x6e) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) fork() 16:33:06 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000200), 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="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", 0xff}, {&(0x7f0000000a00)="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", 0xe7a}], 0x2}, 0xc880) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="0e00a30abf9d45c9a467133f6d0fcd2e77ef8b0695a12d6bfaca2e584adb871a63029718ae627ad6156ee41ae39bb4bd57ba26c6207e626e0fe6c26c2240b8ed43a5ee12539e4258fcfafe8e212b76566e72cbde82124f7628b6a91d244f467bd296ca1a39a935f5bed640aa0be2cb3361f96e91627e35f101edd5779cbeafd41e6ddcade209dea1b79668aea42b196404398f9e3398c34139e41fccdd5f557bd82276b50c414c4df6b874e4f2dd68c818f118d6296252a2a32bd136f561e25c8ffb16fbd5", 0xc5}, {&(0x7f0000000240)="d0d3402286ab3b4dba2b3f070c4e872763c2112e8812fee996be529e36382e990caebeea356427f97d4f7146f30e4b4bdecfc439ce32e3211673e7420eb5d4bb7f01fc2ac92867e21eecea642d63173c1a92c7c7094589a5441d035fbc0e", 0x5e}, {&(0x7f0000000700)="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", 0x27a}], 0x3}, 0x10040095) sendmmsg$inet6(r1, &(0x7f0000000000), 0x0, 0x4040000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r2 = pidfd_open(0x0, 0x0) r3 = dup(r2) setns(r3, 0x2020000) accept$unix(r3, &(0x7f0000000540)=@abs, &(0x7f00000001c0)=0x6e) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) fork() 16:33:06 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 16:33:06 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000200), 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 632.723806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium sendmsg$inet6(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="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", 0xff}, {&(0x7f0000000a00)="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", 0xe7a}], 0x2}, 0xc880) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="0e00a30abf9d45c9a467133f6d0fcd2e77ef8b0695a12d6bfaca2e584adb871a63029718ae627ad6156ee41ae39bb4bd57ba26c6207e626e0fe6c26c2240b8ed43a5ee12539e4258fcfafe8e212b76566e72cbde82124f7628b6a91d244f467bd296ca1a39a935f5bed640aa0be2cb3361f96e91627e35f101edd5779cbeafd41e6ddcade209dea1b79668aea42b196404398f9e3398c34139e41fccdd5f557bd82276b50c414c4df6b874e4f2dd68c818f118d6296252a2a32bd136f561e25c8ffb16fbd5", 0xc5}, {&(0x7f0000000240)="d0d3402286ab3b4dba2b3f070c4e872763c2112e8812fee996be529e36382e990caebeea356427f97d4f7146f30e4b4bdecfc439ce32e3211673e7420eb5d4bb7f01fc2ac92867e21eecea642d63173c1a92c7c7094589a5441d035fbc0e", 0x5e}, {&(0x7f0000000700)="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", 0x27a}], 0x3}, 0x10040095) sendmmsg$inet6(r1, &(0x7f0000000000), 0x0, 0x4040000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r2 = pidfd_open(0x0, 0x0) r3 = dup(r2) setns(r3, 0x2020000) accept$unix(r3, &(0x7f0000000540)=@abs, &(0x7f00000001c0)=0x6e) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) fork() 16:33:06 executing program 4: memfd_create(&(0x7f0000000340)='\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x5, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000540)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000500)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_NOP={0x0, 0x2}, 0x9) io_uring_enter(r0, 0x4eae, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0) 16:33:06 executing program 2: copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100), 0x4d76, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file1\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) sendto$unix(r2, &(0x7f0000000480)="d9325a0e15d4c4a0b53dc0332b9d22d050f88932b7a5f90ed244486fb03b9ff71658f0db895fe2ef740419d7cd0e14f48058f63b02e6f05ef8c4801469567176c0c840c37d58ec551d63bf2d499de71277d23824d0bde219eba33a0b0c39422190e3b0436423162bdbe8d99517bbc2d92674f79ab515c9bbb247a031f6cd375b8758b286296d6dc993521461595bbf81ae331c0bcfd40c6a03efa691efc3b90513fa89877e8579c62a6eaf0dfa8c3130d8e6f76bf7e4d4f22212c1de57dcd58eddec84dec8efe1fb2c1df98e1f36291c7c57338ee45921643c9569bc", 0x4995b5922abe4152, 0x840, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000002c0)={{0x3, 0xee01, 0x0, 0xffffffffffffffff, 0xee01, 0xc8}, 0x5, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x6}) lchown(&(0x7f0000000200)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101142, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x0, 0x5, 0x0, 0x2, 0x32, @loopback, @private1, 0x40, 0x8, 0x4001141, 0x1}}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x101040, 0x112, 0xa}, &(0x7f0000000280)='./file1\x00', 0x18, 0x0, 0x12345, {0x0, r6}}, 0xffffffff) stat(&(0x7f0000000380)='./file1\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000001180)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@local, 0x4e20, 0x7f, 0x4e22, 0x0, 0xa, 0x80, 0x20, 0x2b, r4, r7}, {0x3ff, 0x44, 0x0, 0x7e7, 0x4, 0x800, 0xfff, 0x5}, {0xfffffffffffff800, 0x81, 0x20, 0xa5}, 0xb41, 0x6e6bb4, 0x2, 0x0, 0x1, 0x2}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x3c}, 0xa, @in6=@mcast1, 0x0, 0x0, 0x4, 0x8, 0x7, 0x2, 0x8}}, 0xe8) fchown(r1, r7, 0x0) [ 632.776031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:33:06 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x58, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[]) r0 = socket$unix(0x1, 0x0, 0x0) bind$unix(r0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x40086602, 0xfffffffffffffffd) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/4\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) lseek(r4, 0x0, 0x3) getsockopt$netlink(r3, 0x10e, 0xb, 0x0, &(0x7f0000001140)) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0xb) io_submit(0x0, 0x1, &(0x7f0000000480)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000400)="d9", 0x1}]) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) sendfile(r1, r5, 0x0, 0x100000001) 16:33:06 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000200), 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="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", 0xff}, {&(0x7f0000000a00)="c51b8bef3cefa9dac375696a8d0b07f4606e7aacc79cd8a488e86c830e81e8e4e0710f89834a64b2279b82655cfadddb9e363dcb34e3896ea1aae464383859867a74be43bcb1ce57f2c129af1e9d571e08002fd7185c9d66a740115a0cdd7eaec325616770c9f69b86bb7f1b655cbd2a6eb2757f251fe7695ac67a12fcb03b70142784d555313f0c80f9a5d33c26358ba37f4eae51aa88beb94b3e6907fc4bdac9fd2bf27ea156b05421dbb66152efd81be8a62730eb7c9f5897b82e1061b804763b8da79ae6e07ccccb1e7112722324155bade0de1e59430dfbd84d2cfeb67fa19c1f7d17716dbbe3a9b896983baeba4307406bc60ea20acf492fb75f621f67c48472eceda8e9d81611844859173b589d53dd60519c94c91c3feb7fd3b65aef7081cca92fc7de1cba8ae390df4740424522f39a9255cb63bb2a0c297df1e1b430ac91b349399bff83847b8aa6bd538f34ef0dcdf605758aabe17aafae4bd074c82d52143d0e8f342ce0d635d19336c2ad1e773f76b4925699b1cacf2fcf83fe215f01ad12dabc5d7485aeb0a200a800f10e390faf332d40ff4c46ec3352216b9311d748e835a3c6a713ed9c495e9d9d06a5c7eaee2708d3b0017117bfc806e4e251da838a3b23a5394a6f1835e1d203ebabb3ce93b04f5d22478e3e8629879e7ba8f831e1d7a8caedf30423fc24b2c8a81a9648a1d982fb669daa5679a05c46a10fecb7ae1c88039dd7220d00e4089d7e5004bcde20ea346750cc7020a4ba2031b585179e51cc7315a681accdb27e6bf8987bba78d27950dc59b5a0b87c2419f432481e98b47d1afcf264c3a38ea7444010e1ef98775dbbe527a2a76752e219abbfde49bda0df3900144c08bab63f30e343da19b016b3171d9964e4b6b9771734bca8fb8ada67baf11c1626c90cab22355e2b36909c485d0758eae7e8fb862375b051f6c17d8b1f0128fc648a8a702a6cc2e9efa5859c4a07b96ef979c80d60c3680c38b3e4c28e8f301cd7737df2759758d1ffa372a57e6cb45c6cc87151e62a6f8008ffd2bdd057c81bca65bcb52a1dca5649db699561152c5d0c1f47fe7cc6d40d15eaf78ad61c42540ca96879782f47361ca32abbe09a5505336fb8e97fd90bf89fa2bf9cb60085c1dee243c9cf7cde956435f895d96feef3aeaa843220081815922ce68d5cfa95f04edc66376821359e0f2c3abe4d632caac325c2f56bc9b2fdce98824f73cc6a6ffcbfa3ab7f6c89202fe55169fb78eb941fbf15a5afb2afec09e18e336da20129432cf7fbbd3928563b50563e22e4fe459317aac0dccec712746f2c9bcbe283e290a43c8bba12827e48fb360836017cd7aab05afe3957bed727fe34bac82bddef3f8cb08aba7f3ba882ed463b5c3f59ff4ba7f77b14d59805e4da5fcf19041b64fe6c717243f5647e303b2c13bc1c9db54e1d8627493cf4123e7e7e2f3d7502c8a76abde505218dbefb3cf2cb3bd88e5913d5af4d5cca09cac158c7d0f52b096d3b1542bbd42a8cd98b4ff21cbefe8ec4480869e245787410763bdec283cd7411f0d25d4cda3a9f61b76caee1f4faa4ec69ee39add9770dec4c2cb53e5c25863aaaa72e6073bccd6fdbef82b6b6c498da8fa079c4dc34f1a0bf81b2c57fa2f99761d13e819e472d6a65db5adf10c757a1e1c05011eff08246efefce703b1548c1e821beef01ecb0b6abebcde781f3842b4ae386553679f1cc3be9db6f084b4d859261ef8be17c31d8873eb14cd86190c2a6f804c7bf772736335d54002c78557fc9585219b07300cf958022bcd771ee024dfaf294e7f4475a40aec74c15e519023fd98db1930b26e4b7c41ac936f7e3fc4270771ea96e2ec571e0ff805a6bf465cd91c725e4b49b096d33fe453caa877536ad6729e643ab94d95d0dc273871a592904bd94000fcfbeebdfd140d8af2b813138d0d912ae47b44baff685fe364eb095d268b1dc20ae2a9077e896d8b12ab9aa6291ad397eb46c119a8b39b73c8577bdd36a4940bbca55d5b8178b356d96a742e5035e89b65dc0964b69b7d9a5b7a67e48f8b832258f91732aae1cd467bf0be7aa162ab8b3ea7e4e2d3b41b4ec6281eaee8e06c1bf9a20b28d52d6e7f4df6d45a8069f3d91693bb916711feed98ad3ee9df4c200e7ce6287899c77e52abee89773192ee87786743ec11cee9e5a547ea78986aca76a728f5576b6fd4e92bdc4b29ad7c60852e34ee2ec7fe3f414e62389f2fb329de416b1b2b71c5bc0b46a400cc50ddcfa7db97fe3cc021749570f86e1a71fab1e4ac2dcd00671cadf113c6976b02c07d0f5210e3c6a0f0eb5db77d3ebee1dd5fa9f6c43f13d7a315d8d906285451fc47be6eb6f825747ddc1e11f66ceec1e65d8c55840bc03b74a384601ce7f27b6afc2b5cb4091b47b9a59a97f86799f32de992917142c452d5db17d912195b7f5d1303f11dbbd29680a415aa269b3150a89e78623c56ed1e4f2054cc6f22164b36a3ab36059a26452d279e18c413f8329a5e76bfbce1614f682e6467b6c943eaee4b2832ebe5255fad78c2eeca60956631a1b982e31600ca99de223859f622ddfbd269836ae7930e6bf499c185025a225b9423a2a6b8c9438574484d68c1c8ebabaa9c51a4a0e07b849d3153434995fdfbd4ffa4c4f000689d989375a5c81d43c069f65a4028a975387aff8147c420361bf12f7dad9d25733460699d7b943630cc6442965dd24f1bed59d52f25ef34d6a047817ef59a2819c838849575513351604a9845a329dc9c62bd1529f2bd23dbbb7be9173b72062f4534a842bb0be4a78448ce1dd63c323cb2c94002e26f4fd69d2f2de69a152a5bf41bc6b144ccc44c344089cf33460fa0a9c2f8ac483c68caef32604093611b9f087400f88ce2643e1b35b452b921a7fcccf279eecf9b58df7e0094214a2e80071ce3f4c39d35120801cce05177d5f9b4d5d8944a4708df033a17dc0b9e83bcc07ceb4280a5df82c42634aab75e382feb32731cf58c42a1050bba27728a1d3aa7e9d7492fecba7b28dc735d66f8b111cf52833ddb601e60780e47012f5fa794095a11a6cbcc7161aca6a11f645bcc5523b285bedbc61ac3e95aaaa5bda1895414c7e890893ff24002a64813297d326a498e5db97cf39fd32e0344e6b602b380f94a53d0ebb16dcfe448cace09fb0212f71aa2fc157169fdc2073e4f825cfa03e5529b92563b36c14c2e5b8de4eecf89a838022dbd2e339ebaa9b0a61dcb038184442e2305943ab7d3b70a9f1459aea8c544931bf96026e59217bdc735958d847dd7d4db9bf82b0ab5e27201b1dd2cb510ab229e1b6ede95ca967a2f1cb854e438e52aa5037c6d5405b6e54dd1a5c4c8e9e81af416a49e122d129ce467a8cf878809a6dac3ced03d9f4033ed0357af7cd820bcb603808210bcca8606407cf97bab9d74bb97c182fc6c4a77ca7c06e2b6000df3d32bde2693bd30da43b61d251feaa7fad317ad8ef66f93f6fc5a5e81f4d8a2094bd3c2c5e03be7a5ecd8197daaf7e221d35f3510d3939809af36eeac38b97439e518afe1a3dbe578486b9720855767743067b9b7aaba2649c4ad649c05f13f27bac835701d6183bfca838f06d951d0bc97a31e5194fef531f64937a7aff431695815c2b816734fa021ca965fcdfe09ecd5c70544ce69dae5cbad61d7ba373717e7be0b47f1a7d51058abc70788a92c61e3d2e8332aca0b20496262c7f59dfbddd6ed4fe52833481735d132b153d16de90380f908dc3d62d6ffad9940cc447a8395aa5f17afabafd4552731e7b699cc15805348a28a2279aae78e1676be417431cf0290a0862674268368ffc3a332eb4084890b50eac9f1eb8191fe3d00525db4f05f6a4e83f219bb7986779939eebfeb29389e4dfebcbf450ce5993b3cfd7b2ffd337da588e1eaa9290ede72b582db1b05a18a018e4a8d04dc9437ec5437dd165006828d910564dbf76626b8a0ddd9dfa0faba8582b3a9a6d937b5e95067bf9a399b32f18f9843ebf808fcb890ea481255097382ac6f3e1daa2cccb956e8a0f6025730f306c5982a6818a775bd0cc2d97e22f4cc841ff35305376b50afc0bb5a2f020686edd47aa13e0465e44c49bc1ee36b27f7b8ef4dd73b9f8feb76986479e263a7ee9af3eb2a0c852b1dce9429461f9dc569cd921da1863253e70851bc5a30ef31de7d20aca8c79fd30aaf936c29354b6ff4b64d1bc1f8292dc8ad9b4def6729171d7dfd66d6533a6185b509f93878cf3f97edd425f6cec125e4715a9b65eeb9baaefab942b58589ef04d6ca7236b7cec66a01d359a5153fe18472b386ae36d3c82dcecf14c0baf9b947d6fc32a03dfd8578ed34fc513655f81b9142e725a373c09ab17a59967ef2a560e1328982f96eac069517a1e312d6a5357215142d2af4fb276e81d77689414d4200ce6ce16dbc0eebad3d1f6cc7dcb4bd66fc348d91b393122e07cfbde6844e44b2808d52fd4d639b85e30670fa65ac15d88db30434a6233e6b089f6fa1c1ef5de980854a40e7b8764875d9a6d76e6ce544f5bc11041ad5c701a2b2765d5d49ec9034c3a02d29225c988840e60b2a67d898ab714306752098280e5451933ada819a0b8451606031f34ae0c45683ec7b2dca2f8d9ed2d7d6ef338db88b2e00b8dc8e3d602bc9276c44d164643a33abf09d465b0c4139586f5c9075f9ed1e14f394c76e040b373234b2e7c0baa662b926c99a24a1230f984c196b06e065d7adef21fa412e105e41b1bf5760bf667c082dd26e6c6286c6671434e87fb0dae1f1596ac84d2029deb5068961eb86b41ac13da179ddd4bce7e039afe1021916d2ee85559b40cbe5784c3915c5c7aea8f59c6daebc622ab6ee303ee333c9df0e79f71e4cf02090081db838cf9da916498c6e8b46368a76879181dacf4be0a041bf7ee429f207df2a33f8d759e6f505b7bdb8bdf9ad5b9ef2b233a0002113297eea710ea42244ca54ae2e7cd98765e59fe12316512a0e8566c5184edcf7360ad0dbbefa39b1e375ad2ca831a481513f4ebd81f7b13e3a87a10afb05d9657e1d2bca16a69030b274318ca94d2599ac47f2064beda130054d6b244e5fb2a04e970dd0d43edbd3935d29e23f3029ed910dbf370d92508c95b71cda18e0bc78aa2644e05b1d04acd0931a558cd116184214d60ad385dc1e4efb56fda6d2d54886bc41add419049dac8e12aa7d5926d4ed634f6ccafa26a872667f5938e6ea802f6e2dabab0d4ed145e514259a3", 0xe7a}], 0x2}, 0xc880) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="0e00a30abf9d45c9a467133f6d0fcd2e77ef8b0695a12d6bfaca2e584adb871a63029718ae627ad6156ee41ae39bb4bd57ba26c6207e626e0fe6c26c2240b8ed43a5ee12539e4258fcfafe8e212b76566e72cbde82124f7628b6a91d244f467bd296ca1a39a935f5bed640aa0be2cb3361f96e91627e35f101edd5779cbeafd41e6ddcade209dea1b79668aea42b196404398f9e3398c34139e41fccdd5f557bd82276b50c414c4df6b874e4f2dd68c818f118d6296252a2a32bd136f561e25c8ffb16fbd5", 0xc5}, {&(0x7f0000000240)="d0d3402286ab3b4dba2b3f070c4e872763c2112e8812fee996be529e36382e990caebeea356427f97d4f7146f30e4b4bdecfc439ce32e3211673e7420eb5d4bb7f01fc2ac92867e21eecea642d63173c1a92c7c7094589a5441d035fbc0e", 0x5e}, {&(0x7f0000000700)="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", 0x27a}], 0x3}, 0x10040095) sendmmsg$inet6(r1, &(0x7f0000000000), 0x0, 0x4040000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r2 = pidfd_open(0x0, 0x0) r3 = dup(r2) setns(r3, 0x2020000) accept$unix(r3, &(0x7f0000000540)=@abs, &(0x7f00000001c0)=0x6e) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) fork() 16:33:06 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000200), 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="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", 0xff}, {&(0x7f0000000a00)="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", 0xe7a}], 0x2}, 0xc880) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="0e00a30abf9d45c9a467133f6d0fcd2e77ef8b0695a12d6bfaca2e584adb871a63029718ae627ad6156ee41ae39bb4bd57ba26c6207e626e0fe6c26c2240b8ed43a5ee12539e4258fcfafe8e212b76566e72cbde82124f7628b6a91d244f467bd296ca1a39a935f5bed640aa0be2cb3361f96e91627e35f101edd5779cbeafd41e6ddcade209dea1b79668aea42b196404398f9e3398c34139e41fccdd5f557bd82276b50c414c4df6b874e4f2dd68c818f118d6296252a2a32bd136f561e25c8ffb16fbd5", 0xc5}, {&(0x7f0000000240)="d0d3402286ab3b4dba2b3f070c4e872763c2112e8812fee996be529e36382e990caebeea356427f97d4f7146f30e4b4bdecfc439ce32e3211673e7420eb5d4bb7f01fc2ac92867e21eecea642d63173c1a92c7c7094589a5441d035fbc0e", 0x5e}, {&(0x7f0000000700)="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", 0x27a}], 0x3}, 0x10040095) sendmmsg$inet6(r1, &(0x7f0000000000), 0x0, 0x4040000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r2 = pidfd_open(0x0, 0x0) r3 = dup(r2) setns(r3, 0x2020000) accept$unix(r3, &(0x7f0000000540)=@abs, &(0x7f00000001c0)=0x6e) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) fork() 16:33:06 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x58, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[]) r0 = socket$unix(0x1, 0x0, 0x0) bind$unix(r0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x40086602, 0xfffffffffffffffd) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/4\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) lseek(r4, 0x0, 0x3) getsockopt$netlink(r3, 0x10e, 0xb, 0x0, &(0x7f0000001140)) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0xb) io_submit(0x0, 0x1, &(0x7f0000000480)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000400)="d9", 0x1}]) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) sendfile(r1, r5, 0x0, 0x100000001) 16:33:06 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000200), 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="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", 0xff}, {&(0x7f0000000a00)="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 VM DIAGNOSIS: 16:33:05 Registers: info registers vcpu 0 RAX=0000000080010009 RBX=ffff888045dee000 RCX=ffffffff814ecf35 RDX=ffff888045a0cec0 RSI=ffffffff814f420a RDI=0000000000000001 RBP=ffff88806ce09af0 RSP=ffff88806ce098b8 R8 =0000000000000000 R9 =ffff888045a0cec7 R10=0000000000000000 R11=0000000000000001 R12=dffffc0000000000 R13=ffff88806ce37e10 R14=0000000000000001 R15=ffff888045dee000 RIP=ffffffff8140a72e RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f4ead05e700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7393ea13a4 CR3=0000000042a22000 CR4=00350ef0 DR0=ffffffffffffff80 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000000000000000000000ff00000000 XMM01=ff000000000000000000000100000000 XMM02=7463656a6e695f31313230385f7a7973 XMM03=00007f4eafbcf7c800007f4eafbcf7c0 XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822d1631 RDI=ffffffff879eb2c0 RBP=ffffffff879eb280 RSP=ffff88805cceee08 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=0000000000000030 R13=0000000000000030 R14=ffffffff879eb280 R15=dffffc0000000000 RIP=ffffffff822d1688 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f3b1b64f700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3b1b64e108 CR3=0000000056ba2000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffffff00000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=ffffffffffffffffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000